From a4dc442138358168f5b5cb91d8f408e33421e51d Mon Sep 17 00:00:00 2001 From: Alberto Gonzalez Iniesta Date: Tue, 10 May 2016 18:11:33 +0200 Subject: Document limits to service (#819919, #823621) --- debian/README.Debian | 15 ++++++++++++++- debian/changelog | 2 ++ 2 files changed, 16 insertions(+), 1 deletion(-) (limited to 'debian') diff --git a/debian/README.Debian b/debian/README.Debian index b3623f8..ebedbaa 100644 --- a/debian/README.Debian +++ b/debian/README.Debian @@ -1,5 +1,6 @@ In this file: +- systemd service file and limits/capabilities - 'writepid' option warning - Multiple tunnels - Starting or stopping multiple tunnels with a single command @@ -26,6 +27,18 @@ with these commands (as root): # mkdir /dev/net # mknod /dev/net/tun c 10 200 +systemd service file and limits/capabilities +-------------------------------------------- + +If you encounter problems [1] or errors related to permissions starting +OpenVPN, you may want to check the limits imposed to the OpenVPN service in +/lib/systemd/system/openvpn@.service, notably CapabilityBoundingSet and +LimitNPROC. You may override those with a custom openvpn@.service file in +/etc/systemd/system/. + +[1] daemon() failed or unsupported: Resource temporarily unavailable (errno=11) +[2] Failed running command (--route-up): external program exited with error status: 1 + 'writepid' option warning ------------------------- @@ -116,7 +129,7 @@ can look like this: bridge_ports eth0 tap0 pre-up openvpn --mktun --dev tap0 -It's recommended to read the manpage - man 5 bridge-utils-interfaces - aswell. +It's recommended to read the manpage - man 5 bridge-utils-interfaces - as well. ##################################### diff --git a/debian/changelog b/debian/changelog index 6a09e2d..e858aae 100644 --- a/debian/changelog +++ b/debian/changelog @@ -3,6 +3,8 @@ openvpn (2.3.11-1) unstable; urgency=medium * New upstream release. * tun.c: patch to fix FTBFS in kfreebsd. (Closes: #815283) Thanks Steven Chamberlain for the patch. + * README.Debian: Document limits in the service file. + (Closes: #819919, #823621) -- Alberto Gonzalez Iniesta Tue, 10 May 2016 17:41:53 +0200 -- cgit v1.2.3