Ku xidh adeegga systemd ee Squid booska magaca bixitaanka ee jira

Boos magac oo horey ugu diyaar ah /run/netns/proxy-egress dhexdiisa, ku dar tan drop-in-ka adeegga Squid ee jira:

[Service]
NetworkNamespacePath=/run/netns/proxy-egress

Adeegga ka dambeeya qaybta abuurta booska magaca. Dejintan ma abuurto booska magaca ama isku-xirkiisa, cinwaannadiisa ama waddooyinkiisa.

Labada socket ee dhegaysiga iyo kan bixitaankaba hadda halkaas ayay ku yaalliin. Macaamiisha waxay u baahan yihiin waddo loo maro dhegaystahaas iyo siyaasaddiisa gelitaanka ee la hayo; loopback-ka martigeliyaha si otomaatig ah ma noqdo loopback-ka booska magaca.

Faylasha resolver waxay u baahan yihiin feejignaan gaar ah. Si ka duwan ip netns exec, dejintan shabakaddu ma mount-garayso faylasha /etc/netns/NAME waddooyinkooda caadiga ah. Marka hirgelintu u baahato faylka resolver-ka booska magaceeda:

BindReadOnlyPaths=/etc/netns/proxy-egress/resolv.conf:/etc/resolv.conf

Isticmaal cinwaanno resolver laga gaari karo booska magacaas oo ku dar sharciyada sandbox/nidaamka faylasha ee jira. In kaliya cinwaanka isha bixitaanka ee Squid la xidho ma geliso habsocodka macnahan.