I am a user of NixOS since around the 23.11 release, and I currently manage my NixOS install via flake which currently is configured to pull in the latest 24.11 release. My NixOS config does not include any openvpn configurations, rather I configure my VPN connection manually via the NetworkManager applet in Cinnamon by simply creating a connection and providing the path to the *.ovpn file along with username/password.
Up until the 24.05 release, this ‘just worked’.
Upon upgrade to 24.11, the VPN connection times out without connecting.
I’m not a networking expert by any stretch, but it is not lost on my that /etc/resolv.conf is updated upon successful VPN connection in 24.05 and earlier, but in 24.11 I do not see this file changing at all. In 24.05, /etc/resolv.conf is owned by ‘root:991’ (which tells me that the 991 group is not defined, it’s own issue …), but in 24.11 it is owned by ‘root:resolvconf’
I also notice that the dhcpcd service (networking.useDHCP
) was ‘hardened’ in 24.11 to execute only as the ‘dhcpcd’ user.
Is this hardening the likely root cause?