Imoduli ye-WireGuard ayilayishi ngemva kokubuyekezwa kwe-kernel? Hlola lokhu
Imoduli yangaphandle kufanele yakhiwe ibhekene ne-kernel ezoyilayisha, hhayi iphakethe lamakhanda elisha kudiski. Hlola inguqulo esebenzayo ngaphambi kokwakha kabusha.
Umhubhe wakho wawusebenza izolo, umshini waqalwa kabusha ngemva kokubuyekezwa, futhi manje isixhumi asikhuphuki. Kusistimu lapho i-WireGuard yakhiwa khona njengemoduli yangaphandle, imbangela evamile ukuthi imoduli ekudiski ingeyenguqulo ye-kernel ehlukile kunaleya esebenza manje. Amakhanda anegama elifanayo kumshini ofanayo awafakazi lutho mayelana nalokho kufana. Uchungechunge lwenguqulo kuphela olunquma lokho.
I-kernel esebenzayo noma efakiwe
Ukubuyekezwa kufaka iphakethe le-kernel elisha futhi kushiye elidala kudiski kuze kuqalwe kabusha umshini. Ngemva kokuqalwa kabusha inguqulo esebenzayo iyashintsha, futhi noma iyiphi imoduli eyakhelwe eyedlule iyaphelelwa futhi nakuba amafayela ayo esekhona. Leyo gebe ichaza umbiko ojwayelekile womshini owawulungile ngaphambi kokuqalwa kabusha futhi wonakala ngemva kwawo, ngaphandle kwanoma yiluphi ushintsho lokucushwa phakathi. Iphinde ichaze ukuthi kungani ukufaka kabusha amakhanda kwezinye izikhathi kubonakala kuxazulula inkinga kanti kwezinye akuxazululi.
Iphakethe lamakhanda olifakayo lingase lihambisane nephakethe le-kernel elisha kakhulu esikhundleni se-kernel eyaqalwa ngempela, futhi akukho lutho egameni lephakethe oluhlukanisa lezo zimo; uchungechunge lwenguqulo kuphela olwenza lokho. Hlola okusebenzayo ngaphambi kokuhlola okufakiwe.
Ukuhlola okuthathu ngaphambi kokwakha kabusha
Ukuhlola kokuqala ukuthi iyiphi i-kernel esebenzayo. Kwesibili ukuthi ikhona yini imoduli yaleyo nguqulo futhi ingatholakala yini. Kwesithathu ukuthi i-kernel isivele iyilayishile yini. Umbuzo wesine, ukuthi isixhumi singakhiwa yini, uhlola amalungelo hhayi imoduli, ngakho indawo yawo ingemva kokwakha kabusha hhayi kulolu hlu.
Imiyalo engezansi iphendula emithathu yokuqala ngaphandle kokushintsha lutho. Funda wonke umphumela ngaphambi kokuqhubeka, ngoba impendulo ngayinye isusa ukulungisa okuhlukile.
uname -r
ls -l /lib/modules/$(uname -r)/build
modinfo wireguard
lsmod | grep wireguard
Uma umugqa wesibili ubika ukuthi indlela ayikho, indawo yokwakha ye-kernel esebenzayo ayikho futhi akukho osikuhlanganisayo okuzohambisana nayo. Uma modinfo ihluleka ngenkathi indlela ikhona, imoduli ingase ingakafakwa nhlobo, lokhu kuvamile kuma-kernel anikeza ukusetshenziswa ngaphakathi kwesihlahla. Uma modinfo iphumelela futhi lsmod ingabonisi lutho, imoduli ikhona kodwa ayilayishiwe, lokhu kuyinkinga yesikhathi sokulayisha hhayi eyokwakha. Umphumela ngamunye ukuthumela kwenye indawo, ngakho ukufunda kubaluleke kakhulu kunemiyalo.
Yakha ibhekene nenguqulo esebenzayo
Imoduli yangaphandle ihlanganiswa ibhekene nesihlahla se-kernel esilungisiwe, futhi umhlahlandlela we-kernel wamawoduli angaphandle uchaza ukusetshenziswa kwedokhumenti yokwakha engeye-kernel esebenzayo hhayi leyo enenombolo yenguqulo ephezulu kakhulu. Leyo dokhumenti yokwakha iyisixhumanisi esingokomfanekiso esigcinwa iphakethe le-kernel, ngakho sikhomba esihlahleni senguqulo esaqalwa manje. Ukungaqondanga yikho kanye iphuzu: kususa ukukhetha obekuzokwenza ngokungalungile. Ukusiqamba ngokucacile kwenza umgomo ungabi nokungaqondakali.
Imininingwane eyodwa ibalulekile uma isihlahla silungisiwe kuphela hhayi ukwakhiwe ngokugcwele. Umgomo wokulungisa awukhiqizi ifayela lenguqulo yezimpawu edingwa ezinye izakhiwo zangaphandle, ngakho isihlahla esigcwele amakhanda akusona ngokuzenzakalela indawo yokwakha ephelele. Uma ukwakha kuhluleka ngenxa yezimpawu ezingekho, lelo fayela iyindawo yokuqala okufanele ibhekwe.
sudo make -C /lib/modules/$(uname -r)/build M=$(pwd) modules
sudo make -C /lib/modules/$(uname -r)/build M=$(pwd) modules_install
sudo depmod -a
Lapho amakhanda aphakethiwe esala emuva
Kuzabelo kanye namakhompyutha ebhodi elilodwa ahlanganisa ama-kernel awo, amakhanda angasala emuva kwenguqulo ngezinsuku noma amasonto. Iphakethe lamakhanda lingase lichanekile egameni futhi lidala kakhulu kokuqukethwe, okukhiqiza ukwakha okuhlanganisayo bese kwehluleka ngesikhathi sokulayisha hhayi ngesikhathi sokuhlanganisa. Ukuxuba imithombo kwenza kube kubi kakhulu: i-kernel yesabelo elinamakhanda avela kusitoreji sengxenye yesithathu, noma i-kernel yomkhiqizi enamakhanda avamile, ingahlanganiswa ngokuhlanzekile futhi nokho inqatshwe i-kernel esebenzayo ngoba ukucushwa kuhlukile. Izinombolo zenguqulo zodwa azikuxazululi lokho.
Uma umshini ulandela isiteshi se-kernel sokuhlola, nxepha ngokuqwashile ukuthi uhlala lapho ngezinto zokwakha ezihambisanayo noma ubuyela eqoqweni lamaphakethe asekelwayo. Ukuphinda ukubuyekezwa nokuthemba ukuthi izingxenye zizohambisana akulona icebo, ngoba ukungahambisani okufanayo kuphinda kwenzeke njalo.
Qinisekisa isixhumi ngemva kokwakha kabusha
Ngemva kokufakwa okuphumelelayo, ukwakha isixhumi ukuhlolwa okubalulekile, kulandele ukufunda ukuthi i-kernel ilayishe ini ngempela kanye nokuthi ilogi ithini uma inqabile. Imoduli elayishwayo nesixhumi esingakhiwa kuyizinto ezehlukene zokwehluleka ezinembangela ezehlukene. Imiyalo emithathu engezansi iyahlukanisa.
sudo ip link add wg9 type wireguard
lsmod | grep wireguard
sudo dmesg | tail -5
Uma imoduli inqaba ukulayishwa, ilogi ye-kernel isho isizathu, futhi ukungahambisani kwenguqulo kungenye yezinto ezingenzeka kuphela. Funda lowo mugqa ngaphambi kokwakha kabusha, ngoba ukwakha kwesibili okufanayo kuchitha leyo mizuzu eyishumi efanayo futhi kunikeza ukunqaba okufanayo. Bese ususa isixhumi sesikhashana ukuze ukuhlolwa okulandelayo kuqale endaweni emsulwa.