Container unexpectedly stopped working in the last few hours

[hobbesjaap]

Is there a pinned issue for this?

• I have read the pinned issues and could not find my issue

Is there an existing or similar issue/discussion for this?

• I have searched the existing issues
• I have searched the existing discussions

Is there any comment in the documentation for this?

• I have read the documentation, especially the FAQ and Troubleshooting parts

Is this related to a provider?

• I have checked the provider repo for issues
• My issue is NOT related to a provider

Are you using the latest release?

• I am using the latest release

Have you tried using the dev branch latest?

• I have tried using dev branch

Docker run config used

Created through Portainer. Docker ENV options are:

CREATE_TUN_DEVICE	true
DROP_DEFAULT_ROUTE
ENABLE_UFW	false
GLOBAL_APPLY_PERMISSIONS	true
HEALTH_CHECK_HOST	google.com
LOCAL_NETWORK	192.168.2.0/24
LOG_TO_STDOUT	false
OPENVPN_CONFIG	my_expressvpn_hong_kong_-_1_udp
OPENVPN_OPTS
OPENVPN_PASSWORD	my-password-is-here
OPENVPN_PROVIDER	EXPRESSVPN
OPENVPN_USERNAME	my-user-name-is-here
PATH	/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PEER_DNS	true
PEER_DNS_PIN_ROUTES	true
PGID	100
PUID	1034
REVISION	81277fb
SELFHEAL	false
TRANSMISSION_DOWNLOAD_DIR	/data/completed
TRANSMISSION_HOME	/config/transmission-home
TRANSMISSION_INCOMPLETE_DIR	/data/incomplete
TRANSMISSION_RPC_PASSWORD
TRANSMISSION_RPC_PORT	9091
TRANSMISSION_RPC_USERNAME
TRANSMISSION_WATCH_DIR	/data/watch
UFW_ALLOW_GW_NET	false
UFW_DISABLE_IPTABLES_REJECT	false
UFW_EXTRA_PORTS
WEBPROXY_ENABLED	false
WEBPROXY_PASSWORD
WEBPROXY_PORT	8118
WEBPROXY_USERNAME

Current Behavior

Everything was running fine until a few hours ago, when suddenly, this container has got itself stuck in a boot-loop. The log looks like this:

Modification: Change ping options Modification: Update/set resolv-retry to 15 seconds Modification: Change tls-crypt keyfile path Modification: Set output verbosity to 3 Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop Modification: Updating status for config failure detection Setting OpenVPN credentials... adding route to local network 192.168.2.0/24 via 172.19.0.1 dev eth0 2023-09-10 07:09:10 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning. 2023-09-10 07:09:10 WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6 2023-09-10 07:09:10 OpenVPN 2.5.5 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 14 2022 2023-09-10 07:09:10 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10 2023-09-10 07:09:10 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. 2023-09-10 07:09:10 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2023-09-10 07:09:10 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2023-09-10 07:09:10 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2023-09-10 07:09:10 TCP/UDP: Preserving recently used remote address: [AF_INET]194.5.83.114:1195 2023-09-10 07:09:10 Socket Buffers: R=[212992->425984] S=[212992->425984] 2023-09-10 07:09:10 UDP link local: (not bound) 2023-09-10 07:09:10 UDP link remote: [AF_INET]194.5.83.114:1195 2023-09-10 07:10:10 [UNDEF] Inactivity timeout (--ping-exit), exiting 2023-09-10 07:10:10 SIGTERM[soft,ping-exit] received, process exiting Starting container with revision: 81277fb6f8ae6aeb57f913172d4d45c7af8c0b31 TRANSMISSION_HOME is currently set to: /config/transmission-home WARNING: Deprecated. Found old default transmission-home folder at /data/transmission-home, setting this as TRANSMISSION_HOME. This might break in future versions. We will fallback to this directory as long as the folder exists. Please consider moving it to /config/transmission-home Creating TUN device /dev/net/tun Using OpenVPN provider: EXPRESSVPN Running with VPN_CONFIG_SOURCE auto No bundled config script found for EXPRESSVPN. Defaulting to external config Will get configs from https://github.com/haugene/vpn-configs-contrib.git Repository is already cloned, checking for update Already up to date. Already on 'main' Your branch is up to date with 'origin/main'. Found configs for EXPRESSVPN in /config/vpn-configs-contrib/openvpn/expressvpn, will replace current content in /etc/openvpn/expressvpn Starting OpenVPN using config my_expressvpn_hong_kong_-_1_udp.ovpn Modifying /etc/openvpn/expressvpn/my_expressvpn_hong_kong_-_1_udp.ovpn for best behaviour in this container Modification: Point auth-user-pass option to the username/password file Modification: Change ca certificate path Modification: Change ping options Modification: Update/set resolv-retry to 15 seconds Modification: Change tls-crypt keyfile path Modification: Set output verbosity to 3 Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop Modification: Updating status for config failure detection Setting OpenVPN credentials... adding route to local network 192.168.2.0/24 via 172.19.0.1 dev eth0 2023-09-10 07:10:12 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning. 2023-09-10 07:10:12 WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6 2023-09-10 07:10:12 OpenVPN 2.5.5 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 14 2022 2023-09-10 07:10:12 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10 2023-09-10 07:10:12 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. 2023-09-10 07:10:12 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2023-09-10 07:10:12 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2023-09-10 07:10:12 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2023-09-10 07:10:12 TCP/UDP: Preserving recently used remote address: [AF_INET]194.5.83.114:1195 2023-09-10 07:10:12 Socket Buffers: R=[212992->425984] S=[212992->425984] 2023-09-10 07:10:12 UDP link local: (not bound) 2023-09-10 07:10:12 UDP link remote: [AF_INET]194.5.83.114:1195 2023-09-10 07:10:53 event_wait : Interrupted system call (code=4) 2023-09-10 07:10:53 SIGTERM[hard,] received, process exiting Starting container with revision: 81277fb6f8ae6aeb57f913172d4d45c7af8c0b31 TRANSMISSION_HOME is currently set to: /config/transmission-home WARNING: Deprecated. Found old default transmission-home folder at /data/transmission-home, setting this as TRANSMISSION_HOME. This might break in future versions. We will fallback to this directory as long as the folder exists. Please consider moving it to /config/transmission-home Creating TUN device /dev/net/tun Using OpenVPN provider: EXPRESSVPN Running with VPN_CONFIG_SOURCE auto No bundled config script found for EXPRESSVPN. Defaulting to external config Will get configs from https://github.com/haugene/vpn-configs-contrib.git Repository is already cloned, checking for update Already up to date. Already on 'main' Your branch is up to date with 'origin/main'. Found configs for EXPRESSVPN in /config/vpn-configs-contrib/openvpn/expressvpn, will replace current content in /etc/openvpn/expressvpn Starting OpenVPN using config my_expressvpn_hong_kong_-_1_udp.ovpn Modifying /etc/openvpn/expressvpn/my_expressvpn_hong_kong_-_1_udp.ovpn for best behaviour in this container Modification: Point auth-user-pass option to the username/password file Modification: Change ca certificate path Modification: Change ping options Modification: Update/set resolv-retry to 15 seconds Modification: Change tls-crypt keyfile path Modification: Set output verbosity to 3 Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop Modification: Updating status for config failure detection Setting OpenVPN credentials... adding route to local network 192.168.2.0/24 via 172.19.0.1 dev eth0 2023-09-10 07:26:46 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning. 2023-09-10 07:26:46 WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6 2023-09-10 07:26:46 OpenVPN 2.5.5 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 14 2022 2023-09-10 07:26:46 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10 2023-09-10 07:26:46 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. 2023-09-10 07:26:46 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2023-09-10 07:26:46 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2023-09-10 07:26:46 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2023-09-10 07:26:46 TCP/UDP: Preserving recently used remote address: [AF_INET]194.5.83.114:1195 2023-09-10 07:26:46 Socket Buffers: R=[212992->425984] S=[212992->425984] 2023-09-10 07:26:46 UDP link local: (not bound) 2023-09-10 07:26:46 UDP link remote: [AF_INET]194.5.83.114:1195

I've modified the container and changed the volume-mapping from /data to /config, which gave me this log:

Starting container with revision: 81277fb6f8ae6aeb57f913172d4d45c7af8c0b31 TRANSMISSION_HOME is currently set to: /config/transmission-home Creating TUN device /dev/net/tun Using OpenVPN provider: EXPRESSVPN Running with VPN_CONFIG_SOURCE auto No bundled config script found for EXPRESSVPN. Defaulting to external config Will get configs from https://github.com/haugene/vpn-configs-contrib.git Cloning https://github.com/haugene/vpn-configs-contrib.git into /config/vpn-configs-contrib Cloning into '/config/vpn-configs-contrib'... Found configs for EXPRESSVPN in /config/vpn-configs-contrib/openvpn/expressvpn, will replace current content in /etc/openvpn/expressvpn Starting OpenVPN using config my_expressvpn_hong_kong_-_1_udp.ovpn Modifying /etc/openvpn/expressvpn/my_expressvpn_hong_kong_-_1_udp.ovpn for best behaviour in this container Modification: Point auth-user-pass option to the username/password file Modification: Change ca certificate path Modification: Change ping options Modification: Update/set resolv-retry to 15 seconds Modification: Change tls-crypt keyfile path Modification: Set output verbosity to 3 Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop Modification: Updating status for config failure detection Setting OpenVPN credentials... adding route to local network 192.168.2.0/24 via 172.19.0.1 dev eth0 2023-09-10 07:22:40 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning. 2023-09-10 07:22:40 WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6 2023-09-10 07:22:40 OpenVPN 2.5.5 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 14 2022 2023-09-10 07:22:40 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10 2023-09-10 07:22:40 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. 2023-09-10 07:22:40 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2023-09-10 07:22:40 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2023-09-10 07:22:40 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2023-09-10 07:22:40 TCP/UDP: Preserving recently used remote address: [AF_INET]194.5.83.114:1195 2023-09-10 07:22:40 Socket Buffers: R=[212992->425984] S=[212992->425984] 2023-09-10 07:22:40 UDP link local: (not bound) 2023-09-10 07:22:40 UDP link remote: [AF_INET]194.5.83.114:1195 2023-09-10 07:23:40 [UNDEF] Inactivity timeout (--ping-exit), exiting 2023-09-10 07:23:40 SIGTERM[soft,ping-exit] received, process exiting Starting container with revision: 81277fb6f8ae6aeb57f913172d4d45c7af8c0b31 TRANSMISSION_HOME is currently set to: /config/transmission-home Creating TUN device /dev/net/tun Using OpenVPN provider: EXPRESSVPN Running with VPN_CONFIG_SOURCE auto No bundled config script found for EXPRESSVPN. Defaulting to external config Will get configs from https://github.com/haugene/vpn-configs-contrib.git Repository is already cloned, checking for update Already up to date. Already on 'main' Your branch is up to date with 'origin/main'. Found configs for EXPRESSVPN in /config/vpn-configs-contrib/openvpn/expressvpn, will replace current content in /etc/openvpn/expressvpn Starting OpenVPN using config my_expressvpn_hong_kong_-_1_udp.ovpn Modifying /etc/openvpn/expressvpn/my_expressvpn_hong_kong_-_1_udp.ovpn for best behaviour in this container Modification: Point auth-user-pass option to the username/password file Modification: Change ca certificate path Modification: Change ping options Modification: Update/set resolv-retry to 15 seconds Modification: Change tls-crypt keyfile path Modification: Set output verbosity to 3 Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop Modification: Updating status for config failure detection Setting OpenVPN credentials... adding route to local network 192.168.2.0/24 via 172.19.0.1 dev eth0 2023-09-10 07:23:42 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning. 2023-09-10 07:23:42 WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6 2023-09-10 07:23:42 OpenVPN 2.5.5 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 14 2022 2023-09-10 07:23:42 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10 2023-09-10 07:23:42 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. 2023-09-10 07:23:42 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2023-09-10 07:23:42 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2023-09-10 07:23:42 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2023-09-10 07:23:42 TCP/UDP: Preserving recently used remote address: [AF_INET]194.5.83.129:1195 2023-09-10 07:23:42 Socket Buffers: R=[212992->425984] S=[212992->425984] 2023-09-10 07:23:42 UDP link local: (not bound) 2023-09-10 07:23:42 UDP link remote: [AF_INET]194.5.83.129:1195

I'm at a loss what is going wrong, everything was working fine just a few hours ago. My internet connection is fine, everything else is up and running, so it's just this container.

Expected Behavior

I expected Transmission to run through ExpressVPN on my HK connection.

How have you tried to solve the problem?

1. recreated the container with a clean config
2. it downloads everything
3. same bootloop happens

Log output

See above

HW/SW Environment

- OS: Synology DS 720+ SynologyOS
- Docker version : 20.10.23

Anything else?

Not at this time.

[pkishino]

The logs show inactivity message sent from the vpn server, provider is terminating the connection, you best check with their support if server settings etc changed, not on this end

[pkishino]

See #2130 for suggestions apart from provider support

[hobbesjaap]

Thank you so much for your swift reply! It turns out the problem was 100% ExpressVPN, this specific server (hong_kong_1) is currently offline. Switched over to hong_kong_2 and everything is working again. Without your comment, I wouldn't have looked at ExpressVPN as the issue, since I don't believe this server has ever gone down in the past few years. So, a big thank you for your help!