Main/master, big change in openvpn config setup?

egc · May 21, 2026, 10:15am

service network restart

_bernd · May 21, 2026, 10:36am

Or ifdown and ifup with the interface name?

egc · May 21, 2026, 10:52am

Tried that but it behaved erratically in my testing

flygarn12 · June 4, 2026, 8:46am

Does user and group settings have any meaning as a protocol?
When I start the interface then openvpn stop with the message it can’t find the GID for the group?

_bernd · June 4, 2026, 10:22am

OpenWrt has only root. If you need other users and or group you need to add them. I don't know if they're is a standard for packages and if there is any why it's missing from the openvpn package.

flygarn12 · June 4, 2026, 10:51am

‘Noone’ and ‘nogroup’ are default openwrt registered names in the users and group lists.
And OpenVPN worked with those names before, as the server wiki instruction says.

The idea is to block openvpn hacker intrusions (non root) from entering the general system control (root) once the server is started, not block the system (root) to enter openvpn settings.

lantis1008 · June 4, 2026, 11:17am

Yes packages can define a required user.

Require-User is derived from USERID

Can be a simple user:group or you can specify the uid and gid.

github.com/openwrt/packages

net/tor/Makefile

master


      
          PKG_FIXUP:=autoreconf
          PKG_BUILD_PARALLEL:=1
          PKG_BUILD_FLAGS:=gc-sections lto
          
          include $(INCLUDE_DIR)/package.mk
          
          define Package/tor/Default
            SECTION:=net
            CATEGORY:=Network
            URL:=https://www.torproject.org/
            USERID:=tor=52:tor=52
            DEPENDS:=+libevent2 +libopenssl +libpthread +librt +zlib +libcap
            TITLE:=Tor routing daemon
          endef
          
          define Package/tor/Default/description
          Tor is a toolset for a wide range of organizations and people that want to
          improve their safety and security on the Internet. Using Tor can help you
          anonymize web browsing and publishing, instant messaging, IRC, SSH, and
          more. Tor also provides a platform on which software developers can build
          new applications with built-in anonymity, safety, and privacy features.

github.com/openwrt/openwrt

package/base-files/files/lib/functions.sh

main


      
          			if [ "$PKG_UPGRADE" != "1" ]; then
          				"$i" disable
          			fi
          			"$i" stop
          		fi
          	done
          
          	return $ret
          }
          
          add_group_and_user() {
          	[ -z "$pkgname" ] && local pkgname="$(basename ${1%.*})"
          	local rusers="$(sed -ne 's/^Require-User: *//p' $root/usr/lib/opkg/info/${pkgname}.control 2>/dev/null)"
          	if [ -f "$root/lib/apk/packages/${pkgname}.rusers" ]; then
          		local rusers="$(cat $root/lib/apk/packages/${pkgname}.rusers)"
          	fi
          
          	if [ -n "$rusers" ]; then
          		local tuple oIFS="$IFS"
          		for tuple in $rusers; do
          			local uid gid uname gname addngroups addngroup addngname addngid

flygarn12 · June 4, 2026, 5:34pm

I don’t really know why or what but I deleted the user and group settings in the config and remade them and then it works.