When my openvpn client tries to establish a connection after the 24 hour period, I am unable to restore the connection. The following are the errors I am getting in syslog. I am sure it’s something I need to add to config, but I’m trying to limit the total privileges in these (unprivileged) containers as much as possible. Any suggestions?
/var/log/syslog:
176 Jul 15 23:01:32 vpnclient ovpn-ipclient[92]: Preserving previous TUN/TAP instance: tun0
177 Jul 15 23:01:32 vpnclient ovpn-ipclient[92]: NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device.
178 Jul 15 23:01:32 vpnclient ovpn-ipclient[92]: /sbin/ip route del 45.56.4.4/32
179 Jul 15 23:01:32 vpnclient openvpn[92]: RTNETLINK answers: Operation not permitted
180 Jul 15 23:01:32 vpnclient ovpn-ipclient[92]: ERROR: Linux route delete command failed: external program exited with error status: 2
181 Jul 15 23:01:32 vpnclient ovpn-ipclient[92]: /sbin/ip route del 0.0.0.0/1
182 Jul 15 23:01:32 vpnclient openvpn[92]: RTNETLINK answers: Operation not permitted
183 Jul 15 23:01:32 vpnclient ovpn-ipclient[92]: ERROR: Linux route delete command failed: external program exited with error status: 2
184 Jul 15 23:01:32 vpnclient ovpn-ipclient[92]: /sbin/ip route del 128.0.0.0/1
185 Jul 15 23:01:32 vpnclient openvpn[92]: RTNETLINK answers: Operation not permitted
186 Jul 15 23:01:32 vpnclient ovpn-ipclient[92]: ERROR: Linux route delete command failed: external program exited with error status: 2
187 Jul 15 23:01:32 vpnclient ovpn-ipclient[92]: Closing TUN/TAP interface
193 Jul 15 23:01:33 vpnclient ovpn-ipclient[92]: ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
194 Jul 15 23:01:33 vpnclient ovpn-ipclient[92]: Exiting due to fatal error
195 Jul 15 23:01:33 vpnclient systemd[1]: openvpn@ipclient.service: Main process exited, code=exited, status=1/FAILURE
196 Jul 15 23:01:33 vpnclient systemd[1]: openvpn@ipclient.service: Failed with result 'exit-code'.