angristan / angristan/openvpn-install

dco disabled with default server config

Open
#1,477 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
16.1k
Forks
3.3k
PR merge metrics
No merged PRs in 30d

Description

Hi, i install your great script on fresh ubuntu Ubuntu 25.10 when i check logs ( i added to server.conf two lines)

log /var/log/openvpn/openvpn.log
log-append /var/log/openvpn/openvpn.log

i have this error:

```
kpietrasiak@intranet:/var/log/openvpn$ sudo cat openvpn.log
**--user specified but lacking CAP_SETPCAP. Cannot retain CAP_NET_ADMIN. **Disabling data channel offload****
OpenVPN 2.7.0 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
library versions: OpenSSL 3.5.3 16 Sep 2025, LZO 2.10
```

fix is very simly in server.conf i must disable

```
#user nobody
#group nogroup
```

Unfortunately, many people probably don't know about it, so it would be good if the default server.conf will run with faster dco.
after i disable user and group openvpn start with dco

```
kpietrasiak@intranet:/var/log/openvpn$ sudo cat openvpn.log
OpenVPN 2.7.0 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
library versions: OpenSSL 3.5.3 16 Sep 2025, LZO 2.10
**DCO version: 6.17.0-8-generic #8-Ubuntu SMP PREEMPT_DYNAMIC Fri Nov 14 21:44:46 UTC 2025**
```

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.