I-OpenVPN ayiqali ngaphandle kwephutha? Bheka i-journal

Umyalo uyabuya, insiza ibonakala ihlulekile, futhi akukho okufana nencazelo okufinyelela itheminali. Lokho kuthula yisibonakaliso abantu abasichaza ngokuthi «i-OpenVPN ayiqali», futhi cishe akusho ukuthi uhlelo lwafa ngaphandle kokusho lutho. Kusho ukuthi umlayezo waya kwisiteshi obungasifundi, noma ukuthi lokho okwaqalayo kwakungeyona into oyilungisile. Zombili lezi zimo zingatholwa ngaphansi komzuzu owodwa uma uyeka ukuthatha iphrofayili njengomsolwa.

Izindawo ezine zimumatha umphumela: i-journal ye-unit, iplugini ephethe ukuxhumana, elinye iphethe lomhubhe, kanye ne-binary ehlukile kuleyo ocabanga ukuthi iyasebenza. Ngayinye inomhlolo wayo.

Ukuthula kusho ukuthi ubungabheki isiteshi esifanele

Ucingo lwangaphambili luphrinta kutheminali yakho. I-unit iphrinta ku-journal, futhi i-unit ehlulekile ingaphuma ngaphambi kokubhala noma yini uma iphutha liku- indlela eyaqalwa ngayo hhayi kulokho eyatshelwa kona. Lo mehluko ubalulekile: akukho okubhaliwe ku-journal kusho ukuthi inqubo ayizange isebenze ngempela, kuyilapho okubhaliwe okulandelwa ukuphuma kusho ukuthi yasebenza futhi yanqaba okuthile.

systemctl status openvpn-client@office
journalctl -u openvpn-client@office -b --no-pager

Engeza systemctl show -p Result -p ExecMainStatus openvpn-client@office ukwehlukanisa ukuphuma okuhlanzekile nesiginali. Isimo 1 kanye ne- Result=exit-code yisinqumo sohlelo; Result=signal noma isikhathi sokuphetha kukhombisa imvelo kunalokho, futhi akukho ukuhlela kwephrofayili okuzokushintsha lokho. Bhala womabili amanani ngaphambi kokuqala kabusha noma yini, ngoba ukuqala kabusha kususa isimo sesikhashana esiwakhiqizile.

Igama le-instance liyingxenye yendlela

I-unit yethempulethi epakishiwe ayithathi indlela yefayela. Ithatha igama le-instance, futhi lelo gama lengezwa kudikhishini ukuze kutholakale iphrofayili: office kusonjululwa kube /etc/openvpn/client/office.conf ekupakishweni kwe-Debian ne-Ubuntu. Ifayela elibizwa ngokuthi office-v2.conf, eliqalwa njenge- @office alilokothi lifundwe, futhi i-unit iphuma buthule ngoba ngokombono wayo kwakungekho okumele kwenziwe. Idikhishini lokusesha liyahluka phakathi kwemodi ye-client neye-server, ngakho iphutha elifanayo likhomba kwenye indawo ngokuphelele uma ushintsha ithempulethi.

Lokho kungafani kuwumthombo ojwayelekile kakhulu wokuhluleka buthule, futhi akubonakali kuphrofayili ngoba iphrofayili ilungile. Bhala lokho okukhona ngempela futhi uqhathanise amagama womabili unobumba ngonobumba, kufaka phakathi noma yisiphi isandiso esilindelwe ukupakisha.

ls -l /etc/openvpn/client/
systemctl list-units 'openvpn*' --all

Uma i-unit inikwe amandla kodwa akukho instance efakiwe ohlwini, ukuvunyelwa ngokwako kungakhomba egameni elashintshwa kamuva. Ukuvumela kabusha i-instance efanele kuvame ukwanele, futhi ifayela le-unit elidala elisetshele kufanele lisuswe ukuze lingadidisi umuntu olandelayo. Ifayela le-unit elisetshele liyinto encane elahlekisa umuntu ihora kamuva.

Uma iphulugini iphethe umhubhe, itheminali ayiboni lutho

Ukuxhumana okuqalwa kusuka ku-applet yedeskithophu kuphethwe yi-NetworkManager, futhi umphumela wayo we-OpenVPN uya ku-journal yalolo hlelo hhayi kunoma yiliphi ishell ovulile. Ukugijimisa i-client ngesandla nokungaboni lutho kulindelekile kuleso sakhiwo, ngoba inqubo egijiswa ngesandla akuyona leyo ethwala ukuxhumana.

Sesha ku-journal ihlelo eliyiphethe, bese uphinda ukuhlaziya ngezinga lemininingwane ongakwazi ukulifunda. Imiyalo emibili engezansi ibheka abanikazi abehlukene bokuhluleka okufanayo.

journalctl -b -u NetworkManager --no-pager | grep -i -A3 openvpn
openvpn --config /etc/openvpn/client/office.conf --verb 4 --log /tmp/ovpn.log

Ukugijima ngokuzimela kwenzelwe ukufunda imilayezo, hhayi ukushintsha ukuxhumana okulawulwayo, futhi womabili ahluka ngemuva kwalokho: ukuhlanganiswa kwe-DNS, imizila nesikhathi sokuphila kungokwephulugini. Ukulungisa iphutha lokuhlaziya ekugijimeni ngokuzimela akulungisi ngokuzenzakalela ukuxazululwa kwamagama uma i-applet ithatha izintambo, ngakho gcina imibono emibili ihlukene.

Ama-binary amabili, i-PATH eyodwa

Ukwakhiwa ngesandla okufakwe ngaphansi kwe- /usr/local kuyawina ecingweni le-shell, ngoba i- /usr/local/sbin iza ngaphambi kwe- /usr/sbin ku-PATH ezenzakalelayo ye-Ubuntu. I-unit ayisebenzisi i-PATH yakho; igijimisa indlela ephelele ebhalwe ku- ExecStart. Ngakho inguqulo esebenza kutheminali yakho nenguqulo ehluleka njengensiza kungaba izinhlelo ezihluke ngempela.

Qhathanisa zombili ngaphambi kokwakha kabusha noma yini. Umyalo wesithathu yiwo onquma ingxabano.

command -v openvpn
whereis openvpn
systemctl cat openvpn-client@office | grep ExecStart

Omunye umehluko wemvelo ucasha endaweni efanayo. I-unit epakishiwe incike kudikhishini lesikhathi sokusebenza ngaphansi kwe- /run, elidalwa yi-systemd, i-unit esikhundleni ebhalwe ngesandla eshiya leso silungiselelo ingahluleka ngaphambi kokuvula ifayela elilodwa, futhi ukuhluleka kubonakala njengokwenqaba okuvamile ngaphandle komlayezo we-OpenVPN.

Ukuhluleka i-client engakwazi ukukubika

Eminye imiphumela inqunywa ekugcineni okukude. Isango eliphendula ngesimo se-HTTP futhi livale ukuxhumana likutshele ngesimo salo, futhi isinyathelo esilandelayo esiwusizo ilogi yaso noma i-akhawunti engemva kobufakazi hhayi amafayela akho endawo. Kuleso simo akukho lutho lwasekhaya olugqekile, futhi ukuhlela iphrofayili ukunxephezela kwenza ukuxilongwa okulandelayo kube nzima. Funda lelo log ngaphambi kokuthinta ukucushwa kwe-client.

Elinye icala elithule i-client esebenza ngendlela efanele. Umhubhe wemodi ye-client awulaleli embobeni, ngakho ukuhlola okulindele umlaleli ovuliwe ngeke kubike lutho futhi kuzobonakala njengokuhluleka. Qinisekisa ukuthi iyiphi imodi oyiqalile ngaphambi kokuphetha ngoluhlu lwamabombo olungenalutho.

Sebenza ngezingqimba ngokulandelana: ingabe i-unit ikhona futhi igama le-instance lilungile, ingabe kukhona okufinyelele ku-journal noma kufayela le- --log, iyiphi i-binary nephrofayili eyagijima ngempela, futhi ingabe ukuhluleka kwasekhaya noma kukude. Yonke impendulo isusa ingqimba eyodwa. Ukuqala ngephrofayili kusho ukubhala kabusha ifayela okungenzeka alikaze livulwe.