Iklayenti le-VPN lisusiwe, kodwa ituneli isaqala ngesikhathi sokuqalisa

Isabelo sakho sisusa iphakethe, imenyu yakho ilahlekelwa ukufaka kwayo, futhi ituneli isaphuma ngemuva kokuqalisa okulandelayo. Iklayenti le-VPN lezentengiselwano lishiya izingcezu umphathi wamaphakethe angakaze azilande, ngakho ukususa okuhlanzekile akufani nomshini ohlanzekile. Ezine zalezo zingcezu zichaza cishe zonke izixhumanisi eziyiphupho: iyunithi, iphrofayela yoxhumano, umsizi onegunya kanye nendawo yokugcina yomthengisi. Funda konke okune ngaphambi kokususa noma yini, bese ususa ngakunye ngengxenye engumnikazi waso.

Okungazange kuqoshwe umsusi

Umphathi wamaphakethe ususa amafayela akuqophile kuphela, akukho okunye. Akanawo umbhalo wephrofayela yoxhumano eyakhiwe yiklayenti ngesikhathi sokusebenza, we-yunithi eyavulwa ngemuva kokufakwa, noma womsizi ozibhalise ngesikhathi esebenza ngamalungelo aphakeme. Ngakunye kwalokhu kungaphansi kwesistimu engaphansi ehlukile, futhi ngakunye kungaphila isikhathi eside kunephakethe ngokuqalisa okukodwa noma eziningi. Leyo gebe yiyo echaza ukuthi kungani ituneli ingaba nempilo ngenkathi isofthiwe eyayidalile isingekho.

Insalela ihlala inomnikazi, kungaba i-systemd, i-NetworkManager, ukucushwa kwendawo yokugcina noma umfakelo wokuqalisa ngokuzenzakalela kumsebenzisi ngamunye. Ukuthola umnikazi kuqala yikho okuvimbela ukuhlanza ekubeni umshini ocushwe kancane. Ukususa amafayela ngqo kuvame ukusebenza kuze kube umnikazi ewakha kabusha, yingakho imiyalo engezansi iqala ngemibuzo.

Abanikazi abane, kuqala ukufunda kuphela

Qala ngemibuzo esikhundleni sokususa, bese ubhala amagama anembile abuyayo. Abathengisi bavame ukuthumela umthwalo onezinguqulo eduze kwephakethe le-meta, ngakho umkhiqizo owodwa ungabonakala ngamagama amabili. Igama elivela kuzo zombili izinhlu umkhiqizo owodwa onabanikazi ababili, futhi kokubili kufanele kususwe. Iqoqo lokuqala lihlanganisa amaphakethe namayunithi, lapho iningi lalokho okusele libonakala khona.

dpkg -l | grep -i acmevpn
systemctl list-unit-files | grep -i acmevpn
systemctl list-units --type=service --state=running | grep -i acmevpn

Iqoqo lesibili lihlanganisa izingxenye ezimbili ezivame ukusinda ekuhlanzeni, okuyiphrofayela yoxhumano nendawo yokugcina yomthengisi. Funda ikholomu ye-UUID hhayi igama, ngoba amagama aphindiwe avamile futhi umyalo wokususa ulindele isihlonzi. Umugqa wendawo yokugcina kufanele ufundwe ngisho noma ungayisusi namuhla, ngoba umsingathi womthengisi ofile angaphula ukufakwa okungahlobene ezinyangeni ezizayo. Azikho izinhlu ezishintsha lutho, futhi yingakho ziqalwa kuqala.

nmcli -f NAME,UUID,TYPE connection show
nmcli connection show --active
grep -ril acmevpn /etc/apt/sources.list.d/ /etc/apt/sources.list

Inqubo esaphila ngemuva kokuhlanza iyingunithi esebenzayo noma ingane yohlelo olunye. Funda ithebula lezinqubo kanye nochunge lwayo lwabazali ngaphambi kokusola isevisi engasekho. Imifakelo yokuqalisa ngokuzenzakalela kumsebenzisi ngamunye idinga ukuhlolwa okufanayo, futhi ivela kuphela kugobolondo lokungena elisha, hhayi kuseshini ye-root.

Izenzo ezintathu ezingashintshani

Ukumisa kuqeda ukugijima kwamanje, ukukhubaza kususa izixhumanisi zesikhathi sokuqalisa, futhi ukufihla kukhombisa iyunithi ku-/dev/null. Eyesithathu kuphela evimbela nokuvulwa ngokusebenzisa isokhethi, isikhathi noma ukuncika, okwenza kube ngamandla kunazo zontathu. Ukulandelana kubalulekile ngenkathi usanquma ukuthi wenzeni ngomshini. Ukufihla yisimo esifanele phakathi naleso sinqumo, ngoba kwehluleka ngomsindo esikhundleni sokuqala buthule ekuqaliseni okulandelayo.

Susa ukufihla ngaphambi kokufaka kabusha, ngaphandle kwalokho iphakethe elisha lizobonakala liphukile ngesizathu esingabhalwanga muntu. Ukucophelela okufanayo kusebenza kumehluko wokupakisha: ukwakhiwa okukodwa kuletha iyunithi engamiswa, kanti okunye akushiyi isevisi nhlobo. Thola ukuthi uluphi uhlobo lokupakisha ngaphambi kokukhetha isenzo, ngoba indlela yokuhlanza iyahluka.

Ngamakhadi okususa kususwa iphrofayela engalungile

Susa iphrofayela nge-UUID oyibhalile, futhi ungalokothi uyisuse ngekhadi lokususa. Uhla lwekeyfile luqukethe nayo yonke iphrofayela ye-Wi-Fi ne-Ethernet kumshini, ngakho ukufanisa okubanzi kususa izinto osazidinga. Ikeyfile esuswe ngesandla ingase yakhiwe kabusha yinqubomgomo engumnikazi wayo, okwenza ukususa kubonakale kungenamphumela.

nmcli connection delete uuid <uuid>

Okokuqala thekelisa ngaphandle isango nobunikazi uma leyo phrofayela kuyikhophi eyodwa osele unayo, ngoba ukususa kwasendaweni akuhoxisi lutho kuseva. Indawo yokugcina ilandela umthetho ofanayo: susa ifayela elilodwa lomthengisi kanye nendandatho yawo yokhiye, bese uvuselela izinhlu zamaphakethe futhi uzame kabusha ukufakwa obukufuna ngempela. Ukushiya umfakelo womuntu wesithathu ophelelwe yisikhathi kungabophela ukuncika kwakudala noma kungaphenduli nhlobo. Kokubili ukususa kukuncane, futhi noma yikuphi kungabuyiswa kusukela ekhophini oyigcinile.

Yini esasebenza ngemuva kokuqalisa kabusha

Qalisa kabusha ngaphambi kokumemezela ukunqoba, bese ufuna izinsalela hhayi uhlelo lokusebenza. Isixhumi setuneli, umzila ohlukanisiwe ophelelwe yisikhathi kanye ne-DNS yesixhumanisi ngasinye esishiywe iklayenti elidala ngakunye kudinga umyalo waso. Zontathu zingasinda ekuhlanzeni okususe ngempumelelo wonke amaphakethe.

ip link
ip route
resolvectl status

Vula negobolondo lokungena elisha, ngoba umfakelo wokuqalisa ngokuzenzakalela uvutha lapho kuphela. Bese ufunda i-/etc/NetworkManager/dispatcher.d/ ufuna iskripthi esiphakamisa uxhumano njalo lapho isixhumi sishintsha isimo, okuchaza ituneli elibuya ngaphandle kwesevisi ngemuva kwayo. Uma kukhona okusacela ngaphandle, landela inqubo kuze kufike kumzali wayo esikhundleni sokususa amafayela kuze kume uphawu. Ukuhlanza umshini nokuhoxisa i-akhawunti kuhlala kuyimisebenzi ehlukene, futhi kube kukodwa kuphela okuqediwe lapho ukuqalisa kabusha kubonakala kuthule.