Beiträge von matefon

matefon · 18. April 2020

Found it: had to configure TRANSMISSION_HOME=/data/appdata/transmissionovpn

matefon · 18. April 2020

Can I add multiple LOCA_NETWORK variables? If I could 10.8.0.0/24 then I could reach it through VPN.

matefon · 18. April 2020

Oh, now I can't open 10.8.0.1:9093 with VPN connected.

matefon · 18. April 2020

Zitat von sabamimi

also....
in the PI4 do you have a folder /sharedfolders ?
what do you see there? (subfolders and files)

Yes, there is a sharedfolders on Pi.

matefon · 18. April 2020

Sorry for late answers.

It works!!!

Thanks for the help.

I will investigate if the tun device was the problem, or not. Torrents download, but I can't find the Transmission settings: where are they?

I wanna copy my stats there.

matefon · 18. April 2020

Zitat von sabamimi

OK dont stop it....,

Starting is OK: it is staying on starting for a long time and then it will say "healthy"

BUT,
you did not answer me :
1. - OPENVPN_CONFIG=de4-udp5
2. post the stack

If the web interface is working then is transmission working (downloading torrents)

Alles anzeigen

How long?

matefon · 18. April 2020

Sorry. I changed the config because I thought it would be better but nevermind.

Code

version: '2'
services:
 transmission:
  image: haugene/transmission-openvpn:latest-armhf
  container_name: vpntrans
  cap_add:
    - NET_ADMIN
  devices:
    - /dev/net/tun
  restart: unless-stopped
  ports:
    - 9093:9091
#    - 8888:8888
#  dns:
#    - 1.1.1.1
  #sysctls:
  #  - net.ipv6.conf.all.disable_ipv6=1
  volumes:
    - /etc/localtime:/etc/localtime:ro
    - /sharedfolders/:/data
    - /sharedfolders/appdata/vpntrans:/config
  environment:
    - OPENVPN_PROVIDER=VPNBOOK
    - OPENVPN_CONFIG=de4-udp5
    - OPENVPN_USERNAME=vpnbook
    - OPENVPN_PASSWORD=8AKctYE
    - OPENVPN_OPTS=--inactive 3600 --ping 10 --ping-exit 60
    - LOCAL_NETWORK=192.168.0.0/24
    - WEBPROXY_ENABLED=false
    - TRANSMISSION_PORT_FORWARDING_ENABLED=true
    - TRANSMISSION_PEER_PORT=51414
    - PUID=1000
    - PGID=100

Alles anzeigen

matefon · 18. April 2020

SIGTERM[hard,] received, process exiting, is not a bad thing, it is just because I stopped the container.

Web interface was not working last time when I tried... Now it does!

However, Portainer says it's "Starting"

matefon · 18. April 2020

Is this 0.0.0.0/1 correct at the end?

matefon · 18. April 2020

Now this is the output:

Code

Using OpenVPN provider: VPNBOOK,
Starting OpenVPN using config default.ovpn,
Setting OPENVPN credentials...,
adding route to local network 192.168.0.0/24 via 172.19.0.1 dev eth0,
Sat Apr 18 16:10:28 2020 OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019,
Sat Apr 18 16:10:28 2020 library versions: OpenSSL 1.1.1d  10 Sep 2019, LZO 2.10,
Sat Apr 18 16:10:28 2020 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.,
Sat Apr 18 16:10:28 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts,
Sat Apr 18 16:10:28 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]51.68.180.4:25000,
Sat Apr 18 16:10:28 2020 Socket Buffers: R=[163840->163840] S=[163840->163840],
Sat Apr 18 16:10:28 2020 UDP link local: (not bound),
Sat Apr 18 16:10:28 2020 UDP link remote: [AF_INET]51.68.180.4:25000,
Sat Apr 18 16:10:30 2020 TLS: Initial packet from [AF_INET]51.68.180.4:25000, sid=33bdde86 4e62f777,
Sat Apr 18 16:10:30 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this,
Sat Apr 18 16:10:30 2020 VERIFY OK: depth=1, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com,
Sat Apr 18 16:10:30 2020 VERIFY OK: depth=0, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com,
Sat Apr 18 16:10:30 2020 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA,
Sat Apr 18 16:10:30 2020 [vpnbook.com] Peer Connection Initiated with [AF_INET]51.68.180.4:25000,
Sat Apr 18 16:10:31 2020 SENT CONTROL [vpnbook.com]: 'PUSH_REQUEST' (status=1),
Sat Apr 18 16:10:33 2020 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS  213.186.33.99,dhcp-option DNS  91.239.100.100,route 10.10.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.10.0.166 10.10.0.165,peer-id 117,cipher AES-256-GCM',
Sat Apr 18 16:10:33 2020 OPTIONS IMPORT: timers and/or timeouts modified,
Sat Apr 18 16:10:33 2020 OPTIONS IMPORT: --ifconfig/up options modified,
Sat Apr 18 16:10:33 2020 OPTIONS IMPORT: route options modified,
Sat Apr 18 16:10:33 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified,
Sat Apr 18 16:10:33 2020 OPTIONS IMPORT: peer-id set,
Sat Apr 18 16:10:33 2020 OPTIONS IMPORT: adjusting link_mtu to 1625,
Sat Apr 18 16:10:33 2020 OPTIONS IMPORT: data channel crypto options modified,
Sat Apr 18 16:10:33 2020 Data Channel: using negotiated cipher 'AES-256-GCM',
Sat Apr 18 16:10:33 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key,
Sat Apr 18 16:10:33 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key,
Sat Apr 18 16:10:33 2020 ROUTE_GATEWAY 172.19.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:13:00:02,
Sat Apr 18 16:10:33 2020 TUN/TAP device tun0 opened,
Sat Apr 18 16:10:33 2020 TUN/TAP TX queue length set to 100,
Sat Apr 18 16:10:33 2020 /sbin/ip link set dev tun0 up mtu 1500,
Sat Apr 18 16:10:33 2020 /sbin/ip addr add dev tun0 local 10.10.0.166 peer 10.10.0.165,
Sat Apr 18 16:10:33 2020 /etc/openvpn/tunnelUp.sh tun0 1500 1553 10.10.0.166 10.10.0.165 init,
Up script executed with tun0 1500 1553 10.10.0.166 10.10.0.165 init,
Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 10.10.0.166,
Generating transmission settings.json from env variables,
sed'ing True to true,
Enforcing ownership on transmission config directories,
Applying permissions to transmission config directories,
Setting owner for transmission paths to 1000:100,
Setting permission for files (644) and directories (755),
Setting permission for watch directory (775) and its files (664),
,
-------------------------------------,
Transmission will run as,
-------------------------------------,
User name:   abc,
User uid:    1000,
User gid:    100,
-------------------------------------,
,
STARTING TRANSMISSION,
NO PORT UPDATER FOR THIS PROVIDER,
Transmission startup script complete.,
Sat Apr 18 16:10:36 2020 /sbin/ip route add 51.68.180.4/32 via 172.19.0.1,
Sat Apr 18 16:10:36 2020 /sbin/ip route add 0.0.0.0/1 via 10.10.0.165,
Sat Apr 18 16:10:36 2020 /sbin/ip route add 128.0.0.0/1 via 10.10.0.165,
Sat Apr 18 16:10:36 2020 /sbin/ip route add 10.10.0.1/32 via 10.10.0.165,
Sat Apr 18 16:10:36 2020 Initialization Sequence Completed,
Sat Apr 18 16:11:20 2020 event_wait : Interrupted system call (code=4),
Sat Apr 18 16:11:20 2020 /sbin/ip route del 10.10.0.1/32,
Sat Apr 18 16:11:20 2020 /sbin/ip route del 51.68.180.4/32,
Sat Apr 18 16:11:20 2020 /sbin/ip route del 0.0.0.0/1,
Sat Apr 18 16:11:20 2020 /sbin/ip route del 128.0.0.0/1,
Sat Apr 18 16:11:20 2020 Closing TUN/TAP interface,
Sat Apr 18 16:11:20 2020 /sbin/ip addr del dev tun0 local 10.10.0.166 peer 10.10.0.165,
Sat Apr 18 16:11:20 2020 /etc/openvpn/tunnelDown.sh tun0 1500 1553 10.10.0.166 10.10.0.165 init,
Sat Apr 18 16:11:20 2020 SIGTERM[hard,] received, process exiting,

Alles anzeigen

I think VPN is working now, I don't find it with ifconfig, but I think it's okay.

The problem is with transmission. I use port 9091 so vpntrans is listening to 9092.

51413 is also used for peer connections, so 51414 is used.

The different Docker IP is still strange...

matefon · 18. April 2020

With my VPN Server stopped (ifconfig does not show tun0 now):

Code

Using OpenVPN provider: VPNBOOK,
Supplied config default.ovpn.ovpn could not be found.,
Using default OpenVPN gateway for provider vpnbook,
Setting OPENVPN credentials...,
adding route to local network 192.168.0.0/24 via 172.19.0.1 dev eth0,
Sat Apr 18 16:07:03 2020 OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019,
Sat Apr 18 16:07:03 2020 library versions: OpenSSL 1.1.1d  10 Sep 2019, LZO 2.10,
Sat Apr 18 16:07:03 2020 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.,
Sat Apr 18 16:07:03 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts,
Sat Apr 18 16:07:03 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]51.68.180.4:25000,
Sat Apr 18 16:07:03 2020 Socket Buffers: R=[163840->163840] S=[163840->163840],
Sat Apr 18 16:07:03 2020 UDP link local: (not bound),
Sat Apr 18 16:07:03 2020 UDP link remote: [AF_INET]51.68.180.4:25000,
Sat Apr 18 16:07:03 2020 TLS: Initial packet from [AF_INET]51.68.180.4:25000, sid=9f34e728 0358097c,
Sat Apr 18 16:07:03 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this,
Sat Apr 18 16:07:03 2020 VERIFY OK: depth=1, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com,
Sat Apr 18 16:07:03 2020 VERIFY OK: depth=0, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com,
Sat Apr 18 16:07:03 2020 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA,
Sat Apr 18 16:07:03 2020 [vpnbook.com] Peer Connection Initiated with [AF_INET]51.68.180.4:25000,
Sat Apr 18 16:07:04 2020 SENT CONTROL [vpnbook.com]: 'PUSH_REQUEST' (status=1),
Sat Apr 18 16:07:04 2020 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS  213.186.33.99,dhcp-option DNS  91.239.100.100,route 10.10.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.10.0.142 10.10.0.141,peer-id 40,cipher AES-256-GCM',
Sat Apr 18 16:07:04 2020 OPTIONS IMPORT: timers and/or timeouts modified,
Sat Apr 18 16:07:04 2020 OPTIONS IMPORT: --ifconfig/up options modified,
Sat Apr 18 16:07:04 2020 OPTIONS IMPORT: route options modified,
Sat Apr 18 16:07:04 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified,
Sat Apr 18 16:07:04 2020 OPTIONS IMPORT: peer-id set,
Sat Apr 18 16:07:04 2020 OPTIONS IMPORT: adjusting link_mtu to 1625,
Sat Apr 18 16:07:04 2020 OPTIONS IMPORT: data channel crypto options modified,
Sat Apr 18 16:07:04 2020 Data Channel: using negotiated cipher 'AES-256-GCM',
Sat Apr 18 16:07:04 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key,
Sat Apr 18 16:07:04 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key,
Sat Apr 18 16:07:04 2020 ROUTE_GATEWAY 172.19.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:13:00:02,
Sat Apr 18 16:07:04 2020 TUN/TAP device tun0 opened,
Sat Apr 18 16:07:04 2020 TUN/TAP TX queue length set to 100,
Sat Apr 18 16:07:04 2020 /sbin/ip link set dev tun0 up mtu 1500,
Sat Apr 18 16:07:04 2020 /sbin/ip addr add dev tun0 local 10.10.0.142 peer 10.10.0.141,
Sat Apr 18 16:07:04 2020 /etc/openvpn/tunnelUp.sh tun0 1500 1553 10.10.0.142 10.10.0.141 init,
Up script executed with tun0 1500 1553 10.10.0.142 10.10.0.141 init,
Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 10.10.0.142,
Generating transmission settings.json from env variables,
sed'ing True to true,
Enforcing ownership on transmission config directories,
Applying permissions to transmission config directories,
Setting owner for transmission paths to 1000:100,
Setting permission for files (644) and directories (755),
Setting permission for watch directory (775) and its files (664),
,
-------------------------------------,
Transmission will run as,
-------------------------------------,
User name:   abc,
User uid:    1000,
User gid:    100,
-------------------------------------,
,
STARTING TRANSMISSION,
NO PORT UPDATER FOR THIS PROVIDER,
Transmission startup script complete.,
Sat Apr 18 16:07:07 2020 /sbin/ip route add 51.68.180.4/32 via 172.19.0.1,
Sat Apr 18 16:07:07 2020 /sbin/ip route add 0.0.0.0/1 via 10.10.0.141,
Sat Apr 18 16:07:07 2020 /sbin/ip route add 128.0.0.0/1 via 10.10.0.141,
Sat Apr 18 16:07:07 2020 /sbin/ip route add 10.10.0.1/32 via 10.10.0.141,
Sat Apr 18 16:07:07 2020 Initialization Sequence Completed,
Sat Apr 18 16:07:58 2020 event_wait : Interrupted system call (code=4),
Sat Apr 18 16:07:58 2020 /sbin/ip route del 10.10.0.1/32,
Sat Apr 18 16:07:58 2020 /sbin/ip route del 51.68.180.4/32,
Sat Apr 18 16:07:58 2020 /sbin/ip route del 0.0.0.0/1,
Sat Apr 18 16:07:58 2020 /sbin/ip route del 128.0.0.0/1,
Sat Apr 18 16:07:58 2020 Closing TUN/TAP interface,
Sat Apr 18 16:07:58 2020 /sbin/ip addr del dev tun0 local 10.10.0.142 peer 10.10.0.141,
Sat Apr 18 16:07:58 2020 /etc/openvpn/tunnelDown.sh tun0 1500 1553 10.10.0.142 10.10.0.141 init,
Sat Apr 18 16:07:58 2020 SIGTERM[hard,] received, process exiting,

Alles anzeigen

And the stack is

Code

version: '2'
services:
 transmission:
  image: haugene/transmission-openvpn:latest-armhf
  container_name: vpntrans
  cap_add:
    - NET_ADMIN
  devices:
    - /dev/net/tun
  restart: unless-stopped
  ports:
    - 9093:9091
#    - 8888:8888
#  dns:
#    - 1.1.1.1
  #sysctls:
  #  - net.ipv6.conf.all.disable_ipv6=1
  volumes:
    - /etc/localtime:/etc/localtime:ro
    - /sharedfolders/:/data
    - /sharedfolders/appdata/vpntrans:/config
  environment:
    - OPENVPN_PROVIDER=VPNBOOK
    - OPENVPN_CONFIG=default.ovpn
    - OPENVPN_USERNAME=vpnbook
    - OPENVPN_PASSWORD=8AKctYE
    - OPENVPN_OPTS=--inactive 3600 --ping 10 --ping-exit 60
    - LOCAL_NETWORK=192.168.0.0/24
    - WEBPROXY_ENABLED=false
    - TRANSMISSION_PORT_FORWARDING_ENABLED=true
    - TRANSMISSION_PEER_PORT=51414
    - PUID=1000
    - PGID=100

Alles anzeigen

Edit: now I see I don't have to put .ovpn to the filename of the config

matefon · 18. April 2020

With my VPN Server enabled I got this

Code

Using OpenVPN provider: VPNBOOK,
Supplied config pl226-udp53.ovpn.ovpn could not be found.,
Using default OpenVPN gateway for provider vpnbook,
Setting OPENVPN credentials...,
adding route to local network 192.168.0.0/24 via 172.19.0.1 dev eth0,
Sat Apr 18 16:01:10 2020 OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019,
Sat Apr 18 16:01:10 2020 library versions: OpenSSL 1.1.1d  10 Sep 2019, LZO 2.10,
Sat Apr 18 16:01:10 2020 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.,
Sat Apr 18 16:01:10 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts,
Sat Apr 18 16:01:10 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]51.68.180.4:25000,
Sat Apr 18 16:01:10 2020 Socket Buffers: R=[163840->163840] S=[163840->163840],
Sat Apr 18 16:01:10 2020 UDP link local: (not bound),
Sat Apr 18 16:01:10 2020 UDP link remote: [AF_INET]51.68.180.4:25000,
Sat Apr 18 16:01:10 2020 TLS: Initial packet from [AF_INET]51.68.180.4:25000, sid=0ab5fc4d 68210d62,
Sat Apr 18 16:01:10 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this,
Sat Apr 18 16:01:10 2020 VERIFY OK: depth=1, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com,
Sat Apr 18 16:01:10 2020 VERIFY OK: depth=0, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com,
Sat Apr 18 16:01:10 2020 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA,
Sat Apr 18 16:01:10 2020 [vpnbook.com] Peer Connection Initiated with [AF_INET]51.68.180.4:25000,
Sat Apr 18 16:01:12 2020 SENT CONTROL [vpnbook.com]: 'PUSH_REQUEST' (status=1),
Sat Apr 18 16:01:12 2020 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS  213.186.33.99,dhcp-option DNS  91.239.100.100,route 10.10.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.10.1.110 10.10.1.109,peer-id 108,cipher AES-256-GCM',
Sat Apr 18 16:01:12 2020 OPTIONS IMPORT: timers and/or timeouts modified,
Sat Apr 18 16:01:12 2020 OPTIONS IMPORT: --ifconfig/up options modified,
Sat Apr 18 16:01:12 2020 OPTIONS IMPORT: route options modified,
Sat Apr 18 16:01:12 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified,
Sat Apr 18 16:01:12 2020 OPTIONS IMPORT: peer-id set,
Sat Apr 18 16:01:12 2020 OPTIONS IMPORT: adjusting link_mtu to 1625,
Sat Apr 18 16:01:12 2020 OPTIONS IMPORT: data channel crypto options modified,
Sat Apr 18 16:01:12 2020 Data Channel: using negotiated cipher 'AES-256-GCM',
Sat Apr 18 16:01:12 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key,
Sat Apr 18 16:01:12 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key,
Sat Apr 18 16:01:12 2020 ROUTE_GATEWAY 172.19.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:13:00:02,
Sat Apr 18 16:01:12 2020 TUN/TAP device tun0 opened,
Sat Apr 18 16:01:12 2020 TUN/TAP TX queue length set to 100,
Sat Apr 18 16:01:12 2020 /sbin/ip link set dev tun0 up mtu 1500,
Sat Apr 18 16:01:12 2020 /sbin/ip addr add dev tun0 local 10.10.1.110 peer 10.10.1.109,
Sat Apr 18 16:01:12 2020 /etc/openvpn/tunnelUp.sh tun0 1500 1553 10.10.1.110 10.10.1.109 init,
Up script executed with tun0 1500 1553 10.10.1.110 10.10.1.109 init,
Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 10.10.1.110,
Generating transmission settings.json from env variables,
sed'ing True to true,
Enforcing ownership on transmission config directories,
Applying permissions to transmission config directories,
Setting owner for transmission paths to 1000:100,
Setting permission for files (644) and directories (755),
Setting permission for watch directory (775) and its files (664),
,
-------------------------------------,
Transmission will run as,
-------------------------------------,
User name:   abc,
User uid:    1000,
User gid:    100,
-------------------------------------,
,
STARTING TRANSMISSION,
NO PORT UPDATER FOR THIS PROVIDER,
Transmission startup script complete.,
Sat Apr 18 16:01:14 2020 /sbin/ip route add 51.68.180.4/32 via 172.19.0.1,
Sat Apr 18 16:01:14 2020 /sbin/ip route add 0.0.0.0/1 via 10.10.1.109,
Sat Apr 18 16:01:14 2020 /sbin/ip route add 128.0.0.0/1 via 10.10.1.109,
Sat Apr 18 16:01:14 2020 /sbin/ip route add 10.10.0.1/32 via 10.10.1.109,
Sat Apr 18 16:01:14 2020 Initialization Sequence Completed,
Sat Apr 18 16:01:42 2020 event_wait : Interrupted system call (code=4),
Sat Apr 18 16:01:42 2020 /sbin/ip route del 10.10.0.1/32,
Sat Apr 18 16:01:42 2020 /sbin/ip route del 51.68.180.4/32,
Sat Apr 18 16:01:42 2020 /sbin/ip route del 0.0.0.0/1,
Sat Apr 18 16:01:42 2020 /sbin/ip route del 128.0.0.0/1,
Sat Apr 18 16:01:42 2020 Closing TUN/TAP interface,
Sat Apr 18 16:01:42 2020 /sbin/ip addr del dev tun0 local 10.10.1.110 peer 10.10.1.109,
Sat Apr 18 16:01:42 2020 /etc/openvpn/tunnelDown.sh tun0 1500 1553 10.10.1.110 10.10.1.109 init,
Sat Apr 18 16:01:42 2020 SIGTERM[hard,] received, process exiting,

Alles anzeigen

The gist:

Code

Supplied config pl226-udp53.ovpn.ovpn could not be found.,

matefon · 18. April 2020

Somewhy

Code

Using OpenVPN provider: VPNBOOK,
Supplied config /data/vpnbook-pl226-udp53.ovpn could not be found.,
Using default OpenVPN gateway for provider vpnbook,
Setting OPENVPN credentials...,
adding route to local network 192.168.0.0/24 via 172.19.0.1 dev eth0,
Sat Apr 18 14:27:19 2020 OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019,
Sat Apr 18 14:27:19 2020 library versions: OpenSSL 1.1.1d  10 Sep 2019, LZO 2.10,
Sat Apr 18 14:27:19 2020 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.,
Sat Apr 18 14:27:19 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts,
Sat Apr 18 14:27:19 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]51.68.180.4:25000,
Sat Apr 18 14:27:19 2020 Socket Buffers: R=[163840->163840] S=[163840->163840],
Sat Apr 18 14:27:19 2020 UDP link local: (not bound),
Sat Apr 18 14:27:19 2020 UDP link remote: [AF_INET]51.68.180.4:25000,
Sat Apr 18 14:27:21 2020 TLS: Initial packet from [AF_INET]51.68.180.4:25000, sid=50d9a325 48dc1284,
Sat Apr 18 14:27:21 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this,
Sat Apr 18 14:27:21 2020 VERIFY OK: depth=1, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com,
Sat Apr 18 14:27:21 2020 VERIFY OK: depth=0, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com,
Sat Apr 18 14:27:23 2020 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA,
Sat Apr 18 14:27:23 2020 [vpnbook.com] Peer Connection Initiated with [AF_INET]51.68.180.4:25000,
Sat Apr 18 14:27:24 2020 SENT CONTROL [vpnbook.com]: 'PUSH_REQUEST' (status=1),
Sat Apr 18 14:27:24 2020 AUTH: Received control message: AUTH_FAILED,

Alles anzeigen

Code

Sat Apr 18 14:27:24 2020 AUTH: Received control message: AUTH_FAILED,

matefon · 18. April 2020

Oh, I think I found the problem: I didn't copy any config files to appdata.

Where can I put my .ovpn file to?

matefon · 18. April 2020

It is very strange:

this vpntrans container is not connected to the same Docker network as my other containers.

matefon · 18. April 2020

VPNBOOK doesn't really point at any of config use, but now I'll try something:

OPENVPN_CONFIG=vpnbook-pl226-udp53

or

OPENVPN_CONFIG=PL226.vpnbook.com

matefon · 18. April 2020

I don't understand this IP Mask thing, so I added what you and others added: /24

matefon · 18. April 2020

192.168.0.78

matefon · 18. April 2020

Tried now.

After half minute of waiting I got this:

Code

Using OpenVPN provider: VPNBOOK,
No VPN configuration provided. Using default.,
Setting OPENVPN credentials...,
adding route to local network 192.168.0.0/24 via 172.19.0.1 dev eth0,
Sat Apr 18 12:44:45 2020 OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019,
Sat Apr 18 12:44:45 2020 library versions: OpenSSL 1.1.1d  10 Sep 2019, LZO 2.10,
Sat Apr 18 12:44:45 2020 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.,
Sat Apr 18 12:44:45 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts,
Sat Apr 18 12:44:45 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]51.68.180.4:25000,
Sat Apr 18 12:44:45 2020 Socket Buffers: R=[163840->163840] S=[163840->163840],
Sat Apr 18 12:44:45 2020 UDP link local: (not bound),
Sat Apr 18 12:44:45 2020 UDP link remote: [AF_INET]51.68.180.4:25000,
Sat Apr 18 12:44:59 2020 TLS: Initial packet from [AF_INET]51.68.180.4:25000, sid=e00d48a0 d7176eb6,
Sat Apr 18 12:44:59 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this,
Sat Apr 18 12:44:59 2020 VERIFY OK: depth=1, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com,
Sat Apr 18 12:44:59 2020 VERIFY OK: depth=0, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com,
Sat Apr 18 12:45:02 2020 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA,
Sat Apr 18 12:45:02 2020 [vpnbook.com] Peer Connection Initiated with [AF_INET]51.68.180.4:25000,
Sat Apr 18 12:45:03 2020 SENT CONTROL [vpnbook.com]: 'PUSH_REQUEST' (status=1),
Sat Apr 18 12:45:05 2020 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS  213.186.33.99,dhcp-option DNS  91.239.100.100,route 10.10.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.10.0.242 10.10.0.241,peer-id 83,cipher AES-256-GCM',
Sat Apr 18 12:45:05 2020 OPTIONS IMPORT: timers and/or timeouts modified,
Sat Apr 18 12:45:05 2020 OPTIONS IMPORT: --ifconfig/up options modified,
Sat Apr 18 12:45:05 2020 OPTIONS IMPORT: route options modified,
Sat Apr 18 12:45:05 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified,
Sat Apr 18 12:45:05 2020 OPTIONS IMPORT: peer-id set,
Sat Apr 18 12:45:05 2020 OPTIONS IMPORT: adjusting link_mtu to 1625,
Sat Apr 18 12:45:05 2020 OPTIONS IMPORT: data channel crypto options modified,
Sat Apr 18 12:45:05 2020 Data Channel: using negotiated cipher 'AES-256-GCM',
Sat Apr 18 12:45:05 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key,
Sat Apr 18 12:45:05 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key,
Sat Apr 18 12:45:05 2020 ROUTE_GATEWAY 172.19.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:13:00:02,
Sat Apr 18 12:45:05 2020 TUN/TAP device tun0 opened,
Sat Apr 18 12:45:05 2020 TUN/TAP TX queue length set to 100,
Sat Apr 18 12:45:05 2020 /sbin/ip link set dev tun0 up mtu 1500,
Sat Apr 18 12:45:05 2020 /sbin/ip addr add dev tun0 local 10.10.0.242 peer 10.10.0.241,
Sat Apr 18 12:45:05 2020 /etc/openvpn/tunnelUp.sh tun0 1500 1553 10.10.0.242 10.10.0.241 init,
Up script executed with tun0 1500 1553 10.10.0.242 10.10.0.241 init,
Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 10.10.0.242,
Generating transmission settings.json from env variables,
sed'ing True to true,
Enforcing ownership on transmission config directories,
Applying permissions to transmission config directories,
Setting owner for transmission paths to 1000:100,
Setting permission for files (644) and directories (755),
Setting permission for watch directory (775) and its files (664),
,
-------------------------------------,
Transmission will run as,
-------------------------------------,
User name:   abc,
User uid:    1000,
User gid:    100,
-------------------------------------,
,
STARTING TRANSMISSION,
NO PORT UPDATER FOR THIS PROVIDER,
Transmission startup script complete.,
Sat Apr 18 12:45:08 2020 /sbin/ip route add 51.68.180.4/32 via 172.19.0.1,
Sat Apr 18 12:45:08 2020 /sbin/ip route add 0.0.0.0/1 via 10.10.0.241,
Sat Apr 18 12:45:08 2020 /sbin/ip route add 128.0.0.0/1 via 10.10.0.241,
Sat Apr 18 12:45:08 2020 /sbin/ip route add 10.10.0.1/32 via 10.10.0.241,
Sat Apr 18 12:45:08 2020 Initialization Sequence Completed,
Sat Apr 18 12:45:47 2020 event_wait : Interrupted system call (code=4),
Sat Apr 18 12:45:47 2020 /sbin/ip route del 10.10.0.1/32,
Sat Apr 18 12:45:47 2020 /sbin/ip route del 51.68.180.4/32,
Sat Apr 18 12:45:47 2020 /sbin/ip route del 0.0.0.0/1,
Sat Apr 18 12:45:47 2020 /sbin/ip route del 128.0.0.0/1,
Sat Apr 18 12:45:47 2020 Closing TUN/TAP interface,
Sat Apr 18 12:45:47 2020 /sbin/ip addr del dev tun0 local 10.10.0.242 peer 10.10.0.241,
Sat Apr 18 12:45:47 2020 /etc/openvpn/tunnelDown.sh tun0 1500 1553 10.10.0.242 10.10.0.241 init,
Sat Apr 18 12:45:47 2020 SIGTERM[hard,] received, process exiting,

Alles anzeigen

From this:

Code

version: '2'
services:
 transmission:
  image: haugene/transmission-openvpn:latest-armhf
  container_name: vpntrans
  cap_add:
    - NET_ADMIN
  devices:
    - /dev/net/tun
  restart: unless-stopped
  ports:
    - 9093:9091
#    - 8888:8888
#  dns:
#    - 1.1.1.1
  #sysctls:
  #  - net.ipv6.conf.all.disable_ipv6=1
  volumes:
    - /etc/localtime:/etc/localtime:ro
    - /sharedfolders/:/data
    - /sharedfolders/appdata/vpntrans:/config
  environment:
    - OPENVPN_PROVIDER=VPNBOOK
  #  - OPENVPN_CONFIG=fr-par_udp
    - OPENVPN_USERNAME=vpnbook
    - OPENVPN_PASSWORD=8AKctYE
    - OPENVPN_OPTS=--inactive 3600 --ping 10 --ping-exit 60
    - LOCAL_NETWORK=192.168.0.0/24
    - WEBPROXY_ENABLED=false
    - TRANSMISSION_PORT_FORWARDING_ENABLED=true
    - TRANSMISSION_PEER_PORT=51414
    - PUID=1000
    - PGID=100

Alles anzeigen

matefon · 18. April 2020

I used this interface, and put dumb-init /etc/openvpn/start.sh in the Command section.

Beiträge von matefon

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors

Transmission Openvpn Run Errors