Ukufinyelela kwe-UNC kumakontena e-Windows: igama kuqala, ubunikazi kamuva

Ikontena le-Windows elidinga ukwabelana ngakolunye uhlangothi lomhubhe wakho lehluleka ngezindlela ezimbili ezizimele, futhi i-Explorer kumsingathi ayibonisi noma yikuphi kwalokhu. Ikontena linendawo yalo yokugcina yenethiwekhi kanye nobunikazi balo benqubo. Igama elixazululwa kudeskithophu kanye neseshini eyamukelwa iseva yamafayela lapho kuchaza ideskithophu, hhayi umthwalo womsebenzi.

I-Explorer kumsingathi akubona ubufakazi

Ukuvula ukwabelana kumsingathi kusebenzisa iklayenti le-DNS lomsingathi, ithebula lomzila lomsingathi kanye ne-akhawunti engene ngayo kumsingathi. Inqubo yekontena ayitholi lutho kwalokhu ngokungaqondile, ngisho nalapho ikontena lisebenza emshinini ofanayo futhi iklayenti le-VPN lisebenza lapho futhi. Umngcele wokuqala umzila wenethiwekhi: ingabe ikontena lingaxazulula igama, futhi lingavula iseshini ye-TCP eya echwebeni le-SMB. Owesibili ubunikazi: ingabe iseva yamafayela yamukela lokho okwethulwa yikontena, nezimvume ezidingwa umthwalo womsebenzi.

Ukukubheka njengenkinga eyodwa kukhiqiza umjikelezo ojwayelekile wokwandisa imithetho yodonga lomlilo ukuze kulungiswe lokho empeleni okuyimpendulo yokwenqatshwa kokufinyelela evela ekwabelaneni.

Landela isicelo sekontena ngokwalo

Inethiwekhi yamakontena e-Windows ilawulwa yi-Host Networking Service, edala izindawo zokugcina ezinendawo yazo yamagama yenethiwekhi. Imodi oyikhethile inquma ukuthi indawo yokugcina iyahunyushwa, ixhunyaniswa ngebhuloho, noma ixhunywe kunethiwekhi eyabiwe nomsingathi. Leso sinqumo sishintsha izinto ezimbili ngasikhathi sinye: lokho ikontena elingakuxazulula, kanye nekheli lomthombo elibonwa yiseva yamafayela.

Qinisekisa lokho ikontena ngokwalo elikubonayo ngaphambi kokushintsha noma yini. Igama elixazululwa ngaphandle lingehluleka ngaphakathi, ngoba ukulungiselelwa kwe-DNS kwekontena akusikho okwomsingathi, futhi indawo yokugcina ehumushiwe ingethula umthombo ongawulindelanga imithetho yeseva yamafayela.

docker exec -it app powershell -Command "Resolve-DnsName files.corp.example"
docker exec -it app powershell -Command "Test-NetConnection files.corp.example -Port 445"
docker exec -it app powershell -Command "Get-NetIPConfiguration"

Uma ukuxazulula kwehluleka, lungisa i-DNS ekulungiselelweni kwenethiwekhi esikhundleni sokushintsha ikheli. Ukushintsha igama nge-IP kungashintsha ukuziphatha kokuqinisekisa kanye nobunikazi beseva, okwenza inkinga eyodwa ibe zimbili. Inqubomgomo yeklayenti le-VPN uqobo iyinto elandelayo okufanele ihlolwe, ngoba ingase ibheke ngendlela ehlukile izinqubo zomsingathi kanye nokuhamba kwedatha okuvela ekonteni.

Ubunikazi yisinqumo esihlukile

Incwadi yedrayivu ebekwe umsebenzisi osebenzisanayo ayiyona indlela yokuxhumana yesicelo. Ikhona kuseshini eyodwa yokungena, futhi inqubo yekontena ayiyona ingxenye yayo. Sebenzisa umzila we-UNC futhi unikeze umthwalo womsebenzi ubunikazi obusekelwa imodeli yokusabalalisa. Lapho isizinda sikusekela, i-akhawunti yesevisi elawulwa yiqembu (gMSA) inikeza ubunikazi obulawulwayo ngokucaciswa kobufakazi.

Umhlahlandlela we-gMSA wamakontena we-Microsoft uchaza lokho kuhleleka kokucaciswa kobufakazi kanye nezimfuneko zako zangaphambili, ezihlanganisa ubulungu besizinda kanye nomsingathi okwazi ukuthola ubufakazi. I-akhawunti, ukuthola, ubunikazi benqubo ngaphakathi kwekontena kanye nezimvume zokwabelana konke kufanele kuhambisane. Ukungena nge-VPN akusibo lobo bunikazi, futhi ukubhaka iphasiwedi esithombeni ukuze kuphindwe kwenziwe iseshini yomsebenzisi womsingathi kwakha ukuchayeka okungapheli.

Gcina isigaba esihlulekayo sibonakala

Ukwehluleka kokuxazulula, ukunqatshwa kokuxhumana kanye nokunqatshwa kokufinyelela kudinga ubufakazi obuhlukile. Lezi yimibuzo ye-DNS, umbuzo womzila noma wokuhlunga, kanye nombuzo wokuqinisekisa noma wezimvume ngokulandelana. Funda impendulo eyatholwa yikontena hhayi iphutha elijwayelekile lesicelo.

Hlola ngobunikazi bomthwalo womsebenzi uqobo futhi uhlole nokunqatshwa.

Hlela ukuxhumana kabusha

Imizila ye-VPN iyawa. Lapho umhubhe ubuya, indawo yokugcina ingabuya nekheli elihumushiwe elihlukile, futhi iseshini ye-SMB ekhona ingase ibe ifile ngaphandle kokuthi isicelo sibone. Phatha lokho esicelweni: sungula kabusha umzila nobunikazi, phinda umsebenzi, futhi uvumelanise umsebenzi wefayela onomphumela ongaziwa esikhundleni sokucabanga ukuthi akukho okwenzekile.

Bhala imodi yenethiwekhi, umthombo we-DNS kanye nokuhleleka kobunikazi kumanothi okusabalalisa. Ukwehluleka okulandelayo kuzoba mayelana nala maqiniso amathathu.