Shintsha ilogi ye-VPN watchdog ngaphandle kokwephula umbhali

Qala ngokunquma indawo yokuphuma, bese uvumelanisa ukushintshwa nendlela umbhali avula ngayo ifayela: qamba kabusha ukuhlolwa okufushane, vula kabusha noma copytruncate kwi-daemon.

Ukuhlolwa kwezempilo kwe-VPN okungeza umugqa owodwa ngomzuzu kwakha ngokuthula umsebenzi wesibili: ukunquma ukuthi imigqa iyaphuma kanjani kudiski. Ukulungisa umhubhe akwenzi lutho kulo msebenzi, futhi ukuqamba kabusha ifayela akukhombisi kabusha inqubo esaphethe isichazi sakudala. Phendula umbuzo wendawo yokuphuma kuqala, bese uvumelanisa ukushintshwa nendlela umbhali ayivula ngayo.

Khetha indawo yokuphuma ngaphambi kwenqubomgomo yokushintsha

Iyunithi ye-systemd esivele ithumela umphumela wayo kujenali igcina ukugcinwa endaweni eyodwa. I-journald iphoqelela imikhawulo efana ne-SystemMaxUse ne-MaxRetentionSec , ngakho umlindi obhala lapho uthola umkhawulo ngaphandle komsebenzi owengeziwe. Ukwengeza ifayela lesibili elingenamkhawulo eceleni kwaso kukhuphula kabili ukunakekela ngaphandle kwenzuzo.

Ifayela elikhethekile lifanele indawo yalo uma okunye kuyifunda: umhlaziyi, ukuthunyelwa kocwaningo noma ikhasi elilindele indlela ezinzile. Ngemva kwaleso sinqumo, ifayela lidinga umnikazi, imodi kanye nenqubomgomo yokushintsha ebhalwe ndawonye, ngoba zontathu zilungile kuphela njengeqoqo. Indlela noma ubani angayenza nayo iyindlela noma ubani angayishintsha, ngakho izimvume zedijithali zisencwadini efanayo. Bhala konke lokho eceleni kokuhlolwa futhi ukuhlela okulandelayo kuzoqala emaqinisongweni afanayo.

Bhala ibhlokhi ukuze ihambisane nombhali

Qala ngombhali ovula indlela njalo lapho ebizwa, engeza umugqa bese ephuma. Lelo phethini lisinda ekushintshweni ngaphandle kokubambisana kwanoma yikuphi okuvela enqubeni, ngoba ukusebenza okulandelayo kuvula ifayela elikhona kuleyo ndlela ngaleso sikhathi. Ibhlokhi engezansi igcina iviki lamavelesheni futhi yakha kabusha ifayela ngomnikazi nemodi umbhali ayidingayo:

/var/log/vpn-watchdog.log {
    daily
    rotate 7
    create 0600 root root
    missingok
    notifempty
}

Incwadi ye-logrotate ichaza inani njengenani lamavelesheni ashintshiwe agciniwe, hhayi njengesiqinisekiso sezinsuku eziyisikhombisa zomlando, futhi igama elingukhiye elithi daily lihlolwa lapho umsebenzi ugijima esikhundleni sokuthi lisebenze njengomhleli walo. Ezabelweni eziningi isikhathi se-systemd noma ukufakwa kwe-cron sekuvele kungumnikazi walokho kubiza, ngakho hlola ukuthi yikuphi okhona ngaphambi kokwengeza okwesibili. Ukufanisa ubunikazi kubaluleke kakhulu kunenani lokugcina. Ukukopisha imodi yomsuka kuphela efayelini elibhalwe yi-akhawunti yensizakalo kumisa ukubhala kusigaba esilandelayo, futhi ukwehluleka kubonakala ngemva kwamahora njengesigxivizo sesikhathi esidala hhayi njengephutha. Qinisekisa umsebenzisi wombhali ngaphambi kokukopisha ibhlokhi kwenye indawo.

Umbhali ongaphindiyo ukuvula udinga ikhambi elihlukile

Inqubo yesikhathi eside ephethe isichazi esivuliwe iqhubeka nokubhala ku-inode eqanjwe kabusha. Isikhala asikhululwa futhi ifayela elibonakalayo liyeka ukukhula, okubonakala njengokushintshwa okugobile kuze kube yilapho uhlola i-inode. Noma fundisa inqubo ukuvula kabusha, noma yenza ukushintshwa kukopishe futhi kusike esikhundleni sokuqamba kabusha.

Indlela yokuvula kabusha ihlanzekile kakhulu lapho isofthiwe iyisekela khona: thumela isignali ebhaliwe noma gijimisa umyalo obhaliwe, futhi uvumele inqubo izivulele yona ifayela elisha. Enye indlela i-copytruncate , ekopisha okuqukethwe egameni elishintshiwe bese isika okwangempela endaweni yaso, ngakho isichazi sihlala sisebenza kodwa ukubhala okungena phakathi kokukopisha nokusika kuyalahleka.

Kumayunithi aqalwa yi-systemd, khombisa i-StandardOutput kujenali noma efayelini futhi uvumele iyunithi ibe ngumnikazi womjikelezo wokuphila. Iluphu ye-shell engeza ngokusebenzisa i-tee -a ngaphandle komkhawulo wosayizi iyilokho okugcwalisa ingxenye ngesikhathi sokuphazamiseka, ngoba ukuhlolwa okwehlulwayo ngokuvamile kubhala okuningi kakhulu kunokuhlolwa okunempilo.

Hlola ukushintshwa ngaphandle kokulinda isikhathi

Imodi yokulungisa iphutha ihlinzeka ngokuzokwenzeka futhi ayithinti lutho, okwenza kube ukusebenza kokuqala okuphephile ngemva kokuhlela. Phoqelela ukushintsha kwangempela uma wenelisekile, bese uqinisekisa ukuthi umugqa olandelayo welogi uwela efayelini elisha hhayi kwelinye eliqanjwe kabusha:

logrotate -d /etc/logrotate.d/vpn-watchdog
logrotate -f /etc/logrotate.d/vpn-watchdog
ls -l /var/log/vpn-watchdog.log*
tail -n 3 /var/log/vpn-watchdog.log
df -h /var/log

Funda umphumela ngaleyo ndlela. Ukugijima kokulungisa iphutha kufanele kubize ifayela nezinyathelo ezihlosiwe; ukugijima okuphoqelelwe kufanele kukhiqize igama elishintshiwe elilindelekile; i-tail kufanele ikhombise ukufakwa okusha ngemva kokuba umbhali esegijimile futhi. Inani le-df elikhulayo kanye nefayela elibonakalayo elinciphayo kusho inkinga yesichazi echazwe ngenhla.

Phinda ukugijima okuphoqelelwe kabili ukuze ubone ukuthi ukugcinwa kuziphatha kanjani uma amavelesheni esekhona. Ukususa ifayela elidala kakhulu kungumphumela olindelekile, futhi ukungabikho kokususa ngokuvamile kusho ukuthi inani noma uphawu lwe-wildcard egameni elishintshiwe akuhambisani nalokho okwakhiwe yi-logrotate.

Gcina ukubuyisela emuva kanye nerekhodi elibhaliwe

Gcina ibhlokhi yangaphambili ngaphambi kokuhlela, futhi qopha ukuthi yimuphi umhleli oyigijimayo, ngoba ukubuyisela emuva okubuyisela ifayela kodwa hhayi isikhathi kukhiqiza ingxenye yenkinga yokuqala. Shintsha kanye ngesandla ngemva kokubuyisela, bese uqinisekisa ukuthi i-akhawunti yombhali ingabhala endleleni yelogi. Uma insizakalo igijima ngaphansi kwe-systemd, layisha kabusha iyunithi ngemva kwanoma yiluphi ushintsho ekuqondiseni kabusha komphumela wayo, ngoba inqubo egijimayo iqhubeka nokubhala emgqeni wangaphambili. Funda wena imigqa elandelayo yelogi esikhundleni sokuthemba ukuthi iyunithi ibuyile ihlanzekile.

Qopha imodi, umnikazi, inani lokugcina kanye nesabelomali sediski esilindelekile eceleni kokuhlolwa uqobo. Uma kamuva ukuhlolwa kushintsha kusuka kuskripthi sesikhathi esisodwa kuya ku-daemon, inqubomgomo yokushintsha kufanele ishintshe nayo, futhi leyo ncwadi itshela umuntu olandelayo ukuthi yikuphi ukucabanga okuphukile.

Ekugcineni, gcina isinqumo selogi sehlukile kwisinqumo sokubuyisela. Ukuhlolwa okwehlulekile kufanele kulandele inqubomgomo yokubuyisela yokuxhumana uqobo, hhayi umthetho ofihliwe ngaphakathi kwe-logrotate, futhi akukho kuhlelo lokubhala okufanele kube yisizathu sokuqalisa kabusha umhubhe osebenzayo.

Izihloko ezihlobene