Iyunithi engu-.mount ifihliwe: iklayenti le-OpenVPN ngeke liqale

Isevisi yakho iyahluleka ngaphambi kokuba OpenVPN ike isebenze, futhi iphutha likhuluma ngeyunithi yokuxhuma ongakaze uyilungise. Lesi yisibonakaliso: i-systemd yenqaba yonke into ngoba iyunithi yokuxhuma impande ifihliwe, futhi iphrofayela yakho ye-VPN ayikafundwa. Isizathu esivamile ifayela elisele kukhithi lamayunithi esikhathi sokusebenza, hhayi i-fstab ephukile futhi hhayi isitifiketi esingekho. Landela ifayela kuqala, ngoba yisichasiselo esishesha ukususwa.

Iphutha lisho ukuxhuma kwempande, hhayi iphrofayela yakho

I-systemd izakhela yona iyunithi yokuxhuma impande isebenzisa ulwazi lokuxhuma lwe-kernel, futhi ibiza iyunithi ngokuthi -.mount ngoba umugqa umele indlela yempande. Leyo yunithi ivamise ukuba khona emqondweni kuphela futhi ayinayo ifayela ngemuva kwayo. Uma iphutha lithi ifihliwe, othile ubeke ifayela leyunithi lapho i-systemd izolilayisha khona futhi wakhomba lelo fayela ku-/dev/null. Ukufihla kuyisimo sangempela, hhayi iphutha lokubhala kumlayezo.

Iyunithi yesibonelo iyahluleka ngoba igrafu yayo yemisebenzi ifinyelela ekuxhumeni kwempande ngokulandelana nangezidingo zayo zokuxhuma. Ukudluliswa kwenqatshwa ngaphambi kokuba i-binary ye-OpenVPN isetshenziswe, ngakho akukho lutho ekulungiselelweni kweklayenti okungaba yimbangela. Yingakho ukushintsha amaphrofayela, izitifiketi noma ubunikazi kungabi nawo umphumela kule nhluleka ethile.

Bheka ukhithi wesikhathi sokusebenza ngaphambi kokuxazulula i-OpenVPN

Funa ifayela elinaleli gama ngqo kukhithi lamayunithi esikhathi sokusebenza, bese ubuza i-systemd ukuthi icabanga ukuthi iyunithi iyini. Zombili izimpendulo zishesha, futhi ndawonye zihlukanisa ifayela elisele enkingeni yangempela yokuxhuma.

ls -l /run/systemd/system/-.mount
systemctl status -.mount
systemctl list-unit-files --state=masked | grep mount

Umshini ojwayelekile awunalo ifayela elinjalo, futhi uhlu olufihliwe alinakho ukuxhuma kwempande. Uma umyalo wokuqala uprinta isixhumanisi esingumfanekiso ku-/dev/null, ukuxilongwa sekuqediwe. Kukhithi elifanayo kungaba ne-mask engu-tmp.mount eyakhiwe amathuluzi afanayo, futhi lokho kukhiqiza uhlobo olufanayo lokwehluleka ngaphansi kwegama elihlukile. Bheka ukhithi lonke hhayi igama elisephutheni kuphela.

ls -la /run/systemd/system/*.mount

Uma ukhithi lihlanzekile futhi iyunithi isafihliwe, ukufihla kukwenye indawo endleleni yokusesha, futhi i-systemctl cat -.mount izobonisa ukuthi yiliphi ifayela elilayishwayo.

Susa ifayela, layisha kabusha bese uqala futhi

Ukususa ifayela lesikhathi sokusebenza nokulayisha kabusha umphathi kwanele, futhi akuthinti lutho oluvela kuphakethe. Layisha kabusha ngaphambi kokuqala, ngoba i-systemd igcina isimo seyunithi elayishiwe ize iphinde ifunde ukhithi.

sudo rm -f /run/systemd/system/-.mount /run/systemd/system/tmp.mount
sudo systemctl daemon-reload
systemctl status -.mount
sudo systemctl start [email protected]

Bese ufunda ijenali yesevisi uqobo esikhundleni sokucabanga ukuthi ukulungiswa kusebenzile. Ukuqala okuhlanzekile kufakazela kuphela ukuthi i-systemd yamukele iyunithi; iklayenti lisengafa ngenxa yephrofayela engekho, i-peer engafinyeleleki noma isitifiketi esingaqinisekisi. Lezo izinkinga ezijwayelekile ze-OpenVPN ezazifihliwe ngemuva kweyunithi efihliwe. Ijenali iqopha ukuthi iyiphi iphrofayela elayishiwe nokuthi ingabe umhubhe wasungulwa ngempela. Uma iyunithi iqala kanti umhubhe awuqali, usudlulele kwenye inkinga, futhi lokho kuyinqubekela phambili.

journalctl -u [email protected] -b --no-pager

Njengoba i-/run iwuhlelo lwamafayela lwesikhashana, ukuqalisa kabusha kususa nefayela. Lokho kwenza ukuqalisa kabusha kube ukuhlolwa okusizayo: uma isevisi isebenza ngemuva kokuqalisa kabusha futhi yehluleka futhi ngemuva kokuthunyelwa okulandelayo, ifayela lifakwa esithombeni.

Vimbela ukuthi lingabuya lisuka esithombeni

Ithempulethi ye-container noma yomshini wokufanekisa evimba amayunithi okuxhuma ngesikhathi sokwakha izothwala lokho kufihla kuwo wonke amakhloni. Okulandelayo okudinga uhlelo lwamafayela kuzophuka, futhi umlayezo usola ukuxhuma esikhundleni sesithombe esivela kuso. Ukulungisa ngaphakathi kwesibonelo esisodwa esisebenzayo kufihla inkinga ize kudalwe isibonelo esilandelayo.

Sesha kumongo wokwakha igama lefayela nomyalo owudalayo, bese ususa ukufihla kuthempulethi futhi wakhe futhi. Uma ukufihla kudingeka ngempela ngesikhathi sokwakha, kususe esigabeni esifanayo esiqeda ukwakha, ukuze isithombe esithunyelwayo siqale sihlanzekile. Qinisekisa kukhloni elisha hhayi kumshini oyilungise ngesandla. Lokho ukuhlolwa okuwukuphela kwako okufakazela ukuthi isithombe sashintsha.

Isibonakaliso okufanele usikhumbule ukungahambisani phakathi kwephutha nalokho obukulungiselela. Lapho i-systemd ikhononda ngokuxhuma ngesikhathi uqala iklayenti le-VPN, funda igama leyunithi emlayezweni ngaphambi kokufunda igama lesevisi.