Iseva ye-OpenVPN kufanele ibhale ilogi yayo kuphi, futhi kungani
log, log-append ne-syslog kuyahluka, futhi umphathi wesevisi ugcina ikhophi yakhe. Khetha ukugeleza okukodwa okugunyaziwe, gcina umjikelezo wokuphila ufundeka futhi ubeka isikhathi sokugcina.
Ukwakheka kwelogi kuphendula imibuzo emithathu: iyiphi inqubo edale irekhodi, irekhodi liyawela kuphi, futhi lihlala isikhathi esingakanani. OpenVPN ingabhala efayeleni, inikeze imilayezo kusilogingi sesistimu noma iyishiye kulokho okubanjwa umphathi wesevisi, futhi lezi akuzona amakhophi amathathu omsele owodwa. Ukukhetha ngakunye kushintsha ukuthi ubani ungumnikazi wokujikeleza, yimuphi umsebenzisi ongafunda umphumela, nokuthi kwenzekani ngesikhathi sokuqalisa. Nquma izimpendulo ngaphambi kwesigameko, ngoba ngemuva kwalokho uzothola njengefa lokho okulungiselelwe.
Lokho i-daemon eyenza ngempela ngomyalelo
Imiyalelo ayiyona into engabonakali; ngayinye inquma ukuthi inqubo ibhala kuphi imilayezo yayo. log /path ivula lelo fayela, log-append /path ilivula ukuze kunezelwe, futhi syslog inikeza imilayezo kusilogingi sesistimu sendawo ngokusebenzisa isokhethi yaso. Ngaphandle kwayo yonke, okukhiphayo kuya kokukhiphayo okujwayelekile futhi umphathi wesevisi unquma ukuthi kwenzekani ngemuva kwalokho. Funda i-unit esebenzayo nephrofayela ndawonye ngaphambi kokuphetha ngokuthi i-daemon ishaya indiva ukulungiselela kwakho.
Icala lokugcina lujwayelekile ekufakweni kwephakethe, futhi lichaza ukuthi kungani abaphathi ababili bengavumelani ngendawo yelogi. Omunye ufunda i-journal ye-unit, omunye ufunda ifayela i-daemon engakaze ilibhale.
Hlola ukulungiselelwa okusebenzayo, hhayi ifayela elisodiskini. Ukubhala phezu kwe-unit kohlobo lwe-drop-in noma ifayela lemvelo kungashintsha umyalelo osebenzayo ngaphandle kokuthinta iphrofayela oyifundayo.
log iyasika, log-append ayisiki
log isika ifayela elikhona lapho umyalelo uqala ukusebenza, ngakho ukuqalisa kabusha kususa ubufakazi bangaphambi. log-append igcina okukhona futhi inezeza. Akukho kukhetha okujikelezayo noma yini, futhi akukho okuvula ifayela ngokwalo kamuva, yingakho ukujikeleza kudinga ukubambisana.
Uma ukujikeleza kushintsha igama lefayela ngesikhathi i-daemon isabhala kusichazamazwi esidala, ifayela elisha lihlala lingenalutho futhi ukusetshenziswa kwediski kuyaqhubeka kukhuphuka kulelo elishintshiwe igama. Thumela isignali enqubweni ukuthi ivule kabusha, noma jikeleza ngendlela yokukopisha bese usika futhi wamukele isikhathi sokukopisha.
Umusamo, ubunikazi nezimvume ziyingxenye yokwakheka. I-daemon ingase isebenze njengomsebenzisi ongenamandla akhethekile ngemuva kokuqalisa, futhi umusamo owakhiwe yi-root ngesikhathi sokufaka kungenzeka ungabhaleki ngaleso sikhathi. Yilungiselele ngokwephakethe noma ngokwenqubo yokusabalalisa esikhundleni sokulungisa izimvume phakathi kwesigameko.
Umphathi wesevisi ugcina ikhophi yesibili
systemd ibamba okukhiphayo okujwayelekile nephutha elijwayelekile ngokuzenzakalelayo, ngakho i-unit engenakho ukuqondisa okuphumelelayo isinayo ilogi. Ukwengeza umyalelo wefayela kunikeza imisele emibili enesikhathi sokugcina, abafundi nezimpawu zesikhathi ezihlukile.
Lokho akulona iphutha ngokuzenzakalela, kodwa kufanele kube yisinqumo. Gcina irekhodi lokuqalisa ku-journal, ngoba ukwehluleka ngaphambi kokuba ifayela elilungiselelwe libe khona akubonakali kwenye indawo. Bese wenza ifayela libe negunya ezehlakalweni zesimo esizinzile futhi ubhale lokho ku-runbook. Imisele emibili enegunya isho izimpendulo ezimbili kumbuzo ngamunye.
Qinisekisa ukukhetha ngokuhlolwa okwehluleka ngamabomu. Qalisa i-daemon ngesitifiketi esingafundeki bese ubona ukuthi imuphi umsele obhala iphutha.
Ukuningiliza akufani nokuningiliza okusetshenziswayo
Izinga le-verb eliphakeme lengeza imigqa, futhi ngemva kwephuzu elithile imigqa okungekho muntu oyifundayo. Izinga 3 liyisimo esizinzile esinengqondo ekusabalaliseni okuningi, kuyilapho izinga 4 nangaphezulu lifanele uphenyo olunomkhawulo olunombuzo owaziwayo. Ukucindezela ukuphindaphinda kunciphisa umsindo, kodwa akufanele kufihle ukuthi isigameko siphindaphindeka kangaki. Beka izinga ongaligcina, futhi liphakamise kuphela kuphenyo olunegama olunesiphetho.
Gcina ubunikazi be-instance nezimpawu zesikhathi kurekhodi. Ukuxhuma kabusha kubukeka njengokuxhuma kokuqala lapho ifayela lenezwa izinyanga futhi igama le-instance lingekho.
Qaphela okunye okungena kulelo fayela. Okukhiphayo okuqondisiwe kungase kube nombhalo ovela kumaskripthi abiziwe, futhi uhlelo olusizayo oluprenta imvelo yalo lufaka ubufakazi nemikhondo yokhiye kulogi efundekayo. Thatha ukufinyelela kwelogi njengesinqumo sokuphepha ngisho noma i-daemon ngokwayo ingaprenti lutho olubucayi.
Ukujikeleza, ukugcina kanye namasignali aphinda alayishe
Nquma isikhathi sokugcina nomnikazi wediski, futhi usibeke ngaphambi kokuba ivolumu inqume wena. Isignali yokulayisha kabusha akuwona umyalelo wokunakekela ilogi: ukuthumela engalungile kuqalisa kabusha umhubhe futhi kunqamula wonke umsebenzisi. Bhala inqubo yokuvula kabusha eceleni komthetho wokujikeleza ukuze kokubili kungahlukani.
Umphumela kufanele ube yisevisi umsebenzi angayichaza: umsele owodwa ogunyaziwe, isigameko ngasinye sibekwe emjikelezweni wokuphila, nerekhodi elitholakalayo ngaphandle kokuqoqa yonke ifayela elinezimfihlo kusihambisi. Leyo ncazelo iwukuhlolwa kokwamukela kokwakheka, futhi ukuyihlola ngaphambi kwesigameko esilandelayo akubizi.