Problem using gluetun as VPN in a docker-compose file (tubearchivist)

[Froggy232]

Hi,
I try to add gluetun in a docker-compose file after using it successfully with podman, but it just doesn't work.
My docker-compose file look like that :

version: '3.5'

services:
  tubearchivist-gluetun:
    container_name: tubearchivist-gluetun
    image: qmcgaw/gluetun
    cap_add:
      - NET_ADMIN
    ports:
      - 10.36.18.3:8756:8000/tcp
    environment:
      - VPN_SERVICE_PROVIDER=expressvpn
      - VPN_TYPE=openvpn 
      - OPENVPN_USER=REDACTED
      - OPENVPN_PASSWORD=REDACTED
      - HTTP_CONTROL_SERVER_ADDRESS=:5463
      - UPDATER_PERIOD=24h
    
  tubearchivist-app:
    container_name: tubearchivist-app
    network_mode: "service:tubearchivist-gluetun"
    restart: always
    image: docker.io/bbilly1/tubearchivist
    volumes:
      - /var/home/services/.var/mnt/hdd_storage/tubearchivist-media:/youtube:z
      - /var/home/services/tubearchivist/cache:/cache:Z
    environment:
      - ES_URL=http://localhost:9200     # needs protocol e.g. http and port
      - REDIS_HOST=localhost          # don't add protocol
#      - HOST_UID=1001
#      - HOST_GID=1001
      - TA_HOST=tubearchivist.homeserver.alrhome.net:8756         # set your host name
      - TA_USERNAME=REDACTED           # your initial TA credentials
      - TA_PASSWORD=REDACTED              # your initial TA credentials
      - ELASTIC_PASSWORD=REDACTED         # set password for Elasticsearch
      - TZ=Europe/Paris                 # set your time zone
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
      interval: 2m
      timeout: 10s
      retries: 3
      start_period: 30s
    depends_on:
      - tubearchivist-es
      - tubearchivist-redis
      - tubearchivist-gluetun
  tubearchivist-redis:
    image: docker.io/redis/redis-stack-server
    network_mode: "service:tubearchivist-gluetun"
    container_name: tubearchivist-redis
    restart: always
#    expose:
 #     - "6379"
    volumes:
      - /var/home/services/tubearchivist/redis:/data:Z
    depends_on:
      - tubearchivist-es
  tubearchivist-es:
    image: docker.io/bbilly1/tubearchivist-es         # only for amd64, or use official es 8.12.0
    container_name: tubearchivist-es
    network_mode: "service:tubearchivist-gluetun"
    restart: always
    environment:
      - "ELASTIC_PASSWORD=REDACTED       # matching Elasticsearch password
      - "ES_JAVA_OPTS=-Xms512m -Xmx48g"
      - "xpack.security.enabled=true"
      - "discovery.type=single-node"
      - "path.repo=/usr/share/elasticsearch/data/snapshot"
    ulimits:
      memlock:
        soft: -1
        hard: -1
    volumes:
      - /var/home/services/tubearchivist/es:/usr/share/elasticsearch/data:Z    # check for permission error when using bind mount, see readme
#    expose:
 #     - "9200"

#volumes:
 # media:
 # cache:
 # redis:
 # es:

The logs of gluetun-tubearchivist look like that :

========================================
========================================
=============== gluetun ================
========================================
=========== Made with ❤️ by ============
======= https://github.com/qdm12 =======
========================================
========================================

Running version latest built on 2024-02-14T07:39:38.933Z (commit 423a5c3)

🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
🐛 Bug? https://github.com/qdm12/gluetun/issues/new
✨ New feature? https://github.com/qdm12/gluetun/issues/new
☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
💻 Email? quentin.mcgaw@gmail.com
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2024-02-21T17:31:48Z INFO [routing] default route found: interface eth0, gateway 172.20.0.1, assigned IP 172.20.0.2 and family v4
2024-02-21T17:31:48Z INFO [routing] local ethernet link found: eth0
2024-02-21T17:31:48Z INFO [routing] local ipnet found: 172.20.0.0/16
2024-02-21T17:31:48Z INFO [firewall] enabling...
2024-02-21T17:31:48Z INFO [firewall] enabled successfully
2024-02-21T17:31:48Z INFO [storage] creating /gluetun/servers.json with 17803 hardcoded servers
2024-02-21T17:31:48Z INFO Alpine version: 3.18.6
2024-02-21T17:31:48Z INFO OpenVPN 2.5 version: 2.5.8
2024-02-21T17:31:48Z INFO OpenVPN 2.6 version: 2.6.8
2024-02-21T17:31:48Z INFO Unbound version: 1.17.1
2024-02-21T17:31:48Z INFO IPtables version: v1.8.9
2024-02-21T17:31:48Z INFO Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: expressvpn
|   |   └── Server selection settings:
|   |       ├── VPN type: openvpn
|   |       └── OpenVPN server selection settings:
|   |           └── Protocol: UDP
|   └── OpenVPN settings:
|       ├── OpenVPN version: 2.5
|       ├── User: [set]
|       ├── Password: [set]
|       ├── Network interface: tun0
|       ├── Run OpenVPN as: root
|       └── Verbosity level: 1
├── DNS settings:
|   ├── Keep existing nameserver(s): no
|   ├── DNS server address to use: 127.0.0.1
|   └── DNS over TLS settings:
|       ├── Enabled: yes
|       ├── Update period: every 24h0m0s
|       ├── Unbound settings:
|       |   ├── Authoritative servers:
|       |   |   └── cloudflare
|       |   ├── Caching: yes
|       |   ├── IPv6: no
|       |   ├── Verbosity level: 1
|       |   ├── Verbosity details level: 0
|       |   ├── Validation log level: 0
|       |   ├── System user: root
|       |   └── Allowed networks:
|       |       ├── 0.0.0.0/0
|       |       └── ::/0
|       └── DNS filtering settings:
|           ├── Block malicious: yes
|           ├── Block ads: no
|           ├── Block surveillance: no
|           └── Blocked IP networks:
|               ├── 127.0.0.1/8
|               ├── 10.0.0.0/8
|               ├── 172.16.0.0/12
|               ├── 192.168.0.0/16
|               ├── 169.254.0.0/16
|               ├── ::1/128
|               ├── fc00::/7
|               ├── fe80::/10
|               ├── ::ffff:127.0.0.1/104
|               ├── ::ffff:10.0.0.0/104
|               ├── ::ffff:169.254.0.0/112
|               ├── ::ffff:172.16.0.0/108
|               └── ::ffff:192.168.0.0/112
├── Firewall settings:
|   └── Enabled: yes
├── Log settings:
|   └── Log level: INFO
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target address: cloudflare.com:443
|   ├── Duration to wait after success: 5s
|   ├── Read header timeout: 100ms
|   ├── Read timeout: 500ms
|   └── VPN wait durations:
|       ├── Initial duration: 6s
|       └── Additional duration: 5s
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   └── Enabled: no
├── Control server settings:
|   ├── Listening address: :5463
|   └── Logging: yes
├── OS Alpine settings:
|   ├── Process UID: 1000
|   └── Process GID: 1000
├── Public IP settings:
|   ├── Fetching: every 12h0m0s
|   ├── IP file path: /tmp/gluetun/ip
|   └── Public IP data API: ipinfo
├── Server data updater settings:
|   ├── Update period: 24h0m0s
|   ├── DNS address: 1.1.1.1:53
|   ├── Minimum ratio: 0.8
|   └── Providers to update: expressvpn
└── Version settings:
    └── Enabled: yes
2024-02-21T17:31:48Z INFO [routing] default route found: interface eth0, gateway 172.20.0.1, assigned IP 172.20.0.2 and family v4
2024-02-21T17:31:48Z INFO [routing] adding route for 0.0.0.0/0
2024-02-21T17:31:48Z INFO [firewall] setting allowed subnets...
2024-02-21T17:31:48Z INFO [routing] default route found: interface eth0, gateway 172.20.0.1, assigned IP 172.20.0.2 and family v4
2024-02-21T17:31:48Z INFO TUN device is not available: open /dev/net/tun: no such file or directory; creating it...
2024-02-21T17:31:48Z INFO [dns] using plaintext DNS at address 1.1.1.1
2024-02-21T17:31:48Z INFO [http server] http server listening on [::]:5463
2024-02-21T17:31:48Z INFO [healthcheck] listening on 127.0.0.1:9999
2024-02-21T17:31:48Z INFO [firewall] allowing VPN connection...
2024-02-21T17:31:48Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
2024-02-21T17:31:48Z INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-02-21T17:31:48Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]196.244.192.2:1195
2024-02-21T17:31:48Z INFO [openvpn] UDP link local: (not bound)
2024-02-21T17:31:48Z INFO [openvpn] UDP link remote: [AF_INET]196.244.192.2:1195
2024-02-21T17:31:54Z INFO [healthcheck] program has been unhealthy for 6s: restarting VPN
2024-02-21T17:31:54Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
2024-02-21T17:31:54Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
2024-02-21T17:31:54Z INFO [vpn] stopping
2024-02-21T17:31:54Z INFO [vpn] starting
2024-02-21T17:31:54Z INFO [firewall] allowing VPN connection...
2024-02-21T17:31:54Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
2024-02-21T17:31:54Z INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-02-21T17:31:54Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]185.191.204.147:1195
2024-02-21T17:31:54Z INFO [openvpn] UDP link local: (not bound)
2024-02-21T17:31:54Z INFO [openvpn] UDP link remote: [AF_INET]185.191.204.147:1195
2024-02-21T17:32:05Z INFO [healthcheck] program has been unhealthy for 11s: restarting VPN
2024-02-21T17:32:05Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
2024-02-21T17:32:05Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
2024-02-21T17:32:05Z INFO [vpn] stopping
2024-02-21T17:32:05Z INFO [vpn] starting
2024-02-21T17:32:05Z INFO [firewall] allowing VPN connection...
2024-02-21T17:32:05Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
2024-02-21T17:32:05Z INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-02-21T17:32:05Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]84.17.39.5:1195
2024-02-21T17:32:05Z INFO [openvpn] UDP link local: (not bound)
2024-02-21T17:32:05Z INFO [openvpn] UDP link remote: [AF_INET]84.17.39.5:1195
2024-02-21T17:32:21Z INFO [healthcheck] program has been unhealthy for 16s: restarting VPN
2024-02-21T17:32:21Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
2024-02-21T17:32:21Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
2024-02-21T17:32:21Z INFO [vpn] stopping
2024-02-21T17:32:21Z INFO [vpn] starting
2024-02-21T17:32:21Z INFO [firewall] allowing VPN connection...
2024-02-21T17:32:21Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
2024-02-21T17:32:21Z INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-02-21T17:32:21Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]45.133.6.4:1195
2024-02-21T17:32:21Z INFO [openvpn] UDP link local: (not bound)
2024-02-21T17:32:21Z INFO [openvpn] UDP link remote: [AF_INET]45.133.6.4:1195

I have tried to follow the procedure in case of outdated servers, but it didn't work. I have added the line command: update -enduser -providers expressvpn but it didn't work, the logs are :

2024-02-21T17:35:05Z INFO creating /gluetun/servers.json with 17803 hardcoded servers
2024-02-21T17:35:05Z INFO updating Expressvpn servers...
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving slovenia-ca-version-2.expressnetw.com: lookup slovenia-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving southkorea2-ca-version-2.expressnetw.com: lookup southkorea2-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving cambodia-ca-version-2.expressnetw.com: lookup cambodia-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving usa-atlanta-ca-version-2.expressnetw.com: lookup usa-atlanta-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving ecuador-ca-version-2.expressnetw.com: lookup ecuador-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving kenya-ca-version-2.expressnetw.com: lookup kenya-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving czechrepublic-ca-version-2.expressnetw.com: lookup czechrepublic-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving singapore-jurong-ca-version-2.expressnetw.com: lookup singapore-jurong-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving denmark-ca-version-2.expressnetw.com: lookup denmark-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving indonesia-ca-version-2.expressnetw.com: lookup indonesia-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving usa-saltlakecity-ca-version-2.expressnetw.com: lookup usa-saltlakecity-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving netherlands-thehague-ca-version-2.expressnetw.com: lookup netherlands-thehague-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving usa-sanfrancisco-ca-version-2.expressnetw.com: lookup usa-sanfrancisco-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN reached the maximum number of consecutive failures: 2 failed attempts resolving brunei-ca-version-2.expressnetw.com: lookup brunei-ca-version-2.expressnetw.com: i/o timeout
2024-02-21T17:35:06Z WARN note: if running the update manually, you can use the flag -minratio to allow the update to succeed with less servers found
2024-02-21T17:35:06Z ERROR updating server information: getting servers: not enough servers found: 0 and expected at least 106
2024-02-21T17:35:06Z INFO Shutdown successful

I run on Fedora Silverblue 39, all my others containers, docker or podman run well.
I would be really appreciative if someone could help, I fail to see from where the problem came.
Thanks you!

[ezekieldas]

Did you get this resolved? Try isolating just the gluetun service. ports and HTTP_CONTROL_SERVER_ADDRESS look funny here.