I am having trouble getting the VPN to connect. When I have VPN set to off, everything runs as expected. When I turn it on, it looks like it connects, but then I get an AUTH_FAILED. I cant tell if thats for deluge or vpn. I am using PIA as my vpn provider. I have verified the username/passwd. I turned on debug and this is the startup log I get.
EDIT* for clarification, when I start it with VPN enabled, it appears to run. However, I cannot connect to the webui, or the daemon. When I start it without VPN enabled, I can connect to both fine. I am connecting via a computer on the LAN. Also, it seems that privoxy is being started despite having the setting set to no.
2016-02-01 17:00:10,026 CRIT Set uid to user 0
2016-02-01 17:00:10,026 WARN Included extra file "/etc/supervisor/conf.d/delugevpn.conf" during parsing
2016-02-01 17:00:10,029 INFO supervisord started with pid 1
2016-02-01 17:00:11,032 INFO spawned: 'privoxy' with pid 7
2016-02-01 17:00:11,034 INFO spawned: 'start' with pid 8
2016-02-01 17:00:11,035 INFO spawned: 'webui' with pid 9
2016-02-01 17:00:11,037 INFO spawned: 'deluge' with pid 10
2016-02-01 17:00:11,044 DEBG 'privoxy' stdout output:
[info] VPN is enabled, checking VPN tunnel local ip is valid
2016-02-01 17:00:11,044 INFO success: privoxy entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2016-02-01 17:00:11,044 INFO success: start entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2016-02-01 17:00:11,045 DEBG 'privoxy' stdout output:
[info] checking VPN tunnel local ip is valid...
2016-02-01 17:00:11,048 DEBG 'deluge' stdout output:
[info] VPN enabled, configuring Deluge...
2016-02-01 17:00:11,049 DEBG 'deluge' stdout output:
[info] checking VPN tunnel local ip is valid...
2016-02-01 17:00:11,054 DEBG 'start' stdout output:
[info] VPN is enabled, beginning configuration of VPN
2016-02-01 17:00:11,067 DEBG 'start' stdout output:
[info] VPN provider defined as pia
2016-02-01 17:00:11,067 DEBG 'start' stdout output:
[info] VPN config file (ovpn extension) is located at /config/openvpn/openvpn.ovpn
2016-02-01 17:00:11,070 DEBG 'start' stdout output:
[info] Env vars defined via docker -e flags for remote host, port and protocol, writing values to ovpn file...
2016-02-01 17:00:11,093 DEBG 'start' stdout output:
[debug] Contents of ovpn file /config/openvpn/openvpn.ovpn as follows...
2016-02-01 17:00:11,094 DEBG 'start' stdout output:
client
dev tun
remote us-east.privateinternetaccess.com 1194 udp
resolv-retry infinite
nobind
persist-key
ca ca.crt
tls-client
remote-cert-tls server
auth-user-pass credentials.conf
comp-lzo
verb 1
reneg-sec 0
crl-verify crl.pem
2016-02-01 17:00:11,094 DEBG 'start' stdout output:
[debug] Environment variables defined as follows...
2016-02-01 17:00:11,095 DEBG 'start' stdout output:
LAN_RANGE=192.168.1.1-192.168.1.254
HOSTNAME=0bd56e14739c
TERM=xterm
VPN_PORT=1194
VPN_USER=***********
VPN_PASS=****************
VPN_ENABLED=yes
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
SUPERVISOR_GROUP_NAME=start
PWD=/
LANG=en_GB.UTF-8
TZ=America/New_York
VPN_PROTOCOL=udp
SUPERVISOR_ENABLED=1
SHLVL=1
HOME=/home/nobody
VPN_REMOTE=us-east.privateinternetaccess.com
SUPERVISOR_PROCESS_NAME=start
DEBUG=true
VPN_PROV=pia
ENABLE_PRIVOXY=no
_=/usr/sbin/printenv
2016-02-01 17:00:11,095 DEBG 'start' stdout output:
[info] VPN provider remote gateway defined as us-east.privateinternetaccess.com
[info] VPN provider remote port defined as 1194
[info] VPN provider remote protocol defined as udp
2016-02-01 17:00:11,104 DEBG 'start' stdout output:
[info] VPN provider username defined as **************
2016-02-01 17:00:11,108 DEBG 'start' stdout output:
[info] VPN provider password defined as ************
2016-02-01 17:00:11,127 DEBG 'start' stdout output:
[info] ip routing table
2016-02-01 17:00:11,127 DEBG 'start' stdout output:
default via 172.17.42.1 dev eth0
2016-02-01 17:00:11,128 DEBG 'start' stdout output:
172.17.0.0/16 dev eth0 proto kernel scope link src 172.17.0.27
--------------------
2016-02-01 17:00:11,159 DEBG 'start' stdout output:
[info] iptables
2016-02-01 17:00:11,161 DEBG 'start' stdout output:
-P INPUT DROP
-P FORWARD ACCEPT
-P OUTPUT DROP
-A INPUT -i tun0 -j ACCEPT
-A INPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --sport 1194 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 8112 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 8112 -j ACCEPT
-A INPUT -i eth0 -m iprange --src-range 192.168.1.1-192.168.1.254 -j ACCEPT
-A INPUT -i eth0 -m iprange --dst-range 192.168.1.1-192.168.1.254 -j ACCEPT
-A INPUT -p udp -m udp --sport 53 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o tun0 -j ACCEPT
-A OUTPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
-A OUTPUT -o eth0 -p udp -m udp --dport 1194 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 8112 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --sport 8112 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 53 -j ACCEPT
-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
2016-02-01 17:00:11,161 DEBG 'start' stdout output:
--------------------
2016-02-01 17:00:11,161 DEBG 'start' stdout output:
[info] nameservers
2016-02-01 17:00:11,161 DEBG 'start' stdout output:
nameserver 8.8.8.8
nameserver 8.8.4.4
2016-02-01 17:00:11,162 DEBG 'start' stdout output:
--------------------
2016-02-01 17:00:11,171 DEBG 'start' stdout output:
[info] Starting OpenVPN...
2016-02-01 17:00:11,176 DEBG 'start' stdout output:
Mon Feb 1 17:00:11 2016 OpenVPN 2.3.9 x86_64-unknown-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [MH] [iPv6] built on Dec 24 2015
Mon Feb 1 17:00:11 2016 library versions: OpenSSL 1.0.2e 3 Dec 2015, LZO 2.09
Mon Feb 1 17:00:11 2016 WARNING: file 'credentials.conf' is group or others accessible
2016-02-01 17:00:11,194 DEBG 'start' stdout output:
Mon Feb 1 17:00:11 2016 UDPv4 link local: [undef]
Mon Feb 1 17:00:11 2016 UDPv4 link remote: [AF_INET]66.55.134.201:1194
2016-02-01 17:00:11,207 DEBG 'start' stdout output:
Mon Feb 1 17:00:11 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2016-02-01 17:00:11,267 DEBG 'start' stdout output:
Mon Feb 1 17:00:11 2016 [Private Internet Access] Peer Connection Initiated with [AF_INET]66.55.134.201:1194
2016-02-01 17:00:12,269 INFO success: webui entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2016-02-01 17:00:12,269 INFO success: deluge entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2016-02-01 17:00:13,640 DEBG 'start' stdout output:
Mon Feb 1 17:00:13 2016 AUTH: Received control message: AUTH_FAILED
2016-02-01 17:00:13,640 DEBG 'start' stdout output:
Mon Feb 1 17:00:13 2016 SIGTERM[soft,auth-failure] received, process exiting
2016-02-01 17:00:13,641 DEBG fd 9 closed, stopped monitoring (stdout)>
2016-02-01 17:00:13,641 DEBG fd 14 closed, stopped monitoring (stderr)>
2016-02-01 17:00:13,641 INFO exited: start (exit status 0; expected)
2016-02-01 17:00:13,641 DEBG received SIGCLD indicating a child quit