NMSstate: Kayan aikin Kanfigareshan Sadarwar Sadarwa

Tsarin yanayin Linux yana ba da hanyoyi da yawa na daidaita hanyar sadarwar ciki har da mashahurin nmtui GUI mai amfani. Wannan jagorar yana gabatar da wani kayan aikin saitin cibiyar sadarwa wanda aka sani da NMState

NMState shine mai sarrafa cibiyar sadarwa mai bayyanawa don saita hanyar sadarwa akan rundunonin Linux. Laburare ne wanda ke ba da kayan aikin layin umarni wanda ke sarrafa saitunan cibiyar sadarwa mai masaukin baki. Yana kula da hanyar sadarwar mai masaukin baki ta hanyar API ɗin shela ta arewa. A lokacin rubuta wannan jagorar, NetworkManager daemon shine kawai mai bada tallafi da NMState ke tallafawa.

A cikin wannan jagorar, mun kalli wasu misalai na amfanin kayan aikin NMState. Don wannan jagorar, za mu nuna wannan ta amfani da Fedora Linux.

Gudanar da hanyar sadarwa na iya ɗaukar hanyoyi biyu - Mahimmanci da bayyanawa. A cikin mahimmancin hanya, kuna bayyana fayyace yanayin sadarwar yanar gizo ta hanyar gudanar da umarni akan tashar. An mayar da hankali kan 'yadda'.

Misali, don saukar da hanyar sadarwa ta hanyar amfani da mahimmanci, gudanar da umarni:

$ sudo ifconfig enp0s3 down

A gefe guda, hanyar bayyanawa tana amfani da fayil ɗin YAML don amfani da canje-canje zuwa tsari. Yawancin kayan aikin ƙungiyar DevOps kamar Kubernetes suna amfani da wannan hanyar don tura aikace-aikacen kwasfan fayiloli ta amfani da fayil ɗin YAML.

Wannan hanyar tana ba da abin da aka fi sani da Infrastructure as Code (IaC) a cikin da'irar DevOps. Wannan yana haɓaka aikin sarrafa kansa na saitin cibiyar sadarwa akan mai watsa shiri kuma yana ba da hanya mai sauri kuma mafi aminci don yin sauye-sauye da yawa zuwa cibiyar sadarwa tare da ƙananan kurakurai.

Yanzu, bari mu canza kayan aiki mu ga yadda zaku iya amfani da kayan aikin daidaitawa na NMState don saita hanyoyin sadarwar ku a cikin Linux.

Mataki 1: Shigar NMSstate Networking Config Tool

Za mu sami ƙwallon ƙwallon ta shigar da Nmstate. Da farko, bincika samuwar kunshin daga ma'ajiyar Fedora kamar haka:

$ sudo dnf search nmstate

Daga fitarwa, zamu iya ganin cewa mai sarrafa cibiyar sadarwa yana samuwa akan ma'ajiyar hukuma.

Na gaba, shigar da NMstate kamar haka. Wannan yana aiki akan Fedora 31 da sigogin baya.

$ sudo dnf install nmstate

Umurnin yana shigar da API na mai sarrafa cibiyar sadarwa na NMSstate tare da sauran abubuwan dogaro da Python.

Da zarar an gama shigarwa, tabbatar da an shigar da kunshin nmstate kamar haka.

$ rpm -qi nmstate

Don Linux na tushen RHEL, fara ba da damar ma'ajiyar kwastomomi.

$ sudo dnf copr enable nmstate/nmstate-stable

Sannan shigar da NMstate kamar haka.

$ sudo dnf install nmstate

Duba ƙarin umarni kan yadda ake shigar da NMSstate daga tushen.

Da zarar an shigar, zaku iya duba sigar NMstate da aka shigar kamar haka.

$ nmstatectl version

1.0.2

Amfani da Kayan aikin Kanfigareshan NMSstate a cikin Linux

Tare da shigar NMstate, bari mu gangara zuwa Knitty-gritties na yadda zaku iya amfani da mafi yawan API sarrafa hanyar sadarwa.

Don duba saitunan cibiyar sadarwar ku na yanzu, gudanar da umarni mai zuwa. Anan, shine tsarin haɗin haɗin enp0s3 na ku.

$ nmstatectl show enp0s3

An raba abin da aka fitar zuwa sassa daban-daban guda 4:

dns-resolver: Wannan sashe yana ƙunshe da saitunan uwar garken suna don keɓantaccen mahallin.
dokokin hanya: Wannan yana ƙunshe da ƙa'idodin tuƙi.
hanyoyi: Wannan ya haɗa da hanyoyi masu ƙarfi da kuma a tsaye.
Interfaces: Wannan sashe yana ƙayyadad da saitunan ipv4 da ipv6.

Canza Saitin hanyar sadarwa a cikin Linux

Kuna iya amfani da kayan aikin sanyi na NMState don saita rundunonin ku zuwa yanayin da ake so ta amfani da hanyoyin mu'amala ko tushen fayil.

Ma'amala: Wannan yana gyara hanyar sadarwa ta hanyar sadarwa ta amfani da umarnin gyara nmstatectl. Wannan umarni yana buɗe editan rubutu wanda aka ayyana ta hanyar canjin yanayi EDITOR. Da zarar an adana canje-canje, NMState yana aiwatar da sabon tsarin nan da nan sai dai idan an gano kurakuran haɗin gwiwa.
Tsashen Fayil: A yanayin tushen fayil, ana amfani da daidaitawar mu'amala ta amfani da fayil ɗin YAML ko JSON ta amfani da umarnin nmstatectl.

Yanzu bari mu ƙazantar hannayenmu kuma duba yadda zaku iya canza tsarin hanyar sadarwa ta amfani da NMState.

Tsarin mu na Fedora yana da hanyoyin sadarwa guda biyu masu aiki tare da tsari mai zuwa:

$ ip -br -4 a

lo               UNKNOWN        127.0.0.1/8 
enp0s3           UP             192.168.2.104/24 
enp0s8           UP             192.168.2.103/24

Za mu yi amfani da yanayin ma'amala don canza MTU (Mafi girman Rukunin watsawa) na hanyar sadarwa na enp0s3. Ta hanyar tsoho, an saita wannan zuwa 1500 kamar yadda aka nuna.

$ ifconfig

Za mu canza wannan zuwa 4000. Za mu yi haka ta amfani da nmstatectl edit umurnin kamar haka.

$ sudo nmstatectl edit enp0s3

Wannan yana buɗe saitin a cikin editan rubutu. Ga yanayin mu, yana buɗewa a editan vim. Na gaba, gungura har zuwa ƙasa kuma nemo ma'aunin mtu. Za mu canza darajar zuwa 4000, kamar yadda za mu gyara fayil a vim. Sa'an nan za mu ajiye canje-canje.

Lokacin da kuka ajiyewa da fita fayil ɗin, zaku ga wasu abubuwan da aka ruɗe akan tashar kamar yadda NMstate ke adana canje-canje. Ba a buƙatar shiga tsakani don haka, ku zauna shiru.

Yanzu bari mu tabbatar da cewa an yi canjin.

$ ifconfig

Daga fitowar tasha, zamu iya ganin cewa mun sami nasarar canza MTU zuwa 4000 daga ƙimar 1500 tsoho.

Bari yanzu mu gyara tsarin saitin ta amfani da yanayin tushen fayil. A cikin wannan misalin, za mu kashe IPv6 don mahaɗin cibiyar sadarwar enp0s8. Mataki na farko shine ƙirƙirar fayil ɗin YAML wanda zai ƙayyadad da yanayin da ake so na cibiyar sadarwar enp0s8.

$ sudo nmstatectl show enp0s8 > enp0s8.yml

Na gaba, za mu gyara fayil ɗin YAML kamar haka.

$ sudo vim enp0s8.yml

Gungura ƙasa zuwa sashin ipv6. Don musaki IPv6, saita sigar da aka kunna zuwa ƙarya kuma share layin da aka buga.

Ajiye tsarin sai a yi amfani da sabuwar jiha ta amfani da fayil ɗin YAML kamar haka.

$ sudo nmstatectl apply enp0s8.yml

Yanzu gudanar da umarnin da aka nuna don tabbatar da cewa an kashe IPv6. Fitowar da aka nuna yana nuna cewa IPv6 don mahaɗin cibiyar sadarwa na enp0s8 ba komai bane, yana nuna cewa mun sami nasarar kashe IPv6 akan ƙirar.

$ ip -br a

Wani ingantaccen aiki mai amfani wanda NMstate ke bayarwa shine ikon saita yanayin sadarwar da ake so na ɗan lokaci. Da zarar kun gamsu da tsarin, za ku iya ci gaba kuma ku canza canje-canje na dindindin. In ba haka ba, canje-canjen da aka yi za su koma zuwa saitunan farko da zarar lokacin ƙarewar ya ƙare. Matsakaicin lokacin tsoho shine 60 seconds.

Don nuna wannan, za mu saita IP na ɗan lokaci akan mahallin enp0s3 kuma mu kashe DHCP. Har yanzu, samun dama ga fayil ɗin ta amfani da editan rubutu.

$ sudo vim enp0s3.yml

Gungura zuwa sashin iPV4. Ƙayyade IP na tsaye - a cikin yanayinmu 192.168.2.150 kuma share layin da aka buga-ta. Bugu da kari, tabbatar da saita sigar dhcp zuwa karya.

Ajiye fayil ɗin kuma aiwatar da canje-canje na ɗan lokaci kamar haka.

$ sudo nmstatectl apply --no-commit --timeout 20 enp0s3.yml

Zaɓin --no-commit yana aiwatar da canje-canje na ɗan lokaci na ɗan lokaci da zaɓin --lokaci-lokaci zaɓi wanda, a cikin wannan misalin, shine sakan 20.

Don tabbatar da aikace-aikacen wucin gadi na canje-canje, za mu bincika saitin IP a cikin tazarar lokaci na 20 seconds.

$ ip -br a

Daga fitarwa, zaku iya ganin cewa saitin IP ɗin ke dubawa ya koma DHCP bayan tazarar lokaci na 20 seconds. Adireshin IP ɗin ya koma 192.168.2.104 daga IP ɗin da aka tsara a baya wanda shine 192.168.2.150.

Gaskiya, kayan aikin NMState kayan aiki ne mai dacewa don daidaita mu'amalar hanyar sadarwar ku. Kayan aiki ne na bayyanawa wanda ke amfani da yanayin daidaitawar da ake so na mahallin mai watsa shiri ta amfani da NetworkManager API.

Ana iya bayyana jihar cikin sauƙi ta amfani da ko dai hanyar haɗin gwiwa ko ta amfani da hanyar tushen fayil wanda ke amfani da fayil ɗin YAML da aka riga aka tsara. Wannan yana haɓaka aiki da kai na ayyukan daidaitawa da rage kurakurai yayin daidaitawa.