guillaumedsde / alpine-qbittorrent-openvpn

qBittorrent docker container with OpenVPN client running as unprivileged user on alpine linux
https://guillaumedsde.gitlab.io/alpine-qbittorrent-openvpn/
GNU General Public License v3.0
216 stars 40 forks source link

Surfshark or root issue? #10

Closed riddertommie closed 4 years ago

riddertommie commented 4 years ago

I have following problem wen i start the container.

[s6-init] making user provided files available at /var/run/s6/etc...exited 0. [s6-init] ensuring user provided files have correct perms...exited 0. [fix-attrs.d] applying ownership & permissions fixes... [fix-attrs.d] done. [cont-init.d] executing container initialization scripts... [cont-init.d] 01-setup-permissions: executing... [cont-init.d] 01-setup-permissions: exited 0. [cont-init.d] 02-setup-openvpn: executing... /var/run/s6/etc/cont-init.d/02-setup-openvpn: line 19: openvpn: Operation not permitted INFO: Trying to use OpenVPN provider: SURFSHARK INFO: Found OpenVPN configuration: "nl-ams-st001_udp" for provider "SURFSHARK" using it [cont-init.d] 02-setup-openvpn: exited 0. [cot-init.d] 03-setup-iptables: executing... iptables v1.8.4 (legacy): can't initialize iptables table filter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.4 (legacy): can't initialize iptables tablefilter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.4 (legacy): can't initialize iptables table nat': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.4 (legacy): can't initialize iptables tablenat': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.4 (legacy): can't initialize iptables table filter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.4 (legacy): can't initialize iptables tablefilter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.4 (legacy): can't initialize iptables table filter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.4 (legacy): can't initialize iptables tablefilter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.4 (legacy): can't initialize iptables table filter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. getsockopt failed strangely: Operation not permitted getsockopt failed strangely: Operation not permitted getsockopt failed strangely: Operation not permitted getsockopt failed strangely: Operation not permitted iptables v1.8.4 (legacy): can't initialize iptables tablefilter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.4 (legacy): can't initialize iptables table filter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.4 (legacy): can't initialize iptables tablefilter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.4 (legacy): can't initialize iptables table filter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. getsockopt failed strangely: Operation not permitted getsockopt failed strangely: Operation not permitted iptables v1.8.4 (legacy): can't initialize iptables tablefilter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.4 (legacy): can't initialize iptables table `filter': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. [cont-init.d] 03-setup-iptables: exited 3. [cont-finish.d] executing container finish scripts... [cont-finish.d] done. [s6-finish] waiting for services. [s6-finish] sending all processes the TERM signal. [s6-finish] sending all processes the KILL signal and exiting.

guillaumedsde commented 4 years ago

Hi @riddertommie , are you using docker-compose? if yes, try adding these lines to the service: (I've updated the README to show a full example)

cap_add:
   - NET_ADMIN
riddertommie commented 4 years ago

Why did i not think about that........

Yes I'm using docker-compose and now it seems to be working...

Thanks!

guillaumedsde commented 4 years ago

no bother, I forgot to include it in the docs :)