[opensuse-factory] openvpn broken after systemd support
Hi, after updating openvpn in factory, it doesn't work at all. You install openvpn.service, but use %i in the service file. How was this supposed to work? You need openvpn@.service, IIUC. Did you test it at all? I'm talking about this request: https://build.opensuse.org/request/show/159617 thanks, -- js suse labs -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 04/04/2013 07:49 AM, Jiri Slaby wrote:
Hi,
after updating openvpn in factory, it doesn't work at all. You install openvpn.service, but use %i in the service file. How was this supposed to work?
It does not work, because the naming is broken You need openvpn@.service, IIUC. Did you test it at all? Yes, here is a better one.. cat openvpn@.service [Unit] Description=OpenVPN Robust And Highly Flexible Tunneling Application On %I After=network.target [Service] ExecStart=/usr/sbin/openvpn --suppress-timestamps --fast-io --mlock --cd /etc/openvpn/ --config %i.conf ExecReload=/bin/kill -HUP $MAINPID PrivateTmp=true [Install] WantedBy=multi-user.target systemctl (enable|start|disable) openvpn@yourconfigfilebasename.service -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Hello, Am Donnerstag, 4. April 2013 schrieb Cristian Rodríguez:
On 04/04/2013 07:49 AM, Jiri Slaby wrote:
after updating openvpn in factory, it doesn't work at all. You install openvpn.service, but use %i in the service file. How was this supposed to work?
It does not work, because the naming is broken
You need openvpn@.service, IIUC. Did you test it at all?
Yes, here is a better one..
Did someone actually fix this in the package? I'm CC'ing Marius (bugowner of openVPN), and will leave the service file as a fullquote below.
cat openvpn@.service
[Unit] Description=OpenVPN Robust And Highly Flexible Tunneling Application On %I After=network.target
[Service] ExecStart=/usr/sbin/openvpn --suppress-timestamps --fast-io --mlock --cd /etc/openvpn/ --config %i.conf ExecReload=/bin/kill -HUP $MAINPID PrivateTmp=true
[Install] WantedBy=multi-user.target
systemctl (enable|start|disable) openvpn@yourconfigfilebasename.service
Regards, Christian Boltz -- Aber das ist dann ungefähr so filigran wie mit 'nem Rambock die Haustür aufzumachen, nur weil man den Schlüssel tief im Rucksack verbuddelt hat. [Peer Heinlein in postfixbuch-users] -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Am 22.04.2013 22:09, schrieb Christian Boltz:
Hello,
Am Donnerstag, 4. April 2013 schrieb Cristian Rodríguez:
On 04/04/2013 07:49 AM, Jiri Slaby wrote:
after updating openvpn in factory, it doesn't work at all. You install openvpn.service, but use %i in the service file. How was this supposed to work?
It does not work, because the naming is broken
You need openvpn@.service, IIUC. Did you test it at all?
Yes, here is a better one..
Did someone actually fix this in the package?
I'm CC'ing Marius (bugowner of openVPN), and will leave the service file as a fullquote below.
cat openvpn@.service
[Unit] Description=OpenVPN Robust And Highly Flexible Tunneling Application On %I After=network.target
[Service] ExecStart=/usr/sbin/openvpn --suppress-timestamps --fast-io --mlock --cd /etc/openvpn/ --config %i.conf ExecReload=/bin/kill -HUP $MAINPID PrivateTmp=true
[Install] WantedBy=multi-user.target
systemctl (enable|start|disable) openvpn@yourconfigfilebasename.service
Yes, it looks better. I think --suppress-timestamps makes sense, --mlock should be fine, but --fast-io is --proto udp specific and experimental. I'd let the user set the --fast-io option in the config file... [Service] ExecStart=/usr/sbin/openvpn --suppress-timestamps --mlock --cd /etc/openvpn/ --config %i.conf ExecReload=/bin/kill -HUP $MAINPID PrivateTmp=true Fixed in my local checkout & testing it. Gruesse / Regards, Marius Tomaschewski <mt@suse.de>, <mt@suse.com> -- SUSE LINUX Products GmbH, HRB 16746 (AG Nürnberg), GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, Maxfeldstraße 5, 90409 Nürnberg, Germany -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Am 23.04.2013 12:50, schrieb Marius Tomaschewski:
Am 22.04.2013 22:09, schrieb Christian Boltz:
Hello,
Am Donnerstag, 4. April 2013 schrieb Cristian Rodríguez:
On 04/04/2013 07:49 AM, Jiri Slaby wrote:
after updating openvpn in factory, it doesn't work at all. You install openvpn.service, but use %i in the service file. How was this supposed to work?
It does not work, because the naming is broken
You need openvpn@.service, IIUC. Did you test it at all?
Yes, here is a better one..
Did someone actually fix this in the package?
I'm CC'ing Marius (bugowner of openVPN), and will leave the service file as a fullquote below.
cat openvpn@.service
[Unit] Description=OpenVPN Robust And Highly Flexible Tunneling Application On %I After=network.target
[Service] ExecStart=/usr/sbin/openvpn --suppress-timestamps --fast-io --mlock --cd /etc/openvpn/ --config %i.conf ExecReload=/bin/kill -HUP $MAINPID PrivateTmp=true
[Install] WantedBy=multi-user.target
systemctl (enable|start|disable) openvpn@yourconfigfilebasename.service
OK, should be fixed in network:vpn and factory request 173037. A "systemctl (start|stop) openvpn.target" deals with all instances. I didn't switched to use non-forking mode as this causes ugly wall broadcasts and I don't get password prompt even I restart manually. In forking mode it works better: exodus2:~ # systemctl restart openvpn.target Enter Auth Username: ** Enter Auth Password: ******** exodus2:~ # Gruesse / Regards, Marius Tomaschewski <mt@suse.de>, <mt@suse.com> -- SUSE LINUX Products GmbH, HRB 16746 (AG Nürnberg), GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, Maxfeldstraße 5, 90409 Nürnberg, Germany -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 04/04/2013 07:49 AM, Jiri Slaby wrote:
Hi,
after updating openvpn in factory, it doesn't work at all. You install openvpn.service, but use %i in the service file. How was this supposed to work? You need openvpn@.service, IIUC. Did you test it at all?
I'm talking about this request: https://build.opensuse.org/request/show/159617
thanks,
also, /usr/lib/tmpfiles.d/openvpn.conf is broken on this update, there is no group name "openvpn".. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (4)
-
Christian Boltz
-
Cristian Rodríguez
-
Jiri Slaby
-
Marius Tomaschewski