Package: openvpn
Version: 2.3.10-1
Severity: important
Tags: patch
Dear Maintainer,
when I tried to start openvpn after updating to testing I got following
error lines in the log:
Apr 03 21:46:06 wolfsden ovpn-server[6837]: OpenVPN 2.3.10
x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6]
built on Jan 21 2016
Apr 03 21:46:06 wolfsden ovpn-server[6837]: library versions: OpenSSL
1.0.2g 1 Mar 2016, LZO 2.08
Apr 03 21:46:06 wolfsden ovpn-server[6837]: daemon() failed or
unsupported: Resource temporarily unavailable (errno=11)
Apr 03 21:46:06 wolfsden ovpn-server[6837]: Exiting due to fatal error
It's caused by this line in /lib/systemd/system/openvpn@.service:
LimitNPROC=10
when the line is commented out, it starts fine.
(Possibly) relevant info: This is debian system running under OpenVZ.
-- System Information:
Debian Release: stretch/sid
APT prefers testing-updates
APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.6-042stab113.11 (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages openvpn depends on:
ii debconf [debconf-2.0] 1.5.59
ii init-system-helpers 1.29
ii initscripts 2.88dsf-59.3
ii iproute2 4.3.0-1+b1
ii libc6 2.22-5
ii liblzo2-2 2.08-1.2
ii libpam0g 1.1.8-3.2
ii libpkcs11-helper1 1.11-5
ii libssl1.0.2 1.0.2g-1
ii libsystemd0 229-3
Versions of packages openvpn recommends:
ii easy-rsa 2.2.2-2
Versions of packages openvpn suggests:
ii openssl 1.0.2g-1
pn resolvconf <none>
-- debconf information:
openvpn/create_tun: false
--- /lib/systemd/system/openvpn@.service 2016-04-03 21:54:45.208397305 +0000
+++ /lib/systemd/system/openvpn@.service 2016-04-03 21:46:15.722287111 +0000
@@ -17,7 +17,7 @@
WorkingDirectory=/etc/openvpn
ProtectSystem=yes
CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_READ_SEARCH CAP_AUDIT_WRITE
-LimitNPROC=10
DeviceAllow=/dev/null rw
DeviceAllow=/dev/net/tun rw
