Control: found -1 2.4.0-6
Control: fixed -1 2.4.3-4

On 09.10.2017 20:50, Bernhard Schmidt wrote:

Hi,

>> Package: openvpn
>> Version: 2.4.0-6+deb9u1
>> Severity: normal
>>
>> Dear Maintainer,
>>
>> the provided openvpn@.service script is missing 2 lines:
>> After=syslog.target network-online.target
>> Wants=network-online.target
>>
>> Without these lines the openvpn starts too early and doesn't find
>> available network devices it could bind to.
> 
> Do you bind your OpenVPN instance to a specific IP address (i.e. by
> using the "local" configuration option)?
> 
> Otherwise OpenVPN should start just fine even when only "lo" is
> configured at this point.
> 
> I'm not sure we want to fix this globally. As far as I understood
> depending on "network-online.target" should be avoided if possible,
> since the point of "external connectivity is available" is not easily
> determined.
> 
> You can add this locally by executing
> 
> $ sudo systemctl add-wants openvpn@.service network-online.target

I fear I have to change my answer a bit.

1.) The requested change has already been done in Buster, in 2.4.3-4

2.) add-wants does not help a lot here, since we don't only need a
"Wants" but also an "After" relationship to order it. Can you please try
to add a file

/etc/systemd/system/openvpn@.service.d/after-network-online.conf

with the following content?

===
[Unit]
After=network-online.target
Wants=network-online.target
===

Bernhard

Reply via email to