I-OpenVPN ithi active (exited)? Thola i-instance oyiqalile

Uhlola umhubhe, usebenzisa i-systemctl status openvpn futhi uthola i-active (exited) ngaphandle kwe-Main PID nangohlu lwezinqubo olungenalutho. Ukufunda okuvamile ukuthi insizakalo iqalile yabe isifa, ngakho uvula i-unit, uthola i-/bin/true futhi uphetha ngokuthi iphakethe liphukile. Ekupakishweni kwe-Debian leso simo i-wrapper esebenza ngendlela eyakhelwe ngayo, kanti umhubhe uhlala kwelinye lama-instance unit eliwavulayo. I-unit ehlanganisiwe ngeke ikutshele ukuthi iyiphi i-instance eyayakhile.

I-active (exited) isho ukuthini ngempela kule unit

I-unit epakishiwe ingumsebenzi wesisodwa: i-ExecStart yayo i-/bin/true, futhi i-RemainAfterExit=yes yiyona egcina i-unit eqediwe ibikwa njenge-active (exited). Susa lowo myalelo bese umsebenzi ofanayo ophumelelayo we-/bin/true uphela ku-inactive (dead), okuyisimo esisodwa abantu abasilindele futhi abasifunda ngokungalungile ngakolunye uhlangothi. Umyalelo uyingxenye yokubamba indawo nje, futhi i-unit ibika ngomsebenzi owenziwa amanye ama-unit. Akukho okonakele kulolo hlelo, futhi ukushintsha i-/bin/true kushintsha isivumelwano sokupakisha, hhayi umhubhe.

I-wrapper idlulisela. Iqala ama-instance unit anikezwa ukucushwa kwephakethe noma i-systemd generator yalo, yingakho uhlu lwezinqubo olungenalutho alufakazi lutho ngomhubhe. Uma kungekho instance ekhethiwe, i-wrapper isaphumelela futhi ayiqali lutho. Isimo siphendula ukuthi i-wrapper igijimile yini, hhayi ukuthi umhubhe ukhona yini.

Funda imigqa emithathu yokuphuma kwe-status, hhayi igama elisembhalweni. I-Loaded isho ifayela le-unit elafundwa i-systemd, i-Active ithwala isitembu sesikhathi sokugcina ukuphumelela, futhi ukungabikho kwe-Main PID kuhambisana nomsebenzi wesisodwa osuphelile. Leyo migqa emithathu iyona ndlela yokuhlukanisa le wrapper ensizakalweni eyawa isekhondini elilodwa ngemuva kokuqala.

Bhala uhlu lwama-unit ngaphambi kokufunda i-status futhi

Buza i-systemd ukuthi yini ekhona ngaphambi kokubuza ukuthi yini egijimayo. Ithempulethi ingafakwa kungenasimo esisodwa esidalisiwe, futhi i-unit eyakhiwe yiyona kuphela ethwala umhubhe. Qala ngesethi elayishiwe:

systemctl list-units 'openvpn*'

Lolo hlu yilokho i-systemd ekulayishe ngalesi sikhathi, futhi yilokho okuseduze kakhulu nohlu lwemihubhe. Amafayela e-unit afakiwe aphendula omunye umbuzo, futhi lolo hlu lusabonisa ithempulethi uma kungenalutho oludaliwe:

systemctl list-unit-files 'openvpn*'

Funda izinhlu zombili ndawonye, ngoba ithempulethi kwelesibili ne-instance kwelokuqala yizimpendulo ezimbili ezihlukene. Ithempulethi ekhona ne-instance egijimayo akusiyo iqiniso elilodwa, futhi eyesibili kuphela esho umhubhe. Izakhiwo zamaphakethe ziyahluka futhi phakathi kwezisabalalisi nezinguqulo ze-OpenVPN. Ithempulethi endala ye-openvpn@, iphare elihlukene le-client ne-server, ne-wrapper yokusabalalisa konke kungaba semthethweni ekupakishweni kwakho.

Zivumelanise nomshini wakho, hhayi ngesifundo ositholile. Igama le-instance ekuphumeni komunye umuntu lingaba i-office kanti elakho lingaba i-home noma i-work. Okudluliswayo yindlela, hhayi uchungechunge.

Landela igama le-instance uze ufike efayeleni elilifundayo

Kuthempulethi ye-client upstream, indawo yokusebenza ye-unit yi-/etc/openvpn/client futhi umyalelo wayo uthatha i-%i.conf lapho, ngakho i-openvpn-client@office ifunda i-/etc/openvpn/client/office.conf. Qinisekisa lokho kuhambisana ku-unit efakiwe esikhundleni sokwethemba isibonelo, ngoba ithempulethi onayo ingaba endala noma ibhalwe kabusha ngumdluliseli:

systemctl cat [email protected]

Funda ama-drop-in avela ngaphansi kwalokho kuphuma, ngoba ifayela engaphansi kwe-.d/ lingashintsha i-ExecStart, indawo yokusebenza noma indlela yokucushwa. Iphrofayela oyilande njenge-office.ovpn ayilona ifayela elivulwa yi-instance. Leyo geja iyisizathu esivamile sokuthi iphutha lisho indlela ongakaze uyihlele.

Izindlela ezihlobene ngaphakathi kwephrofayela ziwugibe olulandelayo. Ukuhambisa ifayela elikhulu kuyilapho izinkomba ze-ca, cert ne-key zihlala zihlobene kushintsha iphutha lefayela elingekho ngenye iphutha lefayela elingekho. Eyesibili ikhomba ifayela obuqinisekile ukuthi likhona, ngakho indawo yephrofayela ibaluleke kakhulu kunegama lefayela.

Yiqale, bese ufunda ijenele laleyo instance

Qala i-instance osanda kuyihlola, ngoba ilogi ye-unit ehlanganisiwe ngeke ibe namaphutha omhubhe. Bese ufunda ijenele lalokhu kuqalwa futhi ufune ngokulandelana kwalokho iphutha lokucushwa, iphutha lokufinyelela ifayela nephutha lokuxhumana, ngoba ngayinye yehluleka esigabeni esihlukile sokuqala.

sudo systemctl start [email protected]
journalctl -u [email protected] -b

Ukuqala nokunika amandla kuyizinqumo ezihlukene: i-start igijimisa i-unit manje, i-enable ilungiselela ukuqalwa okulandelayo, futhi i-enable --now yenza kokubili ngesinyathelo esisodwa. I-daemon-reload ifunda kabusha izincazelo ze-unit futhi ayiqali kabusha inqubo egijimayo futhi ayisebenzisi iphrofayela ehleliwe. Ngemva kokushintsha iphrofayela, qala kabusha i-instance, ngoba yiyona efunda kabusha ifayela.

Ungafaki umphathi wesibili emhubheni ofanayo

I-NetworkManager kanye nabaphathi bemihlangano ye-OpenVPN 3 banesimo sabo sokuxhumana, futhi i-instance ye-systemd eceleni komunye wabo ibeka abanikazi ababili emhubheni ofanayo. Isibonakaliso umhubhe okhuphukayo bese ushintshwa ngemva kwamasekhondi ambalwa, noma lowo owenqabayo ukuhlala umisiwe. Khetha umphathi odokhumentishwa yisabalalisi sakho sedeskithophu, futhi usebenzise i-systemd ngamabomu kuseva.

Hlola ukuthi umnikazi ukhona yini ngaphambi kokuqala i-instance. Lapho i-applet yedeskithophu ibonisa ukuxhumana, i-instance oyiqalayo iqhudelana nayo esikhundleni sokuyiqedela. Khubaza umphathi ongawusebenzisi esikhundleni sokuqalisa womabili nokuthemba ukuthi ukulandelana kuzohlala. Lokho kungqubuzana kuchaza namajenele lapho umhubhe usungulwa khona bese udilizwa inqubo ongakaze uyiqale.

Phendula umbuzo wokuqala ngegama le-instance, ifayela elilifundile nomugqa wejenele ohlulekile.Amanothi e-OpenVPN mayelana nokuhlanganiswa kwe-systemd achaza ukuhlelwa kwethempulethi nokuhambisana kwefayela okuxazululwa ngakho igama le-instance.