Remove script_security

[pkishino]

Due to non-support of this in latest openvpn it is removed..

Breaking change

<placeholder>

Proposed change

<placeholder>

Type of change

• Bugfix (non-breaking change which fixes an issue)
• New feature (which adds functionality to this container)
• Breaking change (fix/feature causing existing functionality to break)

Additional information

• This PR fixes or closes issue: fixes #2697
• This PR is related to issue: relates to #
• Link to documentation updated (if done separately): https://...

Checklist

• The code change is tested and works locally.
• There is no commented out code in this PR.

If user exposed functionality or configuration variables are added/changed:

• Documentation added/updated

[Matt812g]

I was going to try to run this directly, but I can't figure out how to do that. However, looks good to me.

[pkishino]

I was going to try to run this directly, but I can't figure out how to do that. However, looks good to me.

Just check out the commit and build locally

[Matt812g]

Having issues building locally. I tried docker build https://github.com/haugene/docker-transmission-openvpn.git#script_security-remove , but get this error:

Reading package lists...                
E: Release file for http://archive.ubuntu.com/ubuntu/dists/jammy-updates/InRelease is not valid yet (invalid for another 7h 34min 8s). Updates for this repository will 
not be applied.                    
E: Release file for http://archive.ubuntu.com/ubuntu/dists/jammy-backports/InRelease is not valid yet (invalid for another 7h 34min 49s). Updates for this repository wi
ll not be applied.                 
E: Release file for http://security.ubuntu.com/ubuntu/dists/jammy-security/InRelease is not valid yet (invalid for another 7h 33min 43s). Updates for this repository wi
ll not be applied.                   
The command '/bin/sh -c set -ex;     apt-get update;     apt-get dist-upgrade -y;     apt-get install -y --no-install-recommends       tzdata       iproute2       net-t
ools       nano       ca-certificates       curl       libcurl4-openssl-dev       libdeflate-dev       libevent-dev       libfmt-dev       libminiupnpc-dev       libnat
pmp-dev       libpsl-dev       libssl-dev' returned a non-zero code: 100

[ilike2burnthing]

NordVPN running on :dev is failing health check and restarting over and over:

Starting container with revision: 44ba9e6f3a221d3b51464f33505ccd649b24f7f3
[...]
2023-09-05 18:22:07 NOTE: starting with OpenVPN 2.1, '--script-security 2' or higher is required to call user-defined scripts or executables
[...]
2023-09-05 18:22:08 WARNING: External program may not be called unless '--script-security 2' or higher is enabled. See --help text or man page for detailed info.
2023-09-05 18:22:08 WARNING: Failed running command (--route-up): disallowed by script-security setting
2023-09-05 18:22:08 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2023-09-05 18:22:08 Initialization Sequence Completed
SELFHEAL: Container is starting, health check failed, 1 retries remaining.
SELFHEAL: Container is unhealthy, failed 3 health checks, exiting...
2023-09-05 18:24:10 event_wait : Interrupted system call (code=4)
2023-09-05 18:24:10 SIGTERM received, sending exit notification to peer
2023-09-05 18:24:11 /etc/openvpn/tunnelDown.sh tun0 1500 1657 10.8.2.7 255.255.255.0 init
2023-09-05 18:24:11 WARNING: Failed running command (--up/--down): disallowed by script-security setting
2023-09-05 18:24:11 Exiting due to fatal error

Switching to :latest resolves issue.

[pkishino]

Yeah, this needs more works..