Package: openvpn
Version: 2.3.4-5
Severity: important

Dear Maintainer,

A system booting under systemd will hang indefinitely when an interface
is configured via openvpn and marked "auto" in interfaces(5), e.g.:

  auto vpniface
  iface vpniface inet manual
      openvpn somevpn

(with AUTOSTART="none" set in /etc/default/openvpn)

What happens is that when the networking.service runs 'ifup -a', the
script /etc/network/if-up.d/openvpn calls 'systemctl start openvpn@somevpn'
but because the openvpn@.service unit has an implicit dependency on
basic.target, and because basic.target is not yet active while
networking.service is starting, systemd deadlocks with the following
message displayed on the console:

  [ ***  ] A start job is running for LSB: Raise network interfaces.

I was able to avoid the problem by adding this directive to the
openvpn@.service unit file:

  DefaultDependencies=false

This breaks the dependency loop on basic.target, and allows the openvpn
interfaces to be brought up during boot. However, I am not certain whether
this is entirely correct and appropriate.

Please examine the problem and this possible solution, and adjust as
appropriate.

Kind regards.


-- System Information:
Debian Release: 8.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages openvpn depends on:
ii  debconf [debconf-2.0]  1.5.56
ii  init-system-helpers    1.22
ii  initscripts            2.88dsf-59
ii  iproute2               3.16.0-2
ii  libc6                  2.19-18
ii  liblzo2-2              2.08-1.2
ii  libpam0g               1.1.8-3.1
ii  libpkcs11-helper1      1.11-2
ii  libssl1.0.0            1.0.1k-3

Versions of packages openvpn recommends:
ii  easy-rsa  2.2.2-1

Versions of packages openvpn suggests:
ii  openssl     1.0.1k-3
pn  resolvconf  <none>

-- Configuration Files:
/etc/default/openvpn changed [not included]

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to