gluetun: Help: ERROR openvpn: signal: killed

So I am seeing a repeating error once the container starts and completes the initialization sequence.

2020-05-08T19:04:29.295Z        INFO    openvpn: Fri May  8 19:04:29 2020 Initialization Sequence Completed
2020-05-08T19:04:54.356Z        ERROR   openvpn: signal: killed
2020-05-08T19:04:54.356Z        INFO    openvpn: starting
2020-05-08T19:04:54.356Z        INFO    openvpn configurator: starting openvpn
2020-05-08T19:04:54.356Z        ERROR   close |0: file already closed

This is also posted fully in the logs below, but after this occurs I see a continual repeating block in the logs as long as I leave the container running.

In my testing every time that openvpn signal is killed and then re-initializes I get a different IP from…

docker run --rm --network=container:pia alpine:3.11 wget -qO- https://ipinfo.io

I just recently noticed in the instructions to add the tunnel interface to my QNAP NAS and then I mapped the location to my container. This can be seen in my docker-compose.

  1. Is this urgent?

    • Yes
    • No

  2. What VPN service provider are you using?

    • PIA
    • Mullvad
    • Windscribe

  3. What’s the version of the program?

Running version latest built on 2020-05-07T12:59:13Z (commit da739a0)

Just recently pulled the image to make sure that I’m up to date.

  1. What are you using to run the container?

    • Docker run
    • Docker Compose
    • Kubernetes
    • Docker stack
    • Docker swarm
    • Podman
    • Other:

  2. Extra information

Logs:

=========================================
============= PIA container =============
========== An exquisite mix of ==========
==== OpenVPN, Unbound, DNS over TLS, ====
===== Shadowsocks, Tinyproxy and Go =====
=========================================
=== Made with ❤️  by github.com/qdm12 ====
=========================================

Running version latest built on 2020-05-07T12:59:13Z (commit da739a0)

📣  Auto update of DNS over TLS block lists and crypto files

🔧  Need help? https://github.com/qdm12/private-internet-access-docker/issues/new
💻  Email? quentin.mcgaw@gmail.com
☕  Slack? Join from the Slack button on Github
💸  Help me? https://github.com/sponsors/qdm12
2020-05-08T19:02:44.719Z        INFO    OpenVPN version: 2.4.8
2020-05-08T19:02:44.730Z        INFO    Unbound version: 1.9.6
2020-05-08T19:02:44.733Z        INFO    IPtables version: v1.8.3
2020-05-08T19:02:44.800Z        INFO    TinyProxy version: 1.10.0
2020-05-08T19:02:44.818Z        INFO    ShadowSocks version: 3.3.4
2020-05-08T19:02:44.820Z        INFO    Settings summary below:
OpenVPN settings:
|--Network protocol: udp
|--Verbosity level: 1
|--Run as root: no
|--Target IP address: <nil>
|--Custom cipher:
|--Custom auth algorithm:
PIA settings:
 |--User: [redacted]
 |--Password: [redacted]
 |--Region: us west
 |--Encryption: strong
 |--Port forwarding: off
System settings:
|--User ID: 1000
|--Group ID: 1000
|--Timezone:
|--IP Status filepath: /ip
DNS over TLS settings:
 |--DNS over TLS provider:
  |--cloudflare
 |--Caching: enabled
 |--Block malicious: enabled
 |--Block surveillance: disabled
 |--Block ads: disabled
 |--Allowed hostnames:
  |--off
 |--Private addresses:
  |--127.0.0.1/8
  |--10.0.0.0/8
  |--172.16.0.0/12
  |--192.168.0.0/16
  |--169.254.0.0/16
  |--::1/128
  |--fc00::/7
  |--fe80::/10
  |--::ffff:0:0/96
 |--Verbosity level: 1/5
 |--Verbosity details level: 0/4
 |--Validation log level: 0/2
 |--IPv6 resolution: disabled
 |--Update: every 24h0m0s
Firewall settings:
 |--Allowed subnets:
TinyProxy settings: disabled
ShadowSocks settings: disabled

2020-05-08T19:02:44.829Z        INFO    openvpn configurator: checking for device /dev/net/tun
2020-05-08T19:02:44.829Z        INFO    openvpn configurator: /etc/openvpn/auth.conf already exists
2020-05-08T19:02:44.829Z        INFO    routing: detecting default network route
2020-05-08T19:02:44.832Z        INFO    routing: default route found: interface eth0, gateway 172.29.0.1, subnet 172.29.0.0/22
2020-05-08T19:02:44.832Z        INFO    firewall configurator: accepting all traffic
2020-05-08T19:02:44.849Z        INFO    Launching standard output merger
2020-05-08T19:02:44.850Z        INFO    firewall configurator: clearing all rules
2020-05-08T19:02:44.866Z        INFO    firewall configurator: blocking all traffic
2020-05-08T19:02:44.888Z        INFO    firewall configurator: creating general rules
2020-05-08T19:02:44.949Z        INFO    firewall configurator: allowing output traffic to VPN server 104.200.151.6 through eth0 on port udp 1197
2020-05-08T19:02:44.952Z        INFO    firewall configurator: allowing output traffic to VPN server 104.200.151.8 through eth0 on port udp 1197
2020-05-08T19:02:44.957Z        INFO    firewall configurator: allowing output traffic to VPN server 104.200.151.12 through eth0 on port udp 1197
2020-05-08T19:02:44.961Z        INFO    firewall configurator: allowing output traffic to VPN server 104.200.151.23 through eth0 on port udp 1197
2020-05-08T19:02:44.964Z        INFO    firewall configurator: allowing output traffic to VPN server 104.200.151.40 through eth0 on port udp 1197
2020-05-08T19:02:44.967Z        INFO    firewall configurator: allowing output traffic to VPN server 104.200.151.44 through eth0 on port udp 1197
2020-05-08T19:02:44.971Z        INFO    firewall configurator: allowing output traffic to VPN server 104.200.151.45 through eth0 on port udp 1197
2020-05-08T19:02:44.974Z        INFO    firewall configurator: allowing output traffic to VPN server 104.200.151.54 through eth0 on port udp 1197
2020-05-08T19:02:44.979Z        INFO    firewall configurator: allowing output traffic to VPN server 104.200.151.74 through eth0 on port udp 1197
2020-05-08T19:02:44.982Z        INFO    firewall configurator: allowing output traffic to VPN server 104.200.151.89 through eth0 on port udp 1197
2020-05-08T19:02:45.006Z        INFO    firewall configurator: accepting input and output traffic for 172.29.0.0/22
2020-05-08T19:02:45.016Z        WARN    http server: restartOpenvpn function is not set, waiting...
2020-05-08T19:02:45.016Z        INFO    openvpn: starting
2020-05-08T19:02:45.016Z        INFO    openvpn configurator: starting openvpn
2020-05-08T19:02:45.018Z        WARN    http server: restartUnbound function is not set, waiting...
2020-05-08T19:02:45.021Z        INFO    openvpn: Fri May  8 19:02:45 2020 OpenVPN 2.4.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Feb  7 2020
2020-05-08T19:02:45.022Z        INFO    openvpn: Fri May  8 19:02:45 2020 library versions: OpenSSL 1.1.1g  21 Apr 2020, LZO 2.10
2020-05-08T19:02:45.031Z        INFO    openvpn: Fri May  8 19:02:45 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]104.200.151.12:1197
2020-05-08T19:02:45.031Z        INFO    openvpn: Fri May  8 19:02:45 2020 UDP link local: (not bound)
2020-05-08T19:02:45.031Z        INFO    openvpn: Fri May  8 19:02:45 2020 UDP link remote: [AF_INET]104.200.151.12:1197
2020-05-08T19:02:45.031Z        INFO    openvpn: Fri May  8 19:02:45 2020 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
2020-05-08T19:02:45.709Z        INFO    openvpn: Fri May  8 19:02:45 2020 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1570', remote='link-mtu 1542'
2020-05-08T19:02:45.709Z        INFO    openvpn: Fri May  8 19:02:45 2020 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher BF-CBC'
2020-05-08T19:02:45.709Z        INFO    openvpn: Fri May  8 19:02:45 2020 WARNING: 'auth' is used inconsistently, local='auth SHA256', remote='auth SHA1'
2020-05-08T19:02:45.709Z        INFO    openvpn: Fri May  8 19:02:45 2020 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
2020-05-08T19:02:45.709Z        INFO    openvpn: Fri May  8 19:02:45 2020 [b406aeef95808e5cf9dbc0f155dfe23c] Peer Connection Initiated with [AF_INET]104.200.151.12:1197
2020-05-08T19:02:46.747Z        INFO    openvpn: Fri May  8 19:02:46 2020 TUN/TAP device tun0 opened
2020-05-08T19:02:46.747Z        INFO    openvpn: Fri May  8 19:02:46 2020 /sbin/ip link set dev tun0 up mtu 1500
2020-05-08T19:02:46.750Z        INFO    openvpn: Fri May  8 19:02:46 2020 /sbin/ip addr add dev tun0 local 10.19.10.6 peer 10.19.10.5
2020-05-08T19:02:46.763Z        INFO    openvpn: Fri May  8 19:02:46 2020 UID set to nonrootuser
2020-05-08T19:02:46.764Z        INFO    openvpn: Fri May  8 19:02:46 2020 Initialization Sequence Completed
2020-05-08T19:02:46.764Z        INFO    dns configurator: using DNS address 1.1.1.1 internally
2020-05-08T19:02:46.764Z        INFO    dns configurator: using DNS address 1.1.1.1 system wide
2020-05-08T19:02:46.765Z        INFO    Tunnel IP is 104.200.151.12, see more information at https://ipinfo.io/104.200.151.12
2020-05-08T19:02:46.769Z        INFO    dns configurator: downloading root hints from https://raw.githubusercontent.com/qdm12/files/master/named.root.updated
2020-05-08T19:02:47.469Z        INFO    dns configurator: downloading root key from https://raw.githubusercontent.com/qdm12/files/master/root.key.updated
2020-05-08T19:02:47.579Z        INFO    dns configurator: generating Unbound configuration
2020-05-08T19:02:48.695Z        INFO    dns configurator: 58110 hostnames blocked overall
2020-05-08T19:02:48.695Z        INFO    dns configurator: 2639 IP addresses blocked overall
2020-05-08T19:02:48.870Z        INFO    dns configurator: starting unbound
2020-05-08T19:02:48.876Z        INFO    dns configurator: using DNS address 127.0.0.1 internally
2020-05-08T19:02:48.876Z        INFO    dns configurator: using DNS address 127.0.0.1 system wide
2020-05-08T19:02:49.594Z        INFO    unbound: [1588964569] unbound[61:0] notice: init module 0: validator
2020-05-08T19:02:49.594Z        INFO    unbound: [1588964569] unbound[61:0] notice: init module 1: iterator
2020-05-08T19:02:49.723Z        INFO    unbound: [1588964569] unbound[61:0] info: start of service (unbound 1.9.6).
2020-05-08T19:02:49.864Z        INFO    unbound: [1588964569] unbound[61:0] info: generate keytag query _ta-4a5c-4f66. NULL IN
2020-05-08T19:02:50.438Z        INFO    http server: listening on 0.0.0.0:8000
2020-05-08T19:03:17.857Z        ERROR   openvpn: signal: killed
2020-05-08T19:03:17.857Z        INFO    openvpn: starting
2020-05-08T19:03:17.857Z        INFO    openvpn configurator: starting openvpn
2020-05-08T19:03:17.857Z        ERROR   close |0: file already closed
2020-05-08T19:03:17.864Z        INFO    openvpn: Fri May  8 19:03:17 2020 OpenVPN 2.4.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Feb  7 2020
2020-05-08T19:03:17.864Z        INFO    openvpn: Fri May  8 19:03:17 2020 library versions: OpenSSL 1.1.1g  21 Apr 2020, LZO 2.10
2020-05-08T19:03:17.872Z        INFO    openvpn: Fri May  8 19:03:17 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]104.200.151.40:1197
2020-05-08T19:03:17.872Z        INFO    openvpn: Fri May  8 19:03:17 2020 UDP link local: (not bound)
2020-05-08T19:03:17.872Z        INFO    openvpn: Fri May  8 19:03:17 2020 UDP link remote: [AF_INET]104.200.151.40:1197
2020-05-08T19:03:17.872Z        INFO    openvpn: Fri May  8 19:03:17 2020 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
2020-05-08T19:03:18.492Z        INFO    openvpn: Fri May  8 19:03:18 2020 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1570', remote='link-mtu 1542'
2020-05-08T19:03:18.492Z        INFO    openvpn: Fri May  8 19:03:18 2020 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher BF-CBC'
2020-05-08T19:03:18.492Z        INFO    openvpn: Fri May  8 19:03:18 2020 WARNING: 'auth' is used inconsistently, local='auth SHA256', remote='auth SHA1'
2020-05-08T19:03:18.492Z        INFO    openvpn: Fri May  8 19:03:18 2020 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
2020-05-08T19:03:18.493Z        INFO    openvpn: Fri May  8 19:03:18 2020 [e977800da9985a4db4d6e69ac18953fd] Peer Connection Initiated with [AF_INET]104.200.151.40:1197
2020-05-08T19:03:24.919Z        INFO    openvpn: Fri May  8 19:03:24 2020 TUN/TAP device tun0 opened
2020-05-08T19:03:24.919Z        INFO    openvpn: Fri May  8 19:03:24 2020 /sbin/ip link set dev tun0 up mtu 1500
2020-05-08T19:03:24.922Z        INFO    openvpn: Fri May  8 19:03:24 2020 /sbin/ip addr add dev tun0 local 10.1.10.6 peer 10.1.10.5
2020-05-08T19:03:24.933Z        INFO    openvpn: Fri May  8 19:03:24 2020 UID set to nonrootuser
2020-05-08T19:03:24.933Z        INFO    openvpn: Fri May  8 19:03:24 2020 Initialization Sequence Completed
2020-05-08T19:03:50.077Z        ERROR   openvpn: signal: killed
2020-05-08T19:03:50.077Z        INFO    openvpn: starting
2020-05-08T19:03:50.077Z        INFO    openvpn configurator: starting openvpn
2020-05-08T19:03:50.078Z        ERROR   close |0: file already closed
2020-05-08T19:03:50.082Z        INFO    openvpn: Fri May  8 19:03:50 2020 OpenVPN 2.4.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Feb  7 2020
2020-05-08T19:03:50.083Z        INFO    openvpn: Fri May  8 19:03:50 2020 library versions: OpenSSL 1.1.1g  21 Apr 2020, LZO 2.10
2020-05-08T19:03:50.091Z        INFO    openvpn: Fri May  8 19:03:50 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]104.200.151.89:1197
2020-05-08T19:03:50.091Z        INFO    openvpn: Fri May  8 19:03:50 2020 UDP link local: (not bound)
2020-05-08T19:03:50.091Z        INFO    openvpn: Fri May  8 19:03:50 2020 UDP link remote: [AF_INET]104.200.151.89:1197
2020-05-08T19:03:50.091Z        INFO    openvpn: Fri May  8 19:03:50 2020 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
2020-05-08T19:03:50.717Z        INFO    openvpn: Fri May  8 19:03:50 2020 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1570', remote='link-mtu 1542'
2020-05-08T19:03:50.717Z        INFO    openvpn: Fri May  8 19:03:50 2020 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher BF-CBC'
2020-05-08T19:03:50.717Z        INFO    openvpn: Fri May  8 19:03:50 2020 WARNING: 'auth' is used inconsistently, local='auth SHA256', remote='auth SHA1'
2020-05-08T19:03:50.717Z        INFO    openvpn: Fri May  8 19:03:50 2020 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
2020-05-08T19:03:50.718Z        INFO    openvpn: Fri May  8 19:03:50 2020 [df434f7f44a5555ec363ba911ea51851] Peer Connection Initiated with [AF_INET]104.200.151.89:1197
2020-05-08T19:03:57.016Z        INFO    openvpn: Fri May  8 19:03:57 2020 TUN/TAP device tun0 opened
2020-05-08T19:03:57.016Z        INFO    openvpn: Fri May  8 19:03:57 2020 /sbin/ip link set dev tun0 up mtu 1500
2020-05-08T19:03:57.019Z        INFO    openvpn: Fri May  8 19:03:57 2020 /sbin/ip addr add dev tun0 local 10.3.10.6 peer 10.3.10.5
2020-05-08T19:03:57.026Z        INFO    openvpn: Fri May  8 19:03:57 2020 UID set to nonrootuser
2020-05-08T19:03:57.026Z        INFO    openvpn: Fri May  8 19:03:57 2020 Initialization Sequence Completed

Configuration file:

version: "3.7"
services:
  pia:
    image: qmcgaw/private-internet-access
    container_name: pia
    cap_add:
      - NET_ADMIN
    init: true
    ports:
      - 8112:8112/tcp #Torrent Ports
      - 53160:53160/udp
      - 53160:53160/tcp
      - 58846:58846/tcp
    # command:
    environment:
      # More variables are available, see the readme table
      - VPNSP=private internet access
      - USER=<my username>
      - PROTOCOL=udp
      - OPENVPN_VERBOSITY=1
      - OPENVPN_ROOT=no

      # PIA and Windscribe only
      - REGION=US West

      # PIA only
      - PASSWORD=<my password>
      - PIA_ENCRYPTION=strong
      - PORT_FORWARDING=off

      # DNS over TLS
      - DOT=on
      - DOT_PROVIDERS=cloudflare
      - DOT_IPV6=off
      - DOT_VERBOSITY=1
      - BLOCK_MALICIOUS=on
      - BLOCK_SURVEILLANCE=off
      - BLOCK_ADS=off
      - UNBLOCK=off
    volumes:
      - /dev/net:/dev/net
    restart: always

Host OS:

Linux BlackBox 4.14.24-qnap #1 SMP Fri Apr 10 08:52:15 CST 2020 x86_64 GNU/Linux

About this issue

  • Original URL
  • State: closed
  • Created 4 years ago
  • Comments: 19 (9 by maintainers)

Commits related to this issue

Most upvoted comments

FYI, gluetun works fine with OPENVPN_VERSION=2.4 setting on my QNAP! So, you can apply the same methodology for openvpn 2.5 with the binary pointing to /usr/sbin/openvpn2.5

+2
sbarillet on Nov 9, 2021
Read more comments on GitHub
← gluetun: Help: Don't have a new ip with Surfshark
gluetun: Help: Name resolution from Gluetun or stack sharing container to other containers on network does not work →