Infrastructure » sepia

please approve the request

Thanks!

I can't access or ping teuthology.front.sepia.ceph.com. Regarding the steps mentioned here, I don't see openvpn service that could be restarted. I've got only two -

$ systemctl list-unit-files | grep vpn
openvpn-client@.service                                          enabled        
openvpn-server@.service                                          disabled      

Of these I couldn't restart the first (which is enabled) -

$ sudo systemctl restart openvpn-client@.service
[sudo] password for rishabh: 
Failed to restart openvpn-client@.service: Unit name openvpn-client@.service is missing the instance name.
See system logs and 'systemctl status openvpn-client@.service' for details.

Also, the steps under "Fedora NetworkManager GUI" were unclear. So I haven't tried the steps mentioned there.

The instructions say sudo systemctl restart openvpn@sepia

I've tried that -

$ sudo systemctl restart openvpn@sepia
[sudo] password for rishabh: 
Failed to restart openvpn@sepia.service: Unit openvpn@sepia.service not found.

Can you run tree in your /etc/openvpn dir please?

There's also a Troubleshooting section under the Linux instructions on the wiki that may help.

Okay, so if you can SSH with the troubleshooting command running, that means the config is fine. What OS and OpenVPN version are you running?

I apparently need to update my docs for whatever setup you have.

Can you run this and `cat` any files it finds?

find /etc/systemd -name '*openvpn*'

I am using Fedora 27 and OpenVPN version 2.4.6.

Following is the output for openvpn --version (since it mention "compile time defines" I thought it might be usefukl) -

$ openvpn --version
OpenVPN 2.4.6 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 26 2018
library versions: OpenSSL 1.1.0h-fips  27 Mar 2018, LZO 2.08
Originally developed by James Yonan
Copyright (C) 2002-2018 OpenVPN Inc <sales@openvpn.net>
Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=yes enable_fragment=yes enable_iproute2=yes enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_management=yes enable_multihome=yes enable_pam_dlopen=no enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=yes enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=yes enable_werror=no enable_win32_dll=yes enable_x509_alt_username=yes with_aix_soname=aix with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_sysroot=no

And output for the command you requested -

$ find /etc/systemd -name '*openvpn*'
/etc/systemd/system/multi-user.target.wants/openvpn-client@.service

$ cat /etc/systemd/system/multi-user.target.wants/openvpn-client@.service
[Unit]
Description=OpenVPN tunnel for %I
After=syslog.target network-online.target
Wants=network-online.target
Documentation=man:openvpn(8)
Documentation=https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO

[Service]
Type=notify
PrivateTmp=true
WorkingDirectory=/etc/openvpn/client
ExecStart=/usr/sbin/openvpn --suppress-timestamps --nobind --config %i.conf
CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE
LimitNPROC=10
DeviceAllow=/dev/null rw
DeviceAllow=/dev/net/tun rw
ProtectSystem=true
ProtectHome=true
KillMode=process

[Install]
WantedBy=multi-user.target

Ah, I think it's the WorkingDirectory=/etc/openvpn/client line that's the issue.

The easiest thing is probably to sudo mv /etc/openvpn/sepia* /etc/openvpn/client/ then try restarting openvpn-client@sepia.service