openfortivpn stopped working after updating host and container from Debian 13.3 to 13.5

Dec 26, 2021
8
0
21
62
Hi there,
yesterday I update the host and a container from Debian 13.3 to 13.5, then openfortivpn on the container stopped working.

Symptom (on the container, user admin) - Trying to launch the vpn manually I get:

$ sudo openfortivpn
INFO: Connected to gateway.
INFO: Authenticated.
INFO: Remote gateway has allocated a VPN.
Couldn't set tty to PPP discipline: Operation not permitted
ERROR: read: Input/output error
INFO: Cancelling threads...
INFO: Cleanup, joining threads...
ERROR: pppd: An immediately fatal error of some kind occurred, such as an essential system call failing, or running out of virtual memory.
INFO: Terminated pppd.
INFO: Closed connection to gateway.
INFO: Logged out.

On the container (user admin):

$ uname -a
Linux vdebmon 7.0.6-2-pve #1 SMP PREEMPT_DYNAMIC PMX 7.0.6-2 (2026-05-29T11:08Z) x86_64 GNU/Linux

$ ls -l /etc/openfortivpn/config
-rw------- 1 root root 232 Jun 6 14:54 /etc/openfortivpn/config

$ sudo cat /etc/openfortivpn/config
### configuration file for openfortivpn, see man openfortivpn(1) ###

host = ...omissis...
port = 10443
username = ...omissis...
password = ...omissis...
trusted-cert = ...omissis...

$ sudo openfortivpn --version
1.23.1

On the host (user root):

$ pveversion
pve-manager/9.2.2/b9984c6d90a4bd80 (running kernel: 7.0.6-2-pve)

$ pct config 103 # 103 is the container id
arch: amd64
cores: 2
features: nesting=1
hostname: ...omissis...
memory: 4096
nameserver: ...omissis...
net0: name=eth0,bridge=vmbr0,gw=...omissis...,hwaddr=...omissis...,ip=...omissis.../24,type=veth
onboot: 1
ostype: debian
rootfs: local-lvm:vm-103-disk-0,mountoptions=noatime,size=32G
searchdomain: ...omissis...
swap: 4096
unprivileged: 1
lxc.mount.entry: /dev/ppp dev/ppp none bind,create=file


I guess openfortivpn itself hasn't been updated, current version was published on Feb 2025.

Has anybody any clue?

Mirco
 
Hi @mirmalag

thanks for posting in the forum!

Could you please confirm that in the update there were just Debian packages updated or if additionally there were PVE packages updated. You can use /var/log/apt/history.log to see this.

Also please have a look in the journal of the host and the container if there are any errors or related messages there.

Yours sincerely
Jonas