Hi FThuijs, Hi jp316,
It’s the option “user nobody group nobody” casuing the ERROR. User nobody doesn’t have permisson to change route table.
After some strace I found that route table operation is in child process, ie calling /usr/sbin/ip, and the time fork is not squenced before the time when process’s uid set to nobody. So some route may be added successfully, some failed. And route del operation is always after process’s uid set being nobody, so route del always fail.
Simply remove "“user nobody group nobody” in your ovpn file, it’s fine to run openvpn as root.