Am Mittwoch, 14. März 2018, 18:19:55 CET schrieb Andrei Borzenkov:
14.03.2018 19:20, Markus Feilner пишет:
Can it be that Systemd caches a start file and needs a daemon-reload when I change it even if the correspondig service is not running? That sounds weird. I wonder if this is rather a systemd topic than a openvpn one.
Did that help?
Not sure if this was a question, but - systemd does not *re*load unit definition unless explicitly told so by "systemctl daemon-reload". OTOH systemd attempts aggressive garbage collection - if unit becomes inactive and is not referenced by other unit, its definition is purged and so loaded again next time. Also systemd performs lazy loading - unit definition is not loaded until needed. So the answer to the above questions is "it depends" :) In general it is more safe to explicitly call "systemctl daemon-reload" after changing unit definition file.
Nice. I never heard of that. Thanks a lot for explaining. Thus that sounds more like a hidden feature/gem of systemd rather than an openvpn or PKI flaw. Probably a classical OSI layer 8 bug. Sorry... :-) However, I think the openvpn people should discuss whether the --ask-pass parameter makes sense in the systemd unit file. P.S.: I may take your explanation in an update of my openvpn book. Might help someone... :-) -- Markus Feilner Team Lead Documentation P.S.: I moved - new home address: Wöhrdstraße 10, 93059 Regensburg - - - _This incident will be documented._ - - - +49 173 5876 838 (also via Signal), privat: +49 170 302 7092 mfeilner@suse.[com|de] http://www.suse.com G+: https://plus.google.com/+MarkusFeilner Xing: http://www.xing.com/profile/Markus_Feilner LinkedIn: https://www.linkedin.com/in/markusfeilner #mfeilner: Jabber, Skype, Twitter openSUSE: http://www.opensuse.org - - - SUSE Linux GmbH GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)