Amasayithi ayavulwa nge-VPN, kodwa i-apt ayifinyeleli isitoreji

I-VPN iyaxhuma, i-wiki yangaphakathi iyalayisha kusiphequluli, futhi apt update isalenga esibukweni engakwazi ukusifinyelela. Kuleso sithombe akukho okugqekeziwe emhubheni. Isiphequluli nomphathi wamaphakethe bathatha izinqumo ezimbili ze-proxy ezihlukene, futhi eyodwa kuphela yazo eyayilungiselelwe.

Isiphi isinqumo esihlulekile yiso kuphela into efanele ukuqinisekiswa kuqala.

Funda iphutha ngaphambi kokuthinta isilungiselelo

Isigaba ngasinye sishiya umlayezo ohlukile. Igama elingalokothi lixazuluke liyi-DNS, ukuxhumana okungalokothi kuqedwe ukuhlela izindlela noma udonga lomlilo, i-407 efika ngokushesha ukufakazela i-proxy, isikhalazo ngesitifiketi ukuqinisekiswa kwe-TLS, futhi isexwayiso sesiginesha idatha yemethadatha yesitoreji. Lezi ziphambeko ezinhlanu zidinga izilungiso ezinhlanu ezihlukene, futhi umugqa we-proxy onanyathiselwe phezu kwenkinga ye-DNS uhambisa nje indawo yokulenga.

Kopisha umugqa oqondile kanye nesitoreji esiwushoyo ngaphambi kokushintsha noma yini. Isikhumbuzo esingacacile sokuthi „isiphelelwe yisikhathi“ yiso esenza ukuxilongwa kwemizuzu eyishumi kube ngusuku lonke lwantambama.

I-APT inezilungiselelo zayo ze-proxy

I-APT ifunda i-/etc/apt/apt.conf.d/, i-apt.conf eyinhloko nanoma iyiphi ifayela elishiwo yi-APT_CONFIG. Ayifundi iphrofayela ye-proxy yedeskithophu, isilungiselelo senethiwekhi se-GNOME noma isandiso sesiphequluli. Ukuthutha kuhlonipha izinguqulo zendawo ye-proxy, yingakho i-export https_proxy=... esebenza ku-shell yakho ingafakazi lutho mayelana nesibali sikhathi esigijima kwenye indawo.

Khipha lokho inqubo ehlulekayo ekubonayo ngempela: apt-config dump | grep -i proxy.

Gijimisa lokho njengomsebenzisi inqubo ehlulekayo egijima ngaphansi kwakhe. Uma i-root ifunda isethi ehlukile yamafayela, noma isibali sikhathi se-systemd siqala ngendawo ehlukile, ukukhipha kuzohluka, futhi lowo mehluko uyimpendulo yakho. Izilinganiso ezimbili ze-proxy eziphikisanayo zibi kakhulu kunenani elilodwa elingekho, ngoba ukuthutha kulandela ukufana okuqondile kakhulu okukutholayo.

Setha i-proxy lapho umnikazi wokulungiselelwa ayilindele khona

Kwi-proxy ecacile egunyazwe umlawuli, ingxenye encane efayeleni elisha yanele:

Acquire::http::Proxy "http://proxy.corp.example:3128/";
Acquire::https::Proxy "http://proxy.corp.example:3128/";
Acquire::http::Proxy::archive.example.internal "DIRECT";

Umugqa wesithathu yingxenye izibonelo eziningi ezishiya ngaphandle. Ukhiye womsingathi ngamunye weqa inani elijwayelekile, ngakho isibuko sangaphakathi esifinyeleleka ngomhubha singeqa i-proxy ngenkathi konke okunye kusadlula kuyo. I-DIRECT yinani elibhaliwe zalokho, hhayi umucu ongenalutho.

Engeza ingxenye njengefayela elisha elinezinombolo, isibonelo i-/etc/apt/apt.conf.d/95proxy. Ukubhala phezu kwefayela lokusabalalisa kusho ukuthi ukubuyekezwa kwamaphakethe okulandelayo kuzobuyisela emuva ushintsho lwakho buthule.

Imininingwane yokungena ihlala ngaphandle kwe-URI

Incwadi yokuthutha ye-APT ikhomba ku-apt_auth.conf yokufakazela, futhi yilapho igama lomsebenzisi nephasiwedi kufanele kube khona. Ukuzifaka ku-URI ye-proxy kuzibeka ohlwini lwezinqubo, emlandweni we-shell nakukho konke ukukhipha kokulungiselelwa okunanyathiselwe kuthikithi. Ifayela lokufakazela lidinga izimvume eziqinile, ngoba liyisitoreji semininingwane yokungena.

Hlola nesikimu. Isitoreji se-HTTPS sisafinyeleleka nge-proxy ye-HTTP; ukuthutha kuwukukhetha okuhlukile kusikimu se-URI sesibuko.

Isikhungo sesofthiwe yezithombe siwubuso bangaphambili obuhlukile. Uma sisebenzisa i-PackageKit noma ingemuva le-snap, ingxenye ye-APT ayishintshi lutho kuso, ngakho qinisekisa ukuthi iyiphi inqubo eyenza isicelo esihlulekile.

Qinisekisa indlela, hhayi ikhodi yokuphuma kuphela

Uma ingxenye isendaweni yayo, bukela isicelo esikhundleni sokuthemba umphumela oluhlaza. I-apt-get -o Debug::Acquire::http=true update iphrinta umzamo wokuxhuma, i-proxy eyikhethile nekhodi yempendulo, okuhlukanisa i-proxy engalungile ne-proxy eyenqabile.

Bese uhlola icala okungafanele lisebenze. Nqamula i-VPN futhi uqinisekise ukuthi isibuko sangaphakathi siyeka ukuphendula; uma sisalayisha, kukhona okuhambisa ngaphesheya komhubha noma isikhashana esidala sikusebenzela. Qinisekisa ukuthi indlela evunyelwe isaqinisekisa i-TLS futhi isahlola iziginesha zesitoreji, ngoba i-proxy ehlola ukuhamba kwezinto ayisona isizathu sokucisha noma iyiphi yazo. Qinisekisa futhi ukuthi iklayenti elingafakazelwanga lithola ukwenqatshwa okucacile esikhundleni sokuphelelwa yisikhathi buthule.

Gcina ingxenye esebenzayo kanye nokuphuma okuhlulekile kuhlangene kurekhodi yezinguquko. Umuntu olandelayo ozohlangana nokulenga okufanayo uzobona umehluko wemigqa emibili ngokushesha kunanoma iyiphi incazelo.