ShangHangin

Members
  • Posts

    102
  • Joined

  • Last visited

Posts posted by ShangHangin

  1. Hello Community

     

    I have been unsuccessful in getting WireGuard to work since my upgrade from 6.11.3->6.12.6, and I am in need of guidance.

    1.  I have been using ZeroTier for remote access into my server and docker UI and access to my network.  Don't really want to give that up.

    2.  My goal is to have system VPN tunneling access for updates (I am behind the Chinese firewall and cannot get at Github for plugins w/o VPN.  Dockers updates are OK w/o VPN).

    3.  I also want to have select docker containers (Sonar, etc) running over VPN (not Plex, as my experience is that the remote access for playback does not like a double NAT). 

     

    I have read through the guides, tried a number of different things, and the configuration below satisfies my goal of using ZeroTier (with complete access to server, dockers, file system) and Plex, but cannot get Wireguard working (No handshakes)

    image.png.a99c9fee2b987dd0544157b680396258.png

     

    image.png.60eba9cec4934640f15555a16c46a4ca.png

     

    Note:  Need to reinstitute zt0 listening at any docker stop and start, even though is shows in “listening” in many cases.

     

    image.png.6a3d9227bfdbe9866ba587c8e6659ac7.png

     

    ("Host access to custom networks" breaks Zerotier,  as does using anything other than a HOST network setting in the Docker)

     

    image.thumb.png.348b357c6d864621e25174131cb980a8.png

     

    image.thumb.png.e4772bdbe4b955b523bc0a01375c8d86.png

     

     

    I have enabled UPnP both on the system and on my gateway router:

    image.thumb.png.c673ed23052571579a63629d0d6914ea.png

     

     

    This is the VPN configuration:

     

    image.thumb.png.8caa4b13857829908778570493530466.png

    Peer endpoint "ping" is working.

     

    and clicking in the eyeball in with the "advanced" settings highlighted, I get this information:

     

    WireGuard Configuration

    Local server configuration

    [Interface]

    # Device_Steady Snake

    PrivateKey=xxxx=

    Address=10.66.39.132

    PostUp=logger -t wireguard 'Tunnel WireGuard-wg3 started';/usr/local/emhttp/webGui/scripts/update_services

    PostDown=logger -t wireguard 'Tunnel WireGuard-wg3 stopped';/usr/local/emhttp/webGui/scripts/update_services

    PostUp=ip -4 route flush table 203

    PostUp=ip -4 route add default via 10.66.39.132 dev wg3 table 203

    PostUp=ip -4 route add 192.168.11.0/24 via 192.168.11.1 dev br0 table 203

    PostDown=ip -4 route flush table 203

    PostDown=ip -4 route add unreachable default table 203

    PostDown=ip -4 route add 192.168.11.0/24 via 192.168.11.1 dev br0 table 203

     

    [Peer]

    #Tokyo 202_1

    PublicKey=yyyy=

    Endpoint=146.70.201.2:51820

    AllowedIPs=0.0.0.0/0

     

    Any guidance appreciated.  

     

    Thank you in advance.

     

     

     

     

     

    image.png

    image.png

    image.png

    image.png

    image.png

    image.png

  2. Hello Community

     

    I have been unsuccessful in getting WireGuard to work since my upgrade from 6.11.3->6.12.6, and I am in need of guidance.

    1.  I have been using ZeroTier for remote access into my server and docker UI and access to my network.  Don't really want to give that up.

    2.  My goal is to have system VPN tunneling access for updates (I am behind the Chinese firewall and cannot get at Github for plugins w/o VPN.  Dockers are OK).

    3.  I also want to have select docker containers (Sonar, etc) running over VPN (not Plex as my experience is that the remote access for playback does not like a double NAT). 

     

    I have read through the guides, tried a number of different things, and the configuration below satisfies my goal of using ZeroTier (with complete access to server, dockers, file system) and Plex, but cannot get Wireguard working (No handshakes)

     

    image.png.6b19faa07f424b0914f85840241c1961.png

    image.png.579ad701ce625295b68323d48fe12904.png

     

    Note:  Need to reinstitute zt0 listening at any docker stop and start, even though is shows in “listening” in many cases.

     

    image.png.a6f0cd18a0e3a92675d1af5c3c20777d.png

     

    (Host access to custom networks breaks Zerotier as does using anything other than a HOST network setting in the Docker)

    image.thumb.png.47462963c59e8b6eed0edf05942e5068.png

     

    image.thumb.png.5c73f6bcaa1db205507e57be9fba672c.png

     

     

    I have enabled UPnP both on the system and on my gateway router:

    image.png.f7e7d21b29b92465ba2fcb144f49597e.png

     

    image.thumb.png.3426c40bce9114348d925a8702c1eacc.png

     

     

    This is the VPN configuration:

    image.thumb.png.c626832a66f91811cafdf6864f05a290.png

     

    Peer endpoint "ping" is working.

     

    and clicking in the eyeball in with the "advanced" settings highlighted, I get this information:

     

    WireGuard Configuration

    Local server configuration

    [Interface]

    # Device_Steady Snake

    PrivateKey=xxxx=

    Address=10.66.39.132

    PostUp=logger -t wireguard 'Tunnel WireGuard-wg3 started';/usr/local/emhttp/webGui/scripts/update_services

    PostDown=logger -t wireguard 'Tunnel WireGuard-wg3 stopped';/usr/local/emhttp/webGui/scripts/update_services

    PostUp=ip -4 route flush table 203

    PostUp=ip -4 route add default via 10.66.39.132 dev wg3 table 203

    PostUp=ip -4 route add 192.168.11.0/24 via 192.168.11.1 dev br0 table 203

    PostDown=ip -4 route flush table 203

    PostDown=ip -4 route add unreachable default table 203

    PostDown=ip -4 route add 192.168.11.0/24 via 192.168.11.1 dev br0 table 203

     

    [Peer]

    #Tokyo 202_1

    PublicKey=yyyy=

    Endpoint=146.70.201.2:51820

    AllowedIPs=0.0.0.0/0

     

    Any guidance appreciated.  

     

    Thank you in advance.

     

    image.png

  3. After enabling bridging in the Network configuration and switching to ipvlan in the Dockers, I have eliminated the phantom NIC at my gateway.  Further by disabling "Host access to custom networks" Zerotier now works.

     

    I have not been able to get Wireguard working, but will post in that thread.

     

    image.thumb.png.fa85b6b71c33e38e6b88885a8d26d4cf.png

     

    image.thumb.png.a65be2b397042575e212f3d77653e4d8.png

    image.thumb.png.6ba70a548183e594e207d9da1822dec3.png

  4. Since upgrading from 6.11.3->6.12.6, I have been having a host of networking issues:

    1.   Cannot establish a WireGuard VPN connection (which means being in China, I cannot easily get to Github or updates via the Community App.

    2.  I have a phantom double NAT showing up in my main gateway router.

    3.  I use ZeroTier to access my server remotely (as well as all dockers); and could only get that back working after the upgrade by adding the zt0 listening interface

    4.  I am running a Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 15)

    5.  Diagnostics attached

     

    I am looking for some advice and guidance.  Thanks in advance

     

    image.png.951e83491fc21d313ee0d346c4913444.png

     

    My network on configuration is below:

    image.thumb.png.001570ef6e603303a725e0c268a797c2.png

     

    image.thumb.png.5e190192fc72a17ef2a0a41e114893c7.png

     

     

    Docker set up on macvlan

    image.thumb.png.d2dd972aa41c3fd9fc5fbbb5e624d02a.png

     

    hal-9000-diagnostics-20240124-1820.zip

  5. Found my problem...I had not set one of the library transcode caches to /temp (hand left as default .)

     

    Delete the docker, which cleaned up the docker image (dropping about 20% usage), reinstalled and restarted....all is good!

     

    image.thumb.png.a3e1f6942afc39c2b9755702aa6cd9d1.png

     

    TDARR is filling up my docker container.  I had installed TDARR the other day, and everything was running find - transcoding for a couple days.  I then had a power outage and after a restart, during parity check, I got a docker image space usage error.  I stopped TDARR and the image stopped filling.  After the parity check was complete, I restarted TDARR - and more filling.  I have attached the TDARR log files.  

     

    Advice appreciated.

     

    TDARR

     

     

     

     

     

  6. Hello Community,

     

    I have read errors on one of my disks.  I have attached the SMART report (ran the short version) which shows no errors.  Also attached the system log that does show the disk error. 

     

    1.  Should I be concerned?

    2.  Actions to take?

     

    I am somewhat challenged to put my hands on my server, as I am in the USA and my server is in my house in China (yes, I am a Covid refugee).  I am accessing my server using Zero Tier.

     

    Thanks for the advice.

     

    SH

     

    image.png.f647872265ea6c63bad979a40a386526.png

    hal-9000-smart-20200330-2223.zip hal-9000-syslog-20200330-1435.zip

  7. When I updated to Unraid 6.8.1, it broke binhex-plex.  All my dockers restarted cleanly, but this one - got a "Execution Error" dialogue box.  Upon restoring to 6.8.0, everything worked fine.   I am running transcoding in an Nvidia GPU.  Sorry I did not pull log files, as I was short on time.  Any thoughts?

  8. Binhex - love your stuff.  I have a plex question...is there a way to have plex meta-data scraping through VPN, while the streaming non-VPN.  I live in a region that blocks access to theTVDB thus cannot get show metadata.  I am running Binhex-deluge with privoxy, bh-SABnzd, Sonar, Radar, etc...

     

    If this is not possible, then routing all plex traffic through VPN.  Any thoughts appreciated.

     

     

    Thanks - SH.

  9. On 3/28/2018 at 2:26 AM, Squid said:

    Since you mapping is correct right now, check that sab is storing completed downloads in /data and not /downloads

     

    I am not sure what is the issue - below is the error message for the WebIU log .

    DownloadedEpisodesImportService Import failed, path does not exist or is not accessible by Sonarr: /downloads/complete/<tvshow name> 5:40am

     

    Per my physical drive mapping: /mnt/cache/downloads/Downloads/  which is mapped to /data for Sonar and SAB.  

     

    I have no path named /downloads/complete/  -  All my container paths for download data are named /data  -  nowhere do I have a container named /downloads

     

    If I do a manual import via the Sonar WebUI,  it maps to /data/complete/ I have no issues.  I am not sure why the autoprocessing tries /downloads/complete.    SAB saves its files to /data/complete  - the files are there.

     

    (As a side note, for some reason when using Chrome on a Mac, the Sonar UI never gets beyond the bouncing ball - this is a new phenomenon I have not seen before. Safari has no issue. )

     

    Thanks in advance for the support.

     

    SH

     

     

     

     

     

  10. Sonar in outer space.  I am not sure what is happening - this is a new problem after everything had been working well.  Sonar starts, the web GUI comes up partially and all I see is the bouncing ball left to right.  I can never get fully into Sonar.  I believe I have all the mapping correct - 

     

    image.png.4cb611b51ad39c3037db05ed4116ef80.png 

    Below is the log from Sonar - I get the import failed issues mentioned in the above posts - but it was working before.

    Created by...
    ___. .__ .__
    \_ |__ |__| ____ | |__ ____ ___ ___
    | __ \| |/ \| | \_/ __ \\ \/ /
    | \_\ \ | | \ Y \ ___/ > <
    |___ /__|___| /___| /\___ >__/\_ \
    \/ \/ \/ \/ \/
    https://hub.docker.com/u/binhex/

    2018-03-27 20:32:36.286253 [info] Host is running unRAID
    2018-03-27 20:32:36.314044 [info] System information Linux 78df25834de1 4.14.13-unRAID #1 SMP PREEMPT Wed Jan 10 10:27:09 PST 2018 x86_64 GNU/Linux
    2018-03-27 20:32:36.345453 [info] PUID defined as '99'
    2018-03-27 20:32:36.377563 [info] PGID defined as '100'
    2018-03-27 20:32:36.446291 [info] UMASK defined as '000'
    2018-03-27 20:32:36.476325 [info] Permissions already set for volume mappings
    2018-03-27 20:32:36.510804 [info] Starting Supervisor...
    2018-03-27 20:32:36,674 CRIT Set uid to user 0
    2018-03-27 20:32:36,674 INFO Included extra file "/etc/supervisor/conf.d/sonarr.conf" during parsing
    2018-03-27 20:32:36,677 INFO supervisord started with pid 7
    2018-03-27 20:32:37,678 INFO spawned: 'sonarr' with pid 42
    2018-03-27 20:32:37,679 INFO reaped unknown pid 8
    2018-03-27 20:32:38,004 DEBG 'sonarr' stdout output:
    [Info] Bootstrap: Starting Sonarr - /usr/lib/sonarr/NzbDrone.exe - Version 2.0.0.5163

    2018-03-27 20:32:38,462 DEBG 'sonarr' stdout output:
    [Info] AppFolderInfo: Data directory is being overridden to [/config]

    2018-03-27 20:32:38,741 DEBG 'sonarr' stdout output:
    [Info] Router: Application mode: Interactive

    2018-03-27 20:32:38,741 INFO success: sonarr entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
    2018-03-27 20:32:40,300 DEBG 'sonarr' stdout output:
    [Info] MigrationLogger: *** Migrating data source=/config/nzbdrone.db;cache size=-10485760;datetimekind=Utc;journal mode=Wal;pooling=True;version=3 ***

    2018-03-27 20:32:40,471 DEBG 'sonarr' stdout output:
    [Info] MigrationLogger: *** Migrating data source=/config/logs.db;cache size=-10485760;datetimekind=Utc;journal mode=Wal;pooling=True;version=3 ***

    2018-03-27 20:32:40,498 DEBG 'sonarr' stdout output:
    [Info] OwinHostController: Listening on the following URLs:

    2018-03-27 20:32:40,499 DEBG 'sonarr' stdout output:
    [Info] OwinHostController: http://*:8989/

    2018-03-27 20:32:40,695 DEBG 'sonarr' stdout output:
    [Info] NancyBootstrapper: Starting Web Server

    2018-03-27 20:33:17,255 DEBG 'sonarr' stdout output:
    [Error] DownloadedEpisodesImportService: Import failed, path does not exist or is not accessible by Sonarr: /downloads/complete/Homeland.S07E07.720p.WEB.H264-DEFLATE[rarbg]
     

     

  11. Squid - thanks.  Was planning the reboot after I complete my parity check after the unclean power down.  The cache drive is on my maintenance list to replace along with a conversion of the entire array to XFS.

     

    Once done, will confirm all is happy and close the thread.

     

    SH

     

    UPDATE:  Confirmed and operational - thanks Squid!

  12. @trurl   Sorry for my poor choice of words regarding parity.  As I plan to increase drive sizes during the conversion process, my planned first step is to upgrade the Parity drive and let unRaid rebuild on the larger disk.  After that is complete, then move onto to the file system change process by using a blank drive (pre-cleared) formatted to XFS, and copying data over following the "Mirror each disk with rsync, preserving parity" process.   I plan to use this process because I have a mix of user share and excluded drive.

     

    I hope I am on the right track.

     

  13. Thanks for the comments.  I am planning to move forward on this.

     

    From a planning standpoint, I am going to first upgrade my Parity drive, re-establish parity, then roll through the drives in the following order.  For most drives, the new "destination" drive is larger than the current drive.  In the end, I will have 3 "leftover" 2GB drives.

     

    Let me know if you see any holes in the plan or any "gotchas" to the conversion.

     

     

    image.png.67531659b9d68837e182b056c2857a79.png