Re: [systemd-devel] Run OpenVPN unprivileged as systemd user service

2018-11-01 Thread Cristian Rodríguez
El 01-11-2018 a las 9:41, Paul Menzel escribió: If yes, do you have any hints before I start to dig into that? opening TUN/TAP interfaces and changing routing is a privileged operation. ___ systemd-devel mailing list

Re: [systemd-devel] Run OpenVPN unprivileged as systemd user service

2018-11-01 Thread Király , István
Hello Paul, ... As one option, it is possible to spin up a systemd-nspawn container, run the openvpn server in there with it's own networking namespace, and map the port of the openvpn server to the host. You can make all kind's of scenarios, ... Greetings, ... Paul Menzel ezt írta (időpont:

[systemd-devel] Run OpenVPN unprivileged as systemd user service

2018-11-01 Thread Paul Menzel
Dear systemd folks, Our users sometimes need to access the internal network of another organization, but unfortunately SSH access is blocked, and it’s only possible over OpenVPN. With that, they could use their browser and SSH to access the internal network. Due to security reasons, we do not