Okuthile kuqala iyunithi ye-OpenVPN ngokuphindaphindiwe: thola umthombo
Ukukhubaza iyunithi akufani nokukhipha ukusebenza kwayo. Funda i-instance, imephu yethempulethi kanye nokuncika okuphambene ngaphambi kokususa iphrofayela.
I-instance ye-OpenVPN ivela ngesikhathi sokuqalisa ngaphansi kwegama ongalijwayele, futhi ukuyimisa kusebenza kuze kube ukuqalisa kabusha okulandelayo. Lelo phethini lisho ukuthi ukhiphile inqubo kepha awukhiphanga ukusebenza. Lezi yizinto ezimbili ezihlukene, futhi eyodwa kuphela yazo ebonakala kusikrini sesimo. Ukuthola ukusebenza kudinga imiyalo emine yokufunda kuphela nesinqumo esisodwa.
Qala ngokuqamba iyunithi ngqo
Qala egameni leyunithi kujenali hhayi egameni lefayela lephrofayela. I-instance ingase ibizwe ngegama openvpn@, openvpn-client@, openvpn-server@ noma okuthile okuqondene nokukhishwa, futhi ukuqagela igama kukuholela kuthempulethi engalungile. Umphumela wesimo ubiza iyunithi egijime ngempela, futhi yilona kuphela igama elibalulekile lapha. Likopishe ngqo, kufaka noma isiphetho.
Imiyalo elandelayo ichaza leyunithi ngaphandle kokushintsha lutho. systemctl show ibika indlela ye-fragment, indlela yomthombo, isimo sefayela leyunithi, noma yimaphi ama-drop-in nokuthi yini eyiyisebenzisile. list-dependencies --reverse ibonisa ukuthi yimaphi amayunithi alayishiwe akhomba kuyo. Womabili awokufunda kuphela, ngakho-ke yisebenzise ngaphambi kokwakha ithiyori.
Faka esikhundleni igama elibonakele yonke indawo. Igama lesibonelo elikopishiwe liyindlela evame kakhulu yokuphenya isevisi engalungile, futhi linikeza izimpendulo eziqinile mayelana neyunithi engakaze igijime.
Funda ithempulethi ukuze wazi igama lefayela
Iyunithi ye-instance iwukwandiswa kwethempulethi, futhi ithempulethi inquma ukuthi iyiphi ifayela lokucushwa eliyifundayo. Umugqa womyalo ophela ngesikhala sokubamba esiqondene ne-instance uxazululwa abe igama le-instance kanye nesiphetho. Uma isiphetho kungu-.conf futhi i-instance ibizwa ngokuthi old, ifayela ngu-old.conf. Uma ubiza i-instance ngokuthi old.conf, ithempulethi elifanayo licela u-old.conf.conf.
Leyo mininingwane ichaza isigaba samawele. Othile wengeza i-instance yesibili ngaphansi kwegama elingalungile, eyokuqala iyaqhubeka nokugijima, futhi umphathi ugcina unemigudu emibili nelogi eyodwa edidayo.
Funda ithempulethi elisebenzayo hhayi ifayela olikhumbula ukuthi walihlela. I-drop-in ingashintsha umugqa womyalo, futhi okushintshiwe yikho okugijimayo ngesikhathi sokuqalisa.
Landelela ukuthi ingena kanjani ekusebenzisaneni kokuqalisa
Izindlela ezintathu zivamile: isixhumanisi se-wants esivela kumgomo, isidingo esivela kwenye iyunithi, noma iyunithi ekhiqizwe isakhi sofaka. Uhlu lokuncika okuphambene luhlanganisa ezimbili zokuqala njengamarekhodi egremu alayishiwe. Akuhlanganisi isikhathi, ihuku noma isicelo sangaphandle, yikho uhlu luwubufakazi hhayi ukucwaninga okuphelele.
Umphumela okhiqiziwe ngaphansi kwe-/run/systemd/generator uwumkhiqizo, hhayi umthombo. Ukulihlela kuhlala kuze kube ukukhiqizwa okulandelayo, yikho ukulungisa okusetshenziswe lapho kubonakala kuyimpumelelo bese kubuyela emuva.
Hlola okokufaka okubhaliwe kwephakethe ngaphambi kokucabanga ukuthi isakhi sifunda kuphi. Ukuskena kwefolda okungabhalwanga yisizathu esivamile sokuthi iyunithi ivele ngaphandle kwesixhumanisi sokusebenza.
Khipha ukusebenza, hhayi inqubo kuphela
Uma i-instance inikwe amandla ngqo futhi isiphelelwe yisikhathi ngempela, i-systemctl disable --now iyayimisa futhi ikhiphe isixhumanisi sokuqalisa ngesinyathelo esisodwa. Qala ngokuqinisekisa ukuthi lo mugudu awuwona ukuphela kwendlela yakho yokuphatha eya kumphathi. Umyalo uyisibonelo somjikelezo wempilo, akuyona isiphakamiso sokumisa wonke ama-VPN emshinini. Sebenzisa ukuhlola ngaphambi komyalo, hhayi ngemuva kwawo.
Izingxenye ezimbili ziyahlukaniseka futhi zivame ukudidaniswa. Ukukhubaza akukuyimisi isevisi egijimayo, futhi ukumisa akukukhiphi ukusebenza, ngakho umyalo oyingxenye uchaza inkinga ebuyayo ngesikhathi sokuqalisa.
Iyunithi ekhutshaziwe isengaqalwa enye iyunithi noma isicelo esicacile. Uma isakhi siphethe ukusebenza, lungisa okokufaka kwesakhi esikhundleni sokukhubaza okukhiphayo. Ukufihla kuvimba izindlela eziningi kodwa kungaphula ukuncika, ngakho akuthathi indawo yokuqonda.
Qinisekisa ngokuqalisa kabusha, hhayi ngesikrini sesimo
Layisha kabusha i-systemd uma izincazelo zamayunithi noma okokufaka kwesakhi kushintshile, bese uhlola isimo esilandelayo. Ukulayisha kabusha kwedaemon akugxumeli iphrofayela elisha kumugudu ogijimayo, ngakho ukuhlola okubili kwehlukene. Hlela ukuqalisa kabusha futhi uqinisekise ukuthi i-instance ihlala ingekho ngenkathi umugudu ohlosiwe usasebenza.
Gcina iphrofayela elidala kuze kuqondwe ubunikazi balo, bese uliyeka ngokusebenzisa inqubo ehlosiwe. Impumelelo iyunithi engekho kanye nendlela yokufinyelela esebenzayo, hhayi iyunithi ehlulekile engekho kusikrini esisodwa.