Feature request: support adding tun devices

[h3po]

Please add support for creating connections with type: tun. These are the nmcli options for tun devices:

    tun:          mode tun|tap
                  [owner <UID>]
                  [group <GID>]
                  [pi yes|no]
                  [vnet-hdr yes|no]
                  [multi-queue yes|no]

[liangwen12year]

Hi, what is the use case for it ?

[h3po]

In my case an openvpn server. In order to use firewalld zones and policy for the forwarding rules, the device must exist statically and cannot be created on-demand by the openvpn process.

[liangwen12year]

ok, I will add support for this.

[tyll]

@h3po does this mean you need tun devices and be able to set a firewalld zone for them via the network role or is it enough to be able to create the tun devices?

[h3po]

@h3po does this mean you need tun devices and be able to set a firewalld zone for them via the network role or is it enough to be able to create the tun devices?

ansible.posix.firewalld already supports setting the firewalld zone, the device just needs to exist

[liangwen12year]

Eventually, we may want to support it in Nmstate, so that we can use it in the network_state variable, but this seems not to be a high-priority task. You are welcome and appreciated to support such a feature in Nmstate if you wish, https://github.com/nmstate/nmstate.

[Precious000]

Hi
I’m an outreachy intern, I’ll like to work on this, kindly assign it to me. Thanks

[liangwen12year]

We want to support it in nmstate, not sure if you have experience coding in rust ?

[Precious000]

Yes, I do.

[Precious000]

Hi @liangwen12year can you please assign it to me? Thanks