openvpn3 session-start idelela ifayela lakho lemininingwane yokungena

Xhumana neklayenti le-2.x futhi iphrofayela iyasebenza; nikeza ifayela elifanayo eklayentini le-3.x futhi liyama esicelweni sephasiwedi. Nikeza --auth-user-pass creds.txt ku-openvpn3 session-start futhi umphumela uyafana, ngoba iklayenti elisha alinaso isigaba esifunda lelo fayela. Ukwenqaba kungenziwa ngamabomu: imininingwane yokungena ingeyeseshini, futhi iseshini yenziwa isevisi, hhayi inqubo eseterminalini yakho. Khetha phakathi kwesicelo esisebenzisanayo kanye nomsizi we-autoload, futhi wazi ukuthi ngamunye ugcina ini.

Kungani ifayela elilondoloziwe lingenandawo yokuya

Kumklamo omusha, ukuphathwa kokucushwa nokuphathwa kwemisebenzi kuyizinsizakalo ezihlukene ezikhuluma ngebhasi yesistimu. Lokho kwehlukanisa yikho okwenza umsebenzisi ojwayelekile aqale iseshini ngaphandle kokuthi idemon enamalungelo ifunde ifayela lephasiwedi elivikelwe egameni lakhe. Imininingwane yokungena esekelwe kufayela ayinandawo kulelo modeli, ngoba akukho kokuqala ohlangothini lwedemon okungayifunda. Ukwenqaba kuwumphumela wesakhiwo, hhayi isici esingekho.

Kufanele sichaze iphethini elidala ukuze kube lula ukuyeka: iphrofayela ibhekisela kufayela lemininingwane yokungena, futhi idemon iyalifunda lapho ithaneli iqala. Emodelini elisha, imininingwane yokungena ingeyeseshini futhi inikezwa lapho leyo seshini iqala. openvpn3 session-start --config work.ovpn iyacela, futhi --auth-user-pass creds.txt iyenqatshwa ngoba akukho lutho kulowo mzila olungavula ifayela. Yonke iresiphi ye-2.x oyitholayo icabanga isigaba esingasekho.

Ukucushwa nezilungiselelo zasendaweni zesayithi nakho kwehlukene, lokhu kuchaza isimangaliso sesibili. Iphrofayela ingabonakala iphelele kuyilapho uxhumano oluyikhiqizayo lungakho ukucushwa komzila nesixazululi. Lezo zingxenye zisetshenziswa njengezilungiselelo zasendaweni zesayithi, ngokuhlukile kufayela elingenisiwe.

Indlela yesicelo kanye nesehini eliyishiyayo

Ukunikeza iphasiwedi lapho iseshini iqala yiyo indlela yokusebenza ehlosiwe. Iklayenti licela kanye, linikeza imininingwane yokungena kubhaka weshini bese liqhubeka:

openvpn3 session-start --config work.ovpn
openvpn3 sessions-list

Ngaleyo ndlela akukho lutho olubhalwa kudiski. Iseshini iyaqhubeka nokusebenza ngemva kokuthi itheminali ivaliwe, lokhu kumangaza abantu abalindele ukuthi inqubo izofa nesheli yabo. Yikho lokhu okwenza kube nengqondo ukuthuthukisa ukuphathwa kwemisebenzi kuyisetshenziswa. Iseshini iphila isikhathi eside kunetheminali eyayicela, futhi kufanele imiswe ngokucacile.

Esiteshini somsebenzi esinomuntu phambi kwaso, lokhu futhi kuyisinqumo esiphephile kunakho konke, ngoba ayikho imfihlo elondoloziwe okufanele ivikelwe noma ikhohlakale. Akufanele kuphela lapho kungekho muntu ozotayipha.

Ukuzenzakalela ngaphandle komuntu ebhodini lokhiye

Lapho umshini kufanele uxhume ngaphandle komuntu, iphrojekthi ihlinzeka nge-openvpn3-autoload. Ifunda uhla lwamaphrofayela kanye nencazelo ehambisanayo yephrofayela ngayinye, futhi incazelo inikeza imininingwane yokungena ngombhalo ocacile. Umsizi uyibhinari ehlukile, ngokuvamile ku-/usr/sbin/openvpn3-autoload, hhayi ifulegi ku-session-start. Ukuyilungiselela kusho ukwakha uhla, ukukopisha iphrofayela ngaphansi kwegama incazelo elilindele, nokubhala incazelo.

Ukulungiselela komsebenzisi ngamunye kubukeka kanje, kwenziwa nge-akhawunti ezoba ngumnikazi weshini. Isimo sohla sigcina abanye abasebenzisi basendaweni ngaphandle:

mkdir -m700 -p ~/.openvpn3/autoload
cp work.ovpn ~/.openvpn3/autoload/client.conf
$EDITOR ~/.openvpn3/autoload/client.autoload

Incazelo isho imininingwane yokungena futhi icela ukuqala okuzenzakalelayo. Gcina inani lephasiwedi ngaphandle kokulawulwa kwezinguqulo:

{
  "autostart": true,
  "user-auth": {
    "autologin": true,
    "username": "svc-vpn",
    "password": "change-this-value"
  }
}

Bese ubiza umsizi kanye futhi uqinisekise ukuthi iseshini iyavela. Umyalo wesibili wukuhlola, hhayi esinye isinyathelo sokulungiselela:

/usr/sbin/openvpn3-autoload --directory ~/.openvpn3/autoload
openvpn3 sessions-list

Ekuqaleni, iyunithi epakishwe egama lingu-openvpn3-autoload.service isebenzisa uhla lwesistimu yonke /etc/openvpn3/autoload, hhayi lolowo msebenzisi. Leyo ndawo idinga ubunikazi be-root kanye nesimo esiqinile, futhi incazelo isagcina iphasiwedi ngombhalo ocacile. Ukushintshana kucacile: iphasiwedi manje isekudiski, ngakho phatha lolo hla njengemfihlo, yikhiphe ekugcinweni kwangaphandle komgcini, futhi khetha indlela esebenzisanayo njalo lapho kunomuntu.

Ukwehluleka kwebhasi okubonakala njengokwehluleka kwephasiwedi

Okunye ukwehluleka okuthiwa kubangelwa imininingwane yokungena akunjalo neze. Iphutha lemithetho ekhuluma ngomzila wokwenza isevisi isebenze lisho okukodwa kwezimbili: ibhaka ayisebenzi, noma umbizi akanalo ilungelo lokuyenza isebenze. Akukho kuhlela kabusha kwephrofayela okuzoshintsha kokukodwa walokhu. Hlola isimo sesevisi kanye nenqubomgomo yebhasi enikeziwe ngaphambi kokuthinta ukucushwa.

Imiyalo engezansi yehlukanisa lezi zimbili. Owokuqala ubika ukuthi ibhaka iyasebenza yini; owesibili ukhombisa amaphutha ebhasi akamuva:

systemctl status openvpn3-service-client
journalctl -b -u openvpn3-service-client --no-pager | tail -20

Okunye ukufunda okungalungile okuvamile yiseshini evelayo bese inyamalala ngokushesha. Lelo phethini ngokuvamile lisho ukuthi izilungiselelo zasendaweni zesayithi azikaze zisetshenziswe, ngakho ithaneli lenyuka ngaphandle kwemizila nezinguquko zesixazululi eziyenza ibe usizo. Funda ukulandelana hhayi umugqa wokugcina: ukuthi iseshini yadalwa yini, yafinyelela isimo esixhunyiwe yini, futhi yasinda yini kungamaqiniso amathathu ahlukene.

Lapho iklayenti elidala lisasetshenziswa

Iklayenti le-2.x lisamukela ifayela lemininingwane yokungena, futhi isongo lokhiye lingaphendula isicelo saso ngaphandle kokuthi imfihlo ifinyelele kudiski. Isimbo sizulazula ingeno, ngakho ifayela lisho ukusesha hhayi iphasiwedi. Lolu hlelo luncike kusongo lokhiye oluvuliwe, okungenakho ukukunikeza isiqukathi esingenaseshini yokungena noma iyunithi eqala ngaphambi kokuthi othile angene. Bese ithuluzi lokusesha libika iqoqo elingakwazi ukulibhalela, ngakho iphutha libonakala njengokwehluleka kwemininingwane yokungena kuyilapho kuwukwehluleka kwesongo lokhiye.

Ngaphambi kokwakha noma yikuphi kwalokhu, hlola ukuthi isilungiselelo se-keepalive kuphrofayela sisusa ngokuphelele isidingo sokuqala kabusha yini. Iseshini ehlala inyukile ayisoze yafinyelela isicelo osizama ukusenza sizenzele.