From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id YHAyAlO6ZmEw5AAAgWs5BA (envelope-from ) for ; Wed, 13 Oct 2021 12:52:03 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id WHFmOVK6ZmFgZAAAbx9fmQ (envelope-from ) for ; Wed, 13 Oct 2021 10:52:02 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 2FCF01EA76 for ; Wed, 13 Oct 2021 12:52:02 +0200 (CEST) Received: from localhost ([::1]:51558 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mabrd-0005gX-1N for larch@yhetil.org; Wed, 13 Oct 2021 06:52:01 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:48522) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mabrK-0005gO-15 for help-guix@gnu.org; Wed, 13 Oct 2021 06:51:42 -0400 Received: from mail1.fsfe.org ([2001:aa8:ffed:f5f3::151]:56518) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mabrF-0006Mu-Lx for help-guix@gnu.org; Wed, 13 Oct 2021 06:51:41 -0400 From: Jelle Licht DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fsfe.org; s=2021100501; t=1634122292; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=iG62oaqWCl10Ho6fcSZ5FC8MvFtQkKRoIbtd/yHBDdw=; b=XrBGplazME6DPn4fQoQcPd0XJ/8mT5u0kS3UfROfYYBXZaxQuyZBbuoNj4yKZJBkzfwUzL LatojWX3mLSHSEwoolmR7wFLY8WhCtLwSZqEZqKMeKTpMjwG9IYMdDnzSuFNjb22rx5D39 D8n7XEwdQWxQAfcPkyxzj9v7V6T88yg= To: "Jovany Leandro G.C" , help-guix@gnu.org Subject: Re: openvpn ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1 In-Reply-To: References: Date: Wed, 13 Oct 2021 12:51:31 +0200 Message-ID: <86ily1kxjg.fsf@fsfe.org> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=2001:aa8:ffed:f5f3::151; envelope-from=jlicht@fsfe.org; helo=mail1.fsfe.org X-Spam_score_int: -70 X-Spam_score: -7.1 X-Spam_bar: ------- X-Spam_report: (-7.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1634122322; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=iG62oaqWCl10Ho6fcSZ5FC8MvFtQkKRoIbtd/yHBDdw=; b=Muc8LYNHYlC/HdioYzOrszK9uA2tgho+I3QOFfnJ1Z/wu7l2pX4E4rmjXE0vOq/5OwwlNi I6JjT7IyoGjcuxMZ72hwxIe/OkYYtYDXxSqY8bHJbeMLoGcWh4zPRR6Ju70QYBKsd2y1KH dpi2A7rx1Ir+FIY7cGdfvqhGWI8UKUJBy3muPRf+341SNGg6HO26U6OfRuATrPKu3blYEe mNIvN1a2NGHNOpmk1d1lLJzRZv82ACBvZhX9/a2hYUOHcGwkjFELk+tlQXDULdx5Tjb3lk oYQKhlOUg18BCmSMpqnYMJWoQtwefQuKA2l28OJA145WXUiCaNc9iY+FZXXOmw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1634122322; a=rsa-sha256; cv=none; b=U8Pd2WZElzDZwW9ThlhTJpt+W0X6JOCPJQsfdO9DtEw8nPtHYUd2YjYOQ/KXgKRpnbR0Od R42NQP/oXbqnsBjFe1XQhFCrLobjDUq0yBWbOavrL8r8r3WNcmRC7670Hxt4WCbawvDDlb 2oVCmvQUe3w7GgwHbjQQ+VnhsHy8cyon0T2cY8bNkz6tB0hhSpfoaZVR7yTF7YGshQWG/E L4Wb6o8gSk/UxTOSmvIcrufvjKfqwOFsNh/Sbn+ieEMtaTfaOPLO4i5pisuLsqJVs3waBT +PmVVjwnx44y4scWehOfn2vIEiVc58cIj7xDrx1eVfu4GQlcFE236w6QXuJfPw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=fsfe.org header.s=2021100501 header.b=XrBGplaz; dmarc=pass (policy=none) header.from=fsfe.org; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Migadu-Spam-Score: -3.11 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=fsfe.org header.s=2021100501 header.b=XrBGplaz; dmarc=pass (policy=none) header.from=fsfe.org; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Migadu-Queue-Id: 2FCF01EA76 X-Spam-Score: -3.11 X-Migadu-Scanner: scn0.migadu.com X-TUID: zZ4hh0UMDBfC Hello Jovany, "Jovany Leandro G.C" writes: > hi, > when i run **openvpn myfile.ovpn**, throws: > > ~~~ > 2021-10-12 21:20:26 OpenVPN 2.5.4 x86_64-unknown-linux-gnu [SSL > (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jan 1 1970 > ... > 2021-10-12 21:25:13 ERROR: Cannot ioctl TUNSETIFF tun: Operation not > permitted (errno=1) > 2021-10-12 21:25:13 Exiting due to fatal error > ~~~ Note that I am by no means an OpenVPN expert, I have just used it a few times. For its normal operations, OpenVPN clients need a TUN/TAP device; AFAIK creating such devices require running with root permissions. You have several options here. The easiest 'fix' is to simply run `sudo openvpn myfile.ovpn`; everything should work, with always-on root privileges though. Run `sudo openvpn --user --group myfile.ovpn', which uses root privileges to set up things and then drops these privileges. If your connection gets interrupted, you might need to manually restart the command to set things up properly again. If you use Network Manager; there is a plugin for managing OpenVPN connections. In Guix this has been packaged as `network-manager-openvpn', and can be added to your operating system declaration if you run Guix System [1] > thanks any help > -- > Jovany Leandro G.C HTH! - Jelle [1] http://guix.gnu.org/manual/en/html_node/Networking-Services.html#index-network_002dmanager_002dservice_002dtype