Would a kind soul give me instruction on how to apply this patch and test it locally too? - I'm still very new to nixos :D

@nathandao The simplest way would be to rebuild your system directly from this branch (which is based on nixos-unstable with my commit added on top). You can do that with:

$ sudo nixos-rebuild (boot|switch) -I nixpkgs=https://api.github.com/repos/NixOS/nixpkgs/tarball/pull/97438/head

Slightly more involved would require that you have a local nixpkgs checkout on your machine. You could then create a new branch that uses the exact nixpkgs revision you want to use, checkout this PR locally, cherry-pick the change to your branch and rebuild with:

$ sudo nixos-rebuild (boot|switch) -I nixpkgs=/path/to/your/checkout

Thanks @pbogdan! Rebuilt my system based on the branch and it works! : )

Needs backport to 20.09

Backported in 159760a

sbin should also be part of the search path too:

@@ -11,7 +11,8 @@
   makeOpenVPNJob = cfg: name:
     let

-      path = makeBinPath (getAttr "openvpn-${name}" config.systemd.services).path;
+      packages = (getAttr "openvpn-${name}" config.systemd.services).path;
+      path = "${makeBinPath packages}:${makeSearchPathOutput "bin" "sbin" packages}";

       upScript = ''
         #! /bin/sh

It's a nixpkgs convention, enforced by the standard fixupPhase, to move binaries from /sbin to /bin and I can't see a single usage of dontMoveSbin in nixpkgs tree. Do you have an example when your patch would be necessary (not that adding /sbin would hurt AFAICT)?

I copied that snippet from the systemd module, so I assumed that /sbin was included for a reason, but if the binaries are always copied over then it shouldn't matter anyways.