Unraid template

[qdm12]

Thanks to @DiamondPrecisionComputing we now have a gluetun Unraid template!

Repository

• If there is an issue with the template:
  • Fix the XML template and make a pull request from your browser; or
  • Create a Github issue on DiamondPrecisionComputing/unraid-templates
• If you need support: forums.unraid.net/topic/111725-support-diamondprecisioncomputing-all-images-and-files

The following discussion is for anything related to the Gluetun Unraid template maintenance, especially between I and @DiamondPrecisionComputing

[adwilk13]

Issue with startup on Unraid

Running version latest built on 2021-08-01T15:05:22Z (commit abbcf60)

🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
🐛 Bug? https://github.com/qdm12/gluetun/issues/new
✨ New feature? https://github.com/qdm12/gluetun/issues/new
☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
💻 Email? quentin.mcgaw@gmail.com
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2021/08/03 10:43:50 INFO Alpine version: 3.14.0
2021/08/03 10:43:50 INFO OpenVPN 2.4 version: 2.4.11
2021/08/03 10:43:50 INFO OpenVPN 2.5 version: 2.5.2
2021/08/03 10:43:50 INFO Unbound version: 1.13.1
2021/08/03 10:43:50 INFO IPtables version: v1.8.7
2021/08/03 10:43:50 ERROR cannot read Openvpn settings: files do not exist: **/run/secrets/openvpn_clientkey and /gluetun/client.key**
2021/08/03 10:43:50 INFO Shutdown successful

[adwilk13]

What files would need to go in there? Shouldn’t the template pull down required files?

[qdm12]

No since this is your own key (like your password). See https://github.com/qdm12/gluetun/wiki/Client-key

[adwilk13]

Gotcha! Thank you for that link. I didn’t see any instructions or references to that in the template, but that’s definitely exactly what I need to do

[DiamondPrecisionComputing]

@qdm12
If I read your logs correctly, your code looks for the openvpn_clientkey file in first /run/secrets/ then /gluetun/ unless openvpn_clientkey is specified for a different path and/or filename?

[qdm12]

Yep that's right. See https://github.com/qdm12/gluetun/wiki/Docker-secrets for more information.

[sphoenixp]

2024-07-29T04:12:36+05:30 INFO [openvpn] -----END X509 CRL----- 2024-07-29T04:12:36+05:30 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]84.247.116.62:1197 2024-07-29T04:12:36+05:30 INFO [openvpn] UDP link local: (not bound) 2024-07-29T04:12:36+05:30 INFO [openvpn] UDP link remote: [AF_INET]84.247.116.62:1197 2024-07-29T04:13:27+05:30 INFO [healthcheck] program has been unhealthy for 51s: restarting VPN 2024-07-29T04:13:27+05:30 INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md 2024-07-29T04:13:27+05:30 INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION 2024-07-29T04:13:27+05:30 INFO [vpn] stopping 2024-07-29T04:13:27+05:30 INFO [vpn] starting 2024-07-29T04:13:27+05:30 INFO [firewall] allowing VPN connection... 2024-07-29T04:13:28+05:30 INFO [openvpn] OpenVPN 2.5.10 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jul 2 2024 2024-07-29T04:13:28+05:30 INFO [openvpn] library versions: OpenSSL 3.3.1 4 Jun 2024, LZO 2.10 2024-07-29T04:13:28+05:30 INFO [openvpn] OpenSSL: error:068000E9:asn1 encoding routines::utctime is too short 2024-07-29T04:13:28+05:30 INFO [openvpn] OpenSSL: error:0688010A:asn1 encoding routines::nested asn1 error 2024-07-29T04:13:28+05:30 INFO [openvpn] OpenSSL: error:0688010A:asn1 encoding routines::nested asn1 error 2024-07-29T04:13:28+05:30 INFO [openvpn] OpenSSL: error:0688010A:asn1 encoding routines::nested asn1 error 2024-07-29T04:13:28+05:30 INFO [openvpn] OpenSSL: error:0488000D:PEM routines::ASN1 lib 2024-07-29T04:13:28+05:30 INFO [openvpn] CRL: cannot read CRL from file [[INLINE]] 2024-07-29T04:13:28+05:30 INFO [openvpn] CRL: loaded 0 CRLs from file -----BEGIN X509 CRL-----

This is not going through. Unraid with PIA.

[argonan0]

@DiamondPrecisionComputing It looks like --device /dev/net/tun is also necessary now as an Extra Parameter:

TUN device is not available: open /dev/net/tun: no such file or directory; creating it...

--cap-add=NET_ADMIN on it's own doesn't appear to be sufficient.

Can the template get a review as it pertains to WireGuard & AirVPN? Seeing a lot of problems all of a sudden after updating from qmcgaw/gluetun:v3.34.1.

ERROR [vpn] finding a VPN server: target IP address not found

A number of the fields should be assessed for necessity (*). If using WireGuard, the OpenVPN details shouldn't be necessary for example and this may be leading to confusion within the docker.

Most of the URL references are outdated.

Missing: WIREGUARD_PERSISTENT_KEEPALIVE_INTERVAL (and probably others)