Hi all.
My transmission-openvpn containing never fully starts up and gets itself in a restart cycle (over and over).
In the log output, this is the last bit before it restarts:
2020-10-17 12:39:21 Checking line endings
2020-10-17 12:39:21 Updating configs for docker-transmission-openvpn
Starting OpenVPN using config default.ovpn
Setting OPENVPN credentials...
adding route to local network 192.168.0.0/24 via 172.17.0.1 dev eth0
Options error: Unrecognized option or missing or extra parameter(s) in /etc/openvpn/nordvpn/default.ovpn:1: html (2.4.4)
Use --help for more information.
It's that "options error" that I'm thinking is the issue. Here's my compose file:
version: "2.1"
services:
transmission-openvpn:
cap_add:
- NET_ADMIN
container_name: transmission-openvpn
restart: always
environment:
- PUID=998
- PGID=996
- CREATE_TUN_DEVICE=true
- OPENVPN_PROVIDER=NORDVPN
- NORDVPN_COUNTRY=US
- NORDVPN_CATEGORY=legacy_p2p
- NORDVPN_PROTOCOL=udp
- OPENVPN_USERNAME=xxxxxxxxxxxxxxxxxxxxxxxxxxxx
- OPENVPN_PASSWORD=xxxxxxxxxxxxxxxxxxxxxxxxxxxx
- OPENVPN_OPTS=--inactive 3600 --ping 10 --ping-exit 60
- WEBPROXY_ENABLED=false
- LOCAL_NETWORK=192.168.0.0/24
- TRANSMISSION_SCRAPE_PAUSED_TORRENTS_ENABLED=false
- DNS=8.8.8.8,8.8.4.4
image: haugene/transmission-openvpn
logging:
driver: json-file
options:
max-size: 10m
ports:
- 9091:9091/tcp # transmission
volumes:
- /docker/downloads/:/data
- /docker/downloads/:/downloads
- /etc/localtime:/etc/localtime:ro
I'm running on CentOS 7.8, with Docker 19.03.13
Any help or advice would be appreciated.
Thank you!
A little more on this.
I ran docker run -it haugene/transmission-openvpn /bin/bash hoping to find what was wrong in the /etc/openvpn/nordvpn/default.ovpn file, I went into that directory and did not find that file. However there is a script in there called updateConfigs.sh I ran that and it created the default.ovpn file. This is what was in that file:
<html>
<head><title>502 Bad Gateway</title></head>
<body bgcolor="white">
<center><h1>502 Bad Gateway</h1></center>
<hr><center>nginx</center>
</body>
</html>
So that doesn't appear correct. Something wrong with my networking? I'm able to ping google.com successfully from within the running container.
In the shell command updateConfigs.sh on line 25, in the country_filter function, it calls:
curl -s "https://api.nordvpn.com/v1/servers/countries"
Running this w/o the -s (silent) option manually, on the command line, throws the following:
root@c1118cfc747e:/etc/openvpn/nordvpn# curl "https://api.nordvpn.com/v1/servers/countries"
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
root@c1118cfc747e:/etc/openvpn/nordvpn#
Looks like there's some kind of cert issue here. I don't think it's with api.nordvpn.com because when I put that URL into my web browser, no issue and the cert shows valid. I'm going to dig a bit more...
Well, mystery solved. It's a web-filter proxy service that my ISP has. My wife signed up for it to protect the kids from "bad" sites a couple weeks ago. So all the web traffic at the house goes through it. That was a fun little journey. :/
Most helpful comment
Well, mystery solved. It's a web-filter proxy service that my ISP has. My wife signed up for it to protect the kids from "bad" sites a couple weeks ago. So all the web traffic at the house goes through it. That was a fun little journey. :/