DNS resolution error

[usma0118]

Environment: Kubernetes on Ubuntu
docker tag: :latest

Container continue to cycle through this error.

Error log

Tue Oct  5 07:05:48 2021 Could not determine IPv4/IPv6 protocol
Tue Oct  5 07:05:48 2021 SIGUSR1[soft,init_instance] received, process restarting
Tue Oct  5 07:10:48 2021 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Oct  5 07:10:58 2021 RESOLVE: Cannot resolve host address: fr.vpnunlimitedapp.com:1194 (Temporary failure in name resolution)
Tue Oct  5 07:11:08 2021 RESOLVE: Cannot resolve host address: fr.vpnunlimitedapp.com:1194 (Temporary failure in name resolution)
Tue Oct  5 07:11:08 2021 Could not determine IPv4/IPv6 protocol
Tue Oct  5 07:11:08 2021 SIGUSR1[soft,init_instance] received, process restarting
Tue Oct  5 07:12:47 2021 SIGTERM[hard,init_instance] received, process exiting

Config

      containers:
        - env:
            - name: OPENVPN_PROVIDER
              value: "custom"
            - name: OPENVPN_USERNAME
              valueFrom:
                secretKeyRef:
                  key: username
                  name: vpnunlimited
            - name: OPENVPN_PASSWORD
              valueFrom:
                secretKeyRef:
                  key: password
                  name: vpnunlimited
            - name: TRANSMISSION_RPC_USERNAME
              value: {redacted}
            - name: TRANSMISSION_RPC_PASSWORD
              value: {redacted}
            - name: TRANSMISSION_RPC_AUTHENTICATION_REQUIRED
              value: "true"
            - name: TRANSMISSION_DOWNLOAD_DIR
              value: /downloads/transmission
            - name: PUID
              value: "1001"
            - name: PGID
              value: "1001"
            - name: TRANSMISSION_UMASK
              value: "18"
            - name: TRANSMISSION_RATIO_LIMIT
              value: "1"
            - name: TRANSMISSION_BLOCKLIST_ENABLED
              value: "true"
            - name: TRANSMISSION_BLOCKLIST_URL
              value: https://github.com/Naunter/BT_BlockLists/raw/master/bt_blocklists.gz
            - name: TRANSMISSION_ENCRYPTION
              value: "2"
            - name: TRANSMISSION_RATIO_LIMIT_ENABLED
              value: "true"
            - name: CREATE_TUN_DEVICE
              value: "true"
            - name: WEBPROXY_ENABLED
              value: "true"
            - name: WEBPROXY_PORT
              value: "8118"
            - name: TRANSMISSION_RPC_WHITELIST
              value: "10.1.183.*,127.0.0.1"
            - name: TRANSMISSION_RPC_WHITELIST_ENABLED
              value: "false"
            - name: LOG_TO_STDOUT
              value: "true"
            - name: OPENVPN_OPTS
              value: "--inactive 3600 --ping 10 --ping-exit 60"
            - name: LOCAL_NETWORK
              value: "10.1.183.0/24"
          image: haugene/transmission-openvpn:dev
          imagePullPolicy: Always
          name: transmission
          ports:
            - containerPort: 9091
              name: http
              protocol: TCP
            - containerPort: 8118
              name: webproxy
              protocol: TCP
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            privileged: false
            capabilities:
              add:
                - NET_ADMIN
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
            - mountPath: /data
              name: transmission
              subPath: configs
            - mountPath: /downloads/transmission
              name: transmission
              subPath: downloads
            - mountPath: /etc/openvpn/custom/default.ovpn
              name: config
              subPath: fr.vpnunlimited.ovpn
          readinessProbe:
            tcpSocket:
              port: webproxy
            initialDelaySeconds: 5
            periodSeconds: 10
          livenessProbe:
            tcpSocket:
              port: webproxy
            initialDelaySeconds: 15
            periodSeconds: 20        
      restartPolicy: Always
      terminationGracePeriodSeconds: 30
      volumes:
        - name: transmission
          persistentVolumeClaim:
            claimName: transmissionv2
        - configMap:
            name: openvpn-common-config
          name: config

[pkishino]

not really much information like your config etc etc

[usma0118]

I have been using this config for long.

the difference i see is due to some reason if connection drops out and vpn is disconnected than
/etc/resolv.conf will continue to show vpn name server

# Generated by openvpn for interface tun0
nameserver 10.200.0.1

Network after vpn disconnected

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
3: eth0@if55: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1440 qdisc noqueue state UP group default 
    link/ether 56:bd:ef:67:15:91 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 10.1.183.59/32 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::54bd:efff:fe67:1591/64 scope link 
       valid_lft forever preferred_lft forever

[pkishino]

ah, interesting.
@haugene so, we would need to "reset" the resolv.conf after vpn disconnects.. that would be easiest solution
let me try and whip something up

[pkishino]

pushed 553b560

[usma0118]

I have pulled :dev tag. monitoring, will update.

i can see file backed up as /etc/resolv.conf-tun0.sv

[usma0118]

Works fine. no issues detected so far.