This is most likely after effect of Spectre and Meltdown Kernel patches rolled out for CentOS. My OpenVPN container could not access /dev/net/tun device even though the Run Script had necessary parameters. Fix setsebool -P domain_kernel_load_modules=1