On Sun, Sep 27, 2020 at 8:24 PM KeithG <ys3al35l@gmail.com> wrote:


On Thu, Sep 24, 2020 at 7:56 AM KeithG <ys3al35l@gmail.com> wrote:
Daniel,

I pulled the latest connman and was able to run monitor-connman. The attached log is what I got when I:
1) stopped connman
2) started connman
3) turned off the radio
4) waited until my phone and other devices were online with that SSID
5) typed 'connmanctl scan wifi' got no return
6) typed ctrl c
7) typed 'connmanctl services'

I noted that after I initiated the scan even though connman reported nothing, it had already begun the connection and connected. We have noticed that if we type 'iwctl station wlan0 scan' or, apparently 'connmanctl scan wifi' that it will initiate and complete a scan. I wonder if the fact that connman 1.38 never returns with a scan complete message is a hint? The monitor-connman.txt is what showed in the terminal when I ran the script. The monitor-connman-journal.txt is what appeared in the journal for u- connman. At the same time the journalctl -iwd shows this:

Sep 24 07:29:14 keith-dell iwd[405]: Received Deauthentication event, reason: 3, from_ap: false
Sep 24 07:39:08 keith-dell iwd[405]: Received Deauthentication event, reason: 3, from_ap: true
Sep 24 07:39:08 keith-dell iwd[405]: Connected BSS not in scan results
Sep 24 07:39:08 keith-dell iwd[405]: authentication timed out

Is there some sort of timing problem?

Keith

On Wed, Sep 23, 2020 at 2:18 AM Daniel Wagner <wagi@monom.org> wrote:
On Tue, Sep 22, 2020 at 08:59:57AM -0500, KeithG wrote:
> I cannot find the monitor-iwd script.

This script is part of the iwd sources.

> I found the monitor-connman script,
> but when I try to run the monitor-connman script, I get a gobject error:
>
> $ ./monitor-connman
> Traceback (most recent call last):
>   File "./monitor-connman", line 3, in <module>
>     import gobject
> ModuleNotFoundError: No module named 'gobject'

The Python support for GLib gobject was always a bit troublesome and it
seems it aged really badly.

> This is even though I believe that python-gobject is installed and I can
> run the hello.py script on this page:
> https://pygobject.readthedocs.io/en/latest/getting_started.html
> python 3.8.5 and
> $ pacman -Q | grep gobject
> gobject-introspection 1.66.0-1
> gobject-introspection-runtime 1.66.0-1
> pygobject-devel 3.36.1-1
> python-gobject 3.36.1-1

I have the same problem with Python 3 on my distro. It still works with
Python 2. The test script need to use the dynamic version of the GLib
binding. See the other patch.

> I am now running on a pretty common dell laptop with an intel wifi card and
> get the same behavior. iwd 1.9 connman 1.38. I connected via connman then
> powered down the radio on the router then back on then had to reconnect by
> typing in teh password.  The journal of this event is attached.
>
> I did notice that in order to reconnect on this laptop (Arch Linux x86_64)
> that I had to type in the password again though I was just connected before
> I turned off the SSID. The journal running /usr/bin/connmand -n -d
> plugins/iwd.c:src/service.c though this event is attached.

I'll try to reproduce it later.

Thanks,
Daniel

I see this with all my Arch Linux installs. I made a basic install on an RPi with nothing but the base system and connman and iwd and a few other programs. When I use connman to manage the wifi interface and run ./monitor-iwd, nothing ever displays even when the wifi goes down. I'd show the tect capture, but it is blank. When I run systemd-networks/dhcpcd with iwd, and have the network go down, I get a lot of messages and it reconnects when the radio comes back online:
# ./monitor-iwd
{Station} [/net/connman/iwd/0/3] State = disconnected
{Network} [/net/connman/iwd/0/3/73706733_psk] Connected = False
{Station} [/net/connman/iwd/0/3] Scanning = True
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/52756e65417564696f4150_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/4154546a435336706932_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/4e4554474541525f455854_open]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/456476656e7475726573_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/4e4554474541523938_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/73706733_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/4d65617374657761_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/456476656e747572657333_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/73706732_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/415454785a4951347761_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/486f757365537461726b3031_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/456c4a656665_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/426964656e486172726973_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/4d4f544f524f4c412d4645304431_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/415454654865544b4932_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/4e4554474541523633_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/48414e4e41_psk]
{Station} [/net/connman/iwd/0/3] Scanning = False
{Station} [/net/connman/iwd/0/3] Scanning = True
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/52756e65417564696f4150_psk]
      Name = RuneAudioAP
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/48414e4e41_psk]
      Name = HANNA
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/456c4a656665_psk]
      Name = ElJefe
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/486f757365537461726b3031_psk]
      Name = HouseStark01
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/4e4554474541523633_psk]
      Name = NETGEAR63
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/456476656e7475726573_psk]
      Name = Edventures
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/4e4554474541523938_psk]
      Name = NETGEAR98
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/415454654865544b4932_psk]
      Name = ATTeHeTKI2
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/4974204275726e73205768656e204950_psk]
      Name = It Burns When IP
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/48414e4e4135_psk]
      Name = HANNA5
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/456476656e747572657333_psk]
      Name = Edventures3
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Station} [/net/connman/iwd/0/3] Scanning = False
{Station} [/net/connman/iwd/0/3] Scanning = True
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/426964656e486172726973_psk]
      Name = BidenHarris
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Station} [/net/connman/iwd/0/3] Scanning = False
{Station} [/net/connman/iwd/0/3] Scanning = True
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/415454785a4951347761_psk]
      Name = ATTxZIQ4wa
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/4d4f544f524f4c412d4645304431_psk]
      Name = MOTOROLA-FE0D1
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/4e4554474541525f455854_open]
      Name = NETGEAR_EXT
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = open
{Station} [/net/connman/iwd/0/3] Scanning = False
{Station} [/net/connman/iwd/0/3] Scanning = True
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/4e4554474541525f455854_open]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/4d4f544f524f4c412d4645304431_psk]
{Removed net.connman.iwd.Network} [/net/connman/iwd/0/3/48414e4e4135_psk]
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/73706733_psk]
      Name = spg3
      Connected = True
      Device = /net/connman/iwd/0/3
      Type = psk
      KnownNetwork = /net/connman/iwd/73706733_psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/73706732_psk]
      Name = spg2
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Added net.connman.iwd.Network} [/net/connman/iwd/0/3/4e4554474541523336_psk]
      Name = NETGEAR36
      Connected = False
      Device = /net/connman/iwd/0/3
      Type = psk
{Station} [/net/connman/iwd/0/3] Scanning = False
{Station} [/net/connman/iwd/0/3] State = connecting
{Station} [/net/connman/iwd/0/3] ConnectedNetwork = /net/connman/iwd/0/3/73706733_psk
{Network} [/net/connman/iwd/0/3/73706733_psk] Connected = True
{Station} [/net/connman/iwd/0/3] State = connected
{KnownNetwork} [/net/connman/iwd/73706733_psk] LastConnectedTime = 2020-09-28T01:10:45Z

The attached journal shows this for downing the radio when connman was controlling the network. It ignores it. My guess is there is some strange setting in Arch Linux which stops this from working when connman is managing things. What more can I do to help? I see this same behavior on my arm devices (RPis) and x86_64 full desktop installs.

Keith

 
Daniel,

I woke up this morning and I think I get it now. I need to run monitor-iwd when I run networkd/dhcpcd and monitor-connman when connman is managing the connections. Well, with the same process, this is the report from monitor-connman when connman is managing the interface (I am monitoring it over ssh by logging into the ethernet IP address):

# ./monitor-connman
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706732_managed_psk] Strength = 62
{Service} [/net/connman/service/wifi_b827eb52ccd0_52756e65417564696f4150_managed_psk] Strength = 56
{Service} [/net/connman/service/wifi_b827eb52ccd0_415454785a4951347761_managed_psk] Strength = 22
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523938_managed_psk] Strength = 21
{Service} [/net/connman/service/wifi_b827eb52ccd0_44617272656e333231_managed_psk] Strength = 15
{Service} [/net/connman/service/wifi_b827eb52ccd0_464249205375727665696c6c616e63652056616e_managed_psk] Strength = 15
{Service} [/net/connman/service/wifi_b827eb52ccd0_52756e65417564696f4150_managed_psk] Strength = 55
{Service} [/net/connman/service/wifi_b827eb52ccd0_41545458495849537069_managed_psk] Strength = 34
{Service} [/net/connman/service/wifi_b827eb52ccd0_486f757365537461726b3031_managed_psk] Strength = 19
{Service} [/net/connman/service/wifi_b827eb52ccd0_456c4a656665_managed_psk] Strength = 19
{Service} [/net/connman/service/wifi_b827eb52ccd0_4154546a435336706932_managed_psk] Strength = 19
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523938_managed_psk] Strength = 19
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523633_managed_psk] Strength = 20
{Service} [/net/connman/service/wifi_b827eb52ccd0_456476656e747572657333_managed_psk] Strength = 19
{Service} [/net/connman/service/wifi_b827eb52ccd0_44617272656e333231_managed_psk] Strength = 18
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523336_managed_psk] Strength = 15
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] State = association
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] State = configuration
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Ethernet = { Method=auto Interface=wlan0 Address=B8:27:EB:52:CC:D0 MTU=1500 }
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Ethernet = { Method=auto Interface=wlan0 Address=B8:27:EB:52:CC:D0 MTU=1500 }
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Timeservers = [ ]
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] State = ready
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Favorite = 1
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Domains = [ ]
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Proxy = { }
{Technology} [/net/connman/technology/wifi] Connected = 1

{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] IPv6 = { Method=auto Address=2600:1700:4320:6caf:ba27:ebff:fe52:ccd0 PrefixLength=64 Privacy=disabled }
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Domains = [ griders ]
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Timeservers = [ ]
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] IPv4 = { Method=dhcp Address=192.168.2.41 Netmask=255.255.255.0 }
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Nameservers = [ 192.168.2.3 xxxx:xxxx:xxxx:xxxx:ba27:ebff:fe0b:9be6 ]
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Domains = [ ]
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Timeservers = [ ]
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Timeservers = [ ]
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] State = disconnect
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Domains = [ ]
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Proxy = { }
{Technology} [/net/connman/technology/wifi] Connected = 0

{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Timeservers = [ ]
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Timeservers = [ ]
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] State = idle
{Service} [/net/connman/service/ethernet_b827eb079985_cable] IPv4 = { Method=dhcp Address=192.168.2.193 Netmask=255.255.255.0 }
{Service} [/net/connman/service/ethernet_b827eb079985_cable] IPv4 = { Method=dhcp Address=192.168.2.193 Netmask=255.255.255.0 Gateway=192.168.2.1 }
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Nameservers = [ ]

{Service} [/net/connman/service/wifi_b827eb52ccd0_41545458495849537069_managed_psk] Strength = 15
{Service} [/net/connman/service/wifi_b827eb52ccd0_41545458495849537069_managed_psk] Strength = 33
{Service} [/net/connman/service/wifi_b827eb52ccd0_41545458495849537069_managed_psk] Strength = 37
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523938_managed_psk] Strength = 25
{Service} [/net/connman/service/wifi_b827eb52ccd0_456c4a656665_managed_psk] Strength = 22
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523633_managed_psk] Strength = 24
{Service} [/net/connman/service/wifi_b827eb52ccd0_48414e4e41_managed_psk] Strength = 19
{Service} [/net/connman/service/wifi_b827eb52ccd0_415454654865544b4932_managed_psk] Strength = 15
{Service} [/net/connman/service/wifi_b827eb52ccd0_464249205375727665696c6c616e63652056616e_managed_psk] Strength = 17
{Service} [/net/connman/service/wifi_b827eb52ccd0_41545458495849537069_managed_psk] Strength = 33
{Service} [/net/connman/service/wifi_b827eb52ccd0_456476656e7475726573_managed_psk] Strength = 29
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523633_managed_psk] Strength = 21
{Service} [/net/connman/service/wifi_b827eb52ccd0_456c4a656665_managed_psk] Strength = 20
{Service} [/net/connman/service/wifi_b827eb52ccd0_48414e4e41_managed_psk] Strength = 17
{Service} [/net/connman/service/wifi_b827eb52ccd0_426964656e486172726973_managed_psk] Strength = 17
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523336_managed_psk] Strength = 17
{Service} [/net/connman/service/wifi_b827eb52ccd0_415454654865544b4932_managed_psk] Strength = 19
{Service} [/net/connman/service/wifi_b827eb52ccd0_415454785a4951347761_managed_psk] Strength = 19
{Service} [/net/connman/service/wifi_b827eb52ccd0_4154546a435336706932_managed_psk] Strength = 16
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523938_managed_psk] Strength = 18
{Service} [/net/connman/service/wifi_b827eb52ccd0_456476656e747572657333_managed_psk] Strength = 16
{Service} [/net/connman/service/wifi_b827eb52ccd0_4d65617374657761_managed_psk] Strength = 16
{Service} [/net/connman/service/wifi_b827eb52ccd0_464249205375727665696c6c616e63652056616e_managed_psk] Strength = 16
{Service} [/net/connman/service/wifi_b827eb52ccd0_41545458495849537069_managed_psk] Strength = 36
{Service} [/net/connman/service/wifi_b827eb52ccd0_456476656e7475726573_managed_psk] Strength = 30
{Service} [/net/connman/service/wifi_b827eb52ccd0_48414e4e41_managed_psk] Strength = 20
{Service} [/net/connman/service/wifi_b827eb52ccd0_415454785a4951347761_managed_psk] Strength = 23
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523633_managed_psk] Strength = 19
{Service} [/net/connman/service/wifi_b827eb52ccd0_4154546a435336706932_managed_psk] Strength = 18
{Service} [/net/connman/service/wifi_b827eb52ccd0_456476656e747572657333_managed_psk] Strength = 19
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523336_managed_psk] Strength = 15
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523938_managed_psk] Strength = 17
{Service} [/net/connman/service/wifi_b827eb52ccd0_4d65617374657761_managed_psk] Strength = 15
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541525f455854_managed_none] Strength = 13
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk] Strength = 44
{Service} [/net/connman/service/wifi_b827eb52ccd0_73706732_managed_psk] Strength = 59
{Service} [/net/connman/service/wifi_b827eb52ccd0_41545458495849537069_managed_psk] Strength = 37
{Service} [/net/connman/service/wifi_b827eb52ccd0_4e4554474541523633_managed_psk] Strength = 21
{Service} [/net/connman/service/wifi_b827eb52ccd0_456476656e747572657333_managed_psk] Strength = 20
{Service} [/net/connman/service/wifi_b827eb52ccd0_464249205375727665696c6c616e63652056616e_managed_psk] Strength = 17
(while typing this I notice that it scanned again, sees the SSID, but does not initiate a connection...

I can see in the log when I use the connmanctl interface to connect to the SSID then I can see it disconnect, then that it scans and 'sees' it again, but it never re-connects even after it scans again. Looking at the difference between the monitor-* logs, it looks like connman, somehow does not recognize that it knows that network.

When I query connman, it looks like it is supposed to autoconnect:
connmanctl> services --properties wifi_b827eb52ccd0_73706733_managed_psk
/net/connman/service/wifi_b827eb52ccd0_73706733_managed_psk
  Type = wifi
  Security = [ psk ]
  State = idle
  Strength = 45
  Favorite = True
  Immutable = False
  AutoConnect = True
  Name = spg3
  Ethernet = [ Method=auto ]
  IPv4 = [  ]
  IPv4.Configuration = [ Method=dhcp ]
  IPv6 = [  ]
  IPv6.Configuration = [ Method=auto, Privacy=disabled ]
  Nameservers = [  ]
  Nameservers.Configuration = [  ]
  Timeservers = [  ]
  Timeservers.Configuration = [  ]
  Domains = [  ]
  Domains.Configuration = [  ]
  Proxy = [  ]
  Proxy.Configuration = [  ]
  mDNS = False
  mDNS.Configuration = False
  Provider = [  ]

The system:
Arch Linux aarch64 on an RPi, kernel 5.4.65-1-ARCH, iwd 1.9-1, connman 1.38-1
systemd 246.6-1-arch running in system mode. (+PAM +AUDIT -SELINUX -IMA -APPARMOR +SMACK -SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +ZSTD +SECCOMP +BLKID +ELFUTILS +KMOD +IDN2 -IDN +PCRE2 default-hierarchy=hybrid)

I get the same response on all Arch Linux systems: armv6 armv7 and x86_64. Also, if I reboot with nothing connected to the ethernet port, it will connect to the wifi SSID, but only at boot. If I connect the ethernet cable then ssh into it and type 'connmanctl scan wifi', the prompt does not return though the journalctl log shows that it did scan and that it did 'see' the SSID but it will not connect.

Sep 28 10:28:09 gretarune connmand[211]: plugins/iwd.c:object_added() net.connman.iwd.Network /net/connman/iwd/0/3/73706733_psk
Sep 28 10:28:05 gretarune connmand[211]: plugins/iwd.c:station_property_change() /net/connman/iwd/0/3 scanning 1

If I restart connman it does reconnect to the SSID (systemctl restart connman). I tried adding imd.service to the After= line in the connman.service file and that made no change to the behavior.

My connman.service file:
[Unit]
Description=Connection service
DefaultDependencies=false
Conflicts=shutdown.target
RequiresMountsFor=/var/lib/connman
After=dbus.service network-pre.target systemd-sysusers.service
Before=network.target multi-user.target shutdown.target
Wants=network.target

[Service]
Type=dbus
BusName=net.connman
Restart=on-failure
ExecStart=/usr/bin/connmand -n -d plugins/iwd.c
StandardOutput=null
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SYS_TIME CAP_SYS_MODULE CAP_SYS_ADMIN
ProtectHome=true
ProtectSystem=true

[Install]
WantedBy=multi-user.target

Thanks for any help.

Keith