Hi,

first of all thank you very much for providing this great Docker image! I love its size and simplicity. While it does work most of the time, I experience a few problems which I'd like to resolve.

I run this image and connect a few docker images as "clients" to it (using -p x:y on the openvpn-client iamge to access them). The Docker machines get IPs in 172.17.0.0 and can be talked to using their specified port. Furthermore, all traffic seems to be routed through the VPN tunnel -- so far so good.

However, as soon as a WAN reconnect occurs (each night...), the openvpn-client exits (because of --remap... I guess). It then restarts (--restart=always) and connects to the VPN again. At this point, the other images of the container network cannot be accessed anymore. Probably because the network creating image died and restarted?!

So is the --remap parameter really necessary? If yes, how can this problem be fixed (apart from restarting all containers every night...).

Thanks again and best regards

I am just trying your image and ran into a problem... I hope you can help.

docker run -d \
    --name openvpn-client \
    --privileged \
    --cap-add=NET_ADMIN \
    --device /dev/net/tun \
    -v ${HOME}/srv_cfg/openvpn/client:/vol/config \
    --dns 1.1.1.1 \
    --dns 1.0.0.1 \
    -p 12000:12000 \
    --restart unless-stopped \
    phlak/openvpn

docker stop openvpn-client

docker start -i openvpn-client
Options error: In [CMD-LINE]:1: Error opening configuration file: /vol/config/openvpn.conf
Use --help for more information.

docker exec -i openvpn-client /bin/bash
Error response from daemon: Container 5309f5e41c24afedfca09d321582649cbc93646361a23d26e73f715361a8fe4c is restarting, wait until the container is running

in my config folder I have:
openvpn.conf update-resolv-conf user_pass.txt

These 3 files are supplied by my VPN service.

openvpn.conf:
remote removed 1196 udp
remote removed 1196 udp
fragment 1300
explicit-exit-notify 3
auth-user-pass user_pass.txt
up 'update-resolv-conf'
down 'update-resolv-conf'
auth RSA-SHA512
dev tap
server-poll-timeout 20
client
nobind
resolv-retry infinite
auth-retry nointeract
persist-key
persist-tun
cipher AES-256-CBC
mute-replay-warnings
comp-lzo
verb 3
mute 20
remote-cert-tls server
route-method exe
route-delay 2
script-security 3
reneg-sec 0

-----BEGIN CERTIFICATE-----
removed
-----END CERTIFICATE-----