Quote from metadata.xml: <flag name="hardened">Use iproute2 instead of ifconfig to grab an IP address</flag> Imho this flag should be called "iproute2" (like in openvpn). Reproducible: Always
iproute2 is required if you run hardened. (Bug 258343)
You are right, i missed it, thanks.