I-Pi-hole ne-VPN ku-Pi eyodwa: ingabe uhlelo lokusebenza lusasekelwa?

Ebhodini elihlangene le-Pi-hole ne-VPN, izinto ezimbili ziyahlangana: umndeni wokusabalalisa owufakile kanye nokukhishwa kanye nokwakheka okusekelwa ngempela yizingxenye. Ibhodi eliqalisa isithombe libonisa ukuthi i-kernel iyasebenza; alibonisi ukuthi ifayela le-FTL le-Pi-hole kanye nesifaki sakho se-VPN kuhloswe indawo yomsebenzisi efanayo. Ukuhlolwa kwangempela ukuhlangana kwezinhlangothi ezine: ukusekelwa kwebhodi, igatsha lokukhishwa, ukwakheka kwamaphakethe kanye nendlela yokuthuthukisa ongayilawula ngokwakho. Uma ulahlekelwa yinoma yiluphi lwale milenze emine, ithuluzi liyasebenza leli sonto, bese likushiya ekuthuthukisweni kwezokuphepha okulandelayo.

Igatsha lokukhishwa liqoka ukusekelwa, hhayi igama lomndeni

Buza ukuthi iphrojekthi isahlola nokukhishwa okukuphi, bese ubhala impendulo njengochungechunge lwenguqulo, hhayi njenge-Debian. Ikhasi lezimo zangaphambili le-Pi-hole libala izinhlelo zokusebenza ezisekelwayo kanye nokwakheka kwe-FTL okwakhiwe kusengaphambili njengezimfuneko ezimbili ezihlukile, likhawulela ukusekelwa kukho ukukhishwa okusalondolozwa wukusabalalisa uqobo, futhi lixwayisa ukuthi izinhlobo noma ukuhlelwa okungajwayelekile kungase kwehluleke ngisho ngaphakathi kohlu olusekelwayo. Leyo ndlela yokukhuluma ibalulekile: umndeni osekelwayo awumbozi wonke amalungu awo.

Isithombe esidala esisaqalisa ku-Pi yakho akusona ubufakazi bokusekelwa. Ibhodi lilungile, inkomba yamaphakethe isiphelelwe yisikhathi, futhi ukungafani kuvela kamuva, lapho isifaki sidonsa ukuncika okungasakwazi ukwanelisa ukukhishwa.

Uhlangothi lwe-VPN lunezingxenye eziningi, ngayinye inefasitela layo: i-daemon yomhubhe, umsizi wokufaka obhala ukuhlelwa kwayo, uhlelo lokusebenza lwekliyenti lomhlinzeki kanye nephakethe lokuhlanganisa lokusabalalisa yimisebenzi emine ehlukene. Isifaki esibona ukusabalalisa kwakho kanye nesifaki esikhiqiza insizakalo ukukhishwa okungayigcina isebenza yizitatimende ezimbili ezihlukile. Buka uhlu lwezinkundla lwe-daemon uqobo, bese ubuka ukuthi umsizi ofuna ukumsebenzisa uthintiwe yini selokhu kwaphuma lokho kukhishwa. Lapho iphrojekthi isho ukusekelwa kuze kufike ekukhishweni okuqanjiwe kuphela, thatha okulandelayo njengokungahloliwe uze ukugalise ngokwakho.

Qondanisa ilitshe le-binary nendawo yomsebenzisi onayo

Ukwakheka kuwukwehluleka okuthulile. I-kernel yamabhithi angu-64 enendawo yomsebenzisi yamabhithi angu-32 iyinhlanganisela yangempela, esekelwayo kumabhodi amaningi, futhi isebenzisa ifayela le-FTL lamabhithi angu-32 ngaphandle kokukhononda, kuze kube yisikhathi lapho ufaka into eshicilelwe kuphela i-arm64. Phrinta izingxenye zombili ngaphambi kokukhetha isithombe, futhi gcina umphumela eceleni kwamanothi akho.

uname -m
dpkg --print-architecture
grep -E '^(PRETTY_NAME|VERSION_ID)=' /etc/os-release
apt-cache policy pihole-ftl

Uma lezo zintambo ezimbili zokwakheka zingavumelani, usemisebeni exubile: iyasebenza ku-Pi-hole yodwa, ibuthakathaka lapho insizakalo yesibili ifuna amalabhulali omdabu. Ukushisela kabusha isithombe esihlanzekile samabhithi angu-64 ngokuvamile kushesha kunokwakha kabusha uchungechunge lwamathuluzi olwadala ukungafani.

Ukumaketha kwebhodi nakho akukuxazululi lokhu. Usayizi wememori kanye nomhlobo we-CPU akusho lutho mayelana nokuthi amaphakethe akho axhumana naluphi i-libc, ngakho ncike ngamavelu aphrintiwe, hhayi ngakhasi lomkhiqizo.

Ibhodi elilodwa, izinsizakalo ezimbili, umnini oyedwa wenethiwekhi

Nquma ukuthi ubani onamakheli, isixazululi kanye nomhubhe ngaphambi kokuba iphakethe lokuqala likhuphuke, ngaphandle kwalokho izinsizakalo ezimbili zizofuna umsebenzi ofanayo futhi akekho ozophumelela ngokuhlanzekile. Nika i-Pi ikheli elingaguquki ngaphandle kwechibi le-DHCP elisatshalaliswa i-router yakho, futhi gcina umhubhe kusubneti yawo: i-192.168.50.10 ye-Pi kanye ne-10.42.0.0/24 yomhubhe kuyisahlukaniso esisebenzayo, futhi izinombolo ngokwazo zikhululekile inqobo nje uma zingashayisani nalokho i-router yakho esekukhonza. Bese ubhala ukuthi iyiphi ingxenye ephendula ku-port 53, iyiphi esabalalisa i-DHCP uma uyisebenzisa, futhi iyiphi ephethe indlela ezenzakalelayo ngesikhathi umhubhe ungenhla. Esithombeni esingenasikrini, lowo msebenzi wokugcina ungowase-NetworkManager noma i-systemd-networkd, futhi ukufaka ikliyenti yomhlinzeki ebuye ibhale kabusha ukuhlelwa kwesixazululi iyona ndlela abantu abagcina ngayo umhubhe ophilayo ne-DNS efile.

Ukwabelana ngebhodi kulungile. Ukwabelana ngeqhaza akulungile. I-Pi-hole ifuna ukuba umlaleli oyedwa ku-port 53, futhi i-daemon ye-VPN ifuna ukusunduza ukuhlelwa kwayo kwe-DNS kumakliyenti, ngakho khetha ukuthi yikuphi kwalaba ababili amakliyenti okufanele athembe futhi ulungiselele omunye ukuba asuke endleleni.

Gcina indlela yokuphatha ngaphandle komhubhe lapho ukhona. Uma isixazululi nomhubhe kwehluleka ndawonye, usafuna i-SSH ifinyeleleke ekhelini le-LAN, futhi lokho kusho ukuthi insizakalo yokuphatha akufanele incike kwenye yazo.

Yenza ukuthuthukisa okulandelayo kube yingxenye yokukhetha

Ukukhishwa ongakwazi ukukuthuthukisa kungumbonyisi wokusekelwa osekuvele wamukela. Hlola indlela yokuthuthukisa ekhadini eliyisipele ngaphambi kokuba ithuluzi lithwale i-DNS yasekhaya lakho, futhi funda okushiwo amaphrojekthi mayelana nokugxuma phakathi kwamagatsha esikhundleni sokucabanga ukuthi ukuthuthukisa iphakethe kwanele.

sudo apt update
apt-mark showhold
sudo apt full-upgrade
pihole -up

Amaphakethe abanjiwe iyona sizathu esivamile sokuthi ukuthuthukisa kubonakale kuphumelela futhi kungashintshi lutho. Khulula ukubanjwa ngamabomu, ngakunye, futhi bhala ukuthi iyiphi insizakalo eyayidinga ukugxunyekwa.

Ngaphambi kokugxuma, khipha ukuhlelwa kwe-Pi-hole, izivumelwano ezingaguquki kanye nanoma yimaphi amaphrofayili omhubhe, futhi qinisekisa ukuthi ungawabuyisela esithombeni esisha. Ngemva kokugxuma, hlola i-DNS evamile yamakliyenti, insiza yangasese engemuva komhubhe, ukuxhuma kabusha, kanye nanoma yimuphi umthetho wokudlulisela esangweni. Ibhodi eliqalayo futhi eliphendula i-ping alikaze liphumelele cishe lutho.

Lapho kungekho kukhishwa okukodwa okulingana nazo zombili izinsizakalo

Ngezinye izikhathi ukuhlangana kungenalutho: umsizi we-VPN usefudukele ekukhishweni okusha kunephakethe le-Pi-hole ongalifaka, noma isithombe somkhiqizi webhodi sisalele emuva kukho kokubili. Uma kunjalo, hlukanisa izindima esikhundleni sokuhlela imethadatha yokukhishwa ukuze wenelise isifaki. Amadivayisi amabili amancane, noma idivayisi eyodwa kanye nekontena lensizakalo yesibili, kushibhe kunedivayisi indaba yayo yokusekelwa encike emangeni.

Ukwenza inguqulo yamanga iyona ndlela emfushane okufanele uyene ngqo. Abaphathi bamaphakethe bakholwa okushiwo yifayela lokukhishwa, ngakho isihlonzi somgunyathi sikunika ukufakwa okungeke kusizwe yinoma yimuphi kumaphrojekthi amabili ekulungiseni amaphutha.

Uma ukukhishwa okubili kwamanje kwanelisa konke, khetha lokho ongakwazi ukulandela amanothi akho okuthuthukisa ngaphandle kokuqagela, futhi yeka ukucinga. Bese bhala inguqulo, ukwakheka, abanikazi bezinsizakalo kanye nesinyathelo sokubuyisela endaweni eyodwa, ngoba umuntu olandelayo ozothinta ikhadi le-SD uzodinga konke okune.