[fix] use new service interface
[enh] ensure tun is available before install