[opensuse-factory] openvpn broken after systemd support
Hi, after updating openvpn in factory, it doesn't work at all. You install openvpn.service, but use %i in the service file. How was this supposed to work? You need openvpn@.service, IIUC. Did you test it at all? I'm talking about this request: https://build.opensuse.org/request/show/159617 thanks, -- js suse labs -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 04/04/2013 07:49 AM, Jiri Slaby wrote:
Hi,
after updating openvpn in factory, it doesn't work at all. You install openvpn.service, but use %i in the service file. How was this supposed to work?
It does not work, because the naming is broken You need openvpn@.service, IIUC. Did you test it at all? Yes, here is a better one.. cat openvpn@.service [Unit] Description=OpenVPN Robust And Highly Flexible Tunneling Application On %I After=network.target [Service] ExecStart=/usr/sbin/openvpn --suppress-timestamps --fast-io --mlock --cd /etc/openvpn/ --config %i.conf ExecReload=/bin/kill -HUP $MAINPID PrivateTmp=true [Install] WantedBy=multi-user.target systemctl (enable|start|disable) openvpn@yourconfigfilebasename.service -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Hello, Am Donnerstag, 4. April 2013 schrieb Cristian Rodríguez:
On 04/04/2013 07:49 AM, Jiri Slaby wrote:
after updating openvpn in factory, it doesn't work at all. You install openvpn.service, but use %i in the service file. How was this supposed to work?
It does not work, because the naming is broken
You need openvpn@.service, IIUC. Did you test it at all?
Yes, here is a better one..
Did someone actually fix this in the package? I'm CC'ing Marius (bugowner of openVPN), and will leave the service file as a fullquote below.
cat openvpn@.service
[Unit] Description=OpenVPN Robust And Highly Flexible Tunneling Application On %I After=network.target
[Service] ExecStart=/usr/sbin/openvpn --suppress-timestamps --fast-io --mlock --cd /etc/openvpn/ --config %i.conf ExecReload=/bin/kill -HUP $MAINPID PrivateTmp=true
[Install] WantedBy=multi-user.target
systemctl (enable|start|disable) openvpn@yourconfigfilebasename.service
Regards, Christian Boltz -- Aber das ist dann ungefähr so filigran wie mit 'nem Rambock die Haustür aufzumachen, nur weil man den Schlüssel tief im Rucksack verbuddelt hat. [Peer Heinlein in postfixbuch-users] -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Am 22.04.2013 22:09, schrieb Christian Boltz:
Hello,
Am Donnerstag, 4. April 2013 schrieb Cristian Rodríguez:
On 04/04/2013 07:49 AM, Jiri Slaby wrote:
after updating openvpn in factory, it doesn't work at all. You install openvpn.service, but use %i in the service file. How was this supposed to work?
It does not work, because the naming is broken
You need openvpn@.service, IIUC. Did you test it at all?
Yes, here is a better one..
Did someone actually fix this in the package?
I'm CC'ing Marius (bugowner of openVPN), and will leave the service file as a fullquote below.
cat openvpn@.service
[Unit] Description=OpenVPN Robust And Highly Flexible Tunneling Application On %I After=network.target
[Service] ExecStart=/usr/sbin/openvpn --suppress-timestamps --fast-io --mlock --cd /etc/openvpn/ --config %i.conf ExecReload=/bin/kill -HUP $MAINPID PrivateTmp=true
[Install] WantedBy=multi-user.target
systemctl (enable|start|disable) openvpn@yourconfigfilebasename.service
Yes, it looks better. I think --suppress-timestamps makes sense,
--mlock should be fine, but --fast-io is --proto udp specific
and experimental.
I'd let the user set the --fast-io option in the config file...
[Service]
ExecStart=/usr/sbin/openvpn --suppress-timestamps --mlock --cd
/etc/openvpn/ --config %i.conf
ExecReload=/bin/kill -HUP $MAINPID
PrivateTmp=true
Fixed in my local checkout & testing it.
Gruesse / Regards,
Marius Tomaschewski
Am 23.04.2013 12:50, schrieb Marius Tomaschewski:
Am 22.04.2013 22:09, schrieb Christian Boltz:
Hello,
Am Donnerstag, 4. April 2013 schrieb Cristian Rodríguez:
On 04/04/2013 07:49 AM, Jiri Slaby wrote:
after updating openvpn in factory, it doesn't work at all. You install openvpn.service, but use %i in the service file. How was this supposed to work?
It does not work, because the naming is broken
You need openvpn@.service, IIUC. Did you test it at all?
Yes, here is a better one..
Did someone actually fix this in the package?
I'm CC'ing Marius (bugowner of openVPN), and will leave the service file as a fullquote below.
cat openvpn@.service
[Unit] Description=OpenVPN Robust And Highly Flexible Tunneling Application On %I After=network.target
[Service] ExecStart=/usr/sbin/openvpn --suppress-timestamps --fast-io --mlock --cd /etc/openvpn/ --config %i.conf ExecReload=/bin/kill -HUP $MAINPID PrivateTmp=true
[Install] WantedBy=multi-user.target
systemctl (enable|start|disable) openvpn@yourconfigfilebasename.service
OK, should be fixed in network:vpn and factory request 173037.
A "systemctl (start|stop) openvpn.target" deals with all instances.
I didn't switched to use non-forking mode as this causes ugly wall
broadcasts and I don't get password prompt even I restart manually.
In forking mode it works better:
exodus2:~ # systemctl restart openvpn.target
Enter Auth Username: **
Enter Auth Password: ********
exodus2:~ #
Gruesse / Regards,
Marius Tomaschewski
On 04/04/2013 07:49 AM, Jiri Slaby wrote:
Hi,
after updating openvpn in factory, it doesn't work at all. You install openvpn.service, but use %i in the service file. How was this supposed to work? You need openvpn@.service, IIUC. Did you test it at all?
I'm talking about this request: https://build.opensuse.org/request/show/159617
thanks,
also, /usr/lib/tmpfiles.d/openvpn.conf is broken on this update, there is no group name "openvpn".. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (4)
-
Christian Boltz
-
Cristian Rodríguez
-
Jiri Slaby
-
Marius Tomaschewski