I-Kernel Oops lapho i-VPN iqala: ubufakazi okufanele bugcinwe

Ukuqala iklayenti le-VPN kuwuphawu lwesikhathi olulula, hhayi imbangela, futhi lowo mehluko unquma okuzolandela. Lapho i-Kernel Oops yenzeka eduze kwaleso sikhathi, ukukhetha kuphakathi kokuqoqa umbiko wephutha osebenzayo nokubangela ukuphahlazeka okufanayo izikhathi ezinhlanu ezengeziwe emshinini wokukhiqiza. Gcina izinto ezine ngaphambi kokuqala kabusha: i-kernel build eqondile, umkhondo wokuqala wephutha, isimo se-taint kanye nencazelo emfushane yakho konke okunye okwashintsha ngalo minithi. Okusele ukuhumusha, futhi ukuhumusha kungalinda kuze kube ubufakazi busendaweni ephephile.

Bamba iphutha lokuqala, hhayi umugqa wokugcina

I-Oops yokuqala kulogi iyona ebalulekile, ngoba iphutha ngalinye elilandelayo lingaba umonakalo oseceleni ovela ku-kernel engasenawo impilo. Kopisha isihloko kanye nomkhondo wezingcingo, ngoba isihloko sithwala umyalelo ohlulekile kanye nesimo samarejista esikhomba indlela yekhodi. Umbiko oqala emugqeni wokugcina awunalo inani elikhulu kumuntu ozowufunda ngemuva kweviki.

Uma umshini usuvele waqala kabusha, ibhafa ye-kernel yokuqala kwangaphambilini ivamise ukuba seselogini, uma ngesikhathi leso isitoreji esiqhubekayo sasivuliwe. Yifunde kufayela eligciniwe esikhundleni sokuphinda udale umthwalo womsebenzi, ngoba ukukhiqizwa kwesibili kungasusa lokho okudingayo. Lapho umshini ungakwazi ukugcina ilogi phakathi kokuqala kabusha, i-console yochungechunge noma i-netconsole iyona ndlela kuphela yokuthi iphutha libonakale.

Qinisa i-build ngaphambi kokufunda noma yiluphi uphawu

Amagama emisebenzi nama-offset anencazelo kuphela maqondana nefayela le-binary eliwakhiqizile, ngakho bhala intambo yokukhishwa kwe-kernel kanye nesihlonzi se-build sokusabalalisa ndawonye. Ifayela lamauphawu elivela kwelinye i-build likhomba umugqa ongafanele ngokuzethemba okuphelele, okuyinto embi kakhulu kunokungabi naluphawu nhlobo. Gcina inguqulo yephakethe le-kernel, hhayi inombolo ye-upstream kuphela, ngoba ukusabalalisa kudlulisa izinto eziningi emuva.

Amamojula angaphandle kwesihlahla afanele umugqa wawo kurekhodi, ngoba i-kernel ene-taint ikhawulela lokho umgcini wemishini avunyelwe ukukuhlaziya. Funda inani le-taint esikhundleni sokuliqagela ohlwini lwamamojula.

I-taint engeyona uziro ayisona isimangalo futhi ayenzi umbiko ungabi nalusizo. Itshela umfundi ukuthi yiziphi izingxenye ezazilayishiwe ngesikhathi iphutha lenzeka, futhi amanye amafulegi enza umbiko wehliswe ezingeni ngenqubomgomo hhayi ngokwahlulela. Bhala inani, amagama amamojula kanye nokuthi ingabe ihadiwe nomthwalo womsebenzi ofanayo bake basebenzisa i-kernel ngaphandle kwawo. Yikho kanye lokhu kuqhathanisa kokugcina okuhlukanisa ukuhlehla okusha kusuka kusiphazamisi esidala.

Hlukanisa isisusa nesici

Ukuqala ithaneli ngokuvamile kusebenzisa indlela eyayivele ikhona: idrayiva yenethiwekhi, isiyalo somugqa, isici se-offload noma isimo samandla. Isisusa sichaza ukuthi iphutha livela nini, hhayi ukuthi iyiphi ikhodi engalungile, futhi ukuthatha isisusa njengembangela kuholela ochungechungeni lwezinguquko zokucwangciswa ezingalungisi lutho.

Isithombe sangaphambilini esisebenzayo ubufakazi, hhayi isiqinisekiso. Lapho uqhathanisa, shintsha ingxenye eyodwa ngokuqala ngakunye, futhi gcina imiphumela endaweni ehlala ngemuva komshini.

Hlola ukuthi umgcini wemishini angakusebenzisa ngempela ini

Funda umbiko njengoba umuntu ongaziwa angawufunda ngaphambi kokuwuthumela. Uma ukucwangciswa, ukulandelana okuqondile kanye nobunikazi be-build kukhona, futhi izifakazelo zisusiwe, umbiko uyasebenza. Uma kuyisithombe somkhondo wesitaki, uzobuya nesicelo salolo lwazi. Umhlahlandlela wokuzingela amaphutha e-kernel uchaza ukuthi umkhondo owusizo kanye namauphawu afanayo abukeka kanjani.

uname -r
cat /proc/sys/kernel/tainted
journalctl -k -b -1 --no-pager | sed -n '/BUG:/,/Call Trace/p'
dmesg -T | grep -A 40 'RIP:'

Yonke imiyalelo engenhla ifunda isimo kuphela, futhi emibili yokuqala kufanele isetshenziswe ngaphambi kokuqala kabusha okulandelayo uma umshini usengaphendula. Lapho ilogi ingahlali, yilezo zimbili kuphela ezizosebenza futhi.

Susa okhiye, amaphasiwedi kanye nethrafikhi engahlobene, kodwa gcina amagama emisebenzi nama-offset adingwa umuntu ukuze afunde umkhondo. Thumela okubalulekile ngomzila wokubika osebenza ekusabalaliseni noma ku-kernel, hhayi ngokunamathisela esidlangalaleni okunegama lomsingathi elinamathiselwe. Bese ulinda umbuzo esikhundleni sokuqoqa okunye ukuphahlazeka, ngoba iphutha elitholakele uma liqhathaniswa ne-build efanayo iwumbiko kuphela oqhubekisela umbiko phambili. Uma kungabuyi lutho, enye indlela ukukhiqizwa okulawulwayo kuhadiwe olungeziwe, hhayi emshinini abanye abantu abathembele kuwo.