Xhumanisa isevisi ye-systemd ye-Squid ne-namespace yokuphuma ekhona

Setha i-NetworkNamespacePath ngaphambi kokuqala futhi unikeze ukuxhumana kwefayela le-resolver elihlukile lapho leyo namespace iyidinga.

Kwi-namespace esivele ikhona ku-/run/netns/proxy-egress, hlanganisa lokhu ku-drop-in yesevisi ye-Squid ekhona:

[Service]
NetworkNamespacePath=/run/netns/proxy-egress

Beka isevisi ngemuva kwengxenye eyakha i-namespace. Lesi silungiselelo asiyakhi i-namespace noma izixhumanisi zayo, amakheli noma imizila yayo.

Womabili amasokhethi okulalela nawokuphuma asekhona lapho manje. Amaklayenti adinga indlela eya kuleso silaleli kanye nenqubomgomo yokufinyelela egciniwe yaso; i-loopback yomsingathi ayiyona ngokuzenzekelayo i-loopback ye-namespace.

Amafayela e-resolver adinga ukunakwa okuhlukile. Ngokungafani ne-ip netns exec, lesi silungiselelo senethiwekhi asifaki amafayela e-/etc/netns/NAME phezu kwezindlela zawo ezijwayelekile. Lapho ukusetshenziswa kudinga ifayela le-resolver le-namespace yalo:

BindReadOnlyPaths=/etc/netns/proxy-egress/resolv.conf:/etc/resolv.conf

Sebenzisa amakheli e-resolver afinyeleleka kuleyo namespace bese uwahlanganisa nemithetho ekhona ye-sandbox/isistimu yamafayela. Ukubopha kuphela ikheli lomthombo ophumayo le-Squid akubeki inqubo kulesi simo.

Izihloko ezihlobene