The unit on the Before= side of network-pre.target also has to pull it in as a dependency: https://www.freedesktop.org/software/systemd/man/systemd.special.html#network-pre.target Fixes QubesOS/qubes-issues#5570