search

haugene / docker-transmission-openvpn

Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
GNU General Public License v3.0
4.11k stars 1.21k forks source link

Cannot acces Transmission WebUI when using a Wireguard VPN #1825

Closed friki67 closed 3 years ago

friki67 commented 3 years ago

Before creating this issue I have:

Container version & last working release

latest, x86_64

Describe the problem

I can't access webgui when accessing through VPN. My WireGuard server is in a DD-WRT router.
I can access from LAN. What I get is a timeout. "The connection has timed out".
As I said it is working from the LAN, but not from VPN.
Portainer, Radarr, etc can be accessed without problem

My LAN is 192.168.100.0, my GW 192.168.100.1/24, the ip of the server 192.168.100.61/24

I'm trying to access from my phone and from another computer in other location (192.168.1.10).

The VPN assigns me an ip in the range 10.4.0.0/24 (10.4.0.3 for the external computer).

I suppose that network configuration is ok because I can access other services from phone and external computer.

Describe the steps you have tried to solve the problem

I have enabled rpc-whitelist trying to include my vpn ip range, LAN and docker bridge network too.

    "rpc-whitelist": "127.0.0.1,::1,10.4.0.*,192.168.100.*,172.17.0.*",
    "rpc-whitelist-enabled": true,

No difference, it timesouts

The log I'm sending is with whitelist disabled.

Add your docker run command or docker-compose file or env details

{
    "AppArmorProfile": "docker-default",
    "Args": [
        "/etc/openvpn/start.sh"
    ],
    "Config": {
        "AttachStderr": false,
        "AttachStdin": false,
        "AttachStdout": false,
        "Cmd": [
            "dumb-init",
            "/etc/openvpn/start.sh"
        ],
        "Domainname": "",
        "Entrypoint": null,
        "Env": [
            "PUID=1000",
            "PGID=1000",
            "OPENVPN_PROVIDER=IVACY",
            "OPENVPN_CONFIG=NorwayOsloUDP",
            "OPENVPN_USERNAME=Xxxx",
            "OPENVPN_PASSWORD=Xxxx",
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "GLOBAL_APPLY_PERMISSIONS=true",
            "TRANSMISSION_HOME=/data/transmission-home",
            "TRANSMISSION_RPC_PORT=9091",
            "TRANSMISSION_DOWNLOAD_DIR=/data/completed",
            "TRANSMISSION_INCOMPLETE_DIR=/data/incomplete",
            "TRANSMISSION_WATCH_DIR=/data/watch",
            "CREATE_TUN_DEVICE=true",
            "ENABLE_UFW=false",
            "UFW_ALLOW_GW_NET=false",
            "UFW_DISABLE_IPTABLES_REJECT=false",
            "WEBPROXY_ENABLED=false",
            "WEBPROXY_PORT=8888",
            "LOG_TO_STDOUT=false",
            "HEALTH_CHECK_HOST=google.com",
            "REVISION=32bcf7522d1ecf9428cefe9044e12f9af5e30476",
            "LOCAL_NETWORK=192.168.100.0/24",
            "UFW_EXTRA_PORTS=",
            "DROP_DEFAULT_ROUTE=",
            "WEBPROXY_USERNAME=",
            "WEBPROXY_PASSWORD="
        ],
        "ExposedPorts": {
            "9091/tcp": {}
        },
        "Healthcheck": {
            "Interval": 60000000000,
            "Test": [
                "CMD-SHELL",
                "/etc/scripts/healthcheck.sh"
            ]
        },
        "Hostname": "bf9d8e734143",
        "Image": "haugene/transmission-openvpn:latest",
        "Labels": {
            "autoheal": "true",
            "org.opencontainers.image.revision": "32bcf7522d1ecf9428cefe9044e12f9af5e30476",
            "org.opencontainers.image.source": "https://github.com/haugene/docker-transmission-openvpn"
        },
        "OnBuild": null,
        "OpenStdin": false,
        "StdinOnce": false,
        "Tty": false,
        "User": "",
        "Volumes": {
            "/config": {},
            "/data": {}
        },
        "WorkingDir": ""
    },
    "Created": "2021-05-05T10:34:31.369970091Z",
    "Driver": "overlay2",
    "ExecIDs": [
        "faba15b665458607b83e02ee911b71ce6399f5a1d0ca79337776374043f466dd"
    ],
    "GraphDriver": {
        "Data": {
            "LowerDir": "/mnt/dietpi_userdata/docker-data/overlay2/508e1e614c4cb16d59b01b30a516918bbda8be84cec829f031bc4c2d31097b16-init/diff:/mnt/dietpi_userdata/docker-data/overlay2/babc985ff4bc4a9434b52114f22c7504d74ab1faaf78f91f7ce0716d9b907a52/diff:/mnt/dietpi_userdata/docker-data/overlay2/2e912de9f963959afc917b452391d3a531edb15992ea22531b41f92a8fa0e25c/diff:/mnt/dietpi_userdata/docker-data/overlay2/c2ddb90cecc346785b0cf5d3442a0e392c5b0c58464884bdf60ce6d072410a3a/diff:/mnt/dietpi_userdata/docker-data/overlay2/137dabdaff00edfbcb3a9af4633c9e3ee1ef3e53e688b37a39594eea350b9d5b/diff:/mnt/dietpi_userdata/docker-data/overlay2/981a8a6540879c82e7b456fb1f4c51bbe9c869308c40c0f98a919f1cf0d41b15/diff:/mnt/dietpi_userdata/docker-data/overlay2/692330ae44e3f7879a0e5fd4e8dccbf7dbddeb69d7a2c9101d4ed24311ea3c27/diff",
            "MergedDir": "/mnt/dietpi_userdata/docker-data/overlay2/508e1e614c4cb16d59b01b30a516918bbda8be84cec829f031bc4c2d31097b16/merged",
            "UpperDir": "/mnt/dietpi_userdata/docker-data/overlay2/508e1e614c4cb16d59b01b30a516918bbda8be84cec829f031bc4c2d31097b16/diff",
            "WorkDir": "/mnt/dietpi_userdata/docker-data/overlay2/508e1e614c4cb16d59b01b30a516918bbda8be84cec829f031bc4c2d31097b16/work"
        },
        "Name": "overlay2"
    },
    "HostConfig": {
        "AutoRemove": false,
        "Binds": [
            "transmission-openvpn-config:/config",
            "/mnt/storage/downloads:/data"
        ],
        "BlkioDeviceReadBps": null,
        "BlkioDeviceReadIOps": null,
        "BlkioDeviceWriteBps": null,
        "BlkioDeviceWriteIOps": null,
        "BlkioWeight": 0,
        "BlkioWeightDevice": null,
        "CapAdd": [
            "AUDIT_WRITE",
            "CHOWN",
            "DAC_OVERRIDE",
            "FOWNER",
            "FSETID",
            "KILL",
            "MKNOD",
            "NET_ADMIN",
            "NET_BIND_SERVICE",
            "NET_RAW",
            "SETFCAP",
            "SETGID",
            "SETPCAP",
            "SETUID",
            "SYS_CHROOT"
        ],
        "CapDrop": [
            "AUDIT_CONTROL",
            "BLOCK_SUSPEND",
            "DAC_READ_SEARCH",
            "IPC_LOCK",
            "IPC_OWNER",
            "LEASE",
            "LINUX_IMMUTABLE",
            "MAC_ADMIN",
            "MAC_OVERRIDE",
            "NET_BROADCAST",
            "SYSLOG",
            "SYS_ADMIN",
            "SYS_BOOT",
            "SYS_MODULE",
            "SYS_NICE",
            "SYS_PACCT",
            "SYS_PTRACE",
            "SYS_RAWIO",
            "SYS_RESOURCE",
            "SYS_TIME",
            "SYS_TTY_CONFIG",
            "WAKE_ALARM"
        ],
        "Cgroup": "",
        "CgroupParent": "",
        "CgroupnsMode": "host",
        "ConsoleSize": [
            0,
            0
        ],
        "ContainerIDFile": "",
        "CpuCount": 0,
        "CpuPercent": 0,
        "CpuPeriod": 0,
        "CpuQuota": 0,
        "CpuRealtimePeriod": 0,
        "CpuRealtimeRuntime": 0,
        "CpuShares": 0,
        "CpusetCpus": "",
        "CpusetMems": "",
        "DeviceCgroupRules": null,
        "DeviceRequests": null,
        "Devices": [],
        "Dns": [],
        "DnsOptions": [],
        "DnsSearch": [],
        "ExtraHosts": [],
        "GroupAdd": null,
        "IOMaximumBandwidth": 0,
        "IOMaximumIOps": 0,
        "Init": false,
        "IpcMode": "private",
        "Isolation": "",
        "KernelMemory": 0,
        "KernelMemoryTCP": 0,
        "Links": null,
        "LogConfig": {
            "Config": {},
            "Type": "journald"
        },
        "MaskedPaths": [
            "/proc/asound",
            "/proc/acpi",
            "/proc/kcore",
            "/proc/keys",
            "/proc/latency_stats",
            "/proc/timer_list",
            "/proc/timer_stats",
            "/proc/sched_debug",
            "/proc/scsi",
            "/sys/firmware"
        ],
        "Memory": 0,
        "MemoryReservation": 0,
        "MemorySwap": 0,
        "MemorySwappiness": null,
        "NanoCpus": 0,
        "NetworkMode": "bridge",
        "OomKillDisable": false,
        "OomScoreAdj": 0,
        "PidMode": "",
        "PidsLimit": null,
        "PortBindings": {
            "9091/tcp": [
                {
                    "HostIp": "",
                    "HostPort": "9091"
                }
            ]
        },
        "Privileged": false,
        "PublishAllPorts": false,
        "ReadonlyPaths": [
            "/proc/bus",
            "/proc/fs",
            "/proc/irq",
            "/proc/sys",
            "/proc/sysrq-trigger"
        ],
        "ReadonlyRootfs": false,
        "RestartPolicy": {
            "MaximumRetryCount": 0,
            "Name": "unless-stopped"
        },
        "Runtime": "runc",
        "SecurityOpt": null,
        "ShmSize": 67108864,
        "UTSMode": "",
        "Ulimits": null,
        "UsernsMode": "",
        "VolumeDriver": "",
        "VolumesFrom": null
    },
    "HostnamePath": "/mnt/dietpi_userdata/docker-data/containers/51c5580283f9e41438a0aabbeb610ee32982ca97d7905b8650d55c41240fb592/hostname",
    "HostsPath": "/mnt/dietpi_userdata/docker-data/containers/51c5580283f9e41438a0aabbeb610ee32982ca97d7905b8650d55c41240fb592/hosts",
    "Id": "51c5580283f9e41438a0aabbeb610ee32982ca97d7905b8650d55c41240fb592",
    "Image": "sha256:31301f2dffbcaf132a4ea97fd69f3c8036840752e248fee6dacf42e28cbea439",
    "LogPath": "",
    "MountLabel": "",
    "Mounts": [
        {
            "Destination": "/config",
            "Driver": "local",
            "Mode": "z",
            "Name": "transmission-openvpn-config",
            "Propagation": "",
            "RW": true,
            "Source": "/mnt/dietpi_userdata/docker-data/volumes/transmission-openvpn-config/_data",
            "Type": "volume"
        },
        {
            "Destination": "/data",
            "Mode": "",
            "Propagation": "rprivate",
            "RW": true,
            "Source": "/mnt/storage/downloads",
            "Type": "bind"
        }
    ],
    "Name": "/transmission-openvpn",
    "NetworkSettings": {
        "Bridge": "",
        "EndpointID": "7981ab14eb247e9a20a6cb7184ec04e284c0a8dcb5e341b0425d1132841f3c3b",
        "Gateway": "172.17.0.1",
        "GlobalIPv6Address": "",
        "GlobalIPv6PrefixLen": 0,
        "HairpinMode": false,
        "IPAddress": "172.17.0.6",
        "IPPrefixLen": 16,
        "IPv6Gateway": "",
        "LinkLocalIPv6Address": "",
        "LinkLocalIPv6PrefixLen": 0,
        "MacAddress": "02:42:ac:11:00:06",
        "Networks": {
            "bridge": {
                "Aliases": null,
                "DriverOpts": null,
                "EndpointID": "7981ab14eb247e9a20a6cb7184ec04e284c0a8dcb5e341b0425d1132841f3c3b",
                "Gateway": "172.17.0.1",
                "GlobalIPv6Address": "",
                "GlobalIPv6PrefixLen": 0,
                "IPAMConfig": {},
                "IPAddress": "172.17.0.6",
                "IPPrefixLen": 16,
                "IPv6Gateway": "",
                "Links": null,
                "MacAddress": "02:42:ac:11:00:06",
                "NetworkID": "574195c429e52ec31d6b0dca5cc9042b349b9fdb2dfd9a3dedb4ae1f77971767"
            }
        },
        "Ports": {
            "9091/tcp": [
                {
                    "HostIp": "0.0.0.0",
                    "HostPort": "9091"
                },
                {
                    "HostIp": "::",
                    "HostPort": "9091"
                }
            ]
        },
        "SandboxID": "f709ee7495aff524f1468538f46b8f0a54a90db7093ffe8de25ca8fff6415104",
        "SandboxKey": "/var/run/docker/netns/f709ee7495af",
        "SecondaryIPAddresses": null,
        "SecondaryIPv6Addresses": null
    },
    "Path": "dumb-init",
    "Platform": "linux",
    "Portainer": {
        "ResourceControl": {
            "Id": 78,
            "ResourceId": "51c5580283f9e41438a0aabbeb610ee32982ca97d7905b8650d55c41240fb592",
            "SubResourceIds": [],
            "Type": 1,
            "UserAccesses": [],
            "TeamAccesses": [],
            "Public": false,
            "AdministratorsOnly": true,
            "System": false
        }
    },
    "ProcessLabel": "",
    "ResolvConfPath": "/mnt/dietpi_userdata/docker-data/containers/51c5580283f9e41438a0aabbeb610ee32982ca97d7905b8650d55c41240fb592/resolv.conf",
    "RestartCount": 0,
    "State": {
        "Dead": false,
        "Error": "",
        "ExitCode": 0,
        "FinishedAt": "2021-05-06T17:48:40.423205791Z",
        "Health": {
            "FailingStreak": 0,
            "Log": [
                {
                    "End": "2021-05-07T09:54:48.315604216+01:00",
                    "ExitCode": 0,
                    "Output": "PING google.com (172.217.21.174): 56 data bytes\n64 bytes from 172.217.21.174: seq=0 ttl=56 time=86.588 ms\n64 bytes from 172.217.21.174: seq=1 ttl=56 time=86.366 ms\n\n--- google.com ping statistics ---\n2 packets transmitted, 2 packets received, 0% packet loss\nround-trip min/avg/max = 86.366/86.477/86.588 ms\nNetwork is up\nOpenvpn and transmission-daemon processes are running\n",
                    "Start": "2021-05-07T09:54:46.98487262+01:00"
                },
                {
                    "End": "2021-05-07T09:55:49.659828979+01:00",
                    "ExitCode": 0,
                    "Output": "PING google.com (172.217.21.174): 56 data bytes\n64 bytes from 172.217.21.174: seq=0 ttl=56 time=86.407 ms\n64 bytes from 172.217.21.174: seq=1 ttl=56 time=86.568 ms\n\n--- google.com ping statistics ---\n2 packets transmitted, 2 packets received, 0% packet loss\nround-trip min/avg/max = 86.407/86.487/86.568 ms\nNetwork is up\nOpenvpn and transmission-daemon processes are running\n",
                    "Start": "2021-05-07T09:55:48.322848155+01:00"
                },
                {
                    "End": "2021-05-07T09:56:51.015456518+01:00",
                    "ExitCode": 0,
                    "Output": "PING google.com (172.217.21.174): 56 data bytes\n64 bytes from 172.217.21.174: seq=0 ttl=56 time=86.592 ms\n64 bytes from 172.217.21.174: seq=1 ttl=56 time=86.607 ms\n\n--- google.com ping statistics ---\n2 packets transmitted, 2 packets received, 0% packet loss\nround-trip min/avg/max = 86.592/86.599/86.607 ms\nNetwork is up\nOpenvpn and transmission-daemon processes are running\n",
                    "Start": "2021-05-07T09:56:49.667269018+01:00"
                },
                {
                    "End": "2021-05-07T09:57:52.364118125+01:00",
                    "ExitCode": 0,
                    "Output": "PING google.com (172.217.21.174): 56 data bytes\n64 bytes from 172.217.21.174: seq=0 ttl=56 time=86.657 ms\n64 bytes from 172.217.21.174: seq=1 ttl=56 time=85.754 ms\n\n--- google.com ping statistics ---\n2 packets transmitted, 2 packets received, 0% packet loss\nround-trip min/avg/max = 85.754/86.205/86.657 ms\nNetwork is up\nOpenvpn and transmission-daemon processes are running\n",
                    "Start": "2021-05-07T09:57:51.02272365+01:00"
                },
                {
                    "End": "2021-05-07T09:58:53.700696058+01:00",
                    "ExitCode": 0,
                    "Output": "PING google.com (172.217.21.174): 56 data bytes\n64 bytes from 172.217.21.174: seq=0 ttl=56 time=86.621 ms\n64 bytes from 172.217.21.174: seq=1 ttl=56 time=86.441 ms\n\n--- google.com ping statistics ---\n2 packets transmitted, 2 packets received, 0% packet loss\nround-trip min/avg/max = 86.441/86.531/86.621 ms\nNetwork is up\nOpenvpn and transmission-daemon processes are running\n",
                    "Start": "2021-05-07T09:58:52.37148451+01:00"
                }
            ],
            "Status": "healthy"
        },
        "OOMKilled": false,
        "Paused": false,
        "Pid": 31052,
        "Restarting": false,
        "Running": true,
        "StartedAt": "2021-05-06T17:51:03.797098129Z",
        "Status": "running"
    }
}

Logs

2021-05-10 07:17:01 WARNING: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]',
2021-05-10 07:17:01 [Secure-Server] Peer Connection Initiated with [AF_INET]185.125.170.170:53,
2021-05-10 07:17:02 TUN/TAP device tun0 opened,
2021-05-10 07:17:02 /sbin/ip link set dev tun0 up mtu 1500,
2021-05-10 07:17:02 /sbin/ip link set dev tun0 up,
2021-05-10 07:17:02 /sbin/ip addr add dev tun0 141.101.146.226/28,
2021-05-10 07:17:02 /etc/openvpn/tunnelUp.sh tun0 1500 1553 141.101.146.226 255.255.255.240 init,
Up script executed with tun0 1500 1553 141.101.146.226 255.255.255.240 init,
Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 141.101.146.226,
Updating Transmission settings.json with values from env variables,
Using existing settings.json for Transmission /data/transmission-home/settings.json,
Overriding bind-address-ipv4 because TRANSMISSION_BIND_ADDRESS_IPV4 is set to 141.101.146.226,
Overriding download-dir because TRANSMISSION_DOWNLOAD_DIR is set to /data/completed,
Overriding incomplete-dir because TRANSMISSION_INCOMPLETE_DIR is set to /data/incomplete,
Overriding rpc-port because TRANSMISSION_RPC_PORT is set to 9091,
Overriding watch-dir because TRANSMISSION_WATCH_DIR is set to /data/watch,
sed'ing True to true,
Enforcing ownership on transmission config directories,
Applying permissions to transmission config directories,
Setting owner for transmission paths to 1000:1000,
Setting permission for files (644) and directories (755),
Setting permission for watch directory (775) and its files (664),
-------------------------------------,
Transmission will run as,
-------------------------------------,
User name:   abc,
User uid:    1000,
User gid:    1000,
-------------------------------------,
STARTING TRANSMISSION,
Transmission startup script complete.,
RTNETLINK answers: File exists,
2021-05-10 07:17:04 ERROR: Linux route add command failed: external program exited with error status: 2,
2021-05-10 07:17:04 Initialization Sequence Completed,
2021-05-10 08:17:01 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1558', remote='link-mtu 1550',
2021-05-10 08:17:01 WARNING: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]',
2021-05-10 09:17:01 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1558', remote='link-mtu 1550',
2021-05-10 09:17:01 WARNING: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]',
2021-05-10 09:32:02 event_wait : Interrupted system call (code=4),
2021-05-10 09:32:02 SIGTERM received, sending exit notification to peer,
2021-05-10 09:32:04 /etc/openvpn/tunnelDown.sh tun0 1500 1553 141.101.146.226 255.255.255.240 init,
Sending kill signal to transmission-daemon,
Waiting 5s for transmission-daemon to die,
Successfuly closed transmission-daemon,
2021-05-10 09:32:07 /sbin/ip addr del dev tun0 141.101.146.226/28,
2021-05-10 09:32:07 SIGTERM[soft,exit-with-notification] received, process exiting,
Starting container with revision: 32bcf7522d1ecf9428cefe9044e12f9af5e30476,
Creating TUN device /dev/net/tun,
Using OpenVPN provider: IVACY,
Starting OpenVPN using config NorwayOsloUDP.ovpn,
Setting OpenVPN credentials...,
adding route to local network 192.168.100.0/24 via 172.17.0.1 dev eth0,
2021-05-10 09:32:28 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.,
2021-05-10 09:32:28 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.,
2021-05-10 09:32:28 OpenVPN 2.5.1 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Apr 16 2021,
2021-05-10 09:32:28 library versions: OpenSSL 1.1.1k  25 Mar 2021, LZO 2.10,
2021-05-10 09:32:28 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.,
2021-05-10 09:32:28 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts,
2021-05-10 09:32:28 TCP/UDP: Preserving recently used remote address: [AF_INET]185.125.170.165:53,
2021-05-10 09:32:28 UDP link local: (not bound),
2021-05-10 09:32:28 UDP link remote: [AF_INET]185.125.170.165:53,
2021-05-10 09:32:29 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1558', remote='link-mtu 1550',
2021-05-10 09:32:29 WARNING: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]',
2021-05-10 09:32:29 [Secure-Server] Peer Connection Initiated with [AF_INET]185.125.170.165:53,
2021-05-10 09:32:30 TUN/TAP device tun0 opened,
2021-05-10 09:32:30 /sbin/ip link set dev tun0 up mtu 1500,
2021-05-10 09:32:30 /sbin/ip link set dev tun0 up,
2021-05-10 09:32:30 /sbin/ip addr add dev tun0 141.101.146.146/28,
2021-05-10 09:32:30 /etc/openvpn/tunnelUp.sh tun0 1500 1553 141.101.146.146 255.255.255.240 init,
Up script executed with tun0 1500 1553 141.101.146.146 255.255.255.240 init,
Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 141.101.146.146,
Updating Transmission settings.json with values from env variables,
Using existing settings.json for Transmission /data/transmission-home/settings.json,
Overriding bind-address-ipv4 because TRANSMISSION_BIND_ADDRESS_IPV4 is set to 141.101.146.146,
Overriding download-dir because TRANSMISSION_DOWNLOAD_DIR is set to /data/completed,
Overriding incomplete-dir because TRANSMISSION_INCOMPLETE_DIR is set to /data/incomplete,
Overriding rpc-port because TRANSMISSION_RPC_PORT is set to 9091,
Overriding watch-dir because TRANSMISSION_WATCH_DIR is set to /data/watch,
sed'ing True to true,
Enforcing ownership on transmission config directories,
Applying permissions to transmission config directories,
Setting owner for transmission paths to 1000:1000,
Setting permission for files (644) and directories (755),
Setting permission for watch directory (775) and its files (664),
-------------------------------------,
Transmission will run as,
-------------------------------------,
User name:   abc,
User uid:    1000,
User gid:    1000,
-------------------------------------,
STARTING TRANSMISSION,
Transmission startup script complete.,
RTNETLINK answers: File exists,
2021-05-10 09:32:32 ERROR: Linux route add command failed: external program exited with error status: 2,
2021-05-10 09:32:32 Initialization Sequence Completed,

Host system


Debian Buster, kernel 4.19, 64 bits```
pilotman28 commented 3 years ago

Same problem for privado when using :latest. I switched to :dev and container successfully connected. Here is the output I captured for the failed :latest. Nothing meaningful to me in the below to point to the problem but something is better than nothing.

Starting container with revision: 32bcf7522d1ecf9428cefe9044e12f9af5e30476 Creating TUN device /dev/net/tun Using OpenVPN provider: PRIVADO 4 servers found in OPENVPN_CONFIG, mia-001 chosen randomly Starting OpenVPN using config mia-001.ovpn Setting OpenVPN credentials... adding route to local network 10.0.2.0/24 via 172.17.0.1 dev eth0 2021-05-07 08:53:08 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning. 2021-05-07 08:53:08 OpenVPN 2.5.1 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Apr 16 2021 2021-05-07 08:53:08 library versions: OpenSSL 1.1.1k 25 Mar 2021, LZO 2.10 2021-05-07 08:53:08 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2021-05-07 08:53:08 TCP/UDP: Preserving recently used remote address: [AF_INET]86.106.87.131:1194 2021-05-07 08:53:08 Socket Buffers: R=[212992->212992] S=[212992->212992] 2021-05-07 08:53:08 UDP link local: (not bound) 2021-05-07 08:53:08 UDP link remote: [AF_INET]86.106.87.131:1194 2021-05-07 08:54:08 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-05-07 08:54:08 TLS Error: TLS handshake failed 2021-05-07 08:54:08 SIGUSR1[soft,tls-error] received, process restarting 2021-05-07 08:54:08 Restart pause, 5 second(s) 2021-05-07 08:54:13 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2021-05-07 08:54:13 TCP/UDP: Preserving recently used remote address: [AF_INET]86.106.87.131:1194 2021-05-07 08:54:13 TCP/UDP: Preserving recently used remote address: [AF_INET]86.106.87.131:1194 2021-05-07 08:54:13 Socket Buffers: R=[212992->212992] S=[212992->212992] 2021-05-07 08:54:13 UDP link local: (not bound) 2021-05-07 08:54:13 UDP link remote: [AF_INET]86.106.87.131:1194 2021-05-07 08:55:13 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-05-07 08:55:13 TLS Error: TLS handshake failed 2021-05-07 08:55:13 SIGUSR1[soft,tls-error] received, process restarting 2021-05-07 08:55:13 Restart pause, 5 second(s)

pkishino commented 3 years ago

@friki67 please include logs so we can see that it sets up properly.. are you getting a 404 or what?? What is your IP of the host/the machine you are trying to access from? What is your WG IP address.. most likely your LOCAL_NETWORK isn’t set correctly. Also try disable rpc whitelist, does it work then? @pilotman28 looks like a totally different issue, in your case the failure looks related to bad VPN profiles.. haven’t looked at the difference for that provider between master and dev, please take a look and see if they were updated on dev

friki67 commented 3 years ago

Hi. I have modified initial post to reflect the information required. Regards.

friki67 commented 3 years ago

Hello. This has an easy solution. Including your access VPN ip range to the LOCAL_NETWORK variable fix it for me.

LOCAL_NETWORK=192.168.1.0/24,10.4.0.0/24

I configured two VPN's, one in my machine and one in my router, and included those 3 ip ranges (LAN,VPN1,VPN2) in this variable and it works ok.

Thank you for your help