Umhleli we-VPN okude nge-SSH: iyiphi imishini oyihlelako?

Ukudluliswa kwe-X11 kubeka iwindi lomhleli kukhompyutha yakho ephathekayo ngenkathi inqubo iqhubeka isebenza kusibungazwa esikude. Lelo gebe yisona sithiyo sonke: ubheka iwindi lasendaweni futhi uhlela iphrofayili ekude, futhi umcabango ongalungile wokuthi iyiphi imishini ephethe ushintsho ungase anqamule isixhumanisi se-SSH osebenza ngaso. Uhlu lokuhlola olungezansi lubeka umbungazi nephrofayili ngaphambi kokulondoloza noma yini. Isinyathelo ngasinye sinesimo sokuma, ngakho ukwehluleka kusenesikhathi kushibhile.

Isinyathelo 1: biza imishini ephethe iphrofayili

Gijima imiyalo yobunikazi ku-shell ozoyilungisa, futhi ufunde impendulo esikhundleni sokuyiqagela kusihlawulo. Igama lomsunguli kusihlawulo iyunithi yezinhlamvu eyaphrintwa i-shell yakho; igama lomsunguli we-kernel yilona elinethemba kulo lonke lolu hlu. Uma kokubili kungavumelani, usemishinini engalungile noma isihlawulo sihlotshiswe i-shell yakho yasendaweni. Ma, futhi xhuma kabusha kusibungazwa esihlosiwe ngaphambi kokuqhubeka.

hostnamectl
hostname -f
ip -brief address

Umbuzo olandelayo ukuthi ingabe le mishini kufanele ngempela igcine i-VPN. Ukulungisa iklayenti lekhompyutha ephathekayo nokulungisa iklayenti lesibungazwa esikude kukhiqiza imizila ehlukile, i-DNS ehlukile kanye nezindlela zokwehluleka ezihlukile. Nquma ukuthi iyiphi oyishoyo ngaphambi kokuthinta iphrofayili, futhi bhala isinqumo endaweni lapho umuntu olandelayo eyothola khona.

Isinyathelo 2: funda iphrofayili nge-UUID, hhayi ngelebula

I-NetworkManager ibona uxhumano nge-UUID, kanti igama iyilebula umuntu noma ubani angayihlela noma ayiphinde. Bhala kokubili futhi uhambise isingeniso osihlosile ngempela, ikakhulukazi kusibungazwa lapho kungeniswe khona amaphrofayili amaningi e-VPN phakathi neminyaka.

nmcli -f NAME,UUID,TYPE connection show
nmcli connection show --active
nmcli general permissions

Izingeno ezilondoloziwe kanye noxhumano olusebenzayo ziphendula imibuzo ehlukile: okokuqala kubala okukhona, okwesibili kubala okuthwala ithrafikhi manje. Umugqa wezimvume uchaza inqubomgomo yasendaweni yesikhathi sakho futhi awusho lutho mayelana nokuthi ingabe isango le-VPN lizowamukela yini i-akhawunti. Uma iphrofayili oyidingayo ingekho ohlwini olulondoloziwe, ma lapha, ngoba ukuhlela isingeniso esingalungile kubi kakhulu kunokungahleli nhlobo.

Uma usunayo i-UUID, yibeke kusiguquguquki futhi usebenzise leso siguquguquki kuwo wonke umyalo olandelayo. Lokho kususa ikilasi lonke lamaphutha okukopisha nokunamathisela futhi kwenza umbhalo ukwazi ukukhiqizwa kabusha.

UUID=$(nmcli -g UUID connection show 'Corp VPN')
nmcli connection edit uuid "$UUID"

Isinyathelo 3: nquma ukuthi ingabe umhleli wezithombe iyithuluzi elifanele

Umhleli odinga isihlawulo se-polkit noma i-ejenti yezimfihlo ngeke asithole ngenxa nje yokuthi iwindi lakhe liyavela kukhompyutha yakho ephathekayo. Lezo zingxenye zisebenza kumongo wesikhathi esikude, futhi ukudlulisa isibonisi akuzidlulisi. Uma umhleli engakwazi ukulondoloza ngenxa yephutha legunya noma lemfihlo, inkinga ayikho esibonisini.

echo "$DISPLAY"
ssh -X you@vpn-host
xauth list

I-OpenSSH ivula ukudluliswa kwe-X11 nge -X futhi ibhala ukuqapha okuhambisana nakho: umbungazi okude angafinyelela isibonisi sakho sasendaweni, okuwumngcele wangempela wokuthembana. Ukudluliswa okuthembekile nge -Y kususa ezinye zalezo zivivinyo futhi akumele neze kube yisixazululo esizenzakalelayo sohlelo olwehlulekayo ngaphansi kwezilungiselelo eziyisisekelo. Uma inhlangano yakho ishicilela indlela yokuphatha okude, sebenzisa leyo esikhundleni sokuklama okuhlukile. Ezimweni eziningi umhleli womugqa womyalo uyingaphezulu encane futhi iyimpendulo engcono.

Ma lapha uma indlela eyodwa esebenzayo idinga -Y futhi awukwazi ukuchaza ukuthi kungani. Leso yisinqumo somnikazi wenqubomgomo yezokuphepha, hhayi indlela yokugwema okufanele igcinwe kuskripthi somuntu siqu.

Isinyathelo 4: gcina indlela yokubuyisela ngaphambi kokwenza noma yini isebenze

Ushintsho lwe-VPN lungasusa umzila isikhathi sakho se-SSH esincike kuwo, ngakho hlela indlela yokubuyela emuva ngaphambi kokwenza iphrofayili isebenze. Ukufinyelela kwekonsoli, ikheli lokuphatha elingaphandle kwebhande noma ukubuyiselwa emuva okuhleliwe konke kuyabalwa; ithemba lokuthi ushintsho luzosebenza alibalwa.

sudo systemctl status NetworkManager
ip route show default
ss -tn state established '( sport = :22 )'

Yenza kusebenze kuphela iphrofayili ehlosiwe, bese uqinisekisa kusibungazwa esikude: umzila oyisisekelo, indlela yokubuyela ye-SSH kanye nensiza eyodwa okufanele ifinyeleleke ngomhubhe. Ukuhlola okuphumelelayo kukhompyutha yakho ephathekayo kuhlola indlela yekhompyutha ephathekayo futhi akusho lutho mayelana nesibungazwa esikude. Uma isikhathi siwa, sebenzisa indlela yokubuyisela esikhundleni sokuphinda uxhume ngobumpumputhe. Ukulondoloza iphrofayili akukona ukwenza kusebenze, futhi ukwenza kusebenze akukona ukuqinisekisa.

Bhala i-UUID, amanani ezakhiwo ozishintshile kanye nemiyalo oyisebenzisile ukuze uziqinisekise. Umuntu olandelayo ozothinta lesi sibungazwa uzodinga kokuthathu, futhi umbhalo unenani elikhulu kunombhalo omfishane othi i-VPN ilungisiwe. Uhlu lokuhlola oluphela ngaphandle kwenothi lokubuyisela emuva luwuhlu olunguhafu.