This project forked from markusmcnugen/docker-qbittorrentvpn
Docker container which runs a headless Jackett Server with an optional WireGuard or OpenVPN connection
Home Page: https://hub.docker.com/r/dyonr/jackettvpn/
License: GNU General Public License v3.0
Hello,
Not really an issue but more of a question.
Long time user of JackettVPN, I'm trying to install it on a raspberry PI 3B with a 32 Bits OS, but as you can guess it doesn"t work because of the architecture.
Is there a way for me to tweak to add support for this CPU ?
Thx
Hello,
I am quite a noob when it comes to docker.
i have installed the module using the following command:
docker run --privileged -d
-v /home/pentonit/jackettvpn/config:/config
-v /home/pentonit/jackettvpn/blackhole:/blackhole
-e "VPN_ENABLED=yes"
-e "VPN_TYPE=openvpn"
-e "LAN_NETWORK=192.168.68.0/24"
-p 9117:9117
--sysctl net.ipv6.conf.all.disable_ipv6=1
--name jackettvpn
--env "VPN_OPTIONS=--inactive 3600 --ping 10 --ping-exit 60"
--restart unless-stopped
dyonr/jackettvpn
When the conatiner starts, everything works as expected, with the openvpn file supplied, but after a while it stops working(the web portal loads but all indexers fail tests)
If i restart the container, everything works again, but i cant keep watch over the container and restart it every time it stops working.
I dont know that much about docker but it is running on Ubuntu 20.04 LTS. If any more info is needed(or logs, although i dont know how to acquire that) just let me know.
Hi,
I've set up this using the free protonvpn tier, and this script tends to work sometimes, and sometimes not.
Can anyone decipher the issue from this?
2021-04-03 00:00:02.044217 [INFO] VPN_ENABLED defined as 'yes'
2021-04-03 00:00:02.070417 [INFO] VPN_TYPE defined as 'openvpn'
2021-04-03 00:00:02.116647 [INFO] OpenVPN config file is found at /config/openvpn/nl-free-06.protonvpn.com.udp.ovpn
2021-04-03 00:00:02.152335 [INFO] VPN remote line defined as 'nl-free-06.protonvpn.com 80'
2021-04-03 00:00:02.182310 [INFO] VPN_REMOTE defined as 'nl-free-06.protonvpn.com'
2021-04-03 00:00:02.211525 [INFO] VPN_PORT defined as '80'
2021-04-03 00:00:02.241832 [INFO] VPN_PROTOCOL defined as 'udp'
2021-04-03 00:00:02.282466 [INFO] VPN_DEVICE_TYPE defined as 'tun0'
2021-04-03 00:00:02.316620 [INFO] LAN_NETWORK defined as '192.168.0.0/16'
2021-04-03 00:00:02.346122 [WARNING] NAME_SERVERS not defined (via -e NAME_SERVERS), defaulting to CloudFlare and Google name servers
2021-04-03 00:00:02.373668 [INFO] VPN_OPTIONS not defined (via -e VPN_OPTIONS)
2021-04-03 00:00:02.401370 [INFO] Adding 1.1.1.1 to resolv.conf
2021-04-03 00:00:02.436206 [INFO] Adding 8.8.8.8 to resolv.conf
2021-04-03 00:00:02.466596 [INFO] Adding 1.0.0.1 to resolv.conf
2021-04-03 00:00:02.501784 [INFO] Adding 8.8.4.4 to resolv.conf
2021-04-03 00:00:02.535154 [INFO] Starting OpenVPN...
Sat Apr 3 00:00:02 2021 WARNING: file 'credentials.conf' is group or others accessible
Sat Apr 3 00:00:02 2021 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Sat Apr 3 00:00:02 2021 library versions: OpenSSL 1.1.1d 10 Sep 2019, LZO 2.10
Sat Apr 3 00:00:02 2021 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Apr 3 00:00:02 2021 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sat Apr 3 00:00:02 2021 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sat Apr 3 00:00:02 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]46.166.182.72:4569
Sat Apr 3 00:00:02 2021 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sat Apr 3 00:00:02 2021 UDP link local: (not bound)
Sat Apr 3 00:00:02 2021 UDP link remote: [AF_INET]46.166.182.72:4569
Sat Apr 3 00:00:02 2021 TLS: Initial packet from [AF_INET]46.166.182.72:4569, sid=9aa7a4f7 bf23646a
Sat Apr 3 00:00:02 2021 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Apr 3 00:00:02 2021 VERIFY OK: depth=2, C=CH, O=ProtonVPN AG, CN=ProtonVPN Root CA
Sat Apr 3 00:00:02 2021 VERIFY OK: depth=1, C=CH, O=ProtonVPN AG, CN=ProtonVPN Intermediate CA 1
Sat Apr 3 00:00:02 2021 VERIFY KU OK
Sat Apr 3 00:00:02 2021 Validating certificate extended key usage
Sat Apr 3 00:00:02 2021 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sat Apr 3 00:00:02 2021 VERIFY EKU OK
Sat Apr 3 00:00:02 2021 VERIFY OK: depth=0, CN=nl-194.protonvpn.com
Sat Apr 3 00:00:02 2021 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 4096 bit RSA
Sat Apr 3 00:00:02 2021 [nl-194.protonvpn.com] Peer Connection Initiated with [AF_INET]46.166.182.72:4569
Sat Apr 3 00:00:03 2021 SENT CONTROL [nl-194.protonvpn.com]: 'PUSH_REQUEST' (status=1)
Sat Apr 3 00:00:03 2021 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.16.0.1,sndbuf 524288,rcvbuf 524288,redirect-gateway def1,explicit-exit-notify,comp-lzo no,route-gateway 10.16.0.1,topology subnet,ping 10,ping-restart 60,socket-flags TCP_NODELAY,ifconfig 10.16.0.10 255.255.0.0,peer-id 3,cipher AES-256-GCM'
Sat Apr 3 00:00:03 2021 OPTIONS IMPORT: timers and/or timeouts modified
Sat Apr 3 00:00:03 2021 OPTIONS IMPORT: explicit notify parm(s) modified
Sat Apr 3 00:00:03 2021 OPTIONS IMPORT: compression parms modified
Sat Apr 3 00:00:03 2021 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Sat Apr 3 00:00:03 2021 Socket Buffers: R=[212992->425984] S=[212992->425984]
Sat Apr 3 00:00:03 2021 OPTIONS IMPORT: --socket-flags option modified
Sat Apr 3 00:00:03 2021 NOTE: setsockopt TCP_NODELAY=1 failed
Sat Apr 3 00:00:03 2021 OPTIONS IMPORT: --ifconfig/up options modified
Sat Apr 3 00:00:03 2021 OPTIONS IMPORT: route options modified
Sat Apr 3 00:00:03 2021 OPTIONS IMPORT: route-related options modified
Sat Apr 3 00:00:03 2021 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Apr 3 00:00:03 2021 OPTIONS IMPORT: peer-id set
Sat Apr 3 00:00:03 2021 OPTIONS IMPORT: adjusting link_mtu to 1657
Sat Apr 3 00:00:03 2021 OPTIONS IMPORT: data channel crypto options modified
Sat Apr 3 00:00:03 2021 Data Channel: using negotiated cipher 'AES-256-GCM'
Sat Apr 3 00:00:03 2021 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sat Apr 3 00:00:03 2021 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sat Apr 3 00:00:03 2021 ROUTE_GATEWAY 172.20.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:14:00:06
Sat Apr 3 00:00:03 2021 TUN/TAP device tun0 opened
Sat Apr 3 00:00:03 2021 TUN/TAP TX queue length set to 100
Sat Apr 3 00:00:03 2021 /sbin/ip link set dev tun0 up mtu 1500
Sat Apr 3 00:00:03 2021 /sbin/ip addr add dev tun0 10.16.0.10/16 broadcast 10.16.255.255
Sat Apr 3 00:00:03 2021 /etc/openvpn/update-resolv-conf tun0 1500 1585 10.16.0.10 255.255.0.0 init
dhcp-option DNS 10.16.0.1
Sat Apr 3 00:00:03 2021 /sbin/ip route add 46.166.182.72/32 via 172.20.0.1
Sat Apr 3 00:00:03 2021 /sbin/ip route add 0.0.0.0/1 via 10.16.0.1
Sat Apr 3 00:00:03 2021 /sbin/ip route add 128.0.0.0/1 via 10.16.0.1
Sat Apr 3 00:00:03 2021 Initialization Sequence Completed
2021-04-03 00:00:04.604715 [INFO] Docker network defined as 172.20.0.0/16
2021-04-03 00:00:04.639126 [INFO] Adding 192.168.0.0/16 as route via docker eth0
2021-04-03 00:00:04.667893 [INFO] ip route defined as follows...
--------------------
0.0.0.0/1 via 10.16.0.1 dev tun0
default via 172.20.0.1 dev eth0
10.16.0.0/16 dev tun0 proto kernel scope link src 10.16.0.10
46.166.182.72 via 172.20.0.1 dev eth0
128.0.0.0/1 via 10.16.0.1 dev tun0
172.20.0.0/16 dev eth0 proto kernel scope link src 172.20.0.6
192.168.0.0/16 via 172.20.0.1 dev eth0
--------------------
2021-04-03 00:00:04.773859 [INFO] iptables defined as follows...
--------------------
-P INPUT DROP
-P FORWARD ACCEPT
-P OUTPUT DROP
-A INPUT -i tun0 -j ACCEPT
-A INPUT -s 172.20.0.0/16 -d 172.20.0.0/16 -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --sport 80 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 9117 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 9117 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o tun0 -j ACCEPT
-A OUTPUT -s 172.20.0.0/16 -d 172.20.0.0/16 -j ACCEPT
-A OUTPUT -o eth0 -p udp -m udp --dport 80 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 9117 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --sport 9117 -j ACCEPT
-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
--------------------
2021-04-03 00:00:04.810933 [INFO] A group with PGID 1000 does not exist, adding a group called 'jackett' with PGID 1000
2021-04-03 00:00:05.760451 [INFO] An user with PUID 1000 does not exist, adding an user called 'jackett user' with PUID 1000
2021-04-03 00:00:05.863735 [WARNING] UMASK not defined (via -e UMASK), defaulting to '002'
2021-04-03 00:00:05.910475 [WARNING] There is no password set via Jackett's web interface or as an environment variable!
2021-04-03 00:00:05.938833 [WARNING] Anyone on your network could access Jackett without authentication!
2021-04-03 00:00:05.979352 [WARNING] Or even the whole world if you did port-fortwarding!
2021-04-03 00:00:06.015963 [WARNING] It's adviced to set one via either the web interface or as environment variable
2021-04-03 00:00:06.043426 [INFO] Starting Jackett daemon...
Logging to /config/Jackett/Logs/log.txt.
2021-04-03 00:00:07.077274 [INFO] Jackett PID: 260
2021-04-03 00:00:07.144185 [INFO] Started Jackett daemon successfully...
2021-04-03 00:00:07.164057 [INFO] Network is up
Sat Apr 3 00:00:14 2021 write UDP: Operation not permitted (code=1)
2021-04-03 00:00:22.193735 [INFO] Network is up
Sat Apr 3 00:00:24 2021 write UDP: Operation not permitted (code=1)
Sat Apr 3 00:00:34 2021 write UDP: Operation not permitted (code=1)
2021-04-03 00:00:37.224646 [INFO] Network is up
Sat Apr 3 00:00:44 2021 write UDP: Operation not permitted (code=1)
2021-04-03 00:00:52.257416 [INFO] Network is up
Sat Apr 3 00:00:55 2021 write UDP: Operation not permitted (code=1)
Sat Apr 3 00:01:03 2021 [nl-194.protonvpn.com] Inactivity timeout (--ping-restart), restarting
Sat Apr 3 00:01:03 2021 SIGUSR1[soft,ping-restart] received, process restarting
Sat Apr 3 00:01:03 2021 Restart pause, 5 second(s)
2021-04-03 00:01:07.286373 [INFO] Network is up
Sat Apr 3 00:01:08 2021 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Apr 3 00:01:08 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]46.166.182.72:4569
Sat Apr 3 00:01:08 2021 Socket Buffers: R=[212992->425984] S=[212992->425984]
Sat Apr 3 00:01:08 2021 NOTE: setsockopt TCP_NODELAY=1 failed
Sat Apr 3 00:01:08 2021 UDP link local: (not bound)
Sat Apr 3 00:01:08 2021 UDP link remote: [AF_INET]46.166.182.72:4569
Sat Apr 3 00:01:08 2021 write UDP: Operation not permitted (code=1)
Sat Apr 3 00:01:10 2021 write UDP: Operation not permitted (code=1)
Sat Apr 3 00:01:14 2021 write UDP: Operation not permitted (code=1)
2021-04-03 00:01:22.313435 [INFO] Network is up
Sat Apr 3 00:01:22 2021 write UDP: Operation not permitted (code=1)
2021-04-03 00:01:37.342932 [INFO] Network is up
Sat Apr 3 00:01:38 2021 write UDP: Operation not permitted (code=1)
2021-04-03 00:01:52.372566 [INFO] Network is up
2021-04-03 00:02:07.400107 [INFO] Network is up
Sat Apr 3 00:02:08 2021 [UNDEF] Inactivity timeout (--ping-restart), restarting
Sat Apr 3 00:02:08 2021 SIGUSR1[soft,ping-restart] received, process restarting
Sat Apr 3 00:02:08 2021 Restart pause, 5 second(s)
Sat Apr 3 00:02:13 2021 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Apr 3 00:02:13 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]46.166.182.67:4569
Sat Apr 3 00:02:13 2021 Socket Buffers: R=[212992->425984] S=[212992->425984]
Sat Apr 3 00:02:13 2021 NOTE: setsockopt TCP_NODELAY=1 failed
Sat Apr 3 00:02:13 2021 UDP link local: (not bound)
Sat Apr 3 00:02:13 2021 UDP link remote: [AF_INET]46.166.182.67:4569
2021-04-03 00:02:22.429960 [INFO] Network is up
2021-04-03 00:02:37.478905 [INFO] Network is up
2021-04-03 00:02:52.510549 [INFO] Network is up
2021-04-03 00:03:07.537153 [INFO] Network is up
Sat Apr 3 00:03:13 2021 [UNDEF] Inactivity timeout (--ping-restart), restarting
Sat Apr 3 00:03:13 2021 SIGUSR1[soft,ping-restart] received, process restarting
Sat Apr 3 00:03:13 2021 Restart pause, 5 second(s)
Sat Apr 3 00:03:18 2021 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Apr 3 00:03:18 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]46.166.182.70:4569
Sat Apr 3 00:03:18 2021 Socket Buffers: R=[212992->425984] S=[212992->425984]
Sat Apr 3 00:03:18 2021 NOTE: setsockopt TCP_NODELAY=1 failed
Sat Apr 3 00:03:18 2021 UDP link local: (not bound)
Sat Apr 3 00:03:18 2021 UDP link remote: [AF_INET]46.166.182.70:4569
2021-04-03 00:03:22.565165 [INFO] Network is up
The current Dockerfile doesn't have any cleanups build in, it would be possible to make some cleanups to free up a couple of MBs probably.
Works perfect in Unraid but can't start in in Ubuntu 20.04 when wireguard is enabled.
--cap-add=NET_ADMIN, --cap-add=SYS_MODULE, --privileged, --sysctl="net.ipv4.conf.all.src_valid_mark=1" , manually 'net.ipv4.conf.all.src_valid_mark=1' in /etc/sysctl.conf, env LEGACY_IPTABLES=1
all of this does not help.
log:
2021-10-26 09:09:43.534658 [INFO] VPN_ENABLED defined as 'yes',
2021-10-26 09:09:43.593403 [INFO] The container is currently running iptables v1.8.2 (nf_tables).,
2021-10-26 09:09:43.681238 [INFO] LEGACY_IPTABLES is set to '1',
2021-10-26 09:09:43.760422 [INFO] Setting iptables to iptables (legacy),
update-alternatives: using /usr/sbin/iptables-legacy to provide /usr/sbin/iptables (iptables) in manual mode,
2021-10-26 09:09:43.905404 [INFO] The container is now running iptables v1.8.2 (legacy).,
2021-10-26 09:09:43.975232 [INFO] VPN_TYPE defined as 'wireguard',
2021-10-26 09:09:44.033861 [INFO] WireGuard config file is found at /config/wireguard/wg0.conf,
dos2unix: converting file /config/wireguard/wg0.conf to Unix format...,
2021-10-26 09:09:44.114071 [INFO] VPN remote line defined as '185.xxx.xx.132:51820',
2021-10-26 09:09:44.175546 [INFO] VPN_REMOTE defined as '185.xxx.xx.132',
2021-10-26 09:09:44.231738 [INFO] VPN_PORT defined as '51820',
2021-10-26 09:09:44.297746 [INFO] VPN_PROTOCOL set as 'udp', since WireGuard is always udp.,
2021-10-26 09:09:44.363075 [INFO] VPN_DEVICE_TYPE set as 'wg0', since WireGuard will always be wg0.,
2021-10-26 09:09:44.436122 [INFO] LAN_NETWORK defined as '192.168.0.0/24',
2021-10-26 09:09:44.507866 [WARNING] NAME_SERVERS not defined (via -e NAME_SERVERS), defaulting to CloudFlare and Google name servers,
2021-10-26 09:09:44.584923 [INFO] Adding 1.1.1.1 to resolv.conf,
2021-10-26 09:09:44.647954 [INFO] Adding 8.8.8.8 to resolv.conf,
2021-10-26 09:09:44.701204 [INFO] Adding 1.0.0.1 to resolv.conf,
2021-10-26 09:09:44.751732 [INFO] Adding 8.8.4.4 to resolv.conf,
2021-10-26 09:09:44.794387 [INFO] Starting WireGuard...,
Warning: `/config/wireguard/wg0.conf' is world accessible,
[#] ip link add wg0 type wireguard,
[#] wg setconf wg0 /dev/fd/63,
[#] ip -4 address add 10.100.0.176/32 dev wg0,
[#] ip link set mtu 1420 up dev wg0,
[#] resolvconf -a wg0 -m 0 -x,
[#] wg set wg0 fwmark 51820,
[#] ip -4 route add 0.0.0.0/0 dev wg0 table 51820,
[#] ip -4 rule add not fwmark 51820 table 51820,
[#] ip -4 rule add table main suppress_prefixlength 0,
[#] sysctl -q net.ipv4.conf.all.src_valid_mark=1,
sysctl: setting key "net.ipv4.conf.all.src_valid_mark": Read-only file system,
[#] resolvconf -d wg0 -f,
[#] ip -4 rule delete table 51820,
[#] ip -4 rule delete table main suppress_prefixlength 0,
[#] ip link delete dev wg0
It is not possible to set a password for Jackett from the docker run command (by using a environment variable), it might be possible to add this in the future.
I have 100% cpu load on that container after few hours. Used on Unraid OS, container pinned for 1 cpu core. Fixed by restart every hour. If I allow all 6 cores - all 6 will stuck at 100% till container restart. No matter cache disabled or enabled.
VPN disabled. 8 trackers.
Ideas?
I have just pulled this image onto my Synology DS918+.
It started fine but DNS does not work.
in console of the container:
# cat /etc/resolv.conf
nameserver 10.27.0.1
domain ngs
nameserver 1.1.1.1
nameserver 8.8.8.8
nameserver 1.0.0.1
nameserver 8.8.4.4
# ping yahoo.com
ping: yahoo.com: Temporary failure in name resolution
# ping -n 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=58 time=340 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=58 time=297 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=58 time=299 ms
64 bytes from 8.8.8.8: icmp_seq=4 ttl=58 time=300 ms
Docker version:
$ docker -v
Docker version 18.09.8, build bfed4f5
container config:
$ sudo docker container inspect dyonr-jackettvpn1
[
{
"Id": "b11700c80ccf31f9e7116b283787bf166fc5389354ddf416a1e8b346b1c632bc",
"Created": "2020-06-04T17:39:29.947900219Z",
"Path": "/bin/bash",
"Args": [
"/etc/openvpn/start.sh"
],
"State": {
"Status": "running",
"Running": true,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 2355,
"ExitCode": 0,
"Error": "",
"StartedAt": "2020-06-04T22:04:10.72804413Z",
"FinishedAt": "2020-06-04T22:02:13.913532876Z",
"Health": {
"Status": "unhealthy",
"FailingStreak": 5,
"Log": [
{
"Start": "2020-06-04T23:09:10.729436095+01:00",
"End": "2020-06-04T23:09:10.951674992+01:00",
"ExitCode": 1,
"Output": "Host not set! Set env 'HEALTH_CHECK_HOST'. For now, using default one.one.one.one\nNetwork is down\nping: one.one.one.one: Temporary failure in name resolution\n"
},
{
"Start": "2020-06-04T23:14:11.209003961+01:00",
"End": "2020-06-04T23:14:11.499489921+01:00",
"ExitCode": 1,
"Output": "Host not set! Set env 'HEALTH_CHECK_HOST'. For now, using default one.one.one.one\nping: one.one.one.one: Temporary failure in name resolution\nNetwork is down\n"
},
{
"Start": "2020-06-04T23:19:12.39600456+01:00",
"End": "2020-06-04T23:19:12.743452191+01:00",
"ExitCode": 1,
"Output": "Host not set! Set env 'HEALTH_CHECK_HOST'. For now, using default one.one.one.one\nping: one.one.one.one: Temporary failure in name resolution\nNetwork is down\n"
},
{
"Start": "2020-06-04T23:24:13.44266883+01:00",
"End": "2020-06-04T23:24:13.659415975+01:00",
"ExitCode": 1,
"Output": "Host not set! Set env 'HEALTH_CHECK_HOST'. For now, using default one.one.one.one\nping: one.one.one.one: Temporary failure in name resolution\nNetwork is down\n"
},
{
"Start": "2020-06-04T23:29:13.899225108+01:00",
"End": "2020-06-04T23:29:14.106987756+01:00",
"ExitCode": 1,
"Output": "Host not set! Set env 'HEALTH_CHECK_HOST'. For now, using default one.one.one.one\nping: one.one.one.one: Temporary failure in name resolution\nNetwork is down\n"
}
]
},
"StartedTs": 1591308250,
"FinishedTs": 1591308133
},
"Image": "sha256:b1ceafaaa3cbbe88abd4990f8713b8c331f73aa2e236dd2fb86bae0af2c7f116",
"ResolvConfPath": "/volume2/@docker/containers/b11700c80ccf31f9e7116b283787bf166fc5389354ddf416a1e8b346b1c632bc/resolv.conf",
"HostnamePath": "/volume2/@docker/containers/b11700c80ccf31f9e7116b283787bf166fc5389354ddf416a1e8b346b1c632bc/hostname",
"HostsPath": "/volume2/@docker/containers/b11700c80ccf31f9e7116b283787bf166fc5389354ddf416a1e8b346b1c632bc/hosts",
"LogPath": "/volume2/@docker/containers/b11700c80ccf31f9e7116b283787bf166fc5389354ddf416a1e8b346b1c632bc/log.db",
"Name": "/dyonr-jackettvpn1",
"RestartCount": 0,
"Driver": "btrfs",
"Platform": "linux",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "unconfined",
"ExecIDs": [
"23133b5c7a01c48b4eecdbd433db47ec38490a61588c2316b9897e544e06e72f"
],
"HostConfig": {
"Binds": [
"/volume2/Media/torrents/watch:/blackhole:rw",
"/volume2/Media/Docker Configs/jackettvpn/config:/config:rw"
],
"ContainerIDFile": "",
"LogConfig": {
"Type": "db",
"Config": {}
},
"NetworkMode": "bridge",
"PortBindings": {
"9117/tcp": [
{
"HostIp": "0.0.0.0",
"HostPort": "9117"
}
]
},
"RestartPolicy": {
"Name": "always",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": null,
"CapAdd": null,
"CapDrop": null,
"Dns": null,
"DnsOptions": null,
"DnsSearch": null,
"ExtraHosts": null,
"GroupAdd": null,
"IpcMode": "shareable",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": true,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "runc",
"Env": [
"WEBUI_PORT=9117",
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"DEBIAN_FRONTEND=noninteractive",
"XDG_DATA_HOME=/config",
"XDG_CONFIG_HOME=/config",
"VPN_ENABLED=yes",
"LAN_NETWORK=10.27.0.0/24",
"TZ=Europe/London",
"PGID=100",
"PUID=1038"
],
"ConsoleSize": [
0,
0
],
"Isolation": "",
"CpuShares": 50,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": null,
"BlkioDeviceReadBps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteIOps": null,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": null,
"DeviceCgroupRules": null,
"DiskQuota": 0,
"KernelMemory": 0,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"OomKillDisable": false,
"PidsLimit": 0,
"Ulimits": null,
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0,
"MaskedPaths": [
"/proc/asound",
"/proc/acpi",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware"
],
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
]
},
"GraphDriver": {
"Data": null,
"Name": "btrfs"
},
"Mounts": [
{
"Type": "bind",
"Source": "/volume2/Media/torrents/watch",
"Destination": "/blackhole",
"Mode": "rw",
"RW": true,
"Propagation": "rprivate"
},
{
"Type": "bind",
"Source": "/volume2/Media/Docker Configs/jackettvpn/config",
"Destination": "/config",
"Mode": "rw",
"RW": true,
"Propagation": "rprivate"
}
],
"Config": {
"Hostname": "dyonr-jackettvpn1",
"Domainname": "",
"User": "",
"AttachStdin": false,
"AttachStdout": false,
"AttachStderr": false,
"ExposedPorts": {
"9117/tcp": {}
},
"Tty": true,
"OpenStdin": true,
"StdinOnce": false,
"Env": [
"WEBUI_PORT=9117",
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"DEBIAN_FRONTEND=noninteractive",
"XDG_DATA_HOME=/config",
"XDG_CONFIG_HOME=/config",
"VPN_ENABLED=yes",
"LAN_NETWORK=10.27.0.0/24",
"TZ=Europe/London",
"PGID=100",
"PUID=1038"
],
"Cmd": [
"/bin/bash",
"/etc/openvpn/start.sh"
],
"Healthcheck": {
"Test": [
"CMD-SHELL",
"/etc/jackett/healthcheck.sh"
],
"Interval": 300000000000
},
"Image": "dyonr/jackettvpn:latest",
"Volumes": {
"/blackhole": {},
"/config": {}
},
"WorkingDir": "/opt",
"Entrypoint": null,
"OnBuild": null,
"Labels": {},
"DDSM": false
},
"NetworkSettings": {
"Bridge": "",
"SandboxID": "baab0fad0379a8d3730bb467f13f0d2b48bff5636bca7635c71e5df748cc5716",
"HairpinMode": false,
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"Ports": {
"9117/tcp": [
{
"HostIp": "0.0.0.0",
"HostPort": "9117"
}
]
},
"SandboxKey": "/var/run/docker/netns/baab0fad0379",
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null,
"EndpointID": "fdbb68cf9ba963fde68880bbdffe8e0b43c5433e5c8b92dabb4ca68474f27310",
"Gateway": "172.17.0.1",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAddress": "172.17.0.3",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"MacAddress": "02:42:ac:11:00:03",
"Networks": {
"bridge": {
"IPAMConfig": null,
"Links": null,
"Aliases": null,
"NetworkID": "8cb67d92dd634e17db3b2c3e2f2965dc2dd6ad62eb74a672c5414462d75df97c",
"EndpointID": "fdbb68cf9ba963fde68880bbdffe8e0b43c5433e5c8b92dabb4ca68474f27310",
"Gateway": "172.17.0.1",
"IPAddress": "172.17.0.3",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"MacAddress": "02:42:ac:11:00:03",
"DriverOpts": null
}
}
}
}
]log:
dyonr-jackettvpn1
date,stream,content
2020-06-04 22:04:20,stdout,2020-06-04 23:04:20.669821 [info] Started Jackett daemon successfully...
2020-06-04 22:04:20,stdout,2020-06-04 23:04:20.628109 [info] Jackett PID: 216
2020-06-04 22:04:19,stdout,Logging to /config/Jackett/Logs/log.txt.
2020-06-04 22:04:19,stdout,2020-06-04 23:04:19.551432 [info] Starting Jackett daemon...
2020-06-04 22:04:19,stdout,"2020-06-04 23:04:19.489133 [warn] UMASK not defined (via -e UMASK), defaulting to '002'
"
2020-06-04 22:04:19,stdout,useradd: user 'jackett' already exists
2020-06-04 22:04:19,stdout,"An user with PUID 1038 does not exist, adding an user called 'jackett user' with PUID 1038
"
2020-06-04 22:04:19,stdout,groupadd: GID '100' already exists
2020-06-04 22:04:19,stdout,"A group with PGID 100 does not exist, adding a group called 'jackett' with PGID 100
"
2020-06-04 22:04:19,stdout,--------------------
2020-06-04 22:04:19,stdout,-A OUTPUT -o lo -j ACCEPT
2020-06-04 22:04:19,stdout,-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
2020-06-04 22:04:19,stdout,-A OUTPUT -o eth0 -p tcp -m tcp --sport 9117 -j ACCEPT
2020-06-04 22:04:19,stdout,-A OUTPUT -o eth0 -p tcp -m tcp --dport 9117 -j ACCEPT
2020-06-04 22:04:19,stdout,-A OUTPUT -o eth0 -p udp -m udp --dport 1194 -j ACCEPT
2020-06-04 22:04:19,stdout,-A OUTPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
2020-06-04 22:04:19,stdout,-A OUTPUT -o tun0 -j ACCEPT
2020-06-04 22:04:19,stdout,-A INPUT -i lo -j ACCEPT
2020-06-04 22:04:19,stdout,-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
2020-06-04 22:04:19,stdout,-A INPUT -i eth0 -p tcp -m tcp --sport 9117 -j ACCEPT
2020-06-04 22:04:19,stdout,-A INPUT -i eth0 -p tcp -m tcp --dport 9117 -j ACCEPT
2020-06-04 22:04:19,stdout,-A INPUT -i eth0 -p udp -m udp --sport 1194 -j ACCEPT
2020-06-04 22:04:19,stdout,-A INPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
2020-06-04 22:04:19,stdout,-A INPUT -i tun0 -j ACCEPT
2020-06-04 22:04:19,stdout,-P OUTPUT DROP
2020-06-04 22:04:19,stdout,-P FORWARD ACCEPT
2020-06-04 22:04:19,stdout,-P INPUT DROP
2020-06-04 22:04:19,stdout,--------------------
2020-06-04 22:04:19,stdout,2020-06-04 23:04:19.400166 [info] iptables defined as follows...
2020-06-04 22:04:19,stdout,2020-06-04 23:04:19.294773 [info] Docker network defined as 172.17.0.0/16
2020-06-04 22:04:19,stdout,"2020-06-04 23:04:19.196178 [info] iptable_mangle support detected, adding fwmark for tables
"
2020-06-04 22:04:19,stdout,"x_tables 16302 19 ip6table_filter,xt_ipvs,xt_iprange,xt_mark,xt_recent,ip_tables,xt_tcpudp,ipt_MASQUERADE,xt_limit,xt_state,xt_conntrack,xt_LOG,xt_nat,xt_multiport,iptable_filter,xt_REDIRECT,iptable_mangle,ip6_tables,xt_addrtype
"
2020-06-04 22:04:19,stdout,"ip_tables 14092 3 iptable_filter,iptable_mangle,iptable_nat
"
2020-06-04 22:04:19,stdout,iptable_mangle 1656 0
2020-06-04 22:04:19,stdout,--------------------
2020-06-04 22:04:19,stdout,172.17.0.0/16 dev eth0 proto kernel scope link src 172.17.0.3
2020-06-04 22:04:19,stdout,128.0.0.0/1 via 10.8.0.5 dev tun2001
2020-06-04 22:04:19,stdout,42.3.114.43 via 172.17.0.1 dev eth0
2020-06-04 22:04:19,stdout,10.27.0.0/24 via 172.17.0.1 dev eth0
2020-06-04 22:04:19,stdout,10.8.0.5 dev tun2001 proto kernel scope link src 10.8.0.6
2020-06-04 22:04:19,stdout,10.8.0.0/24 via 10.8.0.5 dev tun2001
2020-06-04 22:04:19,stdout,default via 172.17.0.1 dev eth0
2020-06-04 22:04:19,stdout,0.0.0.0/1 via 10.8.0.5 dev tun2001
2020-06-04 22:04:19,stdout,--------------------
2020-06-04 22:04:19,stdout,2020-06-04 23:04:19.125603 [info] ip route defined as follows...
2020-06-04 22:04:19,stdout,2020-06-04 23:04:19.058319 [info] Adding 10.27.0.0/24 as route via docker eth0
2020-06-04 22:04:18,stdout,2020-06-04 23:04:18.986580 [info] WebUI port defined as 9117
2020-06-04 22:04:18,stdout,Thu Jun 4 23:04:18 2020 Initialization Sequence Completed
2020-06-04 22:04:18,stdout,Thu Jun 4 23:04:18 2020 /sbin/ip addr add dev tun2001 local 10.8.0.6 peer 10.8.0.5
2020-06-04 22:04:18,stdout,Thu Jun 4 23:04:18 2020 /sbin/ip link set dev tun2001 up mtu 1500
2020-06-04 22:04:18,stdout,"Thu Jun 4 23:04:18 2020 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
"
2020-06-04 22:04:18,stdout,Thu Jun 4 23:04:18 2020 TUN/TAP device tun2001 opened
2020-06-04 22:04:13,stdout,Thu Jun 4 23:04:13 2020 [TS Series NAS] Peer Connection Initiated with [AF_INET]42.3.114.43:1194
2020-06-04 22:04:12,stdout,Thu Jun 4 23:04:12 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2020-06-04 22:04:11,stdout,Thu Jun 4 23:04:11 2020 UDP link remote: [AF_INET]42.3.114.43:1194
2020-06-04 22:04:11,stdout,Thu Jun 4 23:04:11 2020 UDP link local: (not bound)
2020-06-04 22:04:11,stdout,Thu Jun 4 23:04:11 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]42.3.114.43:1194
2020-06-04 22:04:11,stdout,Thu Jun 4 23:04:11 2020 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
2020-06-04 22:04:11,stdout,"Thu Jun 4 23:04:11 2020 library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08
"
2020-06-04 22:04:11,stdout,Thu Jun 4 23:04:11 2020 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019
2020-06-04 22:04:11,stdout,Thu Jun 4 23:04:11 2020 WARNING: file 'credentials.conf' is group or others accessible
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.876133 [info] Starting OpenVPN...
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.818770 [info] Adding 8.8.4.4 to resolv.conf
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.758125 [info] Adding 1.0.0.1 to resolv.conf
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.696883 [info] Adding 8.8.8.8 to resolv.conf
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.632232 [info] Adding 1.1.1.1 to resolv.conf
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.567727 [info] VPN_OPTIONS not defined (via -e VPN_OPTIONS)
2020-06-04 22:04:11,stdout,"2020-06-04 23:04:11.500065 [warn] NAME_SERVERS not defined (via -e NAME_SERVERS), defaulting to CloudFlare and Google name servers
"
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.438267 [info] LAN_NETWORK defined as '10.27.0.0/24'
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.377521 [info] VPN_DEVICE_TYPE defined as 'tun0'
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.314544 [info] VPN_PROTOCOL defined as 'udp'
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.247553 [info] VPN_PORT defined as '1194'
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.185873 [info] VPN_REMOTE defined as 'alanlee.no-ip.com'
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.118542 [info] VPN remote line defined as 'alanlee.no-ip.com 1194'
2020-06-04 22:04:11,stdout,dos2unix: converting file /config/openvpn/alanlee.no-ip.com.ovpn to Unix format...
2020-06-04 22:04:11,stdout,2020-06-04 23:04:11.043440 [info] OpenVPN config file (ovpn extension) is located at /config/openvpn/alanlee.no-ip.com.ovpn
2020-06-04 22:04:10,stdout,2020-06-04 23:04:10.973548 [info] VPN_ENABLED defined as 'yes'
Hello,
i did succesfully setup this container and with curl and ping I can verify internet acceses and the vpn tunnel. Then I follwed this video https://www.youtube.com/watch?v=znSu_FuKFW0 and setup an other container (will name it Docker 2.) behind this network. On 2. I can still verify the internet acceses and also that I am using the vpn tunnel. Even from my pc and the 2. container I can ping each other.
I did the addional port mapping in the parent container (jacketvpn) for my 2. container but I can't still accses the web server on that.
My guess would be that the iptable rules block this but I am not quite sure maybe its the fault of something in 2. container. Feel free to close this issue then.
To clarify the 2. container should use the vpn tunnel for any internet usage and everything local should bypass the tunnel. I have set "LAN_NETWORK" correct and I can reach the jacket webui.
2. Container (:6596) <---> Jackettvpn <---> My PC
I'm trying to run this container on a cloud instance and wanted to connect to the Jackett WebUI from my local PC (connection routed over the internet). However the readme mentions that this can only be accessed from the local network?
Looking for any guidance on what changes need to be made so as to access the WebUI from any IP.
Whenever I start this container it immediately fails and kills itself with the error below.
Options error: In [CMD-LINE]:1: Error opening configuration file: /config/openvpn/id-jak.prod.surfshark.comsurfshark_openvpn_tcp.ovpn
I am running on portainer with the attached yml file as a stack. I believe that this should sort out the "privleged" requirement.
I suspect that it is linked to this issue, but the solutions/workarounds posted there don't seem to work for me :
haugene#1839
yaml file:
version: '3.3'
services:
jackettvpn:
image: dyonr/jackettvpn:latest
privileged: true
restart: unless-stopped
cap_add:
- NET_ADMIN
ports:
- 9117:9117 # http://nas-ip:9091 to access ui
environment:
- VPN_ENABLED=yes
- VPN_TYPE=openvpn
- LAN_NETWORK=192.168.50.0/24
volumes:
- /volume1/docker/jackettvpn:/config # change to download dir
network_mode: bridge
Log file:
2021-08-13 15:53:49.611756 [INFO] VPN_ENABLED defined as 'yes'
2021-08-13 15:53:49.664239 [INFO] VPN_TYPE defined as 'openvpn'
2021-08-13 15:53:49.745704 [INFO] OpenVPN config file is found at /config/openvpn/id-jak.prod.surfshark.comsurfshark_openvpn_tcp.ovpn
dos2unix: converting file /config/openvpn/id-jak.prod.surfshark.comsurfshark_openvpn_tcp.ovpn to Unix format...
2021-08-13 15:53:49.844749 [INFO] VPN remote line defined as 'id-jak.prod.surfshark.com 1443'
2021-08-13 15:53:49.882589 [INFO] VPN_REMOTE defined as 'id-jak.prod.surfshark.com'
2021-08-13 15:53:49.920998 [INFO] VPN_PORT defined as '1443'
2021-08-13 15:53:49.959346 [INFO] VPN_PROTOCOL defined as 'tcp'
2021-08-13 15:53:49.996575 [INFO] VPN_DEVICE_TYPE defined as 'tun0'
2021-08-13 15:53:50.033733 [INFO] LAN_NETWORK defined as '192.168.50.0/24'
2021-08-13 15:53:50.070801 [WARNING] NAME_SERVERS not defined (via -e NAME_SERVERS), defaulting to CloudFlare and Google name servers
2021-08-13 15:53:50.108169 [INFO] VPN_OPTIONS not defined (via -e VPN_OPTIONS)
2021-08-13 15:53:50.150287 [INFO] Adding 1.1.1.1 to resolv.conf
2021-08-13 15:53:50.187892 [INFO] Adding 8.8.8.8 to resolv.conf
2021-08-13 15:53:50.224315 [INFO] Adding 1.0.0.1 to resolv.conf
2021-08-13 15:53:50.263070 [INFO] Adding 8.8.4.4 to resolv.conf
2021-08-13 15:53:50.297636 [INFO] PUID not defined. Defaulting to root user
2021-08-13 15:53:50.332493 [INFO] PGID not defined. Defaulting to root group
2021-08-13 15:53:50.369179 [INFO] Starting OpenVPN...
Options error: In [CMD-LINE]:1: Error opening configuration file: /config/openvpn/id-jak.prod.surfshark.comsurfshark_openvpn_tcp.ovpn
Hi,
After the latest update today, All Indexers fail with the sam error message,
System.NullReferenceException: Object reference not set to an instance of an object. at Jackett.Common.Services.CacheService.<>c__DisplayClass3_1.b__2(CachedResult i) in /home/vsts/work/1/s/src/Jackett.Common/Services/CacheService.cs:line 35 at System.Linq.Enumerable.TryGetFirst[TSource](IEnumerable1 source, Func2 predicate, Boolean& found) at Jackett.Common.Services.CacheService.CacheRssResults(IIndexer indexer, IEnumerable1 releases) in /home/vsts/work/1/s/src/Jackett.Common/Services/CacheService.cs:line 35 at Jackett.Common.Services.IndexerManagerService.TestIndexer(String name) in /home/vsts/work/1/s/src/Jackett.Common/Services/IndexerManagerService.cs:line 228 at Jackett.Server.Controllers.IndexerApiController.Test() in /home/vsts/work/1/s/src/Jackett.Server/Controllers/IndexerApiController.cs:line 130 at Microsoft.AspNetCore.Mvc.Infrastructure.ActionMethodExecutor.TaskOfIActionResultExecutor.Execute(IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments) at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeActionMethodAsync>g__Awaited|12_0(ControllerActionInvoker invoker, ValueTask1 actionResultValueTask) at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.g__Awaited|10_0(ControllerActionInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted) at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Rethrow(ActionExecutedContextSealed context) at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted) at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.g__Awaited|13_0(ControllerActionInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted) at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.g__Awaited|19_0(ResourceInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted) at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.g__Awaited|17_0(ResourceInvoker invoker, Task task, IDisposable scope) at Microsoft.AspNetCore.Routing.EndpointMiddleware.g__AwaitRequestTask|6_0(Endpoint endpoint, Task requestTask, ILogger logger) at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context) at Jackett.Server.Middleware.CustomExceptionHandler.Invoke(HttpContext httpContext) in /home/vsts/work/1/s/src/Jackett.Server/Middleware/CustomExceptionHandler.cs:line 26 |
|---|
Hello,
Since todays update, the container doesn't start anymore :
ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)
Exiting due to fatal error
I'm using docker on a synology NAS with the latest DSM version.
The container is autoupdating with watchtower.
It was working perfectly fine before.
Maybe I miss some info regarding new configuration with this update ?
Your version of Jackett v0.14.433.0 is very old. Multiple indexers are likely to fail when using an old version. Update to the latest version of Jackett.
I am using your docker image dyonr/jackettvpn
is something wrong again?
Hello,
I'm desperately trying to add FlareSolverr to JacketVPN. I tunneled FlareSolverr to JacketVPN but I can't access to the FlareSolverr UI.
I use unraid and both docker version of JackettVPN and FlareSolverr.
Do you know a procedure which works ?
Thank you !
After trying this method haugene#1839 (comment) jackett successfully started but i am not able to access the WebUI
log file is zero byte
docker configuration
Synology NAS 7.0
LOGS
2021-09-02 05:33:53 stdout 2021-09-02 05:33:53.504880 [INFO] HEALTH_CHECK_SILENT is not set. Because this variable is not set, it will be supressed by default
2021-09-02 05:33:53 stdout 2021-09-02 05:33:53.469156 [INFO] HEALTH_CHECK_INTERVAL is not set. For now using default interval of 300
2021-09-02 05:33:53 stdout 2021-09-02 05:33:53.432603 [INFO] HEALTH_CHECK_HOST is not set. For now using default host one.one.one.one
2021-09-02 05:33:53 stdout 2021-09-02 05:33:53.396893 [INFO] Started Jackett daemon successfully...
2021-09-02 05:33:53 stdout 2021-09-02 05:33:53.394896 [INFO] Jackett PID:
2021-09-02 05:33:52 stdout Logging to /config/Jackett/Logs/log.txt.
2021-09-02 05:33:52 stdout 2021-09-02 05:33:52.352379 [INFO] Starting Jackett daemon...
2021-09-02 05:33:52 stdout 2021-09-02 05:33:52.316250 [INFO] Password hashes match, nothing to change.
2021-09-02 05:33:52 stdout 2021-09-02 05:33:52.233750 [INFO] Generating password hash
2021-09-02 05:33:52 stdout 2021-09-02 05:33:52.102055 [WARNING] UMASK not defined (via -e UMASK), defaulting to '002'
2021-09-02 05:33:51 stdout 2021-09-02 05:33:51.778987 [INFO] An user with PUID 1026 does not exist, adding an user called 'jackett user' with PUID 1026
2021-09-02 05:33:51 stdout 2021-09-02 05:33:51.741043 [INFO] A group with PGID 100 already exists in /etc/group, nothing to do.
2021-09-02 05:33:51 stdout --------------------
2021-09-02 05:33:51 stdout
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): Could not fetch rule set generation id: Invalid argument
2021-09-02 05:33:51 stdout # Warning: iptables-legacy tables present, use iptables-legacy to see them
2021-09-02 05:33:51 stdout --------------------
2021-09-02 05:33:51 stdout 2021-09-02 05:33:51.697737 [INFO] iptables defined as follows...
2021-09-02 05:33:51 stdout
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): Could not fetch rule set generation id: Invalid argument
2021-09-02 05:33:51 stdout Try `iptables -h' or 'iptables --help' for more information.
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): unknown option "--icmp-type"
2021-09-02 05:33:51 stdout Try `iptables -h' or 'iptables --help' for more information.
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): unknown option "--sport"
2021-09-02 05:33:51 stdout Try `iptables -h' or 'iptables --help' for more information.
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): unknown option "--dport"
2021-09-02 05:33:51 stdout Try `iptables -h' or 'iptables --help' for more information.
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): unknown option "--sport"
2021-09-02 05:33:51 stdout Try `iptables -h' or 'iptables --help' for more information.
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): unknown option "--dport"
2021-09-02 05:33:51 stdout Try `iptables -h' or 'iptables --help' for more information.
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): unknown option "--dport"
2021-09-02 05:33:51 stdout
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): Could not fetch rule set generation id: Invalid argument
2021-09-02 05:33:51 stdout
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): Could not fetch rule set generation id: Invalid argument
2021-09-02 05:33:51 stdout
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): Could not fetch rule set generation id: Invalid argument
2021-09-02 05:33:51 stdout
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): Could not fetch rule set generation id: Invalid argument
2021-09-02 05:33:51 stdout Try `iptables -h' or 'iptables --help' for more information.
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): unknown option "--icmp-type"
2021-09-02 05:33:51 stdout Try `iptables -h' or 'iptables --help' for more information.
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): unknown option "--sport"
2021-09-02 05:33:51 stdout Try `iptables -h' or 'iptables --help' for more information.
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): unknown option "--dport"
2021-09-02 05:33:51 stdout Try `iptables -h' or 'iptables --help' for more information.
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): unknown option "--sport"
2021-09-02 05:33:51 stdout
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): Could not fetch rule set generation id: Invalid argument
2021-09-02 05:33:51 stdout
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): Could not fetch rule set generation id: Invalid argument
2021-09-02 05:33:51 stdout
2021-09-02 05:33:51 stdout iptables v1.8.7 (nf_tables): Could not fetch rule set generation id: Invalid argument
2021-09-02 05:33:51 stdout 2021-09-02 05:33:51.611743 [INFO] iptable_mangle support detected, adding fwmark for tables
2021-09-02 05:33:51 stdout x_tables 16882 19 ip6table_filter,xt_ipvs,xt_iprange,xt_mark,xt_recent,ip_tables,xt_tcpudp,ipt_MASQUERADE,xt_limit,xt_state,xt_conntrack,xt_LOG,xt_nat,xt_multiport,iptable_filter,xt_REDIRECT,iptable_mangle,ip6_tables,xt_addrtype
2021-09-02 05:33:51 stdout ip_tables 13819 9 iptable_filter,iptable_mangle,iptable_nat
2021-09-02 05:33:51 stdout iptable_mangle 1656 1
2021-09-02 05:33:51 stdout --------------------
2021-09-02 05:33:51 stdout 192.168.0.0/24 via 172.17.0.1 dev eth0
2021-09-02 05:33:51 stdout 172.17.0.0/16 dev eth0 proto kernel scope link src 172.17.0.2
2021-09-02 05:33:51 stdout 128.0.0.0/1 via 10.10.112.1 dev tun0
2021-09-02 05:33:51 stdout 95.181.239.12 via 172.17.0.1 dev eth0
2021-09-02 05:33:51 stdout 10.10.112.0/24 dev tun0 proto kernel scope link src 10.10.112.201
2021-09-02 05:33:51 stdout default via 172.17.0.1 dev eth0
2021-09-02 05:33:51 stdout 0.0.0.0/1 via 10.10.112.1 dev tun0
2021-09-02 05:33:51 stdout --------------------
2021-09-02 05:33:51 stdout 2021-09-02 05:33:51.566545 [INFO] ip route defined as follows...
2021-09-02 05:33:51 stdout 2021-09-02 05:33:51.529408 [INFO] Adding 192.168.0.0/24 as route via docker eth0
2021-09-02 05:33:51 stdout 2021-09-02 05:33:51.489862 [INFO] Docker network defined as 172.17.0.0/16
2021-09-02 05:33:50 stdout 2021-09-02 05:33:50 Initialization Sequence Completed
2021-09-02 05:33:50 stdout 2021-09-02 05:33:50 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2021-09-02 05:33:50 stdout 2021-09-02 05:33:50 net_addr_v4_add: 10.10.112.201/24 dev tun0
2021-09-02 05:33:50 stdout 2021-09-02 05:33:50 net_iface_up: set tun0 up
2021-09-02 05:33:50 stdout 2021-09-02 05:33:50 net_iface_mtu_set: mtu 1500 for tun0
2021-09-02 05:33:50 stdout 2021-09-02 05:33:50 TUN/TAP device tun0 opened
2021-09-02 05:33:50 stdout 2021-09-02 05:33:50 [srilanka403] Peer Connection Initiated with [AF_INET]95.181.239.12:1198
2021-09-02 05:33:50 stdout 2021-09-02 05:33:50 UDP link remote: [AF_INET]95.181.239.12:1198
2021-09-02 05:33:50 stdout 2021-09-02 05:33:50 UDP link local: (not bound)
2021-09-02 05:33:50 stdout 2021-09-02 05:33:50 TCP/UDP: Preserving recently used remote address: [AF_INET]95.181.239.12:1198
2021-09-02 05:33:45 stdout
2021-09-02 05:33:45 stdout -----END X509 CRL-----
2021-09-02 05:33:45 stdout MR6jC0K2ps9qyZAN74LEBedEfK7tBOzWMwr58A==
2021-09-02 05:33:45 stdout 5YijHJGHNjlWFqyrn1CfYS6koa4TGEPngBoAziWRbDGdhEgJABHrpoaFYaL61zqy
2021-09-02 05:33:45 stdout ze7AP+NQ9ykvDScH4eYCsmufNpIjBLhpLE2cuZZXBLcPhuRzVoU3l7A9lvzG9mjA
2021-09-02 05:33:45 stdout 2021-09-02 05:33:45 CRL: loaded 1 CRLs from file -----BEGIN X509 CRL-----
2021-09-02 05:33:45 stdout 2021-09-02 05:33:45 library versions: OpenSSL 1.1.1k 25 Mar 2021, LZO 2.10
2021-09-02 05:33:45 stdout 2021-09-02 05:33:45 OpenVPN 2.5.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2021
2021-09-02 05:33:45 stdout 2021-09-02 05:33:45 WARNING: file 'credentials.conf' is group or others accessible
2021-09-02 05:33:45 stdout 2021-09-02 05:33:45 DEPRECATED OPTION: --cipher set to 'aes-128-cbc' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'aes-128-cbc' to --data-ciphers or change --cipher 'aes-128-cbc' to --data-ciphers-fallback 'aes-128-cbc' to silence this warning.
2021-09-02 05:33:45 stdout 2021-09-02 05:33:45.197660 [INFO] Starting OpenVPN...
2021-09-02 05:33:45 stdout 2021-09-02 05:33:45.161627 [INFO] Adding 1.0.0.1 to resolv.conf
2021-09-02 05:33:45 stdout 2021-09-02 05:33:45.123666 [INFO] Adding 1.1.1.1 to resolv.conf
2021-09-02 05:33:45 stdout 2021-09-02 05:33:45.085823 [INFO] VPN_OPTIONS not defined (via -e VPN_OPTIONS)
2021-09-02 05:33:45 stdout 2021-09-02 05:33:45.046827 [INFO] NAME_SERVERS defined as '1.1.1.1,1.0.0.1'
2021-09-02 05:33:45 stdout 2021-09-02 05:33:45.009079 [INFO] LAN_NETWORK defined as '192.168.0.0/24'
2021-09-02 05:33:44 stdout 2021-09-02 05:33:44.970072 [INFO] VPN_DEVICE_TYPE defined as 'tun0'
2021-09-02 05:33:44 stdout 2021-09-02 05:33:44.932393 [INFO] VPN_PROTOCOL defined as 'udp'
2021-09-02 05:33:44 stdout 2021-09-02 05:33:44.894455 [INFO] VPN_PORT defined as '1198'
2021-09-02 05:33:44 stdout 2021-09-02 05:33:44.855636 [INFO] VPN_REMOTE defined as 'srilanka.privacy.network'
2021-09-02 05:33:44 stdout 2021-09-02 05:33:44.815483 [INFO] VPN remote line defined as 'srilanka.privacy.network 1198'
2021-09-02 05:33:44 stdout dos2unix: converting file /config/openvpn/sri_lanka.ovpn to Unix format...
2021-09-02 05:33:44 stdout 2021-09-02 05:33:44.771847 [INFO] OpenVPN config file is found at /config/openvpn/sri_lanka.ovpn
2021-09-02 05:33:44 stdout 2021-09-02 05:33:44.731371 [INFO] VPN_TYPE defined as 'openvpn'
2021-09-02 05:33:44 stdout 2021-09-02 05:33:44.694879 [INFO] VPN_ENABLED defined as 'yes'
@DyonR really want your thoughts on this
when i am trying to access port 9117 WebUI is not coming up
Hi,
Have been using JackettVPN for a while (via Docker on a Synology NAS) but have noticed that the VPN session will drop completely but it will not restart the container after doing so. End result is that the trackers I have listed will fail to connect (as the ISP has chosen it to be a good idea and drop all routing to said trackers... hence the need for the VPN).
Specs:
VPN Provider: PIA (doesn't matter which connection I go through, the same behaviour is experienced across them all)
NAS: Synology DS918+ running latest DSM: DSM 6.2.1-23824 Update 4
Previously this was producing this behaviour every few hours, until I added the following environment variable to the docker image (found from a TransmissionVPN issue (can't remember link, sorry)):
-e VPN_OPTIONS=--inactive 3600 --ping 10 --ping-exit 60 \
This allowed the JackettVPN connection to remain working for exactly 1 week and 2 hours, before it timed out again and failed. The container itself does not notice the VPN connection has disappeared, and the only way to fix is to restart the container to re-establish VPN connection.
Example: - successful VPN connection 10/02:
2019-02-10 12:50:26 | stdout | 2019-02-10 12:50:26.632286 [info] Starting Jackett daemon...
2019-02-10 12:50:26 | stdout | Logging to /config/Jackett/log.txt.
2019-02-10 12:50:27 | stdout | 2019-02-10 12:50:27.697847 [info] Jackett PID: 192
2019-02-10 12:50:27 | stdout | 2019-02-10 12:50:27.722848 [info] Started Jackett daemon successfully...
Connection failure 1 week and 2 hours later:
Sun Feb 17 14:50:16 2019 [a08ba64d38b4ad4426d08e0c41bb9bad] Inactivity timeout (--ping-restart), restarting
2019-02-17 14:50:16 | stdout |
2019-02-17 14:50:16 | stdout | Sun Feb 17 14:50:16 2019 SIGUSR1[soft,ping-restart] received, process restarting
Sun Feb 17 14:50:21 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]:1197
2019-02-17 14:50:21 | stdout |
2019-02-17 14:50:21 | stdout | Sun Feb 17 14:50:21 2019 UDP link local: (not bound)
2019-02-17 14:50:21 | stdout | Sun Feb 17 14:50:21 2019 UDP link remote: [AF_INET]:1197
Sun Feb 17 14:50:22 2019 [a08ba64d38b4ad4426d08e0c41bb9bad] Peer Connection Initiated with [AF_INET]:1197
2019-02-17 14:50:22 | stdout |
2019-02-17 14:50:24 | stdout | Sun Feb 17 14:50:24 2019 AUTH: Received control message: AUTH_FAILED
Sun Feb 17 14:50:24 2019 /sbin/ip addr del dev tun0 local 10.42.10.6 peer 10.42.10.5
2019-02-17 14:50:24 | stdout |
-- | -- | --
2019-02-17 14:50:24 | stdout | Sun Feb 17 14:50:24 2019 SIGTERM[soft,auth-failure] received, process exiting
I'm not sure what's causing it and I'm also not sure whether it's something simple to fix, but any help here would be appreciated. Thanks
I am using NordVPN and have tried with my username and password and also with username and password for manual setup, but in both case i am receiving SIGTERM[soft,auth-failure] received, process exiting. Have tried it with different configurations also. VPN is working perfectly fine within their apps for windows and Android. Don't know what is going wrong here.
Here's Docker Inspect
"AppArmorProfile": "unconfined",
"Args": [
"/etc/openvpn/start.sh"
],
"Config": {
"AttachStderr": false,
"AttachStdin": false,
"AttachStdout": false,
"Cmd": [
"/bin/bash",
"/etc/openvpn/start.sh"
],
"Domainname": "",
"Entrypoint": null,
"Env": [
"PUID=1000",
"PGID=1000",
"TZ=Asia/Kolkata",
"VPN_ENABLED=yes",
"VPN_USERNAME=Nord-UsernameForManualSetup",
"VPN_PASSWORD=Nord-PasswordForManualSetup",
"LAN_NETWORK=192.168.1.0/24",
"NAME_SERVERS=1.1.1.1,1.0.0.1",
"UMASK=002",
"DISABLE_IPV6=1",
"HEALTH_CHECK_HOST=one.one.one.one",
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"DEBIAN_FRONTEND=noninteractive",
"XDG_DATA_HOME=/config",
"XDG_CONFIG_HOME=/config"
],
"ExposedPorts": {
"9117/tcp": {}
},
"Hostname": "b2a76e0e4e7f",
"Image": "dyonr/jackettvpn",
"Labels": {
"com.docker.compose.config-hash": "4cbe2ca4bbf8edaa3f594267382c803f56e6752f",
"com.docker.compose.container-number": "1",
"com.docker.compose.oneoff": "False",
"com.docker.compose.project": "mediaserver",
"com.docker.compose.service": "jackettvpn",
"com.docker.compose.version": "1.5.0"
},
"OnBuild": null,
"OpenStdin": false,
"StdinOnce": false,
"Tty": false,
"User": "",
"Volumes": {
"/blackhole": {},
"/config": {}
},
"WorkingDir": "/opt"
},
"Created": "2020-08-21T14:05:30.41296543Z",
"Driver": "overlay2",
"ExecIDs": null,
"GraphDriver": {
"Data": {
"LowerDir": "/var/lib/docker/overlay2/ca75fa70134ef73ef5c9e4172b5af1bd5cf12e09a953b319a84b57407d63284f-init/diff:/var/lib/docker/overlay2/e93aad3e8d1a93277b4cda7ab84f9c0c91b14e054dfba684642b564df232e926/diff:/var/lib/docker/overlay2/116890dc095c76bb8aee9e8208086bf427666df052ed8fea623c787576d55d33/diff:/var/lib/docker/overlay2/00d36218c5480cab56d59c1efaba065405e9f1032b281bfe7ef445e53d3ee49e/diff:/var/lib/docker/overlay2/9f5cee9fd89e45b0c4dc537b3b1776e76d553075d9d240c183e11fdc00399e82/diff:/var/lib/docker/overlay2/6749fd7da25d41fc96f3aef0f2ae98aa269420a75e7f722872d7ff44017601a6/diff:/var/lib/docker/overlay2/b003e234c5da73b942de6dab42adc3b08fda2972d4ade82a9d9520c6711f2917/diff:/var/lib/docker/overlay2/71e463413a358f84b2532c33121054e5dc31d31b9561f72ba282a8af1565c07f/diff:/var/lib/docker/overlay2/a3f179a2866fe4f300d31b0cc2ed6f6ae828b98d8640d0a9a1b16d169f235bfa/diff:/var/lib/docker/overlay2/b49aed53def1fc9d9e3974c1c0bb69c1ec1e3f309380821deb58384be77df881/diff:/var/lib/docker/overlay2/cd13bae7ebe6087bb0dce5b8ae2bb6a2aea67ac3349154df7d0481b3dea06747/diff:/var/lib/docker/overlay2/f16e7812c10b3bc57f86306ff119c13dcfc2386aee079623f9b10d302fa99aa3/diff",
"MergedDir": "/var/lib/docker/overlay2/ca75fa70134ef73ef5c9e4172b5af1bd5cf12e09a953b319a84b57407d63284f/merged",
"UpperDir": "/var/lib/docker/overlay2/ca75fa70134ef73ef5c9e4172b5af1bd5cf12e09a953b319a84b57407d63284f/diff",
"WorkDir": "/var/lib/docker/overlay2/ca75fa70134ef73ef5c9e4172b5af1bd5cf12e09a953b319a84b57407d63284f/work"
},
"Name": "overlay2"
},
"HostConfig": {
"AutoRemove": false,
"Binds": [
"/mnt/DV/volumes/JackettOVPN/_data:/config",
"/mnt/DV/volumes/Torrent-downloads/_data:/blackhole"
],
"BlkioDeviceReadBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceWriteIOps": null,
"BlkioWeight": 0,
"BlkioWeightDevice": null,
"CapAdd": null,
"CapDrop": null,
"Capabilities": null,
"Cgroup": "",
"CgroupParent": "",
"ConsoleSize": [
0,
0
],
"ContainerIDFile": "",
"CpuCount": 0,
"CpuPercent": 0,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpuShares": 0,
"CpusetCpus": "",
"CpusetMems": "",
"DeviceCgroupRules": null,
"DeviceRequests": null,
"Devices": [],
"Dns": [],
"DnsOptions": [],
"DnsSearch": [],
"ExtraHosts": null,
"GroupAdd": null,
"IOMaximumBandwidth": 0,
"IOMaximumIOps": 0,
"IpcMode": "shareable",
"Isolation": "",
"KernelMemory": 0,
"KernelMemoryTCP": 0,
"Links": null,
"LogConfig": {
"Config": {},
"Type": "json-file"
},
"MaskedPaths": null,
"Memory": 0,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": 0,
"NanoCpus": 0,
"NetworkMode": "mediaserver_default",
"OomKillDisable": false,
"OomScoreAdj": 0,
"PidMode": "",
"PidsLimit": null,
"PortBindings": {
"9117/tcp": [
{
"HostIp": "",
"HostPort": "9992"
}
]
},
"Privileged": true,
"PublishAllPorts": false,
"ReadonlyPaths": null,
"ReadonlyRootfs": false,
"RestartPolicy": {
"MaximumRetryCount": 0,
"Name": "unless-stopped"
},
"Runtime": "runc",
"SecurityOpt": [
"label=disable"
],
"ShmSize": 67108864,
"UTSMode": "",
"Ulimits": [],
"UsernsMode": "",
"VolumeDriver": "",
"VolumesFrom": null
},
"HostnamePath": "/var/lib/docker/containers/b2a76e0e4e7f4aaceacd774aab5fadfa71f4558bcf35b37008653a14a0b3e7e9/hostname",
"HostsPath": "/var/lib/docker/containers/b2a76e0e4e7f4aaceacd774aab5fadfa71f4558bcf35b37008653a14a0b3e7e9/hosts",
"Id": "b2a76e0e4e7f4aaceacd774aab5fadfa71f4558bcf35b37008653a14a0b3e7e9",
"Image": "sha256:3c7ccd932dc01c8260ccfba09e57c5187bf7faffe9b89d28828ec80880904370",
"LogPath": "/var/lib/docker/containers/b2a76e0e4e7f4aaceacd774aab5fadfa71f4558bcf35b37008653a14a0b3e7e9/b2a76e0e4e7f4aaceacd774aab5fadfa71f4558bcf35b37008653a14a0b3e7e9-json.log",
"MountLabel": "",
"Mounts": [
{
"Destination": "/blackhole",
"Mode": "",
"Propagation": "rprivate",
"RW": true,
"Source": "/mnt/DV/volumes/Torrent-downloads/_data",
"Type": "bind"
},
{
"Destination": "/config",
"Mode": "",
"Propagation": "rprivate",
"RW": true,
"Source": "/mnt/DV/volumes/JackettOVPN/_data",
"Type": "bind"
}
],
"Name": "/JackettOVPN",
"NetworkSettings": {
"Bridge": "",
"EndpointID": "",
"Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"HairpinMode": false,
"IPAddress": "",
"IPPrefixLen": 0,
"IPv6Gateway": "",
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"MacAddress": "",
"Networks": {
"mediaserver_default": {
"Aliases": [
"jackettvpn",
"b2a76e0e4e7f"
],
"DriverOpts": null,
"EndpointID": "",
"Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAMConfig": {},
"IPAddress": "",
"IPPrefixLen": 0,
"IPv6Gateway": "",
"Links": [],
"MacAddress": "",
"NetworkID": "5efd99e65ef62cfb144339d9b96a56cc2e731f94f62123c33079af840161d59c"
}
},
"Ports": {},
"SandboxID": "73b7c879429cd81c5cc716ab7f930eace9d21cb02a6bcc032e57c9bc04510754",
"SandboxKey": "/var/run/docker/netns/73b7c879429c",
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null
},
"Path": "/bin/bash",
"Platform": "linux",
"Portainer": {
"ResourceControl": {
"Id": 194,
"ResourceId": "mediaserver",
"SubResourceIds": [],
"Type": 6,
"UserAccesses": [],
"TeamAccesses": [],
"Public": false,
"AdministratorsOnly": true,
"System": false
}
},
"ProcessLabel": "",
"ResolvConfPath": "/var/lib/docker/containers/b2a76e0e4e7f4aaceacd774aab5fadfa71f4558bcf35b37008653a14a0b3e7e9/resolv.conf",
"RestartCount": 0,
"State": {
"Dead": false,
"Error": "",
"ExitCode": 137,
"FinishedAt": "2020-08-21T16:55:12.048774925Z",
"OOMKilled": false,
"Paused": false,
"Pid": 0,
"Restarting": false,
"Running": false,
"StartedAt": "2020-08-21T15:48:52.525581412Z",
"Status": "exited"```
Docker Version
```docker -v
Docker version 19.03.12, build 48a66213fe```
Logs
```2020-08-21T17:13:15.928891200Z 2020-08-21 17:13:15.928719 [INFO] VPN_ENABLED defined as 'yes',
2020-08-21T17:13:15.965665149Z 2020-08-21 17:13:15.965510 [INFO] DISABLE_IPV6 is set to '1',
2020-08-21T17:13:15.996876662Z 2020-08-21 17:13:15.996745 [INFO] Disabling IPv6 in sysctl,
2020-08-21T17:13:16.030643496Z 2020-08-21 17:13:16.030523 [WARNING] VPN_TYPE not set, defaulting to OpenVPN.,
2020-08-21T17:13:16.074023860Z 2020-08-21 17:13:16.073846 [INFO] OpenVPN config file is found at /config/openvpn/us6197.nordvpn.com.tcp443.ovpn,
2020-08-21T17:13:16.081699636Z dos2unix: converting file /config/openvpn/us6197.nordvpn.com.tcp443.ovpn to Unix format...,
2020-08-21T17:13:16.115524993Z 2020-08-21 17:13:16.115339 [INFO] VPN remote line defined as '209.58.139.50 443',
2020-08-21T17:13:16.149187610Z 2020-08-21 17:13:16.149008 [INFO] VPN_REMOTE defined as '209.58.139.50',
2020-08-21T17:13:16.186135617Z 2020-08-21 17:13:16.186011 [INFO] VPN_PORT defined as '443',
2020-08-21T17:13:16.224212219Z 2020-08-21 17:13:16.223999 [INFO] VPN_PROTOCOL defined as 'tcp',
2020-08-21T17:13:16.259589633Z 2020-08-21 17:13:16.259425 [INFO] VPN_DEVICE_TYPE defined as 'tun0',
2020-08-21T17:13:16.307422662Z 2020-08-21 17:13:16.307270 [INFO] LAN_NETWORK defined as '192.168.1.0/24',
2020-08-21T17:13:16.340480171Z 2020-08-21 17:13:16.340255 [INFO] NAME_SERVERS defined as '1.1.1.1,1.0.0.1',
2020-08-21T17:13:16.378540444Z 2020-08-21 17:13:16.378372 [INFO] VPN_OPTIONS not defined (via -e VPN_OPTIONS),
2020-08-21T17:13:16.413590735Z 2020-08-21 17:13:16.413434 [INFO] Adding 1.1.1.1 to resolv.conf,
2020-08-21T17:13:16.450072493Z 2020-08-21 17:13:16.449863 [INFO] Adding 1.0.0.1 to resolv.conf,
2020-08-21T17:13:16.482237452Z 2020-08-21 17:13:16.482032 [INFO] Starting OpenVPN...,
2020-08-21T17:13:16.488086675Z Fri Aug 21 17:13:16 2020 WARNING: file 'credentials.conf' is group or others accessible,
2020-08-21T17:13:16.488192307Z Fri Aug 21 17:13:16 2020 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019,
2020-08-21T17:13:16.488282332Z Fri Aug 21 17:13:16 2020 library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08,
2020-08-21T17:13:16.488513498Z Fri Aug 21 17:13:16 2020 WARNING: --ping should normally be used with --ping-restart or --ping-exit,
2020-08-21T17:13:16.488575330Z Fri Aug 21 17:13:16 2020 NOTE: --fast-io is disabled since we are not using UDP,
2020-08-21T17:13:16.488994286Z Fri Aug 21 17:13:16 2020 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication,
2020-08-21T17:13:16.489004737Z Fri Aug 21 17:13:16 2020 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication,
2020-08-21T17:13:16.489161289Z Fri Aug 21 17:13:16 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]209.58.139.50:443,
2020-08-21T17:13:16.489171793Z Fri Aug 21 17:13:16 2020 Socket Buffers: R=[131072->131072] S=[16384->16384],
2020-08-21T17:13:16.489239298Z Fri Aug 21 17:13:16 2020 Attempting to establish TCP connection with [AF_INET]209.58.139.50:443 [nonblock],
2020-08-21T17:13:17.489666439Z Fri Aug 21 17:13:17 2020 TCP connection established with [AF_INET]209.58.139.50:443,
2020-08-21T17:13:17.489829366Z Fri Aug 21 17:13:17 2020 TCP_CLIENT link local: (not bound),
2020-08-21T17:13:17.489966838Z Fri Aug 21 17:13:17 2020 TCP_CLIENT link remote: [AF_INET]209.58.139.50:443,
2020-08-21T17:13:17.786329629Z Fri Aug 21 17:13:17 2020 TLS: Initial packet from [AF_INET]209.58.139.50:443, sid=eb05d969 0ec1c202,
2020-08-21T17:13:17.786399594Z Fri Aug 21 17:13:17 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this,
2020-08-21T17:13:18.813095691Z Fri Aug 21 17:13:18 2020 VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA,
2020-08-21T17:13:18.813695190Z Fri Aug 21 17:13:18 2020 VERIFY OK: depth=1, C=PA, O=NordVPN, CN=NordVPN CA5,
2020-08-21T17:13:18.814140301Z Fri Aug 21 17:13:18 2020 VERIFY KU OK,
2020-08-21T17:13:18.814185532Z Fri Aug 21 17:13:18 2020 Validating certificate extended key usage,
2020-08-21T17:13:18.814196946Z Fri Aug 21 17:13:18 2020 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication,
2020-08-21T17:13:18.814205652Z Fri Aug 21 17:13:18 2020 VERIFY EKU OK,
2020-08-21T17:13:18.814213434Z Fri Aug 21 17:13:18 2020 VERIFY OK: depth=0, CN=us6197.nordvpn.com,
2020-08-21T17:13:21.677000070Z Fri Aug 21 17:13:21 2020 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA,
2020-08-21T17:13:21.677030309Z Fri Aug 21 17:13:21 2020 [us6197.nordvpn.com] Peer Connection Initiated with [AF_INET]209.58.139.50:443,
2020-08-21T17:13:22.911451066Z Fri Aug 21 17:13:22 2020 SENT CONTROL [us6197.nordvpn.com]: 'PUSH_REQUEST' (status=1),
2020-08-21T17:13:23.545455463Z Fri Aug 21 17:13:23 2020 AUTH: Received control message: AUTH_FAILED,
2020-08-21T17:13:23.545967431Z Fri Aug 21 17:13:23 2020 SIGTERM[soft,auth-failure] received, process exiting,```
Hey there, I get the following error when starting up my container. I've had it working in the past but recently it fails to startup with this permission denied error.
2021-08-24 15:14:12.811822 [INFO] Starting OpenVPN...
openvpn: error while loading shared libraries: libnsl.so.1: cannot open shared object file: Permission denied
Here is my stack that I'm deploying with docker-compose
version: '3.3'
services:
jackettvpn:
image: dyonr/jackettvpn:latest
restart: unless-stopped
privileged: true
cap_add:
- NET_ADMIN
ports:
- "9117:9117"
devices:
- /dev/net/tun
volumes:
- /volume2/docker/jackett-vpn:/config
- /volume2/downloads/tmp:/blackhole
environment:
- VPN_ENABLED=yes
- VPN_TYPE=openvpn
- LAN_NETWORK=192.168.0.0/16
- NAME_SERVERS=209.222.18.222,209.222.18.218
network_mode: bridge
Since this morning, the container isn't reachable in my home network anymore.
I tried some of your other containers (dyonr/sabnzbdvpn and dyonr/nzbgetvpn), all with minimal environment variables. I have VPN_ENABLED=yes, VPN_TYPE=openvpn, LAN_NETWORK=192.168.2.0/24 set.
The dyonr/sabnzbdvpn container works as expected, i can reach the webinterface and ping domains/IPs from it.
I cannot however ping domains from the dyonr/jackettvpn and the dyonr/nzbgetvpn containers. I can ping IPs. I know my VPN works, i do use all the same openvpn config files for the aforementioned containers. I think this is a DNS issue, could this be the recent update?
I am running TrueNAS Scale Beta1.
The Problems in dyonr/nzbgetvpn and dyonr/jackettvpn seem to be the same
The container seems to be in a bootloop. If I set HEALTH_CHECK_HOST=1.1.1.1 the container keeps running, but isn't working (cannot resolve domainnames).
I have been using Jackettvpn for a while now then suddenly
2022-03-05 09:05:43 SIGUSR1[soft,tls-error] received, process restarting
2022-03-05 09:05:53 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:443
2022-03-05 09:05:53 UDP link local: (not bound)
2022-03-05 09:05:53 UDP link remote: [AF_INET]xxx.xxx.xxx.xxx:443
2022-03-05 09:05:53 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: C=US, ST=VPN, L=VPN, O=VPN, OU=VPN, CN=VPN, name=VPN, emailAddress=VPN, serial=11658383158490768694
2022-03-05 09:05:53 OpenSSL: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
2022-03-05 09:05:53 TLS_ERROR: BIO read tls_read_plaintext error
2022-03-05 09:05:53 TLS Error: TLS object -> incoming plaintext read error
2022-03-05 09:05:53 TLS Error: TLS handshake failed
2022-03-05 09:05:53 SIGUSR1[soft,tls-error] received, process restarting
2022-03-05 09:06:13 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:443
2022-03-05 09:06:13 UDP link local: (not bound)
2022-03-05 09:06:13 UDP link remote: [AF_INET]xxx.xxx.xxx.xxx:443
2022-03-05 09:06:13 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: C=US, ST=VPN, L=VPN, O=VPN, OU=VPN, CN=VPN, name=VPN, emailAddress=VPN, serial=11658383158490768694
2022-03-05 09:06:13 OpenSSL: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
2022-03-05 09:06:13 TLS_ERROR: BIO read tls_read_plaintext error
2022-03-05 09:06:13 TLS Error: TLS object -> incoming plaintext read error
2022-03-05 09:06:13 TLS Error: TLS handshake failed
2022-03-05 09:06:13 SIGUSR1[soft,tls-error] received, process restarting
Nothing was changed on my end.
Similar issue to what I raised in #9, but different environment (Unraid). Started a new issue only because the architecture I'm now using is different, but the issues are the same.
Environment:
Server: Unraid 6.8.3 2020-03-05
JackettVPN version: 0.16.912.0
Identical symptoms:
Wed Jul 29 12:55:22 2020 [] Inactivity timeout (--ping-restart), restarting
Wed Jul 29 12:55:22 2020 SIGUSR1[soft,ping-restart] received, process restarting
Wed Jul 29 12:55:27 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]
Wed Jul 29 12:55:27 2020 UDP link local: (not bound)
Wed Jul 29 12:55:27 2020 UDP link remote: [AF_INET]
Wed Jul 29 12:55:28 2020 [8ccb8d30368dc2172c55cd565d641d80] Peer Connection Initiated with [AF_INET]
Wed Jul 29 12:55:29 2020 AUTH: Received control message: AUTH_FAILED
Wed Jul 29 12:55:29 2020 /sbin/ip addr del dev tun0 local 10.1.11.10 peer 10.1.11.9
Wed Jul 29 12:55:29 2020 SIGTERM[soft,auth-failure] received, process exiting
The Unraid container already has --restart=unless-stopped set when it was pulled from the Unraid app store, however it has not restarted the container (still running, but dead as the VPN tunnel dropped).
I had noticed that my time logs were defaulting to UTC, so I've added the TZ variable and that has since corrected the times, so will keep an eye on it.
@DyonR, has this issue cropped up again in the newest version of Jackett?
I was wondering if releases for docker arm / arm64 is possible, since most of this is shell scripts and no extra compiling is not necessary.
dos2unix: converting file /config/openvpn/profile-21.ovpn to Unix format...
2022-04-13 15:41:03.355021 [INFO] VPN remote line defined as '127.0.0.1'
2022-04-13 15:41:03.375505 [INFO] VPN_REMOTE defined as '127.0.0.1'
2022-04-13 15:41:03.396034 [ERROR] VPN_PORT not found in /config/openvpn/profile-21.ovpn, exiting...
in config port specifed
client
proto udp
nobind
remote 127.0.0.1
port 1194
dev tun
dev-type tun
remote-cert-tls server
tls-version-min 1.2
reneg-sec 604800
auth-user-pass
verb 3
push-peer-info
Is it possible to achieve this without writing to .ovpn files which are mounted ?
This is because, I am trying to mount an configMap (kubernetes) which does not allow writing to the file ?
Also is it possible to save credentials in different folder that the one mounted for security reasons ?
Every config I was tring I got the same error at the end. Do you know how to stop adding these ipv6 routes since docker on unraid doesnt use any ipv6 connectivity ?
My host is an unraid machine.
Sun Jun 14 14:48:59 2020 us=811355 /sbin/ip link set dev tun0 up mtu 1500
Sun Jun 14 14:48:59 2020 us=813029 /sbin/ip addr add dev tun0 10.4.xxx.xx/24 broadcast 10.4.178.255
Sun Jun 14 14:48:59 2020 us=814025 /sbin/ip -6 addr add fdbf:xxxx:xxxx:0:75:2:xxxx:32/112 dev tun0
RTNETLINK answers: Permission denied
Sun Jun 14 14:39:11 2020 us=803937 Linux ip -6 addr add failed: external program exited with error status: 2
Sun Jun 14 14:39:11 2020 us=803946 Exiting due to fatal error
Hi, i installed the docker image but from some ressons it stall at:
2020-12-03 23:26:31.570989 [ERROR] LAN_NETWORK not defined (via -e LAN_NETWORK), exiting...
My docker run (for the network part) is like that:
...
-e "LOCAL_NETWORK=10.0.0.0/24,10.6.0.0/24"
...
I tried to review this line but everything seems fine.
Not sure if something's changed recently, but JackettVPN has gone into a container boot loop once it detects an IP range outside the bridge range. This was working fine for a couple of months until today.
Environment:
Unraid: 6.8.3
Jackett Version: 0.16.938.0 (was working on 0.16.916.0 at least but can't seem to roll back in Unraid)
Error
2020-08-03 11:16:36.070628 [ERROR] It seems like the IP the container is using outside the default Docker DHCP range
2020-08-03 11:16:36.092589 [ERROR] Use bridge mode to run this container. Using a custom IP is not supported.
2020-08-03 11:16:36.111192 [ERROR] IP of the container: 172.18.0.23
I have JackettVPN sitting behind a reverse proxy and this worked without issue for quite a while. Not sure why all of a sudden it's unsupported?
Hi. Ive got an issue connecting to mullvad VPN
my config file:
client
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
verb 3
remote-cert-tls server
ping 10
ping-restart 60
sndbuf 524288
rcvbuf 524288
cipher AES-256-CBC
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA
proto udp
auth-user-pass mullvad_userpass.txt
ca mullvad_ca.crt
tun-ipv6
script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
fast-io
remote-random
remote nl-ams-013.mullvad.net 1300
remote nl-ams-005.mullvad.net 1300
remote nl-ams-010.mullvad.net 1300
remote nl-ams-003.mullvad.net 1300
remote nl-ams-011.mullvad.net 1300
remote nl-ams-017.mullvad.net 1300
remote nl-ams-016.mullvad.net 1300
remote nl-ams-004.mullvad.net 1300
remote nl-ams-009.mullvad.net 1300
remote nl-ams-015.mullvad.net 1300
remote nl-ams-012.mullvad.net 1300
remote nl-ams-002.mullvad.net 1300
remote nl-ams-014.mullvad.net 1300
remote nl-ams-018.mullvad.net 1300
remote nl-ams-006.mullvad.net 1300
and docker log:
root@debian-server1:/Data-local/docker# docker logs jackettvpn
2020-03-08 15:56:20.673612 [info] VPN_ENABLED defined as 'yes'
2020-03-08 15:56:20.735884 [info] OpenVPN config file (ovpn extension) is located at /config/openvpn/mullvad_nl_ams.ovpn
dos2unix: converting file /config/openvpn/mullvad_nl_ams.ovpn to Unix format...
2020-03-08 15:56:20.795382 [info] VPN remote line defined as 'nl-ams-013.mullvad.net 1300'
2020-03-08 15:56:20.854551 [info] VPN_REMOTE defined as 'nl-ams-013.mullvad.net'
2020-03-08 15:56:20.913531 [info] VPN_PORT defined as '1300'
2020-03-08 15:56:20.972432 [info] VPN_PROTOCOL defined as 'udp'
2020-03-08 15:56:21.030613 [info] VPN_DEVICE_TYPE defined as 'tun0'
2020-03-08 15:56:21.088646 [info] LAN_NETWORK defined as '10.10.0.0/16'
2020-03-08 15:56:21.145808 [info] NAME_SERVERS defined as '1.1.1.1,1.0.0.1'
2020-03-08 15:56:21.202843 [info] VPN_OPTIONS not defined (via -e VPN_OPTIONS)
2020-03-08 15:56:21.261088 [info] Adding 1.1.1.1 to resolv.conf
2020-03-08 15:56:21.321050 [info] Adding 1.0.0.1 to resolv.conf
2020-03-08 15:56:21.375401 [info] PUID not defined. Defaulting to root user
2020-03-08 15:56:21.432535 [info] PGID not defined. Defaulting to root group
2020-03-08 15:56:21.487440 [info] Starting OpenVPN...
Sun Mar 8 15:56:21 2020 WARNING: file 'mullvad_userpass.txt' is group or others accessible
Sun Mar 8 15:56:21 2020 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019
Sun Mar 8 15:56:21 2020 library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08
Sun Mar 8 15:56:21 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]185.65.134.134:1300
Sun Mar 8 15:56:21 2020 Socket Buffers: R=[212992->425984] S=[212992->425984]
Sun Mar 8 15:56:21 2020 UDP link local: (not bound)
Sun Mar 8 15:56:21 2020 UDP link remote: [AF_INET]185.65.134.134:1300
Sun Mar 8 15:56:21 2020 TLS: Initial packet from [AF_INET]185.65.134.134:1300, sid=06321e0e 56f1764d
Sun Mar 8 15:56:21 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Mar 8 15:56:21 2020 VERIFY OK: depth=2, C=SE, ST=Gotaland, L=Gothenburg, O=Amagicom AB, OU=Mullvad, CN=Mullvad Root CA v2, [email protected]
Sun Mar 8 15:56:21 2020 VERIFY OK: depth=1, C=SE, ST=Gotaland, O=Amagicom AB, OU=Mullvad, CN=Mullvad Intermediate CA v2, [email protected]
Sun Mar 8 15:56:21 2020 VERIFY KU OK
Sun Mar 8 15:56:21 2020 Validating certificate extended key usage
Sun Mar 8 15:56:21 2020 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sun Mar 8 15:56:21 2020 VERIFY EKU OK
Sun Mar 8 15:56:21 2020 VERIFY OK: depth=0, C=SE, ST=Gotaland, O=Amagicom AB, OU=Mullvad, CN=nl-ams-004.mullvad.net, [email protected]
Sun Mar 8 15:56:21 2020 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1557', remote='link-mtu 1558'
Sun Mar 8 15:56:21 2020 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Sun Mar 8 15:56:21 2020 Control Channel: TLSv1.2, cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Sun Mar 8 15:56:21 2020 [nl-ams-004.mullvad.net] Peer Connection Initiated with [AF_INET]185.65.134.134:1300
Sun Mar 8 15:56:23 2020 SENT CONTROL [nl-ams-004.mullvad.net]: 'PUSH_REQUEST' (status=1)
Sun Mar 8 15:56:23 2020 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.14.0.1,redirect-gateway def1 bypass-dhcp,route-ipv6 0000::/2,route-ipv6 4000::/2,route-ipv6 8000::/2,route-ipv6 C000::/2,comp-lzo no,route-gateway 10.14.0.1,topology subnet,socket-flags TCP_NODELAY,ifconfig-ipv6 fdda:d0d0:cafe:1300::1009/64 fdda:d0d0:cafe:1300::,ifconfig 10.14.0.11 255.255.0.0,peer-id 1,cipher AES-256-GCM'
Sun Mar 8 15:56:23 2020 OPTIONS IMPORT: compression parms modified
Sun Mar 8 15:56:23 2020 OPTIONS IMPORT: --socket-flags option modified
Sun Mar 8 15:56:23 2020 NOTE: setsockopt TCP_NODELAY=1 failed
Sun Mar 8 15:56:23 2020 OPTIONS IMPORT: --ifconfig/up options modified
Sun Mar 8 15:56:23 2020 OPTIONS IMPORT: route options modified
Sun Mar 8 15:56:23 2020 OPTIONS IMPORT: route-related options modified
Sun Mar 8 15:56:23 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Mar 8 15:56:23 2020 OPTIONS IMPORT: peer-id set
Sun Mar 8 15:56:23 2020 OPTIONS IMPORT: adjusting link_mtu to 1624
Sun Mar 8 15:56:23 2020 OPTIONS IMPORT: data channel crypto options modified
Sun Mar 8 15:56:23 2020 Data Channel: using negotiated cipher 'AES-256-GCM'
Sun Mar 8 15:56:23 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Mar 8 15:56:23 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Mar 8 15:56:23 2020 ROUTE_GATEWAY 172.17.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:11:00:08
Sun Mar 8 15:56:23 2020 GDG6: remote_host_ipv6=n/a
Sun Mar 8 15:56:23 2020 ROUTE6: default_gateway=UNDEF
Sun Mar 8 15:56:23 2020 TUN/TAP device tun0 opened
Sun Mar 8 15:56:23 2020 TUN/TAP TX queue length set to 100
Sun Mar 8 15:56:23 2020 do_ifconfig, tt->did_ifconfig_ipv6_setup=1
Sun Mar 8 15:56:23 2020 /sbin/ip link set dev tun0 up mtu 1500
Sun Mar 8 15:56:23 2020 /sbin/ip addr add dev tun0 10.14.0.11/16 broadcast 10.14.255.255
Sun Mar 8 15:56:23 2020 /sbin/ip -6 addr add fdda:d0d0:cafe:1300::1009/64 dev tun0
RTNETLINK answers: Permission denied
Sun Mar 8 15:56:23 2020 Linux ip -6 addr add failed: external program exited with error status: 2
Sun Mar 8 15:56:23 2020 Exiting due to fatal error
Is there a way?
I dropped in my .ovpn file (from Surfshark) to /openvpn and created credentials.conf in the correct format. Here is the end of my log file:
Wed Mar 18 14:24:44 2020 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Mar 18 14:24:44 2020 VERIFY EKU OK
Wed Mar 18 14:24:44 2020 VERIFY OK: depth=0, CN=us-nyc-v033.prod.surfshark.com
Wed Mar 18 14:24:44 2020 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1633', remote='link-mtu 1581'
Wed Mar 18 14:24:44 2020 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher AES-256-GCM'
Wed Mar 18 14:24:44 2020 WARNING: 'auth' is used inconsistently, local='auth SHA512', remote='auth [null-digest]'
Wed Mar 18 14:24:44 2020 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Wed Mar 18 14:24:44 2020 [us-nyc-v033.prod.surfshark.com] Peer Connection Initiated with [AF_INET]xx.xxx.xxx.x:xxxx
Wed Mar 18 14:24:45 2020 SENT CONTROL [us-nyc-v033.prod.surfshark.com]: 'PUSH_REQUEST' (status=1)
*redacted*
Wed Mar 18 14:24:45 2020 Option 'explicit-exit-notify' in [PUSH-OPTIONS]:6 is ignored by previous <connection> blocks
Wed Mar 18 14:24:45 2020 Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:7: block-outside-dns (2.4.4)
Wed Mar 18 14:24:45 2020 OPTIONS IMPORT: timers and/or timeouts modified
Wed Mar 18 14:24:45 2020 OPTIONS IMPORT: explicit notify parm(s) modified
Wed Mar 18 14:24:45 2020 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Wed Mar 18 14:24:45 2020 Socket Buffers: R=[212992->425984] S=[212992->425984]
Wed Mar 18 14:24:45 2020 OPTIONS IMPORT: --ifconfig/up options modified
Wed Mar 18 14:24:45 2020 OPTIONS IMPORT: route options modified
Wed Mar 18 14:24:45 2020 OPTIONS IMPORT: route-related options modified
Wed Mar 18 14:24:45 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Mar 18 14:24:45 2020 OPTIONS IMPORT: peer-id set
Wed Mar 18 14:24:45 2020 OPTIONS IMPORT: adjusting link_mtu to 1656
Wed Mar 18 14:24:45 2020 OPTIONS IMPORT: data channel crypto options modified
Wed Mar 18 14:24:45 2020 Data Channel: using negotiated cipher 'AES-256-GCM'
Wed Mar 18 14:24:45 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Mar 18 14:24:45 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Mar 18 14:24:45 2020 ROUTE_GATEWAY 172.18.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:12:00:09
Wed Mar 18 14:24:45 2020 ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)
Wed Mar 18 14:24:45 2020 Exiting due to fatal error
Hello, just trying to get this setup properly and running into an odd issue...
I am unable to access the application ui when I have VPN_ENABLED set to true. I may be misunderstanding, but I thought there was a route added for the LAN_NETWORK which would allow me to access the UI over my LAN and the other traffic would use the alternate route (VPN).
Additional information -
I use docker-compose and I have the following environment variables:
environment:
- LAN_NETWORK=192.168.1.0/24
- VPN_ENABLED=yes
- VPN_USERNAME=${OPENVPN_USERNAME}
- VPN_PASSWORD=${OPENVPN_PASSWORD}
- NAME_SERVERS=8.8.8.8,8.8.4.4
- HEALTH_CHECK_HOST=<ip-of-jackett-container>
- DISABLE_IPV6=1
- UMASK=002
- PUID
- PGID
- TZ
The username and password are populated with an .env file and work just fine. If I want to access the UI, I have to change the VPN variable to no. I also notice that the DISABLE IPV6 setting doesnt seem to work as expected. I have mine set to 1 and I see the following:
With VPN_ENABLED=no:
root@juniper:/opt# netstat -tulpn
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.11:45929 0.0.0.0:* LISTEN -
tcp6 0 0 :::9117 :::* LISTEN 57/jackett
udp 0 0 127.0.0.11:52076 0.0.0.0:* -
root@juniper:/opt# env | grep -i ipv6
DISABLE_IPV6=1
root@juniper:/opt# grep disable_ipv6 /etc/sysctl.conf
root@juniper:/opt# ip route
default via 192.168.1.1 dev eth0
192.168.1.0/24 dev eth0 proto kernel scope link src <ip-of-jackett-container>
With VPN_ENABLED=yes
root@juniper:/opt# netstat -tupln
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.11:45241 0.0.0.0:* LISTEN -
tcp6 0 0 :::9117 :::* LISTEN 216/jackett
udp 0 0 127.0.0.11:41072 0.0.0.0:* -
udp 0 0 0.0.0.0:48698 0.0.0.0:* 91/openvpn
root@juniper:/opt# env | grep -i ipv6
DISABLE_IPV6=1
root@juniper:/opt# grep disable_ipv6 /etc/sysctl.conf
root@juniper:/opt# ip route
0.0.0.0/1 via 10.x.x.5 dev tun0
default via 192.168.1.1 dev eth0
10.x.x.1 via 10.x.x.5 dev tun0
10.x.x.5 dev tun0 proto kernel scope link src 10.x.x.6
128.0.0.0/1 via 10.x.x.5 dev tun0
1xx.xxx.xx.xxx via 192.168.1.1 dev eth0
192.168.1.0/24 dev eth0 proto kernel scope link src <ip-of-jackett-container>
Just thought I would reach out to see if I am doing something wrong here. Let me know if you need any more information and I am glad to get it for you.
Thanks!
Hi again,
since i got some connection problems to the linked docker when I use my vpn to connect to my home network, I have tried to set two lan networks sperated by a "," like the nameserver. Seems like there is a needed change and I think there maybe some "Nerds" with more than one Lan networks that could benefit then.
For better understanding..
Device A via 10.10.0.2 192.168.1.34
Internet ---> Router (Wireguard) - 10.10.0.1/24 ---> Device A ---> unraid host with the docker container
LAN_NETWORK 192.168.0.0/16,10.10.0.1/24
2020-06-16 16:12:02.230328 [info] WebUI port defined as
2020-06-16 16:12:02.258624 [info] Docker network defined as 172.17.0.0/16
2020-06-16 16:12:02.278486 [info] Adding 192.168.0.0/16,10.10.0.1/24 as route via docker eth0
Error: any valid prefix is expected rather than "192.168.0.0/16,10.10.0.1/24".
2020-06-16 16:12:02.297496 [info] ip route defined as follows...
I've started getting iptables/1.8.7 Failed to initialize nft: Protocol not supported on startup, with very little else in the logs. Here's a sample from my latest restart:
2021-09-06 08:00:20.811036 [INFO] VPN_ENABLED defined as 'yes'
,iptables/1.8.7 Failed to initialize nft: Protocol not supported
,2021-09-06 08:00:25.624520 [INFO] VPN_ENABLED defined as 'yes'
,iptables/1.8.7 Failed to initialize nft: Protocol not supported
,2021-09-06 08:00:29.238846 [INFO] VPN_ENABLED defined as 'yes'
,iptables/1.8.7 Failed to initialize nft: Protocol not supported
,2021-09-06 08:00:33.125253 [INFO] VPN_ENABLED defined as 'yes'
,iptables/1.8.7 Failed to initialize nft: Protocol not supported
,2021-09-06 08:00:37.100198 [INFO] VPN_ENABLED defined as 'yes'
,iptables/1.8.7 Failed to initialize nft: Protocol not supported
,2021-09-06 08:00:41.715256 [INFO] VPN_ENABLED defined as 'yes'
,iptables/1.8.7 Failed to initialize nft: Protocol not supported
,2021-09-06 08:00:47.897188 [INFO] VPN_ENABLED defined as 'yes'
,iptables/1.8.7 Failed to initialize nft: Protocol not supported
I've tried setting LEGACY_IPTABLES and using buster but it has made no difference. I'm running it on Synology 6.2 and have had no issues until Watchtower updated the image last night.
using Nord VPN, it was working fine for a long time, not really sure what changed, docker pulled a newer build or something and the last day or two I get this error.
2020-12-15 00:25:26.494960 [INFO] VPN_ENABLED defined as 'yes'
2020-12-15 00:25:26.536815 [INFO] DISABLE_IPV6 is set to ''
2020-12-15 00:25:26.594441 [INFO] Disabling IPv6 in sysctl
2020-12-15 00:25:26.647568 [WARNING] VPN_TYPE not set, defaulting to OpenVPN.
2020-12-15 00:25:26.716904 [WARNING] Unable to chown/chmod /config/openvpn/, assuming SMB mountpoint
2020-12-15 00:25:26.770047 [INFO] OpenVPN config file is found at /config/openvpn/us6310.nordvpn.com.udp.ovpn
dos2unix: converting file /config/openvpn/us6310.nordvpn.com.udp.ovpn to Unix format...
2020-12-15 00:25:26.854502 [INFO] VPN remote line defined as '172.93.177.139 1194'
2020-12-15 00:25:26.900652 [INFO] VPN_REMOTE defined as '172.93.177.139'
2020-12-15 00:25:26.950508 [INFO] VPN_PORT defined as '1194'
2020-12-15 00:25:27.014707 [INFO] VPN_PROTOCOL defined as 'udp'
2020-12-15 00:25:27.062003 [INFO] VPN_DEVICE_TYPE defined as 'tun0'
2020-12-15 00:25:27.105119 [INFO] LAN_NETWORK defined as '10.0.0.0/24'
2020-12-15 00:25:27.137214 [INFO] NAME_SERVERS defined as '1.1.1.1,1.0.0.1'
2020-12-15 00:25:27.173446 [INFO] VPN_OPTIONS not defined (via -e VPN_OPTIONS)
2020-12-15 00:25:27.209324 [INFO] Adding 1.1.1.1 to resolv.conf
2020-12-15 00:25:27.246428 [INFO] Adding 1.0.0.1 to resolv.conf
2020-12-15 00:25:27.284047 [INFO] PGID not defined. Defaulting to root group
2020-12-15 00:25:27.324068 [INFO] Starting OpenVPN...
Tue Dec 15 00:25:27 2020 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019
Tue Dec 15 00:25:27 2020 library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08
Tue Dec 15 00:25:27 2020 neither stdin nor stderr are a tty device and you have neither a controlling tty nor systemd - can't ask for 'Enter Auth Username:'. If you used --daemon, you need to use --askpass to make passphrase-protected keys work, and you can not use --auth-nocache.
Tue Dec 15 00:25:27 2020 Exiting due to fatal error
Thanks in advance.
The current README.md is not completely rewritten for the Jackett application.
Im trying to connect to PIA, but it errors.
Fri Aug 16 19:53:29 2019 library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08
Fri Aug 16 19:53:29 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]188.240.220.26:1198
Fri Aug 16 19:53:29 2019 UDP link local: (not bound)
Fri Aug 16 19:53:29 2019 UDP link remote: [AF_INET]188.240.220.26:1198
Fri Aug 16 19:53:29 2019 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Aug 16 19:53:29 2019 [6acb1a23e1777dd84ba3e0c77bdab1a0] Peer Connection Initiated with [AF_INET]188.240.220.26:1198
Fri Aug 16 19:53:30 2019 ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)
Fri Aug 16 19:53:30 2019 Exiting due to fatal error
Hi,
First: I'm not the tech saviest guy on earth but I manage to get most things to work somehow. But here I can't get my head around what might be wrong. Might be sthg blatantly obvious, so bare with me please. And thank you for your work. It's highly appreciated.
I try to run the Docker container on my Synology NAS. I've set up the docker container as far as I can tell according to the instructions. I use an .ovpn file which works all right (tested it beforehand).
Screenshot with directory mappings
Screenshot with env variables
When starting the container I get this in the logs.
2020-10-25 15:57:44 stdout Sun Oct 25 15:57:44 2020 Exiting due to fatal error
2020-10-25 15:57:44 stdout Sun Oct 25 15:57:44 2020 ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)
2020-10-25 15:57:44 stdout Sun Oct 25 15:57:44 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2020-10-25 15:57:44 stdout Sun Oct 25 15:57:44 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2020-10-25 15:57:44 stdout Sun Oct 25 15:57:44 2020 Data Channel: using negotiated cipher 'AES-256-GCM'
2020-10-25 15:57:44 stdout Sun Oct 25 15:57:43 2020 [VPN Node Server 4096] Peer Connection Initiated with [AF_INET]
2020-10-25 15:57:44 stdout Sun Oct 25 15:57:43 2020 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
2020-10-25 15:57:44 stdout Sun Oct 25 15:57:43 2020 WARNING: 'auth' is used inconsistently, local='auth SHA512', remote='auth [null-digest]'
2020-10-25 15:57:44 stdout Sun Oct 25 15:57:43 2020 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher AES-256-GCM'
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1602', remote='link-mtu 1550'
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 VERIFY OK: depth=0,
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 VERIFY EKU OK
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 Validating certificate extended key usage
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 VERIFY KU OK
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 VERIFY OK: depth=1,
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 UDP link remote: [AF_INET]
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 UDP link local: (not bound)
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019
2020-10-25 15:57:43 stdout Sun Oct 25 15:57:43 2020 WARNING: file 'credentials.conf' is group or others accessible
2020-10-25 15:57:43 stdout 2020-10-25 15:57:43.429118 [INFO] Starting OpenVPN...
2020-10-25 15:57:43 stdout 2020-10-25 15:57:43.367779 [INFO] Adding 8.8.4.4 to resolv.conf
2020-10-25 15:57:43 stdout 2020-10-25 15:57:43.306576 [INFO] Adding 1.0.0.1 to resolv.conf
2020-10-25 15:57:43 stdout 2020-10-25 15:57:43.242471 [INFO] Adding 8.8.8.8 to resolv.conf
2020-10-25 15:57:43 stdout 2020-10-25 15:57:43.179349 [INFO] Adding 1.1.1.1 to resolv.conf
2020-10-25 15:57:43 stdout 2020-10-25 15:57:43.116583 [INFO] VPN_OPTIONS not defined (via -e VPN_OPTIONS)
2020-10-25 15:57:43 stdout 2020-10-25 15:57:43.055098 [WARNING] NAME_SERVERS not defined (via -e NAME_SERVERS), defaulting to CloudFlare and Google name servers
2020-10-25 15:57:42 stdout 2020-10-25 15:57:42.991746 [INFO] LAN_NETWORK defined as '192.168.0.0/24'
2020-10-25 15:57:42 stdout 2020-10-25 15:57:42.925105 [INFO] VPN_DEVICE_TYPE defined as 'tun0'
2020-10-25 15:57:42 stdout 2020-10-25 15:57:42.826940 [INFO] VPN_PROTOCOL defined as 'protocol'
2020-10-25 15:57:42 stdout 2020-10-25 15:57:42.688931 [INFO] VPN_PORT defined as 'port_number'
2020-10-25 15:57:42 stdout 2020-10-25 15:57:42.618787 [INFO] VPN_REMOTE defined as 'name_of_vpn'
2020-10-25 15:57:42 stdout 2020-10-25 15:57:42.539994 [INFO] VPN remote line defined as 'name_of_vpn_server'
2020-10-25 15:57:42 stdout dos2unix: converting file /config/openvpn/Name_of_ovpn_file.ovpn to Unix format...
2020-10-25 15:57:42 stdout 2020-10-25 15:57:42.353723 [INFO] OpenVPN config file is found at /config/openvpn/Name_of_ovpn_file.ovpn
2020-10-25 15:57:42 stdout 2020-10-25 15:57:42.281538 [WARNING] VPN_TYPE not set, defaulting to OpenVPN.
2020-10-25 15:57:42 stdout 2020-10-25 15:57:42.213771 [INFO] Disabling IPv6 in sysctl
2020-10-25 15:57:42 stdout 2020-10-25 15:57:42.155446 [INFO] DISABLE_IPV6 is set to ''
2020-10-25 15:57:42 stdout 2020-10-25 15:57:42.093856 [INFO] VPN_ENABLED defined as 'yes'
I am pretty certain that the code could be optimized overall. Will look in to this later, but for now everything works how it is intended to work.
Good day i know that you have listed this issue as closed but i'm unable i'm getting the error that the container is unable to read the OVPN file.
Options error: In [CMD-LINE]:1: Error opening configuration file: /config/openvpn/ca1485.nordvpn.com.udp.ovpn
I have already tried all the fixes available and without success...
Here is my docker-compose file:
version: '3.3'
services:
jackettvpn:
image: dyonr/jackettvpn
privileged: true
cap_add:
- NET_ADMIN
ports:
- "32710:9117"
devices:
- /dev/net/tun
volumes:
- /volume1/docker/jackett:/config
environment:
- VPN_ENABLED=yes
- VPN_TYPE=openvpn
- LAN_NETWORK="172.20.10.0/24"
- PUID=1028
- PGID=100
- NAME_SERVERS=1.1.1.1,9.9.9.9
restart: unless-stopped
network_mode: "myNet"
What do you think could be the issue?
Ubuntu Server Edition running Release: 18.04
Keep getting this error and connection refused.
2021-04-06 08:55:05.7461 Info Starting Jackett v0.17.855
2021-04-06 08:55:06.0411 Error System.IO.IOException: The configured user limit (1024) on the number of inotify instances has been reached, or the per-process limit on the number of open file descriptors has been reached.
at System.IO.FileSystemWatcher.StartRaisingEvents()
at System.IO.FileSystemWatcher.StartRaisingEventsIfNotDisposed()
at System.IO.FileSystemWatcher.set_EnableRaisingEvents(Boolean value)
at Microsoft.Extensions.FileProviders.Physical.PhysicalFilesWatcher.TryEnableFileSystemWatcher()
at Microsoft.Extensions.FileProviders.Physical.PhysicalFilesWatcher.CreateFileChangeToken(String filter)
at Microsoft.Extensions.FileProviders.PhysicalFileProvider.Watch(String filter)
at Microsoft.Extensions.Configuration.FileConfigurationProvider.<.ctor>b__1_0()
at Microsoft.Extensions.Primitives.ChangeToken.OnChange(Func`1 changeTokenProducer, Action changeTokenConsumer)
at Microsoft.Extensions.Configuration.FileConfigurationProvider..ctor(FileConfigurationSource source)
at Microsoft.Extensions.Configuration.Json.JsonConfigurationSource.Build(IConfigurationBuilder builder)
at Microsoft.Extensions.Configuration.ConfigurationBuilder.Build()
at Microsoft.AspNetCore.Hosting.WebHostBuilder.BuildCommonServices(AggregateException& hostingStartupErrors)
at Microsoft.AspNetCore.Hosting.WebHostBuilder.Build()
at Jackett.Server.Program.Main(String[] args) System.IO.IOException: The configured user limit (1024) on the number of inotify instances has been reached, or the per-process limit on the number of open file descriptors has been reached.
at System.IO.FileSystemWatcher.StartRaisingEvents()
at System.IO.FileSystemWatcher.StartRaisingEventsIfNotDisposed()
at System.IO.FileSystemWatcher.set_EnableRaisingEvents(Boolean value)
at Microsoft.Extensions.FileProviders.Physical.PhysicalFilesWatcher.TryEnableFileSystemWatcher()
at Microsoft.Extensions.FileProviders.Physical.PhysicalFilesWatcher.CreateFileChangeToken(String filter)
at Microsoft.Extensions.FileProviders.PhysicalFileProvider.Watch(String filter)
at Microsoft.Extensions.Configuration.FileConfigurationProvider.<.ctor>b__1_0()
at Microsoft.Extensions.Primitives.ChangeToken.OnChange(Func`1 changeTokenProducer, Action changeTokenConsumer)
at Microsoft.Extensions.Configuration.FileConfigurationProvider..ctor(FileConfigurationSource source)
at Microsoft.Extensions.Configuration.Json.JsonConfigurationSource.Build(IConfigurationBuilder builder)
at Microsoft.Extensions.Configuration.ConfigurationBuilder.Build()
at Microsoft.AspNetCore.Hosting.WebHostBuilder.BuildCommonServices(AggregateException& hostingStartupErrors)
at Microsoft.AspNetCore.Hosting.WebHostBuilder.Build()
at Jackett.Server.Program.Main(String[] args)
Any guidance for validating all torrent traffic is traversing the tun0 interface?
I tried to find the openvpn logging but it does not seem to exist.
I do see that the default route is tun0 but I see a majority of traffic going over eth0 rather than tun0.
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet XXXXXXXX netmask 255.255.0.0 broadcast XXXXXXXXXXX
ether XXXXXXXXXXXXX txqueuelen 0 (Ethernet)
RX packets 73238479 bytes 84844669017 (79.0 GiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 61980144 bytes 25064784760 (23.3 GiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet XXXXXXXXXXX netmask 255.255.0.0 destination XXXXXXXXX
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 500 (UNSPEC)
RX packets 1448025 bytes 360143482 (343.4 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 2324002 bytes 1190759676 (1.1 GiB)
TX errors 0 dropped 156 overruns 0 carrier 0 collisions 0
Hello,
I don't understand what is happening. I've setup a watchtower to auto update my docker container with the latest images.
It pulls several time the latest JacketVPN image but Jacket is still version 0.16.1020.0.
dyonr/jackettvpn latest 5315ca1bcf7d 3 hours ago 276MB
I've also tried to recreate the container and pulling the latest image before : same, version 0.16.1020.0
What am I doing wrong ?
Thx?
Hi Dyonr,
All of a sudden my Jackett VPN seems to have gone bad.
Do you have any idea why this is happening?
Any help would be greatly appreciated. :)
Thanks!
Hi
If i specify my PUID=1000 and GUID=1000 I get user/group not found.
I can run the container if I don't specify a user/group, in this case It runs as root:root and it works fine.
All of my other containers are working ok using the same PGID/PUID.
uid=1000(mike) gid=1000(mike)
start-stop-daemon: user '1000' not found
jackett_vpn:
container_name: jackett_vpn
image: dyonr/jackettvpn
restart: unless-stopped
privileged: true
environment:
- TZ=${TZ}
- NAME_SERVERS=1.1.1.1,1.0.0.1
- LAN_NETWORK=192.168.1.0/24
- VPN_ENABLED=yes
- VPN_USERNAME=xxxxxxxxxxxxxxxx
- VPN_PASSWORD=xxxxxxxxxxxx
- WEBUI_PORT=9117
- PGID=${PGID}
- PUID=${PUID}
ports:
- 9117:9117
volumes:
- ${DOCKERCONFDIR}/jackett_vpn:/config
- ${DOCKERSHAREDDIR}:/shared
- ${DOWNLOADSDIR}:/blackhole
...
2019-01-28 06:07:33.766085 [info] Starting Jackett daemon...
Logging to /config/Jackett/log.txt.
start-stop-daemon: user '1000' not found
2019-01-28 06:07:34.809227 [info] Jackett PID:
...
mike@server:~$ id
uid=1000(mike) gid=1000(mike) groups=1000(mike),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),108(lxd),1001(docker)
mike@server:~/.docker/config/jackett_vpn$ ls -l
total 8
drwxr-xr-x 4 mike mike 4096 Jan 27 08:43 Jackett
drwxrwxr-x 2 mike mike 4096 Jan 28 06:07 openvpn
mike@server:~/.docker/config/jackett_vpn$ find . -ls | awk '{printf "%s %s %s ", $3, $5, $6; for (i = 11; i <= NF; i++) printf "%s ", $i; printf "\n"}' | grep "^d" | cut -c 12-
mike mike .
mike mike ./openvpn
mike mike ./.mono
mike mike ./.mono/certs
mike mike ./.mono/certs/Trust
mike mike ./Jackett
mike mike ./Jackett/DataProtection
mike mike ./Jackett/Indexers
I am trying to run this in docker on my home server but for the life of me cannot get openvpn to work. I use a similar transmission-with-openvpn docker container that is working and everything looks pretty similar to me.
Here's what I've got:
Docker: 20.10.8, build 3967b7d
Image: dyonr/jackettvpn@sha256:bc90dc374e99c5744080982164971bb86c56e485b7cb868bbf954ded942844e1
Logs:
There's way more to the log file but it all looks like just stuff for adding indexers - this bit seems repeated, let me know if you want the whole file
2021-09-11 05:00:28.3022 Info Starting Jackett v0.18.729
2021-09-11 05:00:29.4222 Info Environment version: 5.0.9 (/opt/Jackett/)
2021-09-11 05:00:29.4231 Info OS version: Unix 5.4.0.81 (64bit OS) (64bit process)
2021-09-11 05:00:29.4231 Info Jackett variant: CoreLinuxAmdx64
2021-09-11 05:00:29.4231 Info File /etc/issue: Debian GNU/Linux 11 \n \l
2021-09-11 05:00:29.4231 Info Running in Docker: Yes (image build: unknown)
2021-09-11 05:00:29.4231 Info ThreadPool MaxThreads: 32767 workerThreads, 1000 completionPortThreads
2021-09-11 05:00:29.4231 Info App config/log directory: /config/Jackett
2021-09-11 05:00:29.4231 Info Using proxy: Disabled
2021-09-11 05:00:29.4231 Info Using FlareSolverr: No
2021-09-11 05:00:29.4270 Info Using HTTP Client: HttpWebClient2
2021-09-11 05:00:29.4363 Info Loading Native indexers ...
Logs from Portainer:
2021-10-01 07:22:41.552913 [INFO] VPN_ENABLED defined as 'true
2021-10-01 07:22:41.597518 [INFO] The container is currently running iptables v1.8.7 (nf_tables).
2021-10-01 07:22:41.637588 [INFO] LEGACY_IPTABLES is set to ''
2021-10-01 07:22:41.675972 [INFO] Not making any changes to iptables version
2021-10-01 07:22:41.732263 [INFO] A group with PGID 1005 does not exist, adding a group called 'jackett' with PGID 1005
2021-10-01 07:22:41.802685 [INFO] An user with PUID 1005 does not exist, adding an user called 'jackett user' with PUID 1005
2021-10-01 07:22:41.929526 [WARNING] UMASK not defined (via -e UMASK), defaulting to '002'
2021-10-01 07:22:42.063069 [WARNING] There is no password set via Jackett's web interface or as an environment variable!
2021-10-01 07:22:42.101878 [WARNING] Anyone on your network could access Jackett without authentication!
2021-10-01 07:22:42.149895 [WARNING] Or even the whole world if you did port-fortwarding!
2021-10-01 07:22:42.190295 [WARNING] It's adviced to set one via either the web interface or as environment variable
2021-10-01 07:22:42.230855 [INFO] Starting Jackett daemon...
Logging to /config/Jackett/Logs/log.txt.
2021-10-01 07:22:43.279840 [INFO] Jackett PID: 73
2021-10-01 07:22:43.297812 [INFO] Started Jackett daemon successfully...
2021-10-01 07:22:43.320839 [INFO] HEALTH_CHECK_HOST is not set. For now using default host one.one.one.one
2021-10-01 07:22:43.359246 [INFO] HEALTH_CHECK_INTERVAL is not set. For now using default interval of 300
Server:
OS: Ubuntu 20.04.2 LTS
Kernel: 5.4.0
Deployment (I use ansible):
---
- name: Create jackett Directories
file:
path: "{{ item }}"
state: directory
with_items:
- "{{ jackett_data_directory }}"
- "{{ jackett_vpn_directory }}"
- name: Add OpenVPN config
template:
src: "{{ jackett_vpn_config }}"
dest: "{{ jackett_data_directory }}/{{ jackett_vpn_config }}"
register: openvpn_config_provider
- name: Add OpenVPN credentials
template:
src: "openvpn/credentials.conf"
dest: "{{ jackett_data_directory }}/openvpn/credentials.conf"
register: open_vpn_credentials
- name: jackett
docker_container:
privileged: "false"
name: jackett
image: dyonr/jackettvpn
# image: linuxserver/jackett
volumes:
- "{{ jackett_data_directory }}:/config:rw"
- "/etc/localtime:/etc/localtime:ro"
- "{{ jackett_torrents_root }}:/blackhole"
ports:
- "{{ jackett_port }}:9117"
env:
TZ: "{{ ansible_nas_timezone }}"
VPN_ENABLED: "{{ jackett_vpn_enabled }}"
VPN_TYPE: "{{ jackett_vpn_type }}"
LAN_NETWORK: "{{ jackett_lan_network }}"
VPN_USERNAME: "{{ jackett_vpn_username }}"
VPN_PASSWORD: "{{ jackett_vpn_password }}"
WEB_UI_PASSWORD: "{{ jackett_web_ui_password }}"
PGID: "{{ jackett_group_id }}"
PUID: "{{ jackett_user_id }}"
restart_policy: unless-stopped
devices:
- /dev/net/tun
capabilities:
- NET_ADMIN
memory: "{{ jackett_memory }}"
labels:
traefik.enable: "{{ jackett_available_externally }}"
traefik.http.routers.jackett.rule: "Host(`{{ jackett_hostname }}.{{ ansible_nas_domain }}`)"
traefik.http.routers.jackett.tls.certresolver: "letsencrypt"
traefik.http.routers.jackett.tls.domains[0].main: "{{ ansible_nas_domain }}"
traefik.http.routers.jackett.tls.domains[0].sans: "*.{{ ansible_nas_domain }}"
traefik.http.services.jackett.loadbalancer.server.port: "9117"
Any ideas? Running with two ethernet adapters if that is the issue? (One which goes between VMs and one external)
https://pastebin.com/raw/bHnvSbud
My docker-compose file runs it as privileged as has previously been cited as an issue.
version: '3.3'
services:
jackettvpn:
privileged: true
volumes:
- './config:/config'
- '/home/admin/arr/bt-watch:/blackhole'
environment:
- VPN_ENABLED=yes
- VPN_TYPE=openvpn
- LAN_NETWORK=192.168.1.0/24
- VPN_USERNAME=
- VPN_PASSWORD=
ports:
- '9117:9117'
restart: unless-stopped
image: dyonr/jackettvpn
Your version of Jackett v0.11.534.0 is very old. Multiple indexers are likely to fail when using an old version. Update to the latest version of Jackett.
When I start a container the pod starts, but after it connects to the VPN it can no longer be accessible from the LAN. I have tried setting the VPN_ENABLED to false and then it works fine. Any suggestions on what to tweak to make this work correctly?
I have the following setup for the container config:
kind: Deployment
apiVersion: apps/v1
metadata:
name: jackett-vpn
namespace: default
labels:
app: jackett-vpn
spec:
replicas: 1
selector:
matchLabels:
app: jackett-vpn
template:
metadata:
labels:
app: jackett-vpn
spec:
volumes:
- name: jackett-vpn-pv-storage
persistentVolumeClaim:
claimName: media-nfs-pv-claim
- name: tz-config
hostPath:
path: /etc/localtime
type: File
containers:
- name: jackett
image: 'docker-jackett-openvpn-new:local'
env:
- name: VPN_ENABLED
value: "yes"
- name: PGID
value: "1000"
- name: PUID
value: "1000"
- name: VPN_CONFIG
value: "/config"
- name: LAN_NETWORK
value: 192.168.0.1/24
- name: HEALTH_CHECK_SILENT
value: "0"
- name: HEALTH_CHECK_INTERVAL
value: "120"
ports:
- containerPort: 9117
volumeMounts:
- name: jackett-vpn-pv-storage
mountPath: /config
subPath: jackett-config
- name: tz-config
mountPath: /etc/localtime
securityContext:
allowPrivilegeEscalation: true
capabilities:
add:
- NET_ADMIN
privileged: true
imagePullPolicy: IfNotPresent
restartPolicy: Always
hostNetwork: true
dnsPolicy: ClusterFirstWithHostNet
nodeSelector:
dataNetworkEnabled: 'true'
here's the logs that I can capture before the pod is inaccessible:
2022-03-09 21:11:27.480436 [INFO] VPN_ENABLED defined as 'yes'
2022-03-09 21:11:27.568609 [INFO] DISABLE_IPV6 is set to ''
2022-03-09 21:11:27.649393 [INFO] Disabling IPv6 in sysctl
2022-03-09 21:11:27.757490 [WARNING] VPN_TYPE not set, defaulting to OpenVPN.
2022-03-09 21:11:27.978328 [INFO] OpenVPN config file is found at /config/openvpn/CAOpenVPN.ovpn
dos2unix: converting file /config/openvpn/CAOpenVPN.ovpn to Unix format...
2022-03-09 21:11:28.235862 [INFO] VPN remote line defined as 'ca-montreal.privacy.network 501'
2022-03-09 21:11:28.327202 [INFO] VPN_REMOTE defined as 'ca-montreal.privacy.network'
2022-03-09 21:11:28.416041 [INFO] VPN_PORT defined as '501'
2022-03-09 21:11:28.514643 [INFO] VPN_PROTOCOL defined as 'tcp'
2022-03-09 21:11:28.613683 [INFO] VPN_DEVICE_TYPE defined as 'tun0'
2022-03-09 21:11:28.703296 [INFO] LAN_NETWORK defined as '192.168.0.1/24'
2022-03-09 21:11:28.792828 [WARNING] NAME_SERVERS not defined (via -e NAME_SERVERS), defaulting to CloudFlare and Google name servers
2022-03-09 21:11:28.882776 [INFO] VPN_OPTIONS not defined (via -e VPN_OPTIONS)
2022-03-09 21:11:28.976471 [INFO] Adding 1.1.1.1 to resolv.conf
2022-03-09 21:11:29.067480 [INFO] Adding 8.8.8.8 to resolv.conf
2022-03-09 21:11:29.156572 [INFO] Adding 1.0.0.1 to resolv.conf
2022-03-09 21:11:29.245519 [INFO] Adding 8.8.4.4 to resolv.conf
2022-03-09 21:11:29.326266 [INFO] Starting OpenVPN...
Wed Mar 9 21:11:29 2022 WARNING: file 'pass.txt' is group or others accessible
Wed Mar 9 21:11:29 2022 OpenVPN 2.4.7 aarch64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 19 2021
Wed Mar 9 21:11:29 2022 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10
Wed Mar 9 21:11:29 2022 TCP/UDP: Preserving recently used remote address: [AF_INET]172.98.71.109:501
Wed Mar 9 21:11:29 2022 Attempting to establish TCP connection with [AF_INET]172.98.71.109:501 [nonblock]
Wed Mar 9 21:11:30 2022 TCP connection established with [AF_INET]172.98.71.109:501
Wed Mar 9 21:11:30 2022 TCP_CLIENT link local: (not bound)
Wed Mar 9 21:11:30 2022 TCP_CLIENT link remote: [AF_INET]172.98.71.109:501
Wed Mar 9 21:11:30 2022 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Mar 9 21:11:31 2022 [montreal402] Peer Connection Initiated with [AF_INET]172.98.71.109:501
Wed Mar 9 21:11:32 2022 OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options
Wed Mar 9 21:11:32 2022 OpenVPN ROUTE: failed to parse/resolve route for host/network: 2000::/3
Wed Mar 9 21:11:32 2022 TUN/TAP device tun0 opened
Wed Mar 9 21:11:32 2022 /sbin/ip link set dev tun0 up mtu 1500
Wed Mar 9 21:11:32 2022 /sbin/ip addr add dev tun0 10.43.19.3/24 broadcast 10.43.19.255
Wed Mar 9 21:11:32 2022 WARNING: OpenVPN was configured to add an IPv6 route over tun0. However, no IPv6 has been configured for this interface, therefore the route installation may fail or may not work as expected.
Wed Mar 9 21:11:32 2022 Initialization Sequence Completed
Hi DyonR,
Cool project - really glad I came across this as most of the torrent sites here in DK is locked by our ISPs.
Anyway - I am really struggling to make it work. I get the error below and I cannot seem to figure out why. I have tested with and without VPN enabled - same result (error).
Would appreciate it if you can point me in the right direction.
Thanks again!
/phatty
2018-11-12 11:52:38 | stdout | 2018-11-12 11:52:38.004455 [info] Jackett PID:
-- | -- | --
2018-11-12 11:52:36 | stdout | start-stop-daemon: user '1026' not found
2018-11-12 11:52:36 | stdout | Logging to /config/Jackett/log.txt.
2018-11-12 11:52:36 | stdout | 2018-11-12 11:52:36.930612 [info] Starting Jackett daemon...
2018-11-12 11:52:36 | stdout | 2018-11-12 11:52:36.850541 [info] VPN_ENABLED defined as 'No'
Here are my settings (Synology NAS):
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.