I-OpenVPN drop-in eyodwa yashintsha wonke amathaneli: i-instance ne-template

Inqubomgomo yokuqalisa kabusha eyengezwe kuthaneli elilodwa iqala ukusebenza kuwo wonke amathaneli kumshini. Lokhu akulona iphutha le-systemd; umehluko phakathi kwe-drop-in ye-instance ne-drop-in ye-template. Indlela obhala ifayela ngaphansi kwayo inquma ukuthi zingaki izinsizakalo ezizoyizuzu.

Khetha ububanzi ngaphambi kwesilungiselelo. Izikhombisi zombili zibukeka zicishe zifane, futhi eyodwa kuphela yazo ekhawulelwe ku-instance obuyiqonde.

Uphawu: ukuhlela okukodwa, wonke amathaneli

I-drop-in eqondene ne-instance itholakala ngaphansi kwedirectory eqanjwe nge-instance ephelele, isibonelo [email protected]. I-drop-in ye-template itholakala ngaphansi kwe-[email protected], inophawu @ futhi ayikho igama le-instance phakathi kwazo. Eyokuqala isebenza ku-office kuphela. Eyesibili isebenza kuyo yonke insizakalo edalwe kulelo template.

Ifomu le-template alifinyeleli itemplate ehlukile ye-[email protected], futhi alifinyeleli izinsizakalo ezingahlobene ezinokuthi openvpn egameni lazo.

Khetha idirectory ehambisana nobubanzi

Zombili izikhombisi zingaphansi kwe-/etc/systemd/system/. Uma ushiya ingxenye yokugcina ye-system, kwakheka indlela i-systemd engayifundi njengokushintshwa kwesistimu, futhi lena iyindlela ethule yokwenza ifayela elibukeka lilungile lingenzi lutho. Bhala indlela egcwele kanye bese uyisebenzisa futhi.

I-drop-in idinga nesihloko sesigaba esifanele. Izilungiselelo zensizakalo zingaphansi kwe-[Service]. Ifayela elinezilungiselelo kodwa lingenasigaba liyanganakwa noma lenqatshwa, futhi i-unit iqhubeka nokuziphatha njengakuqala ngenkathi ifayela likhona libukeka linesigunya.

Gcina inhloso egameni lefayela uma wengeza i-drop-in engaphezu kweyodwa. Ukuhleleka kwezinhlamvu kunquma ukuhlanganiswa, futhi igama elisho okwenziwa yifayela lenza lokho kuhleleka kufundeke.

Funda i-unit ehlanganisiwe ngaphambi kokubhala

Funda i-unit ehlanganisiwe ngaphambi kokubhala noma yini. I-systemctl cat [email protected] iphrinta i-unit eyinhloko nayo yonke i-drop-in esebenzayo, ngokuhleleka kokuhlanganiswa. Qhathanisa ne-instance yesibili uma ucabanga ngokushintsha kwe-template. Lokho kuqhathanisa kukhombisa ngqo ukuthi yiziphi izinsizakalo ezizozuza ukuhlelwa.

Ifayela le-instance alisusi izilungiselelo ze-template. Kokubili kuyahlanganiswa, ngakho inani le-template okhohlwe lona lingase lisasebenza.

Ezinye izinto ziyahlanganyela: amanye ama-drop-in anegama, izilungiselelo zesikhathi sokusebenza kanye nokumiswa okunikezwa amaphakethe. Ungacabangi ukuthi ifayela owalihlela ekugcineni yi-unit yonke. Umphumela ohlanganisiwe yi-unit.

Gcina inqubomgomo ye-unit ngaphandle kwephrofayela

Gcina inqubomgomo ye-unit nokumiswa kwe-VPN kuhlukene. Isiyalelo sephrofayela asibi yisintaksi ye-systemd evumelekile ngenxa yokuthi singaphansi kwe-[Service]. Nesilungiselelo sokuqalisa kabusha asisilo esifayeleni le-.ovpn.

Lokho kwehlukanisa futhi yisizathu sokuthi inqubomgomo yokuqalisa kabusha ayifani nokubuyiselwa kontanga okwenziwa OpenVPN ngokwakho. Nquma ukuziphatha okufunayo ngaphambi kokukhetha ububanzi.

Kusebenzise futhi uqinisekise i-instance

Ngemva koshintsho, layisha kabusha izincazelo zomphathi nge-systemctl daemon-reload. Lokho kulayisha kabusha akukuqalisi kabusha ithaneli; kufunda kabusha amafayela e-unit kuphela. Bese usebenzisa isenzo somjikelezo wokuphila obukade uwuhlosile ku-instance ngqo.

Qinisekisa ngokufunda kabusha i-unit elayishiwe nangokubuka ukuziphatha okushintshile. Ukuqalisa kabusha okuthwala umsebenzi okhona kufanele ukunqanyulwa okuhleliwe, hhayi ukuhlolwa okusheshayo kuthaneli lokukhiqiza. Bhala inhloso nobubanzi bokushintshwa eduze kokusatshalaliswa ukuze umuntu olandelayo azi ukuthi ifayela lalihloselwe ukwabiwa yini.

Uma inqubomgomo yabiwa ngempela, yihambise ngamabomu ku-template futhi uhlole i-instance yesibili ngaphambi kokuthi usho ukuthi kuphelile.Incwadi yokusebenzisa ye-systemd unit ibhala ukubaluleka kwe-drop-in nokuhleleka kokuhlanganiswa.