Yeqa i-VPN yasekhaya nge-systemd ExecCondition

I-VPN yenethiwekhi yasekhaya ayinakho okokwenza lapho ikhompyutha ephathekayo isivele ikuleyo nethiwekhi. Indlela emfushane ekhangayo umyalo wokulungiselela ophuma ngekhodi engeyona uziro; lokho kwenza i-unit ihluleke futhi kwenza yonke idashibhodi ibonakale iphukile. I-systemd inomyalelo walolu hlobo lwesinqumo, futhi uhlukanisa ukweqa ngamabomu nephutha langempela. Ukukwenza kahle kumayelana nokubhala ukuthi ikhodi ngayinye yokuphuma isho ukuthini.

Kungani umbandela wokuqala ohlulekayo kuyisimo esingalungile

I-ExecStartPre ithatha ukuphuma okungekhona uziro njengokuhluleka kokuqala, okulungile kumyalo olungiselela isevisi. Ukuyisebenzisa njengombandela kwenza isinqumo senqubomgomo singahlukaniseki kokuncika okuphukile. I-ExecCondition ikhona ukuze i-unit ingehluleki kodwa yenqabe ukuqala.

Lowo mehluko ubalulekile ngehora lesithathu ekuseni, lapho kungekho ofuna ukuhlola i-unit ebomvu eyayiziphatha ngendlela eyayiklanyelwe. I-unit ehlulekile futhi ifihla amaphutha angempela phakathi kwalawo enziwe ngamabomu.

Qala ngokubhala isivumelwano samakhodi okuphuma

Bhala isivumelwano ngaphambi kweskripthi. Ukuphuma ngoziro kusho ukuqhubeka, ukuphuma ngokukodwa kusho ukweqa imiyalo yokuqala esele, futhi ukuphuma ngo-255 kusho ukuthi umbandela ngokwawo awukwazanga ukusebenza. Amakhodi aphakathi kwesibili no-254 nawo ngokuvamile asho ukweqa, okuyinto okulula ukuyikhohlwa lapho usizi lubuyisela ikhodi yephutha engahleliwe. I-drop-in engezansi ihlanganisa usizi negama langempela le-unit.

[Service]
ExecCondition=/usr/local/libexec/should-start-home-vpn

Hlola i-unit esebenzayo mayelana nezilungiselelo ze-SuccessExitStatus noma ze-stop-post ezizuzwe njengefa ngaphambi kokucabanga incazelo ezenzakalelayo. Bese uhlola ngamabomu umphumela ngamunye kwemithathu.

Isikhombisi senethiwekhi akubona ubufakazi bendawo

Ikheli lerutha elifinyelelekayo noma i-MAC eyaziwayo kungase kusikisele inethiwekhi efanele, futhi akukho kukho okubili okukufakazayo. Enye inethiwekhi ingase isebenzise ikheli elifanayo, idatha ye-ARP ingase iphelelwe yisikhathi, futhi izihlonzi zingalingiswa. Thatha ukuhlola njengokuthuthukisa okuhambisana nenqubomgomo, hhayi njengomphumela wokuqinisekisa.

Nquma kusengaphambili ukuthi ukungaqiniseki kusho ukuthini. Ukuqala i-VPN lapho ungaqinisekile kuphephile kuklayenti elingeke likwazi ukuxhuma; ukweqa lapho ungaqinisekile akuphephile. Yenza ukuhlola kube nomkhawulo, futhi funda isixhumanisi esisebenzayo esikhundleni sokucabanga esokuqala ohlwini. Ukuhlola okulenga kubi kunalokho okuphendula ngokuthi cha, ngoba i-unit ikulindile.

Bhala lezo zicabango eduze kwefayela le-unit ukuze umuntu olandelayo azi ukuthi usizi lukholelwa ini. Umbhalo wencazelo phezulu kweskripthi iyindawo eshibhe kakhulu yokuzigcina.

Phatha ukuhamba phakathi kwamanethiwekhi

Umbundela usebenza lapho isevisi iqala, futhi awubuyekezwa kamuva. I-unit eyeqiwe ihlala yeqiwe ngemva kokuba ikhompyutha isuka iye ekhefini, futhi ithuneli elisebenzayo lihlala liphakeme ngemva kokuba ikhompyutha ibuyele ekhaya. Xhumanisa umjikelezo wokuphila wokushintsha kwenethiwekhi nesinqumo sokuqala nokuma ngomshini ohlukile.

systemctl cat home-vpn.service

Hlola izimo ezine: ukuqala ekhaya, ukuqala ngaphandle, ukuhlola okungakwazi ukusebenza, nokuhamba phakathi kwamanethiwekhi ngesikhathi i-unit isebenza. Gcina isizathu sokweqa sibonakala kujenali ukuze isinqumo esenziwe ngamabomu singeke sibonakale njengokuhluleka kokuqinisekisa. Isithenjwa sesevisi sibhala incazelo yokuphuma kanye nenguqulo encane.