binhex / arch-qbittorrentvpn

Docker build script for Arch Linux base with qBittorrent, Privoxy and OpenVPN
GNU General Public License v3.0
445 stars 47 forks source link

Unable to launch with OMV5 compose file #46

Open pedromartinez11 opened 4 years ago

pedromartinez11 commented 4 years ago

Hi. I'm trying to use docker compose with open media vault 5 (omv5). I'm using portainer to deploy a docker compose as a "stack". I tried to replicate the PIA example in the readme. Not sure if my compose is the issue?

I'm seeing these errors in the logs:

insmod: ERROR: could not load module /lib/modules/tun.ko: No such file or directory,
insmod: ERROR: could not load module /lib/modules/iptable_mangle.ko: No such file or directory,

Here's my compose:

---
version: "2"
services:
  qbittorrentvpn:
    image: binhex/arch-qbittorrentvpn
    container_name: qbittorrentvpn
    privileged: true
    cap_add:
    - NET_ADMIN
    environment:
      - VPN_ENABLED=true
      - VPN_USER=REDACTED
      - VPN_PASS=REDACTED
      - VPN_PROV=pia
      - STRICT_PORT_FORWARD=yes
      - ENABLE_PRIVOXY=yes
      - LAN_NETWORK=192.168.1.0/24
      - NAME_SERVERS=209.222.18.222,84.200.69.80,37.235.1.174,1.1.1.1,209.222.18.218,37.235.1.177,84.200.70.40,1.0.0.1
      - ADDITIONAL_PORTS=1234
      - DEBUG=false
      - WEBUI_PORT=8080
      - UMASK=000
      - PUID=998
      - PGID=100
    ports:
      - 6881:6881
      - 6881:6881/udp
      - 8080:8080
      - 8118:8118
    volumes:
      - /srv/dev-disk-by-label-dataExt2tb/Config/QBittorrentVPN2:/config
      - /srv/dev-disk-by-label-dataExt2tb/media:/downloads
      - /srv/dev-disk-by-label-dataExt2tb/media:/data
      - /etc/localtime:/etc/localtime:ro
    restart: unless-stopped

More logs:

Created by...,
___.   .__       .__                   ,
\_ |__ |__| ____ |  |__   ____ ___  ___,
 | __ \|  |/    \|  |  \_/ __ \\  \/  /,
 | \_\ \  |   |  \   Y  \  ___/ >    < ,
 |___  /__|___|  /___|  /\___  >__/\_ \,
     \/        \/     \/     \/      \/,
   https://hub.docker.com/u/binhex/,
,
2020-07-05 01:56:58.021447 [info] System information Linux d642fc91cd64 5.6.0-0.bpo.2-amd64 #1 SMP Debian 5.6.14-2~bpo10+1 (2020-06-09) x86_64 GNU/Linux,
2020-07-05 01:56:58.046613 [info] OS_ARCH defined as 'x86-64',
2020-07-05 01:56:58.071663 [info] PUID defined as '998',
2020-07-05 01:56:58.098246 [info] PGID defined as '100',
2020-07-05 01:56:58.132368 [info] UMASK defined as '000',
2020-07-05 01:56:58.156068 [info] Setting permissions recursively on volume mappings...,
2020-07-05 01:56:58.228107 [info] VPN_ENABLED defined as 'yes',
2020-07-05 01:56:58.256508 [info] OpenVPN config file (ovpn extension) is located at /config/openvpn/DEFrankfurt.ovpn,
2020-07-05 01:56:58.311006 [info] VPN remote line defined as 'remote 185.220.70.154 8080',
2020-07-05 01:56:58.334851 [info] VPN_REMOTE defined as '185.220.70.154',
2020-07-05 01:56:58.361823 [info] VPN_PORT defined as '8080',
2020-07-05 01:56:58.388864 [info] VPN_PROTOCOL defined as 'udp',
2020-07-05 01:56:58.413784 [info] VPN_DEVICE_TYPE defined as 'tun0',
2020-07-05 01:56:58.438200 [info] VPN_PROV defined as 'pia',
2020-07-05 01:56:58.463592 [info] LAN_NETWORK defined as '192.168.1.0/24',
2020-07-05 01:56:58.488011 [info] NAME_SERVERS defined as '209.222.18.222,84.200.69.80,37.235.1.174,1.1.1.1,209.222.18.218,37.235.1.177,84.200.70.40,1.0.0.1',
2020-07-05 01:56:58.512086 [info] VPN_USER defined as 'REDACTED',
2020-07-05 01:56:58.536307 [info] VPN_PASS defined as 'REDACTED',
2020-07-05 01:56:58.560489 [info] VPN_OPTIONS not defined (via -e VPN_OPTIONS),
2020-07-05 01:56:58.584231 [info] STRICT_PORT_FORWARD defined as 'yes',
2020-07-05 01:56:58.607819 [info] ENABLE_PRIVOXY defined as 'yes',
2020-07-05 01:56:58.631383 [info] ADDITIONAL_PORTS defined as '1234',
2020-07-05 01:56:58.655024 [info] WEBUI_PORT defined as '8080',
2020-07-05 01:56:58.682141 [info] Deleting files in /tmp (non recursive)...,
2020-07-05 01:56:58.705205 [info] Starting Supervisor...,
2020-07-05 01:56:58,832 INFO Included extra file "/etc/supervisor/conf.d/qbittorrent.conf" during parsing,
2020-07-05 01:56:58,832 INFO Set uid to user 0 succeeded,
2020-07-05 01:56:58,834 INFO supervisord started with pid 6,
2020-07-05 01:56:59,838 INFO spawned: 'start-script' with pid 169,
2020-07-05 01:56:59,841 INFO spawned: 'watchdog-script' with pid 170,
2020-07-05 01:56:59,841 INFO reaped unknown pid 7 (exit status 0),
2020-07-05 01:56:59,850 DEBG 'start-script' stdout output:,
[info] VPN is enabled, beginning configuration of VPN,
,
2020-07-05 01:56:59,850 INFO success: start-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs),
2020-07-05 01:56:59,850 INFO success: watchdog-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs),
2020-07-05 01:56:59,850 DEBG 'watchdog-script' stdout output:,
[info] qBittorrent config file already exists, skipping copy,
[info] Removing session lock file (if it exists)...,
,
2020-07-05 01:56:59,897 DEBG 'start-script' stdout output:,
[info] Default route for container is 172.21.0.1,
,
2020-07-05 01:56:59,900 DEBG 'start-script' stdout output:,
[info] Adding 209.222.18.222 to /etc/resolv.conf,
,
2020-07-05 01:56:59,904 DEBG 'start-script' stdout output:,
[info] Adding 84.200.69.80 to /etc/resolv.conf,
,
2020-07-05 01:56:59,907 DEBG 'start-script' stdout output:,
[info] Adding 37.235.1.174 to /etc/resolv.conf,
,
2020-07-05 01:56:59,911 DEBG 'start-script' stdout output:,
[info] Adding 1.1.1.1 to /etc/resolv.conf,
,
2020-07-05 01:56:59,915 DEBG 'start-script' stdout output:,
[info] Adding 209.222.18.218 to /etc/resolv.conf,
,
2020-07-05 01:56:59,919 DEBG 'start-script' stdout output:,
[info] Adding 37.235.1.177 to /etc/resolv.conf,
,
2020-07-05 01:56:59,923 DEBG 'start-script' stdout output:,
[info] Adding 84.200.70.40 to /etc/resolv.conf,
,
2020-07-05 01:56:59,926 DEBG 'start-script' stdout output:,
[info] Adding 1.0.0.1 to /etc/resolv.conf,
,
2020-07-05 01:56:59,928 DEBG 'start-script' stdout output:,
185.220.70.154,
,
2020-07-05 01:56:59,933 DEBG 'start-script' stdout output:,
[info] Attempting to load tun kernel module...,
,
2020-07-05 01:56:59,934 DEBG 'start-script' stderr output:,
modprobe: FATAL: Module tun not found in directory /lib/modules/5.6.0-0.bpo.2-amd64,
,
2020-07-05 01:56:59,934 DEBG 'start-script' stdout output:,
[warn] Unable to load tun kernel module using modprobe, trying insmod...,
,
2020-07-05 01:56:59,935 DEBG 'start-script' stderr output:,
insmod: ERROR: could not load module /lib/modules/tun.ko: No such file or directory,
,
2020-07-05 01:56:59,935 DEBG 'start-script' stdout output:,
[warn] Unable to load tun kernel module, assuming its dynamically loaded,
,
2020-07-05 01:56:59,942 DEBG 'start-script' stdout output:,
[info] Attempting to load iptable_mangle module...,
,
2020-07-05 01:56:59,943 DEBG 'start-script' stderr output:,
modprobe: FATAL: Module iptable_mangle not found in directory /lib/modules/5.6.0-0.bpo.2-amd64,
,
2020-07-05 01:56:59,943 DEBG 'start-script' stdout output:,
[warn] Unable to load iptable_mangle module using modprobe, trying insmod...,
,
2020-07-05 01:56:59,944 DEBG 'start-script' stderr output:,
insmod: ERROR: could not load module /lib/modules/iptable_mangle.ko: No such file or directory,
,
2020-07-05 01:56:59,944 DEBG 'start-script' stdout output:,
[warn] Unable to load iptable_mangle module, you will not be able to connect to the applications Web UI or Privoxy outside of your LAN,
,
2020-07-05 01:56:59,945 DEBG 'start-script' stdout output:,
[info] unRAID/Ubuntu users: Please attempt to load the module by executing the following on your host: '/sbin/modprobe iptable_mangle',
[info] Synology users: Please attempt to load the module by executing the following on your host: 'insmod /lib/modules/iptable_mangle.ko',
,
2020-07-05 01:56:59,961 DEBG 'start-script' stdout output:,
[info] Docker network defined as    172.21.0.0/16,
,
2020-07-05 01:56:59,964 DEBG 'start-script' stdout output:,
[info] Adding 192.168.1.0/24 as route via docker eth0,
,
2020-07-05 01:56:59,965 DEBG 'start-script' stdout output:,
[info] ip route defined as follows...,
--------------------,
,
2020-07-05 01:56:59,965 DEBG 'start-script' stdout output:,
default via 172.21.0.1 dev eth0 ,
172.21.0.0/16 dev eth0 proto kernel scope link src 172.21.0.2 ,
192.168.1.0/24 via 172.21.0.1 dev eth0 ,
,
2020-07-05 01:56:59,965 DEBG 'start-script' stdout output:,
--------------------,
,
2020-07-05 01:56:59,984 DEBG 'start-script' stdout output:,
[info] Adding additional incoming port 1234 for eth0,
,
2020-07-05 01:57:00,013 DEBG 'start-script' stdout output:,
[info] Adding additional outgoing port 1234 for eth0,
,
2020-07-05 01:57:00,025 DEBG 'start-script' stdout output:,
[info] iptables defined as follows...,
--------------------,
,
2020-07-05 01:57:00,026 DEBG 'start-script' stdout output:,
-P INPUT DROP,
-P FORWARD DROP,
-P OUTPUT DROP,
-A INPUT -s 172.21.0.0/16 -d 172.21.0.0/16 -j ACCEPT,
-A INPUT -i eth0 -p udp -m udp --sport 8080 -j ACCEPT,
-A INPUT -i eth0 -p tcp -m tcp --dport 8080 -j ACCEPT,
-A INPUT -i eth0 -p tcp -m tcp --sport 8080 -j ACCEPT,
-A INPUT -i eth0 -p tcp -m tcp --dport 1234 -j ACCEPT,
-A INPUT -i eth0 -p tcp -m tcp --sport 1234 -j ACCEPT,
-A INPUT -s 192.168.1.0/24 -i eth0 -p tcp -m tcp --dport 8080 -j ACCEPT,
-A INPUT -s 192.168.1.0/24 -d 172.21.0.0/16 -i eth0 -p tcp -j ACCEPT,
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT,
-A INPUT -i lo -j ACCEPT,
-A INPUT -i tun0 -j ACCEPT,
-A OUTPUT -s 172.21.0.0/16 -d 172.21.0.0/16 -j ACCEPT,
-A OUTPUT -o eth0 -p udp -m udp --dport 8080 -j ACCEPT,
-A OUTPUT -o eth0 -p tcp -m tcp --dport 8080 -j ACCEPT,
-A OUTPUT -o eth0 -p tcp -m tcp --sport 8080 -j ACCEPT,
-A OUTPUT -o eth0 -p tcp -m tcp --dport 1234 -j ACCEPT,
-A OUTPUT -o eth0 -p tcp -m tcp --sport 1234 -j ACCEPT,
-A OUTPUT -d 192.168.1.0/24 -o eth0 -p tcp -m tcp --sport 8080 -j ACCEPT,
-A OUTPUT -s 172.21.0.0/16 -d 192.168.1.0/24 -o eth0 -p tcp -j ACCEPT,
-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT,
-A OUTPUT -o lo -j ACCEPT,
-A OUTPUT -o tun0 -j ACCEPT,
,
2020-07-05 01:57:00,027 DEBG 'start-script' stdout output:,
--------------------,
,
2020-07-05 01:57:00,028 DEBG 'start-script' stdout output:,
fo] Starting OpenVPN...,
,
2020-07-05 01:57:00,033 DEBG 'start-script' stdout output:,
Sun Jul  5 01:57:00 2020 WARNING: file 'credentials.conf' is group or others accessible,
Sun Jul  5 01:57:00 2020 OpenVPN 2.4.9 [git:makepkg/9b0dafca6c50b8bb+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 20 2020,
Sun Jul  5 01:57:00 2020 library versions: OpenSSL 1.1.1g  21 Apr 2020, LZO 2.10,
,
2020-07-05 01:57:00,033 DEBG 'start-script' stdout output:,
[info] OpenVPN started,
,
2020-07-05 01:57:00,033 DEBG 'start-script' stdout output:,
Sun Jul  5 01:57:00 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts,
,
2020-07-05 01:57:00,034 DEBG 'start-script' stdout output:,
Sun Jul  5 01:57:00 2020 CRL: loaded 1 CRLs from file [[INLINE]],
,
2020-07-05 01:57:00,035 DEBG 'start-script' stdout output:,
Sun Jul  5 01:57:00 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]185.220.70.154:8080,
Sun Jul  5 01:57:00 2020 UDP link local (bound): [AF_INET][undef]:53,
Sun Jul  5 01:57:00 2020 UDP link remote: [AF_INET]185.220.70.154:8080,
Tyfosho commented 1 year ago

Were you ever able to resolve this? I'm having the same problem