Ingabe iseshini yomsebenzisi kufanele ibe ngumnikazi we-SSHFS mount ku-VPN?

Ukumounta ifolda eyabiwe ngemuva kokuba i-VPN inyuke kuhilela ubunikazi obubili okulula ukubudida: ingxenye evunyelwe ukuhlela inethiwekhi, kanye ne-akhawunti evunyelwe ukungena kuseva yamafayela. Akuvamisile ukuthi ziyafana. I-root VPN hook iyindawo embi yokuqala i-SSHFS mount yomsebenzisi wedeskithophu, ngoba ayinayo i-agent yomsebenzisi noma ubunikazi obuhloselwe be-mount. Ukulungisa ubunikazi kuqala kwenza isiqhubi sibe lula.

Ubunikazi obubili, izimvume ezimbili ezihlukene

Iklayenti le-VPN lidinga amalungelo okushintsha imizila nezixhumanisi. I-SSHFS mount idinga ubunikazi be-SSH obamukelwa yiseva yamafayela kanye ne-FUSE mount ephethwe yi-akhawunti ezofunda amafayela. Iskripthi esisodwa esisebenza njenge-root sihlangabezana nesidingo sokuqala futhi sephula ngokuthula esesibili.

Ukumounta njenge-root kushiya amafayela ngaphandle kweseshini yedeskithophu futhi mhlawumbe ngaphandle kokufinyelela i-agent ephethe ukhiye womsebenzisi. I-mount ikhona, umsebenzisi akakwazi ukubhala ngayo, futhi ukwehluleka kubonakala njengenkinga yezimvume ohlangothini lweseva. Lokho kuxilonga okungalungile kubiza intambama kanye nethikithi eqenjini lokugcina.

Nquma ukuthi iyiphi i-akhawunti ephethe i-mount ngaphambi kokubhala noma yikuphi ukuzenzakalela, ngoba lokho kukhetha kunquma ukuthi isiqhubi sihlala kuphi nokuthi yiluphi ubufakazi esingafinyelela kubo.

Qala ngokwakha ngesandla i-mount ephethwe umsebenzisi

Qala ngomsebenzisi ongenile onendawo yokumounta engenalutho, i-akhawunti ye-SSH egunyaziwe kanye nomzila osebenzayo oya kuseva ngomhubhe. Ukumounta ngesandla kusungula isisekelo okufanele sikhiqizwe kabusha yinoma yikuphi ukuzenzakalela.

mkdir -p "$HOME/mnt/team"
sshfs [email protected]:/exports/team "$HOME/mnt/team"
mount | grep sshfs

Amagama ayizibonelo, ngakho shintsha isihambisi kanye nomzila wokuthumela ngaphandle othi iseva yakho iwunikeza ngempela. Qinisekisa ukhiye wesihambisi ngohlelo olugunyaziwe kulokho kuxhumeka kokuqala. Qaphela ukuthi iphasiwedi ye-akhawunti ye-VPN ayiyona ngokuzenzakalela ubufakazi be-akhawunti yokugcina, futhi lokho kuyisizathu esivamile semizamo ehlulekile.

Yisebenzise njengomsebenzisi ojwayelekile nendawo yokumounta ephethwe yilowo msebenzisi. Ngokuzenzakalela i-akhawunti emountayo kuphela efinyelela amafayela, futhi i-allow_other inweba lowo mngcele kuwo wonke umsebenzisi wendawo. Lokho kuwukwandiswa kwamabomu kokufinyelela, akulona icebo lokugwema ukuzenzakalela.

Vumela isiqhubi sisebenze esimweni seseshini efanayo

Vumela ukuhlanganiswa kwezehlakalo ze-VPN okusekelwayo kucele ukuthi kusetshenziswe isenzo seseshini yomsebenzisi, esikhundleni sokucabanga ukuthi i-callback enamalungelo ingaboleka ubufakazi bedeskithophu. Khawulela isiqhubi kusikhombi sokuxhumeka esihlosiwe hhayi kunoma yisiphi isixhumanisi esivele sibizwa nge-tun0. Umthetho womthumeli ohambisana nento engalungile uyakhanyisa kukho konke ukushintsha kwenethiwekhi, kuhlanganise nalokho okungenasihlobo nalokhu kumounta.

Isenzo kufanele siqinisekise igama lesihambisi elilindelekile, sibone i-mount ekhona, futhi senze umzamo owodwa onomkhawulo. I-loop yokubuzisisa eqala inqubo entsha ye-SSHFS njalo ngemizuzwana embalwa, noma ephinda isicelo sobufakazi ngesikhathi iseva iphansi, iguqula ukuphazamiseka okufushane kube inqwaba yezinqubo ezibambekile. Khawulela umzamo ngesikhathi sokuphela nangomzamo owodwa wokuphinda.

nmcli -g UUID connection show --active
systemctl --user list-units 'sshfs*'
pgrep -a sshfs

Umyalo wokuqala unikeza isikhombi sokuxhumeka okufanele umthumeli asihambise. Eminye emibili ikhombisa ukuthi umzamo usuvele uqhubeka yini, futhi lokho wukuhlola okuvimbela ukuphindaphinda.

Isevisi engagadiwe idinga ubufakazi bayo obugunyaziwe kanye nokuqinisekiswa kwesihambisi kwayo esimweni sayo sokwenza. Ayikwazi ukucabanga ukuthi i-agent yezithombe ivuliwe, futhi akufanele izame ukuvula eyodwa.

Hlela ukunqamuka ngaphambi kokuphoqa ukuhlanza

Okokunqamuka okuhleliwe, qeda imisebenzi yamafayela futhi ukhulule kusukela emsebenzini womsebenzisi omountayo uqobo. Khomba endaweni yokumounta hhayi enqubeni, futhi uqinisekise umphumela ngaphambi kokubika impumelelo.

fusermount3 -u "$HOME/mnt/team"
mountpoint "$HOME/mnt/team"

Khulula kuphela i-mount eyakhiwe yilokhu kusebenza. Uma imatasatasa, lokho kuyisinqumo sohlelo lokusebenza: ukuhlukaniswa okuphoqelelwe okukhona ukuze i-hook ibuyisele impumelelo kufihla ukulahleka kwedatha esikhundleni sokukuvimbela.

Ukulahleka okungalindelekile kuziphatha ngendlela ehlukile. I-SSHFS ibhala ukuthi ukuphazamiseka kwenethiwekhi kungavimba umsebenzi wesistimu yamafayela, futhi inketho ye-reconnect ibuyisela ukuthutha ngaphandle kokubuyisela izibambiso: ifayela elivulwe ngaphambi kokuxhuma kabusha lingehluleka ekubhaleni okulandelayo, futhi ukubhala okuphazamisiwe akugcinwa. Lowo mehluko ubaluleke kakhulu kubahleli abagcina ifayela elilodwa livuliwe amahora. Hlela isinyathelo sokuvula kabusha esikhundleni sokucabanga ukuthi kuzolulama.

Hlola indlela yokuziphatha ngamafayela alahlwayo ngaphambi kokuthembela kuyo. Ifolda ephinda ivele ngemuva kokuba umhubhe ubuyile ayifakazeli ukuthi izibambiso zangaphambili noma umsebenzi ongagciniwe zasinda.