Bugzilla – Bug 681074
systemd won't start openvpn
Last modified: 2011-03-20 14:17:27 UTC
Created attachment 420351 [details] strace -ttfo bubak systemctl start openvpn.service # systemctl status openvpn.service openvpn.service - LSB: OpenVPN tunnel Loaded: loaded (/etc/init.d/openvpn) Active: failed since Sat, 19 Mar 2011 20:35:56 +0100; 50s ago Process: 3039 ExecStart=/etc/init.d/openvpn start (code=killed, signal=TERM) CGroup: name=systemd:/system/openvpn.service # systemctl start openvpn.service Job failed. See system logs and 'systemctl status' for details. /var/log/messages: systemd[1]: openvpn.service operation timed out. Terminating. kernel: [ 4004.054258] systemd[1]: Unit openvpn.service entered failed state.
It's a known issue being worked on. With systemd all services are started from pid 1, never from the calling shell. openvpn needs to hook into the ask-password mechanism of systemd, to be able to retrieve the password from the shell that calls systemadm start ... *** This bug has been marked as a duplicate of bug 675406 ***
(In reply to comment #1) > openvpn needs to hook into the > ask-password mechanism of systemd, to be able to retrieve the password from the > shell that calls systemadm start ... Aha, got it. Thanks. I have one more question. What's the rule which dictates systemd to run ask-password? I changed /etc/init.d/openvpn that openvpn doesn't need any input (and removed x-interactive line from the script). But systemd still waits for input. I tried systemctl daemon-reexec or daemon-reexec with no effect. Is there any other way how systemd is needed to be restarted?
Openvpn needs to ask, not systemd. The simplest, openvpn needs an option to simply call a binary that asks and returns the password, like apache has. Or someone needs to fiddle with the rather complicated openvpn client api and do the systemd integration there. I think the Debian guys are currently looking into it. *** This bug has been marked as a duplicate of bug 659357 ***
oops, wrong bug
Merge with 675406 *** This bug has been marked as a duplicate of bug 675406 ***