From e6e81dc136d3073b85db907db9f5202c69326d54 Mon Sep 17 00:00:00 2001
From: usa- <usa@rota.lv>
Date: Mon, 21 Sep 2026 18:51:22 +0300
Subject: [PATCH 1/5] Refactor tunnel startup logic similar to WireGuard

---
 general/package/vtund-openipc/files/tunnel | 147 ++++++++++-----------
 1 file changed, 70 insertions(+), 77 deletions(-)

diff --git a/general/package/vtund-openipc/files/tunnel b/general/package/vtund-openipc/files/tunnel
index 4ffcda40b5..e188e4b14b 100755
--- a/general/package/vtund-openipc/files/tunnel
+++ b/general/package/vtund-openipc/files/tunnel
@@ -1,103 +1,96 @@
 #!/bin/sh
 
-vtund_server=${1:-vtun.localhost}
-vtund_port="5000"
+server=${1:-vtun.localhost}
+port="5000"
 vtund_iface="tunnel"
-device_name="IPC-VTUND"
+device="IPC-VTUND"
 working_dir="/tmp"
-identity_cfg="$working_dir/vtund.conf"
-udhcpc_pid="$working_dir/udhcpc-$vtund_iface.pid"
+config_path="$working_dir/vtund.conf"
+udhcpc_pid_path="$working_dir/udhcpc-$vtund_iface.pid"
 delay_start=0
 delay_step=10
 delay_max=300
 
 . /usr/sbin/common
 
-ready() {
-	identity_src=$(ip r | awk '/default/ {print $5}' | head -n 1)
+start() {
+	read_subshell_pid
+	prog="${0##*/}[$subshell_pid]"
+	default_iface=$(ip r | awk '/default/ {print $5}' | head -n 1)
 
-	[ -n "$identity_src" ] || {
+	[ -n "$default_iface" ] || {
 		log_warning "Unable to determine the default network interface"
 		return 1
 	}
 
-	identity_mac=$(cat "/sys/class/net/$identity_src/address" 2>/dev/null | tr 'a-z' 'A-Z')
+	default_mac=$(cat "/sys/class/net/$default_iface/address" 2>/dev/null | tr 'a-z' 'A-Z')
 
-	[ -n "$identity_mac" ] || {
+	[ -n "$default_mac" ] || {
 		log_warning "Unable to read the MAC address of the default network interface"
 		return 1
 	}
 
-	echo "$vtund_server" | grep -qE '^((^|\.)(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){4}$' && return 0
-
-	nslookup "$vtund_server" >/dev/null 2>&1 || {
-		log_warning "Unable to resolve the VTun server address"
-		return 1
-	}
+	echo "$server" | grep -qE '^((^|\.)(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){4}$' ||
+		nslookup -timeout=3 -retry=1 "$server" >/dev/null 2>&1 || {
+			log_warning "Unable to resolve the VTun server hostname"
+			return 1
+		}
+
+	log_info "Starting the tunnel to $server"
+
+	if [ ! -L "/sys/class/net/$vtund_iface" ]; then
+		run_cmd "" "" false daemon.err modprobe tun || return 1
+		run_cmd "" "" false daemon.err tunctl -t "$vtund_iface" || return 1
+	fi
+
+	kill_pid_file -9 "$udhcpc_pid_path" udhcpc
+
+	password=$(echo "$default_mac" | sha1sum | awk '{print $1}')
+	profile=$(echo "$default_mac" | tr -d ':')
+
+	{
+		echo "options {"
+		echo "	port $port;"
+		echo "	ifconfig /sbin/ifconfig;"
+		echo "}"
+		echo "$profile {"
+		echo "	password $password;"
+		echo "	device $vtund_iface;"
+		echo "	stat no;"
+		echo "	persist yes;"
+		echo "	keepalive 10:5;"
+		echo "	timeout 10;"
+		echo "	up {"
+		echo "		ifconfig \"$vtund_iface hw ether $default_mac mtu 1500 -multicast up\";"
+		echo "		program \"udhcpc -T 1 -t 5 -R -b -O staticroutes -S -s tapip -p '$udhcpc_pid_path' -i $vtund_iface -x hostname:$device-$profile\";"
+		echo "	};"
+		echo "	down {"
+		echo "		program \"kill_pid_file -9 '$udhcpc_pid_path' udhcpc\";"
+		echo "		ifconfig \"$vtund_iface down\";"
+		echo "	};"
+		echo "}"
+	} >"$config_path"
+
+	# workaround for VTun bug described in https://bugzilla.redhat.com/show_bug.cgi?id=1462458#c26
+	run_cmd "" "" false daemon.err ifconfig $vtund_iface hw ether $default_mac mtu 1500 -multicast up || return 1
+
+	vtund -n -f "$config_path" "$profile" "$server" >/dev/null 2>&1
+
+	return 0
 }
 
 {
-	read_subshell_pid
-	prog="${0##*/}[$subshell_pid]"
-	restart_delay=$delay_start
-
 	while true; do
-		while true; do
-			if ! ready; then
-				ready_delay=$delay_start
-
-				while true; do
-					[ $ready_delay -lt $delay_max ] && ready_delay=$(( ready_delay + delay_step ))
-					sleep $ready_delay
-					ready && break
-				done
-
-				log_info "Starting the tunnel to $vtund_server"
-			fi
-
-			if [ ! -L "/sys/class/net/$vtund_iface" ]; then
-				run_cmd "" "" false daemon.err modprobe tun || break
-				run_cmd "" "" false daemon.err tunctl -t "$vtund_iface" || break
-			fi
-
-			kill_pid_file -9 "$udhcpc_pid" udhcpc
-
-			identity_pas=$(echo "$identity_mac" | sha1sum | awk '{print $1}')
-			identity_tid=$(echo "$identity_mac" | tr -d ':')
-
-			{
-				echo "options {"
-				echo "	port $vtund_port;"
-				echo "	ifconfig /sbin/ifconfig;"
-				echo "}"
-				echo "$identity_tid {"
-				echo "	password $identity_pas;"
-				echo "	device $vtund_iface;"
-				echo "	stat no;"
-				echo "	persist yes;"
-				echo "	keepalive 10:5;"
-				echo "	timeout 10;"
-				echo "	up {"
-				echo "		ifconfig \"$vtund_iface hw ether $identity_mac mtu 1500 -multicast up\";"
-				echo "		program \"udhcpc -T 1 -t 5 -R -b -O staticroutes -S -s tapip -p '$udhcpc_pid' -i $vtund_iface -x hostname:$device_name-$identity_tid\";"
-				echo "	};"
-				echo "	down {"
-				echo "		program \"kill_pid_file -9 '$udhcpc_pid' udhcpc\";"
-				echo "		ifconfig \"$vtund_iface down\";"
-				echo "	};"
-				echo "}"
-			} >"$identity_cfg"
-
-			# workaround for VTun bug described in https://bugzilla.redhat.com/show_bug.cgi?id=1462458#c26
-			run_cmd "" "" false daemon.err ifconfig $vtund_iface hw ether $identity_mac mtu 1500 -multicast up || break
-
-			vtund -n -f "$identity_cfg" "$identity_tid" "$vtund_server" >/dev/null 2>&1 &&
-				restart_delay=$delay_start
-
-			break
-		done
-
-		[ $restart_delay -lt $delay_max ] && restart_delay=$(( restart_delay + delay_step ))
-		sleep $restart_delay
+		if ! start; then
+			delay=$delay_start
+
+			while true; do
+				[ $delay -lt $delay_max ] && delay=$(( delay + delay_step ))
+				sleep $delay
+				start && break
+			done
+		fi
+
+		sleep 10
 	done
 } &

From 309679f6454cdc6d2334f726647598e25514d281 Mon Sep 17 00:00:00 2001
From: usa- <usa@rota.lv>
Date: Tue, 22 Sep 2026 13:44:03 +0300
Subject: [PATCH 2/5] Treat short-lived vtund sessions as failed starts

---
 general/package/vtund-openipc/files/tunnel | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/general/package/vtund-openipc/files/tunnel b/general/package/vtund-openipc/files/tunnel
index e188e4b14b..c82489f219 100755
--- a/general/package/vtund-openipc/files/tunnel
+++ b/general/package/vtund-openipc/files/tunnel
@@ -3,7 +3,7 @@
 server=${1:-vtun.localhost}
 port="5000"
 vtund_iface="tunnel"
-device="IPC-VTUND"
+device_name="IPC-VTUND"
 working_dir="/tmp"
 config_path="$working_dir/vtund.conf"
 udhcpc_pid_path="$working_dir/udhcpc-$vtund_iface.pid"
@@ -62,7 +62,7 @@ start() {
 		echo "	timeout 10;"
 		echo "	up {"
 		echo "		ifconfig \"$vtund_iface hw ether $default_mac mtu 1500 -multicast up\";"
-		echo "		program \"udhcpc -T 1 -t 5 -R -b -O staticroutes -S -s tapip -p '$udhcpc_pid_path' -i $vtund_iface -x hostname:$device-$profile\";"
+		echo "		program \"udhcpc -T 1 -t 5 -R -b -O staticroutes -S -s tapip -p '$udhcpc_pid_path' -i $vtund_iface -x hostname:$device_name-$profile\";"
 		echo "	};"
 		echo "	down {"
 		echo "		program \"kill_pid_file -9 '$udhcpc_pid_path' udhcpc\";"
@@ -71,12 +71,15 @@ start() {
 		echo "}"
 	} >"$config_path"
 
-	# workaround for VTun bug described in https://bugzilla.redhat.com/show_bug.cgi?id=1462458#c26
+	# Workaround for VTun bug described in https://bugzilla.redhat.com/show_bug.cgi?id=1462458#c26
 	run_cmd "" "" false daemon.err ifconfig $vtund_iface hw ether $default_mac mtu 1500 -multicast up || return 1
 
+	start_time=$(date +%s)
 	vtund -n -f "$config_path" "$profile" "$server" >/dev/null 2>&1
+	end_time=$(date +%s)
 
-	return 0
+	# Treat a session that ends quickly as a failed attempt regardless of status
+	[ $(( end_time - start_time )) -ge 3 ]
 }
 
 {

From d6930072ec75bda276fec9cb3469c85e78b5e79d Mon Sep 17 00:00:00 2001
From: usa- <usa@rota.lv>
Date: Tue, 22 Sep 2026 16:05:18 +0300
Subject: [PATCH 3/5] Use monotonic time and increase VTun startup threshold

---
 general/package/vtund-openipc/files/tunnel | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/general/package/vtund-openipc/files/tunnel b/general/package/vtund-openipc/files/tunnel
index c82489f219..0e0aff6acc 100755
--- a/general/package/vtund-openipc/files/tunnel
+++ b/general/package/vtund-openipc/files/tunnel
@@ -36,8 +36,6 @@ start() {
 			return 1
 		}
 
-	log_info "Starting the tunnel to $server"
-
 	if [ ! -L "/sys/class/net/$vtund_iface" ]; then
 		run_cmd "" "" false daemon.err modprobe tun || return 1
 		run_cmd "" "" false daemon.err tunctl -t "$vtund_iface" || return 1
@@ -74,12 +72,14 @@ start() {
 	# Workaround for VTun bug described in https://bugzilla.redhat.com/show_bug.cgi?id=1462458#c26
 	run_cmd "" "" false daemon.err ifconfig $vtund_iface hw ether $default_mac mtu 1500 -multicast up || return 1
 
-	start_time=$(date +%s)
+	log_info "Starting the tunnel to $server"
+
+	start_time=$(cat /proc/uptime | cut -d " " -f 1 | tr -d .)
 	vtund -n -f "$config_path" "$profile" "$server" >/dev/null 2>&1
-	end_time=$(date +%s)
+	end_time=$(cat /proc/uptime | cut -d " " -f 1 | tr -d .)
 
 	# Treat a session that ends quickly as a failed attempt regardless of status
-	[ $(( end_time - start_time )) -ge 3 ]
+	[ $(( end_time - start_time )) -ge 1000 ]
 }
 
 {

From 9c36a8c1e84028c3682191983759eb09a9d8852b Mon Sep 17 00:00:00 2001
From: usa- <usa@rota.lv>
Date: Tue, 22 Sep 2026 16:18:07 +0300
Subject: [PATCH 4/5] Align startup log messages

---
 general/package/vtund-openipc/files/tunnel | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/general/package/vtund-openipc/files/tunnel b/general/package/vtund-openipc/files/tunnel
index 0e0aff6acc..586c363cbd 100755
--- a/general/package/vtund-openipc/files/tunnel
+++ b/general/package/vtund-openipc/files/tunnel
@@ -72,7 +72,7 @@ start() {
 	# Workaround for VTun bug described in https://bugzilla.redhat.com/show_bug.cgi?id=1462458#c26
 	run_cmd "" "" false daemon.err ifconfig $vtund_iface hw ether $default_mac mtu 1500 -multicast up || return 1
 
-	log_info "Starting the tunnel to $server"
+	log_info "Starting VTun connection to $server"
 
 	start_time=$(cat /proc/uptime | cut -d " " -f 1 | tr -d .)
 	vtund -n -f "$config_path" "$profile" "$server" >/dev/null 2>&1

From 43c1cf8e5d1eb17710261dda53784e8ac5c42a04 Mon Sep 17 00:00:00 2001
From: usa- <usa@rota.lv>
Date: Tue, 22 Sep 2026 16:27:28 +0300
Subject: [PATCH 5/5] Align startup log messages

---
 general/overlay/usr/sbin/wireguard | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/general/overlay/usr/sbin/wireguard b/general/overlay/usr/sbin/wireguard
index d9e4bdcdd4..c961768814 100755
--- a/general/overlay/usr/sbin/wireguard
+++ b/general/overlay/usr/sbin/wireguard
@@ -17,8 +17,6 @@ start() {
 			return 1
 		}
 
-	log_info "Starting WireGuard connection to $wg_endpoint"
-
 	{
 		echo "#"
 		echo "[Interface]"
@@ -33,6 +31,8 @@ start() {
 		echo "#"
 	} >"$config_path"
 
+	log_info "Starting WireGuard connection to $wg_endpoint"
+
 	run_cmd "Failed to apply WireGuard configuration" "" wg setconf wg0 "$config_path"
 
 	run_cmd "" "" false ip address add dev wg0 "$wg_address"