klavinsd

Great, it worked. But why all of a sudden is this line required. My container was running fine without the two lines for a long time and on multiple docker hosts. Just curious

Having a weird issue when launching the container. Have not changed anything within the container or docker image aside from updating image from time to time. Last I ran it (some weeks ago) it worked fine. Found in the log that its struggling with creating a tun0 interface, but not sure why. I will mention that I sometimes run the container while running NordVPN on the host. I tested turning that off, but the issue remained. Perhaps somebody here knows what can be done about this or where to start to troubleshoot. Here is the log 2024-11-01 20:47:37,861 DEBG 'start-script' stdout output: default via 172.19.0.1 dev eth0 172.19.0.0/16 dev eth0 proto kernel scope link src 172.19.0.2 192.168.56.0/24 via 172.19.0.1 dev eth0 2024-11-01 20:47:37,861 DEBG 'start-script' stdout output: local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1 local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1 broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1 local 172.19.0.2 dev eth0 table local proto kernel scope host src 172.19.0.2 broadcast 172.19.255.255 dev eth0 table local proto kernel scope link src 172.19.0.2 local ::1 dev lo table local proto kernel metric 0 pref medium 2024-11-01 20:47:37,861 DEBG 'start-script' stdout output: -------------------- 2024-11-01 20:47:37,897 DEBG 'start-script' stdout output: [info] iptables defined as follows... -------------------- 2024-11-01 20:47:37,898 DEBG 'start-script' stdout output: -P INPUT DROP -P FORWARD DROP -P OUTPUT DROP -A INPUT -s 95.174.66.27/32 -i eth0 -j ACCEPT -A INPUT -s 172.19.0.0/16 -d 172.19.0.0/16 -j ACCEPT -A INPUT -s 95.174.66.27/32 -i eth0 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --dport 1337 -j ACCEPT -A INPUT -i eth0 -p udp -m udp --dport 1337 -j ACCEPT -A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -i tun0 -j ACCEPT -A OUTPUT -d 95.174.66.27/32 -o eth0 -j ACCEPT -A OUTPUT -s 172.19.0.0/16 -d 172.19.0.0/16 -j ACCEPT -A OUTPUT -d 95.174.66.27/32 -o eth0 -j ACCEPT -A OUTPUT -o eth0 -p tcp -m tcp --sport 1337 -j ACCEPT -A OUTPUT -o eth0 -p udp -m udp --sport 1337 -j ACCEPT -A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -o tun0 -j ACCEPT 2024-11-01 20:47:37,899 DEBG 'start-script' stdout output: -------------------- 2024-11-01 20:47:37,899 DEBG 'start-script' stdout output: [info] Starting OpenVPN (non daemonised)... 2024-11-01 20:47:37,904 DEBG 'start-script' stdout output: 2024-11-01 20:47:37 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations. 2024-11-01 20:47:37,904 DEBG 'start-script' stdout output: 2024-11-01 20:47:37 Note: '--allow-compression' is not set to 'no', disabling data channel offload. 2024-11-01 20:47:37 WARNING: file 'credentials.conf' is group or others accessible 2024-11-01 20:47:37 OpenVPN 2.6.12 [git:makepkg/038a94bae57a446c+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Jul 18 2024 2024-11-01 20:47:37 library versions: OpenSSL 3.4.0 22 Oct 2024, LZO 2.10 2024-11-01 20:47:37 DCO version: N/A 2024-11-01 20:47:37,904 DEBG 'start-script' stdout output: 2024-11-01 20:47:37 WARNING: --ping should normally be used with --ping-restart or --ping-exit 2024-11-01 20:47:37 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2024-11-01 20:47:37 NOTE: --fast-io is disabled since we are not using UDP 2024-11-01 20:47:37,905 DEBG 'start-script' stdout output: 2024-11-01 20:47:37 TCP/UDP: Preserving recently used remote address: [AF_INET]95.174.66.27:443 2024-11-01 20:47:37,905 DEBG 'start-script' stdout output: 2024-11-01 20:47:37 Socket Buffers: R=[131072->131072] S=[16384->16384] 2024-11-01 20:47:37 Attempting to establish TCP connection with [AF_INET]95.174.66.27:443 2024-11-01 20:47:37,953 DEBG 'start-script' stdout output: 2024-11-01 20:47:37 TCP connection established with [AF_INET]95.174.66.27:443 2024-11-01 20:47:37 TCPv4_CLIENT link local: (not bound) 2024-11-01 20:47:37 TCPv4_CLIENT link remote: [AF_INET]95.174.66.27:443 2024-11-01 20:47:38,048 DEBG 'start-script' stdout output: 2024-11-01 20:47:38 TLS: Initial packet from [AF_INET]95.174.66.27:443, sid=2a172d4e 79aebbe9 2024-11-01 20:47:38,196 DEBG 'start-script' stdout output: 2024-11-01 20:47:38 VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA 2024-11-01 20:47:38,196 DEBG 'start-script' stdout output: 2024-11-01 20:47:38 VERIFY OK: depth=1, O=NordVPN, CN=NordVPN CA9 2024-11-01 20:47:38,196 DEBG 'start-script' stdout output: 2024-11-01 20:47:38 VERIFY KU OK 2024-11-01 20:47:38 Validating certificate extended key usage 2024-11-01 20:47:38 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication 2024-11-01 20:47:38,196 DEBG 'start-script' stdout output: 2024-11-01 20:47:38 VERIFY EKU OK 2024-11-01 20:47:38 VERIFY X509NAME OK: CN=no149.nordvpn.com 2024-11-01 20:47:38 VERIFY OK: depth=0, CN=no149.nordvpn.com 2024-11-01 20:47:38,376 DEBG 'start-script' stdout output: 2024-11-01 20:47:38 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bits RSA, signature: RSA-SHA512, peer temporary key: 253 bits X25519 2024-11-01 20:47:38 [no149.nordvpn.com] Peer Connection Initiated with [AF_INET]95.174.66.27:443 2024-11-01 20:47:38 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1 2024-11-01 20:47:38,376 DEBG 'start-script' stdout output: 2024-11-01 20:47:38 TLS: tls_multi_process: initial untrusted session promoted to trusted 2024-11-01 20:47:38,508 DEBG 'start-script' stdout output: 2024-11-01 20:47:38 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 103.86.96.100,dhcp-option DNS 103.86.99.100,explicit-exit-notify,comp-lzo no,route-gateway 10.100.0.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.100.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' 2024-11-01 20:47:38,508 DEBG 'start-script' stdout output: 2024-11-01 20:47:38 OPTIONS IMPORT: --explicit-exit-notify can only be used with --proto udp 2024-11-01 20:47:38 OPTIONS IMPORT: --ifconfig/up options modified 2024-11-01 20:47:38 OPTIONS IMPORT: route options modified 2024-11-01 20:47:38 OPTIONS IMPORT: route-related options modified 2024-11-01 20:47:38 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified 2024-11-01 20:47:38 net_route_v4_best_gw query: dst 0.0.0.0 2024-11-01 20:47:38 net_route_v4_best_gw result: via 172.19.0.1 dev eth0 2024-11-01 20:47:38 ROUTE_GATEWAY 172.19.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:13:00:02 2024-11-01 20:47:38 ERROR: Cannot open TUN/TAP dev /dev/net/tun: Operation not permitted (errno=1) 2024-11-01 20:47:38 Exiting due to fatal error Appreciate any input.

Bump

Hi, I'm having 2 issues with my setup. I'm on Windows 11, running this with Docker-Desktop. I'm starting the docker image from Ubuntu WSL. Launching using the following config: docker run -d \ --memory=100MB \ --cpus="0.1" \ --cap-add=NET_ADMIN \ -p 6881:6881 \ -p 6881:6881/udp \ -p 8080:8080 \ -p 8118:8118 \ --name=qbittorrentvpn \ -v /mnt/e:/data \ -v /mnt/e/qBittorrentDocker:/config \ -v /etc/localtime:/etc/localtime:ro \ -e VPN_ENABLED=yes \ -e VPN_PROV=custom \ -e VPN_CLIENT=openvpn \ -e STRICT_PORT_FORWARD=no \ -e ENABLE_PRIVOXY=no \ -e DEBUG=false \ -e WEBUI_PORT=8080 \ -e UMASK=000 \ -e UID=1000 \ -e PID=1000 \ binhex/arch-qbittorrentvpn UID 1000 is my Ubuntu WSL user Problem 1: sed: preserving permissions for ‘/config/qBittorrent/config/sedzRuF7u’: Operation not permitted The config folder is located is located in an external drive connected to my PC, and using -v /mnt/e/config:config All of the files within /config/qBittorrent/config/ folder have rwxrwxrwx permissions with group and owner being 1000 I have also granted Full Access permissions for the folder for Users user from Windows side of the drive (not sure how what kind of user Windows interprets the WSL Ubuntu as) Problem 2: When restarting the container, all of the torrent files get re-checked, which takes quite some time even for few torrents. Download location for the torrents is in the -v /mnt/e:/data \ directory. Why is qBittorrent re-checking torrents every time the container restarts? The same behaviour doesn't happen if I was running qBittorrent on a PC and restarted it. How can I fix this?