I-WireGuard ayikwazi ukwakha isixhumanisi sayo: i-kernel noma imvume?
Ukwakhiwa kwesixhumanisi kuyahluleka ngaphambi kokuba noma yimuphi uzakwabo athumele ukuxhawula. Funda iphutha ukuze uhlukanise imojuli engekho nomngcele wemvume noma umnikazi wesixhumanisi okhona.
I-WireGuard ihluleka ukwakha isixhumanisi sayo, ngakho akukho divayisi okufanele ilungiswe, akukho khiye okufanele ishintshwe futhi akukho kuxhawula okufanele kulungiswe. Ukwehluleka kuhlala ngokuphelele emshinini wendawo, futhi umbhalo wephutha usho ukuthi iyiphi ingxenye yesitaki sendawo enqabile. Ukukufunda kahle kushesha ukwedlula ukufaka kabusha ukulungiselela kozakwabo. Izendlalelo zingahlukaniswa, futhi umyalezo usho isendlalelo esenqabile.
Iphutha lenzeka ngaphambi kokuba noma ubani uzakwabo akhulume
Ukwakha isixhumanisi kuyisicelo esisodwa se-netlink esiya ku-kernel sokufuna idivayisi yohlobo lwe-wireguard. I-kernel inayo noma ayinayo idrayiva eqonda lolo hlobo, futhi impendulo ibuya ngokushesha. Awekho amaphakethe ashiya umshini kulesi sinyathelo, yingakho amakheli ezindawo zokugcina nokhiye besiphakamiso abakwazi ukuba yimbangela.
Lolo hlelo lubalulekile ekuxilongeni. Uma umyalo ungakaze wakhe idivayisi, inkinga ayikwazi ukuba ukhiye womphakathi ongalungile noma imbobo ye-UDP evinjiwe. Lungisa kuqala indlela yokwakha yendawo bese ubheka ngaphandle ngemuva kwalokho.
Yikuphi ukuqaliswa okufanele kube ngumnikazi wedivayisi
Ukuqaliswa okubili kungaphendula leso sicelo. Imojuli engaphakathi kwe-kernel ibhalisa uhlobo lwedivayisi lwe-wireguard, futhi ukuqaliswa endaweni yomsebenzisi njenge-wireguard-go kunikeza isixhumanisi esifanayo ngendlela ehlukile. Uma imojuli ingekho, i-kernel inqaba isicelo ngephutha ledivayisi engasekelwe, futhi isisombululo siwukulayisha imojuli noma ukuqondisa amathuluzi ekuqalisweni endaweni yomsebenzisi.
Hlola ukuthi yini ngempela ekhona ngaphambi kokukhetha phakathi kwazo. Umyalo wokuqala ukhombisa ukuthi imojuli ilayishiwe yini futhi owesibili ubuza i-kernel ngqo:
lsmod | grep wireguard
ip link add wgtest0 type wireguardUmyalo wesibili ukuphindaphinda okuncane kakhulu okungenzeka: ucela idivayisi futhi akukho okunye. Uma ihluleka ngomlayezo wohlobo olungasekelwe, ingxenye engekho ukuqaliswa, hhayi ifayela lakho lokulungiselela.
| Error text | What refused | Next step |
|---|---|---|
| Unknown device type or operation not supported | The kernel has no wireguard driver | Load the module or use the userspace implementation |
| Operation not permitted | Missing privilege | Use the service context or grant the capability |
| File exists | The name is already in use | Inspect the owner before touching it |
| No such device in a container | No tunnel device or capability | Add the device and NET_ADMIN to the container |
Amalungelo nemingcele ye-container
Ukwakha nokulungiselela idivayisi yenethiwekhi kudinga ilungelo, kungaba nge-root noma ngekhono lokuphatha inethiwekhi. Isikhathi somsebenzisi ojwayelekile asikwazi ukukwenza lokho, futhi lowo mkhawulo uwumklamo ngokwawo, hhayi isithiyo okufanele sigwenywe ngokuqalisa isifaki ongasihlolisisanga.
Ngaphakathi kwe-container umkhawulo uyaphindeka. I-container idinga ukufinyelela idivayisi yomhubhe kanye nekhono lokuyilungiselela, futhi amafulegi akunikezayo afana nalawo asetshenziswa yi-container ye-VPN ku-Linux. Isivakashi esikhawulelwe esingakwazi ukuphequlula iwebhu ngokwejwayelekile asikwazi ukwakha isixhumanisi, ngoba ukuphequlula akudingi likhono elinjalo. Nikeza ikhono enkonzweni eliyidingayo, hhayi kuyo yonke isikhathi kumsingathi.
Xazulula ukungqubuzana kwegama, bese uzama futhi
Isixhumanisi esivele sikhona akusiyo ngokuzenzakalela insalela. Omunye umphathi angaba ngumnikazi wegama futhi abe elisebenzisa njengamanje, ngakho sihlole ngaphambi kokususa noma yini:
ip link show wg0
sudo wg show wg0Uma umnikazi eyisevisi esebenzayo, lungiselela leyo sevisi esikhundleni sokwakha idivayisi yesibili. Uma sikhulile ngempela, sisuse ngethuluzi esisakhe, bese uphakamisa isixhumanisi ngeklayenti noma ngeyunithi ebhaliwe ukuze ukulungiselela nedivayisi kuhlale kuhambisana.
Uma ukwakha kuphumelela, ukwehluleka okulandelayo kungokwesigaba sakamuva, futhi iyunithi ebika ukwehluleka ngemuva kokuba idivayisi ikhona iyinkinga ehlukile kunedivayisi engakaze yakhiwe. Hlukanisa kokubili ngaphambi kokushintsha imvume futhi.