I-OpenVPN ayiqali: funda umugqa wokuqala, hhayi ukucushwa

I-VPN efa ngomzuzwana wokuqala iyisilwane esihlukile kunaleyo exhumayo bese yehluleka, futhi iphutha elivamile ukuzithatha njengento eyodwa. Lapha akukho kuxhumana, akukho ukushintshana kwezitifiketi futhi akukho ndlela yokuhlola. Umugqa owodwa kuloja unquma ukuthi yikuphi ukulungiswa okungahlobene okusebenzayo, futhi ukuwushiya kudla intambama ugcina ukucushwa okungakaze kufundwe. Funda lowo mugqa kuqala.

Imiyalo emithathu yokufunda kuphela ikufikisa lapho: journalctl -u openvpn@server -b --no-pager kuqala, systemctl status openvpn@server okwesibili, kanye ne-ss -lunp yabalaleli be-UDP nabanikazi babo.

Umugqa wokuqala unquma igatsha

Ukungqubuzana kwembobo kanye nefayela le-binari elingekho kokubili kubulala ukuqalisa phakathi komzuzwana owodwa, futhi kushiya imigqa yokuqala ehlukile. Umlayezo mayelana nekheli elivele lisetshenziswa ubiza imbobo; ifayela elisebenzayo elingekho libiza indlela engasekho; isimo esihlulekile noma ifayela lokucushwa elingekho libiza ifayela. Lawa mathathu aholela ekulungiseni okuhlukile, futhi akukho nhlangothi eliba ngcono ngokufaka kabusha iklayenti. Kopisha ukwehluleka kokuqala kumanothi akho ngaphambi kokusebenzisa enye into.

Qaphela umjikelezo wokuphinda uzame ocashisa umugqa wangempela. Iyunithi ene-inqubomgomo yokuqalisa kabusha ingagcina ukwehluleka kokuqala ngaphansi kweshumi nambili okufanayo, ngakho i-journalctl -b ehlungiwe ngeyunithi futhi efundwa kusukela phezulu ingcono kunomsila.

Ubani omunye obambe imbobo 1194

Icala ngokuvamile akulona iseva yesibili umuntu ayicubungule ngamabomu. Linde iklayenti eliqalwe ngesandla elisaphila kwelinye itheminali, iphrofayela yesibili eyathe thisa imbobo efanayo, noma iphakethe lomthengisi elipayipi lalo elibambe u-1194. Umnikazi wesokhethi uvela ku-ss -lunp; nikeza leyo PID ku-systemctl status ukuze wazi ukuthi ingabe iyunithi inecala. Yehla ngendlela yayo yokulawula, hhayi ngesignali.

Isignali eya kunqubo ephethwe iyunithi ivamise ukuqalisa ukuqalisa kabusha, futhi ukwehluleka okufanayo kuphinda kuvele ngemva kwesikhashana kubonakala njengenkinga entsha. Sebenzisa i-systemctl stop eyunithi, umyalo wesevisi wephakethe ngokwalo wokufakwa komthengisi, kanye nesiginali kuphela entweni oyiqale ngesandla kulelo shelli.

Amayunithi asele ngemva kokuhlanza

Ukuhlanza kususa amafayela e-binari; amafayela ayunithi abhalwe ngesandla, ngokuvamile ngaphansi kwe-/etc/systemd/system, ayasinda kukho. I-Systemd bese iphinda izame iyunithi ekhomba endleleni engasekho, futhi umlayezo umayelana nalelo fayela elingekho hhayi ukususwa kwayizolo. I-systemctl status ibonisa indlela yengxenye yeyunithi eduze naphezulu, ngakho yihlole nge-dpkg -S ngaphambi kokususa noma yini. Lapho ihlengiwe isihambile, i-systemctl daemon-reload kanye ne-systemctl reset-failed zihlanza isimo; kungenjalo konke ukuhlola kwesimo okulandela kuzuza lokho.

Lapho i-which openvpn iphendula ngento engaphansi kwe-/usr/local, ifayela le-binari elisetshenziswayo livela kusifaki somthengisi hhayi ku-apt. Isifaki esinjalo ngokuvamile siletha umlaleli waso, umugqa wokuqalisa waso kanye nedijithali yokucushwa yaso, ngakho ukususa umyalo obonakalayo kushiya isokhethi ibanjiwe.

Yikhiphe ngalokho okubhalwe umthengisi, qinisekisa ukuthi imbobo ivulekile nge-ss -lunp, futhi wengeze iklayenti lokusabalalisa kuphela uma ulidinga.

Hlehlisa isimo ngaphambi kokuphinda uzame

Hlanza isimo esihlulekile ngaphambi kokuthola iziphetho kuso: i-systemctl reset-failed isusa izibali, bese i-systemctl status ibika isimo samanje seyunithi hhayi umlando wayo. Yiqale kanye bese ufunda iloji yaleso senzeko uqobo hhayi isimo esihlangene somshini. Iyunithi ebika ukuthi iyasebenza ngesikhathi umhubhe ungathwala lutho iyinkinga ehlukile, futhi evame kakhulu. Kokubili kuhlanganiswa emibikweni yephutha ngoba kokubili kuphetha ngomsebenzisi ethi i-VPN ayisebenzi.

Qaphela igatsha olithathile: ukungqubuzana kwembobo, ifayela le-binari elingekho, ukucushwa okungekho. Ukwenzeka okulandelayo uzokubona ngokushesha.