Replacing the ovpn, cert and pem files with those downloaded from PIA allows the docker to start up as expected, but if I restart it the error recurs and the docker is unable to start.
Some more logs:
nameserver 8.8.8.8nameserver 37.235.1.174nameserver 8.8.4.4nameserver 37.235.1.1772017-08-22 08:54:09,258 DEBG 'start-script' stdout output:[debug] Show name resolution for VPN endpoint nl.privateinternetaccess.com2017-08-22 08:54:09,322 DEBG 'start-script' stdout output:;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 14850;; flags: qr rd ra ; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 0;; QUESTION SECTION:;; nl.privateinternetaccess.com. IN A;; ANSWER SECTION:nl.privateinternetaccess.com. 300 IN A 46.166.138.166nl.privateinternetaccess.com. 300 IN A 46.166.138.158nl.privateinternetaccess.com. 300 IN A 109.201.152.9nl.privateinternetaccess.com. 300 IN A 46.166.190.215nl.privateinternetaccess.com. 300 IN A 46.166.190.211nl.privateinternetaccess.com. 300 IN A 46.166.138.172nl.privateinternetaccess.com. 300 IN A 46.166.137.246nl.privateinternetaccess.com. 300 IN A 46.166.188.210nl.privateinternetaccess.com. 300 IN A 46.166.186.246nl.privateinternetaccess.com. 300 IN A 46.166.190.205nl.privateinternetaccess.com. 300 IN A 46.166.188.206nl.privateinternetaccess.com. 300 IN A 109.201.154.150nl.privateinternetaccess.com. 300 IN A 85.159.236.209;; AUTHORITY SECTION:;; ADDITIONAL SECTION:;; Query time: 62 msec;; SERVER: 37.235.1.174;; WHEN: Tue Aug 22 08:54:09 2017;; MSG SIZE rcvd: 2542017-08-22 08:54:09,322 DEBG 'start-script' stdout output:[debug] Show contents of hosts file2017-08-22 08:54:09,322 DEBG 'start-script' stdout output:127.0.0.1 localhost::1 localhost ip6-localhost ip6-loopbackfe00::0 ip6-localnetff00::0 ip6-mcastprefixff02::1 ip6-allnodesff02::2 ip6-allrouters172.17.0.6 43397d23a0d146.166.188.205 nl.privateinternetaccess.com2017-08-22 08:54:09,324 DEBG 'start-script' stdout output:[info] Adding 192.168.1.0/24 as route via docker eth02017-08-22 08:54:09,325 DEBG 'start-script' stdout output:[info] ip route defined as follows...--------------------2017-08-22 08:54:09,325 DEBG 'start-script' stdout output:default via 172.17.0.1 dev eth0172.17.0.0/16 dev eth0 proto kernel scope link src 172.17.0.6192.168.1.0/24 via 172.17.0.1 dev eth02017-08-22 08:54:09,325 DEBG 'start-script' stdout output:--------------------[debug] Modules currently loaded for kernel2017-08-22 08:54:09,330 DEBG 'start-script' stdout output:Module Size Used byxt_CHECKSUM 1335 1iptable_mangle 1658 1ipt_REJECT 1521 2nf_reject_ipv4 2483 1 ipt_REJECTebtable_filter 1903 0ebtables 14552 1 ebtable_filtervhost_net 9091 1tun 19304 4 vhost_netvhost 19681 1 vhost_netmacvtap 11622 1 vhost_netmacvlan 12389 1 macvtapxt_nat 1913 11veth 4966 0ipt_MASQUERADE 1277 15nf_nat_masquerade_ipv4 1865 1 ipt_MASQUERADEiptable_nat 1897 1nf_conntrack_ipv4 5874 3nf_nat_ipv4 4199 1 iptable_natiptable_filter 1706 1ip_tables 9853 3 iptable_mangle,iptable_filter,iptable_natnf_nat 11145 3 xt_nat,nf_nat_masquerade_ipv4,nf_nat_ipv4md_mod 36700 5bonding 92464 0e1000e 143207 0igb 128723 0ptp 9308 2 igb,e1000epps_core 5928 1 ptpfbcon 33164 70bitblit 4361 1 fbconfbcon_rotate 1964 1 bitblitfbcon_ccw 4678 1 fbcon_rotatefbcon_ud 4805 1 fbcon_rotatefbcon_cw 4606 1 fbcon_rotatesoftcursor 1341 4 fbcon_ud,fbcon_cw,fbcon_ccw,bitblitast 37457 1font 7588 1 fbconx86_pkg_temp_thermal 4669 0ttm 62682 1 astcoretemp 5340 0drm_kms_helper 86945 1 astcfbfillrect 3306 1 drm_kms_helpercfbimgblt 2047 1 drm_kms_helperkvm_intel 160551 6cfbcopyarea 3006 1 drm_kms_helperdrm 221720 4 ast,ttm,drm_kms_helpermpt3sas 168061 5i2c_i801 11888 0i2c_smbus 3041 1 i2c_i801agpgart 21314 2 ttm,drmsyscopyarea 2942 1 drm_kms_helpersysfillrect 3178 1 drm_kms_helpersysimgblt 2047 1 drm_kms_helperfb_sys_fops 1378 1 drm_kms_helperahci 26326 4fb 29760 7 fbcon_ud,fbcon_cw,fbcon_ccw,bitblit,softcursor,fbcon,drm_kms_helperi2c_algo_bit 4752 2 igb,astraid_class 3380 1 mpt3sasi2c_core 20390 7 i2c_algo_bit,igb,ast,i2c_i801,i2c_smbus,drm_kms_helper,drmfbdev 1030 2 fb,fbconlibahci 19716 1 ahciscsi_transport_sas 21714 1 mpt3saskvm 289949 1 kvm_intelipmi_si 36442 0video 27138 0backlight 5833 1 video2017-08-22 08:54:09,332 DEBG 'start-script' stdout output:[info] iptable_mangle support detected, adding fwmark for tables2017-08-22 08:54:09,335 DEBG 'start-script' stdout output:[debug] Docker interface defined as eth02017-08-22 08:54:09,337 DEBG 'start-script' stdout output:[debug] Docker IP defined as 172.17.0.62017-08-22 08:54:09,338 DEBG 'start-script' stdout output:[debug] Docker netmask defined as 255.255.0.02017-08-22 08:54:09,343 DEBG 'start-script' stdout output:[info] Docker network defined as 172.17.0.0/162017-08-22 08:54:09,374 DEBG 'start-script' stdout output:[info] iptables defined as follows...--------------------2017-08-22 08:54:09,375 DEBG 'start-script' stdout output:-P INPUT DROP-P FORWARD ACCEPT-P OUTPUT DROP-A INPUT -i tun0 -j ACCEPT-A INPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT-A INPUT -i eth0 -p udp -m udp --sport 1198 -j ACCEPT-A INPUT -i eth0 -p tcp -m tcp --dport 8112 -j ACCEPT-A INPUT -i eth0 -p tcp -m tcp --sport 8112 -j ACCEPT-A INPUT -s 192.168.1.0/24 -i eth0 -p tcp -m tcp --dport 58846 -j ACCEPT-A INPUT -s 192.168.1.0/24 -d 172.17.0.0/16 -i eth0 -p tcp -j ACCEPT-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT-A INPUT -i lo -j ACCEPT-A OUTPUT -o tun0 -j ACCEPT-A OUTPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT-A OUTPUT -o eth0 -p udp -m udp --dport 1198 -j ACCEPT-A OUTPUT -o eth0 -p tcp -m tcp --dport 8112 -j ACCEPT-A OUTPUT -o eth0 -p tcp -m tcp --sport 8112 -j ACCEPT-A OUTPUT -d 192.168.1.0/24 -o eth0 -p tcp -m tcp --sport 58846 -j ACCEPT-A OUTPUT -s 172.17.0.0/16 -d 192.168.1.0/24 -o eth0 -p tcp -j ACCEPT-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT-A OUTPUT -o lo -j ACCEPT2017-08-22 08:54:09,376 DEBG 'start-script' stdout output:--------------------2017-08-22 08:54:09,376 DEBG 'start-script' stdout output:[debug] OpenVPN command line:- /usr/bin/openvpn --cd /config/openvpn --config '/config/openvpn/Netherlands.ovpn' --daemon --reneg-sec 0 --mute-replay-warnings --auth-nocache --keepalive 10 60 --setenv VPN_PROV 'pia' --setenv DEBUG 'true' --setenv VPN_DEVICE_TYPE 'tun' --setenv VPN_REMOTE 'nl.privateinternetaccess.com' --script-security 2 --up /root/openvpnup.sh --up-delay --up-restart --writepid /root/openvpn.pid --remap-usr1 SIGHUP --log-append /dev/stdout --setenv STRICT_PORT_FORWARD 'yes' --disable-occ --auth-user-pass credentials.conf[info] Starting OpenVPN...2017-08-22 08:54:09,389 DEBG 'start-script' stdout output:Tue Aug 22 08:54:09 2017 WARNING: file 'credentials.conf' is group or others accessibleTue Aug 22 08:54:09 2017 OpenVPN 2.4.1 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Mar 22 2017Tue Aug 22 08:54:09 2017 library versions: OpenSSL 1.1.0e 16 Feb 2017, LZO 2.102017-08-22 08:54:09,389 DEBG 'start-script' stdout output:Tue Aug 22 08:54:09 2017 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts2017-08-22 08:54:09,389 DEBG 'start-script' stdout output:[info] OpenVPN started[debug] Waiting for valid IP address from tunnel...2017-08-22 08:54:09,390 DEBG 'start-script' stdout output:Tue Aug 22 08:54:09 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]46.166.188.205:1198Tue Aug 22 08:54:09 2017 UDP link local: (not bound)2017-08-22 08:54:09,390 DEBG 'start-script' stdout output:Tue Aug 22 08:54:09 2017 UDP link remote: [AF_INET]46.166.188.205:11982017-08-22 08:54:09,515 DEBG 'start-script' stdout output:Tue Aug 22 08:54:09 2017 [bc0de5605339fd9b767f5086e373da88] Peer Connection Initiated with [AF_INET]46.166.188.205:11982017-08-22 08:54:10,771 DEBG 'start-script' stdout output:Tue Aug 22 08:54:10 2017 TUN/TAP device tun0 openedTue Aug 22 08:54:10 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0Tue Aug 22 08:54:10 2017 /usr/bin/ip link set dev tun0 up mtu 15002017-08-22 08:54:10,772 DEBG 'start-script' stdout output:Tue Aug 22 08:54:10 2017 /usr/bin/ip addr add dev tun0 local 10.19.10.6 peer 10.19.10.52017-08-22 08:54:10,772 DEBG 'start-script' stdout output:Tue Aug 22 08:54:10 2017 /root/openvpnup.sh tun0 1500 1558 10.19.10.6 10.19.10.5 init2017-08-22 08:54:10,775 DEBG 'start-script' stdout output:[debug] Waiting for valid IP address from tunnel...[debug] Waiting for valid IP address from tunnel...2017-08-22 08:54:10,776 DEBG 'start-script' stdout output:Tue Aug 22 08:54:10 2017 Initialization Sequence Completed2017-08-22 08:54:10,802 DEBG 'privoxy-script' stdout output:[debug] Valid IP address from tunnel acquired '10.19.10.6'[info] Configuring Privoxy...2017-08-22 08:54:10,802 DEBG 'deluge-script' stdout output:[debug] Valid IP address from tunnel acquired '10.19.10.6'2017-08-22 08:54:10,805 DEBG 'deluge-script' stdout output:[info] Deluge not running2017-08-22 08:54:10,805 DEBG 'deluge-script' stdout output:[info] Deluge listening interface IP 0.0.0.0 and VPN provider IP 10.19.10.6 different, marking for reconfigure[debug] Waiting for file '/home/nobody/vpn_incoming_port.txt' to be generated (contains PIA API generated incoming port number)...2017-08-22 08:54:10,880 DEBG 'start-script' stdout output:[debug] Valid IP address from tunnel acquired '10.19.10.6'2017-08-22 08:54:10,880 DEBG 'start-script' stdout output:[debug] Valid IP address from tunnel acquired '10.19.10.6'2017-08-22 08:54:10,880 DEBG 'start-script' stdout output:[info] Strict port forwarding enabled, attempting to assign an incoming port...2017-08-22 08:54:10,881 DEBG 'start-script' stdout output:[debug] Valid IP address from tunnel acquired '10.19.10.6'2017-08-22 08:54:10,881 DEBG 'start-script' stdout output:[debug] Attempting to get external IP using Name Server 'ns1.google.com''...2017-08-22 08:54:10,884 DEBG 'start-script' stdout output:[info] Attempting to curl http://209.222.18.222:2000/?client_id=66e06820bab949e54676a52017f921654584fdce17e7bd0ad088a377d47bf550...2017-08-22 08:54:10,901 DEBG 'privoxy-script' stdout output:[info] All checks complete, starting Privoxy...2017-08-22 08:54:10,905 DEBG 'privoxy-script' stderr output:2017-08-22 08:54:10.905 2b3187e70ec0 Info: Privoxy version 3.0.262017-08-22 08:54:10.905 2b3187e70ec0 Info: Program name: /usr/bin/privoxy2017-08-22 08:54:10,934 DEBG 'start-script' stdout output:[warn] Response code 000 from curl != 2xx[warn] Exit code 56 from curl != 0[info] 12 retries left[info] Retrying in 10 secs...2017-08-22 08:54:10,939 DEBG 'start-script' stdout output:[info] Successfully retrieved external IP address 212.92.115.1072017-08-22 08:54:22,022 DEBG 'start-script' stdout output:[info] curl successful for http://209.222.18.222:2000/?client_id=66e06820bab949e54676a52017f921654584fdce17e7bd0ad088a377d47bf550, response code 2002017-08-22 08:54:22,024 DEBG 'start-script' stdout output:[debug] Successfully assigned incoming port 569392017-08-22 08:54:22,814 DEBG 'deluge-script' stdout output:[debug] Incoming port for tunnel is '56939'2017-08-22 08:54:22,815 DEBG 'deluge-script' stdout output:[info] Attempting to start Deluge...2017-08-22 08:54:23,029 DEBG 'deluge-script' stdout output:[info] Deluge listening interface currently defined as 10.32.10.6[info] Deluge listening interface will be changed to 10.19.10.6[info] Saving changes to Deluge config file /config/core.conf...2017-08-22 08:54:23,373 DEBG 'deluge-web-script' stdout output:[info] Starting Deluge webui...2017-08-22 08:54:23,619 DEBG 'deluge-script' stdout output:Setting random_port to False..Configuration value successfully updated.2017-08-22 08:54:23,863 DEBG 'deluge-script' stdout output:Setting listen_ports to (56939, 56939)..Configuration value successfully updated.2017-08-22 08:54:23,879 DEBG 'deluge-script' stdout output:[info] Deluge started[debug] VPN incoming port is 56939[debug] VPN IP is 10.19.10.6[debug] Deluge incoming port is 56939[debug] Deluge IP is 10.19.10.62017-08-22 08:54:39,344 WARN received SIGTERM indicating exit request2017-08-22 08:54:39,345 DEBG killing privoxy-script (pid 135) with signal SIGTERM2017-08-22 08:54:39,345 INFO waiting for start-script, deluge-script, deluge-web-script, privoxy-script to die2017-08-22 08:54:39,345 DEBG fd 26 closed, stopped monitoring <POutputDispatcher at 47717653591968 for <Subprocess at 47717653420152 with name privoxy-script in state STOPPING> (stderr)>2017-08-22 08:54:39,345 DEBG fd 22 closed, stopped monitoring <POutputDispatcher at 47717652339312 for <Subprocess at 47717653420152 with name privoxy-script in state STOPPING> (stdout)>2017-08-22 08:54:39,345 INFO stopped: privoxy-script (terminated by SIGTERM)2017-08-22 08:54:39,345 DEBG received SIGCLD indicating a child quit2017-08-22 08:54:39,345 DEBG killing deluge-web-script (pid 134) with signal SIGTERM2017-08-22 08:54:39,346 DEBG fd 17 closed, stopped monitoring <POutputDispatcher at 47717652337224 for <Subprocess at 47717653808264 with name deluge-web-script in state STOPPING> (stdout)>2017-08-22 08:54:39,346 DEBG fd 21 closed, stopped monitoring <POutputDispatcher at 47717652337440 for <Subprocess at 47717653808264 with name deluge-web-script in state STOPPING> (stderr)>2017-08-22 08:54:39,346 INFO stopped: deluge-web-script (terminated by SIGTERM)2017-08-22 08:54:39,346 DEBG received SIGCLD indicating a child quit2017-08-22 08:54:39,346 DEBG killing deluge-script (pid 133) with signal SIGTERM2017-08-22 08:54:39,346 DEBG fd 16 closed, stopped monitoring <POutputDispatcher at 47717652339240 for <Subprocess at 47717653809128 with name deluge-script in state STOPPING> (stderr)>2017-08-22 08:54:39,346 DEBG fd 11 closed, stopped monitoring <POutputDispatcher at 47717652338880 for <Subprocess at 47717653809128 with name deluge-script in state STOPPING> (stdout)>2017-08-22 08:54:39,346 INFO stopped: deluge-script (terminated by SIGTERM)2017-08-22 08:54:39,346 DEBG received SIGCLD indicating a child quit2017-08-22 08:54:39,346 DEBG killing start-script (pid 132) with signal SIGTERM2017-08-22 08:54:39,346 DEBG fd 8 closed, stopped monitoring <POutputDispatcher at 47717653418856 for <Subprocess at 47717653420584 with name start-script in state STOPPING> (stdout)>2017-08-22 08:54:39,346 DEBG fd 10 closed, stopped monitoring <POutputDispatcher at 47717653419720 for <Subprocess at 47717653420584 with name start-script in state STOPPING> (stderr)>2017-08-22 08:54:39,346 INFO stopped: start-script (terminated by SIGTERM)2017-08-22 08:54:39,346 DEBG received SIGCLD indicating a child quit