OpenVPN up/down script issues

[rfdarter]

My openvpn client is running in a unprivileged lxc container.

I tried setting up a up and down script, but whenever i add the lines

script-security 2
up "/etc/openvpn/client/up-lte-wald.sh"

to my config, starting the service fails with that message

Nov 25 22:29:53 openvpn-client openvpn[399]: openvpn_execve: unable to fork: Resource temporarily unavailable (errno=11)
Nov 25 22:29:53 openvpn-client openvpn[399]: Exiting due to fatal error

Here is my client config.

client
dev tun
proto udp
float
nobind
cipher AES-128-CBC
comp-lzo adaptive
resolv-retry infinite
persist-key
#persist-tun
verb 3
remote my-host 1199
script-security 2
up "/etc/openvpn/client/up-lte-wald.sh"

my `up-lte-wald.sh` looks like this
chmod 777 and chmod +x was applied to the file

#!/bin/sh

echo "nur ein test"

I allready modified `LimitNPROC` in `/lib/systemd/system/openvpn@.service` and set it to 1000

 

[rfdarter]

no idea, anyone?

 

[fba]

Have you tried running it in a priviledged container? If it works, it might just be a permission problem you could pin down then.