Isixwayiso se-OpenVPN mayelana nama-script amaningi --up: owodwa kuphela osebenza

Isixwayiso sama-script amaningi sizwakala njengesikhalazo mayelana nokuhlela, ngakho isisombululo esisobala ukuhlela kabusha imigqa kuze kube yilapho kunyamalala. Kepha akusona isikhalazo sokuhlela. Incazelo ye---up yakamuva ithatha indawo yomyalo osewugciniwe kuleso sigaba, futhi umhlaziyi usho kanjalo, okusho ukuthi kuma-script akho amabili ililodwa kuphela elake lasebenza. Elinye alilinde emgqeni ngemuva kwalo; lilahlekile.

Yingakho isixwayiso sifanele ukunakwa nakuba singesona esibulalayo: esikusibikezelayo ukubuyekezwa kwe-DNS noma ushintsho lomzila oluyeke ngasese ukwenzeka.

Isixwayiso asimayelana nokuhleleka

OpenVPN igcina umyalo owodwa we-script yomsebenzisi wesigaba se-up. Lapho umhlaziyi ehlangabezana nencazelo enye, evela kuphrofayela, kufayela elifakiwe noma emgqeni womyalo, ithatha indawo yalokho ebesikugcinile futhi ikhiphe isixwayiso. Akukho okuhlanganisiwe, akukho okusebenza kabili, futhi awukho umbuzo wokuhleleka. Umyalo osalayo yilowo umhlaziyi awubona ekugcineni, yingakho ukuhambisa umugqa kungashintsha owinile kuyilapho enye i-script isala ifile.

Iphethini efanayo iyasebenza kwezinye izigaba ze-script: umyalo owodwa kulowo nalowo. Uma imisebenzi emibili kufanele yenzeke yomibili, idinga indawo eyodwa yokungena, hhayi iziqondiso ezimbili ezifana nohlu.

Thola izincazelo zombili ekuqalisweni kwangempela

Qala ngalokho i-daemon ekutholile ngempela, hhayi ngephrofayela oyihlolile. I-ps -ef kanye ne-ExecStart yeyunithi zikhombisa umugqa womyalo, ongangeza i---up kusuka endaweni yokungena yesitsha noma kusuka kusihlanganisi; ifayela le-init lokusabalalisa nalo lingenza okufanayo. I-systemctl cat openvpn-server@server iveza okufakwa yisevisi ngokwayo, kanti i-grep ephindaphindayo kudirectory yokucushwa ithola izincazelo ezingeni lefayela. Izimpinda zivame ukuvela ezingqimbeni ezihlukene, futhi yingakho ukuhlela ifayela elilodwa kungashintshi lutho.

Ukukopa i-script kwenye idirectory noma ukuyibiza ngegama elisha nakho akususi isiqondiso. Umhlaziyi ubala izincazelo, hhayi amafayela.

Akuvunyelwe i-hook eyodwa ibe nomsebenzi

Isixazululo esihlala njalo isihambisi esisodwa esisebenzisa zombili izenzo ngokulandelana okuhlosiwe. I-script emfushane ye-shell ene-set -eu ebiza ukuhlanganiswa okudingekayo bese isenzo sendawo, futhi idlulisa i-"$@" ukuze imingcele yezimpikiswano ihlale khona, igcina ukuziphatha endaweni eyodwa engahlolwa. Ukudlulisa izimpikiswano kuzigcina kuphela; akufakazeli ukuthi abasizi ababili balindele isixhumi esifanayo, ngakho funda inkontileka yalowo nalowo. Nquma ukuthi ukwehluleka kufanele kwenzeni nokuthi izinguquko eziyingxenye kufanele zibuyiselwe yini.

Uma isiqalisi sinikeza i-hook yokunweba esekelwayo, yikhetha kunokuxhumana okwenziwe ngesandla. Isithombe sesitsha noma iphakethe lomthengisi ngokuvamile linendawo ebhaliwe yomsebenzi owengeziwe, futhi ukulisebenzisa kuvimbela ukuthuthukiswa ukuthi kungabhaleli phezu kwesihambisi sakho.

Ukuhlanza kungokwesigaba se-down esihambisanayo. Isenzo se-up esibhala kabusha i-DNS noma sengeza imizila sidinga ukubuyiselwa okubhaliwe, futhi isihambisi esibhekana nokuqala kuphela siyingxenye yedizayini.

Qinisekisa ukuhlanganiswa, hhayi ukuthula kuphela

Ukususa isixwayiso sezimpinda yingxenye elula; ukuhlanganiswa kusamele kusebenze. Hlola isimo sesixazululi ngemuva kokuxhumana nge-resolvectl status noma ngokufunda i-/etc/resolv.conf, futhi uqinisekise imizila nge-ip route. Bese unqamula futhi uxhume kabusha, ngoba i-hook exhunywe ngokushesha ivame ukushiya okuthile kwiseshini edlule. I-journalctl -u openvpn-server@server -b ikhombisa ukuthi isihambisi sakho sisebenzile yini nokuthi sanyathelisa ini.

Gcina amalungelo e-hook endaweni efanele. Ukukhuphula i-script-security noma ukusebenzisa i-daemon ngamalungelo amaningi akusona isixazululo se-hook eshintshiwe; kwandisa lokho inkolo yonke ye-script yesikhathi esizayo engakwenza, kuhlanganise naleyo umhlaseli azoyiqamba.

Uphawu lokuthi isixazululo singeqiniso akusiko ukuthula kulo ilogi. Impendulo ye-DNS, ukufakwa komzila kanye nokuhlanza okusebenza kahle ngemuva kokuxhumana kabusha kabili.