I-DNS ye-OpenVPN isala ngemuva kwe-SIGKILL: hlabela umnikazi kuqala

I-DNS iyeka ukuxazulula ngemuva kokuba iklayenti ye-OpenVPN ibulewe, futhi umgqomo wokuqala ukubhala kabusha /etc/resolv.conf. Lolo shintsho lungachitha isixazululi esisebenzayo kuyilapho isimo sakudala sangempela sikwelinye indawo. Umbuzo okufanele uxazululwe kuqala ukuthi ubani ungumnikazi wezilungiselelo ze-DNS ezifakwe umhubhe, nokuthi ingabe ukuphuma okweqe ukuhlanza kwakubalulekile ngempela.

Izimo ezintathu zinquma ukulungisa: isignali eqede inqubo, ingxenye yesixazululi eyamukele izilungiselelo, nokuthi uxhumano lomhubhe lusekhona yini. Phendula ngalolo hlelo futhi ukulungiswa kuvame ukuza ngaphandle kokuthinta ifayela lomhlaba wonke.

Nquma ukuthi kwenzeke hlobo luni lokuphuma

Kuhlelo lwe-Community lwe-OpenVPN, kokubili i-SIGINT ne-SIGTERM yizicelo zokuphuma ngokuthula. I-SIGKILL ayikwazi ukubanjwa: ayikwazi ukuvinjwa noma ukuphathwa, ngakho akukho nqubo yokuvala ethola ithuba lokusebenza. I-Ctrl+C evamile kutheminali engaphambili ikhiqiza i-SIGINT, kuyilapho umbheki oyeka ukulinda evamise ukukhuphukela ku-SIGKILL. Umehluko ubalulekile ngoba kuphela icala lesibili eliqinisekisa ukuthi amahuku adluliwe.

Ukugijima ngaphakathi kwe-screen noma i-tmux akushintshi ukuthi i-Ctrl+C ithumela isiphi isignali. Hlola ukuthi inqubo yathola ini ngempela, hhayi ukuthi itheminali yenza ini ngokuvamile.

Lapho isevisi noma umphathi woxhumano egijima umhubhe, misa lolo xhumano olulodwa ngomniki walo esikhundleni sokubulala i-pid. Umgcini angaphakamisa inqubo futhi, akushiye ngomhubhe omusha nesimo sesixazululi esididayo. Inqubo ezimele idinga kuphela isicelo sokuphela esivamile ukuze ukuhlanza kugijime.

Nquma ukuthi ubani ungumnikazi wesixazululi

I-systemd-resolved, umbhalo wesitayela se-resolvconf nokubhala kabusha kwefayela okulula kungabanikazi abathathu abehlukene. Owokuqala ugcina izilungiselelo ngoxhumano ngalunye enkumbulweni futhi uzilahla lapho isixhumi esibonakalayo sinyamalala. Owesibili ugcina amarekhodi ahlala avulekile kuze kube yilapho okuthile kuwakhipha. Owesithathu ubhala ifayela futhi ushiya ukubuyiselwa kumuntu owalibhalayo.

Khomba umnikazi ngaphambi kokukhetha umyalo wokulungisa. Uphawu olufanayo lunazimpendulo ezintathu ezilungile ezihlukene kuye ngokuthi yiluphi olusetshenziswayo.

I-VPN ephethwe yi-NetworkManager ingase ibe ngumnikazi wezinguquko zesixazululi. Ukwengeza umsizi wesibili phezulu kudala abanikazi ababili abancintisanayo ngoxhumano olulodwa, futhi isimo somhluliwe sivela futhi ekuxhumaneni okulandelayo. Uma umphathi unomthwalo, lungisa isilungiselelo kumphathi hhayi kumbhalo.

I-down hook ingenzani futhi ayikwazi ukwenzani

Umbhalo down ugijima kanye ngemuva kokuba idivayisi ye-TUN/TAP ivaliwe. Ukwengeza down-pre kuhlanekezela lolo hlelo futhi kugijimisa umbhalo ngenkathi idivayisi isekhona, okuyisidingo sabasizi abadinga uxhumano oluphilayo.

Awukho umyalo owenza ihuku ligijime ngemuva kwe-SIGKILL. Namalungelo awabuyiselwa down-pre: uma i-daemon yehla yaya user noma group noma ingena chroot, ihuku ligijima ngokufinyelela okushiye lokho. Ihuku elibiziwe lingase lingakwazi ukubuyekeza isixazululi. Incwadi eyisethenjwa ye-OpenVPN ihlanganisa izignali nomjikelezo wokuphila wokubuyisa ucingo.

Hlola iphutha lehuku ngokwalo eceleni kwesimo sokuphuma senqubo. Ukuhlanza okungekho nokuhlanza okuhlulekile kubonakala kufana kusixazululi futhi kwehluke kumarekhodi.

Hlola isimo esele ngempela

Kusistimu esebenzisa i-systemd-resolved, resolvectl status ikhombisa ukuthi luphi uxhumano olusathwala amaseva e-DNS e-VPN noma izizinda zomzila. Lolo xhumano kungaba ngolokuxhumana okunyamalele, noma lomunye umhubhe osesekhona.

Isixhumi esibonakalayo esinyamalalayo sihamba nokuhlelelwa kwaso ngoxhumano ngalunye, ngakho ihuku elidluliwe lingaba khona kanye ne-DNS ehlanzekile. Uma uxhumano lusabhalisiwe futhi luphethwe kuphela ukuxhumana okumisiwe, umphathi ongumnikazi kufanele alususe. Uma umbhalo omdala wabhala kabusha ifayela lesixazululi lomhlaba wonke, funa esikhundleni salokho isinyathelo sokubuyisela esibhaliwe salowo mbhalo.

Buyisela ngaphandle kokweba olunye uxhumano

Lapho izilungiselelo ngoxhumano ngalunye kuwumsebenzi wakho ukuziphatha, resolvectl revert ithatha igama lokuxhumana futhi isule ukuhlelelwa kwe-DNS kwesikhathi sokusebenza kuleyo interface. Kuyisenzo sesikhathi sokusebenza hhayi ukuhlela iphrofayela, ngakho ukuhlelelwa koxhumano okuhlala njalo kuhlala kungathintekile. Uma ubiza uxhumano olungalungile uzosula i-DNS yomhubhe osebenzayo, yingakho igama livela kokuphuma kwesimo.

Ngaphambi kokuhlela qinisekisa ukuthi /etc/resolv.conf iyisixhumanisi esingokomfanekiso esiphethwe, bese umisa iklayenti ngendlela evamile futhi ubheke i-DNS futhi. Uma ukumisa kwesibili kuhlanza, inkinga yangaphambili kwakuwukuphuma okuphoqelelwe hhayi ukuhlelelwa.