Can't launch on Mac, related to IPv6 (I think) #2000

dannylevenson · 2021-10-09T15:09:07Z

dannylevenson
Oct 9, 2021

I am trying to get the container to run on my Mac before I try to run it on my Synology. When I start it on my Mac, it fails like this:

Starting container with revision: ae45b1f22178ddee089d9ea10d4732dbde2d8ef2
Creating TUN device /dev/net/tun
Using OpenVPN provider: HIDEMYASS
Running with VPN_CONFIG_SOURCE auto
No bundled config script found for HIDEMYASS. Defaulting to external config
Downloading configs from https://github.com/haugene/vpn-configs-contrib/archive/main.zip into /tmp/tmp.jFkGF3oO2A
Extracting configs to /tmp/tmp.YjLBntdrWt
Found configs for HIDEMYASS in /tmp/tmp.YjLBntdrWt/vpn-configs-contrib-main/openvpn/hidemyass, will replace current content in /etc/openvpn/hidemyass
Cleanup: deleting /tmp/tmp.jFkGF3oO2A and /tmp/tmp.YjLBntdrWt
Starting OpenVPN using config USA.NorthCarolina.Asheville.UDP.ovpn
Modifying /etc/openvpn/hidemyass/USA.NorthCarolina.Asheville.UDP.ovpn for best behaviour in this container
Modification: Point auth-user-pass option to the username/password file
Modification: Change ca certificate path
Modification: Change ping options
Modification: Update/set resolv-retry to 15 seconds
Modification: Change tls-crypt keyfile path
Modification: Set output verbosity to 3
Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
Setting OpenVPN credentials...
adding route to local network 192.168.0.0/16 via 172.17.0.1 dev eth0
Sat Oct  9 14:51:50 2021 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 19 2021
Sat Oct  9 14:51:50 2021 library versions: OpenSSL 1.1.1f  31 Mar 2020, LZO 2.10
Sat Oct  9 14:51:50 2021 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Sat Oct  9 14:51:50 2021 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Oct  9 14:51:50 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]104.247.208.126:553
Sat Oct  9 14:51:50 2021 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sat Oct  9 14:51:50 2021 UDP link local: (not bound)
Sat Oct  9 14:51:50 2021 UDP link remote: [AF_INET]104.247.208.126:553
Sat Oct  9 14:51:50 2021 TLS: Initial packet from [AF_INET]104.247.208.126:553, sid=63d5a4cc 664c3242
Sat Oct  9 14:51:50 2021 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Oct  9 14:51:50 2021 VERIFY OK: depth=1, C=UK, ST=London, L=London, O=Privax Ltd, OU=HMA Pro VPN, CN=hidemyass.com, [email protected]
Sat Oct  9 14:51:50 2021 VERIFY OK: nsCertType=SERVER
Sat Oct  9 14:51:50 2021 VERIFY OK: depth=0, C=UK, ST=London, L=London, O=Privax Ltd, OU=HMA Pro VPN, CN=server, [email protected]
Sat Oct  9 14:51:50 2021 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sat Oct  9 14:51:50 2021 [server] Peer Connection Initiated with [AF_INET]104.247.208.126:553
Sat Oct  9 14:51:51 2021 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sat Oct  9 14:51:51 2021 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 100.120.48.1,redirect-gateway def1,ping 9,ping-restart 30,explicit-exit-notify 1,sndbuf 196608,rcvbuf 196608,route-gateway 100.120.48.1,topology subnet,redirect-gateway def1,ifconfig-ipv6 2001:db8:123::2/64 2001:db8:123::1,route-ipv6 2000::/3 2001:db8:123::1,explicit-exit-notify 2,compress,ifconfig 100.120.49.67 255.255.248.0,peer-id 2,cipher AES-256-GCM'
Sat Oct  9 14:51:51 2021 OPTIONS IMPORT: timers and/or timeouts modified
Sat Oct  9 14:51:51 2021 OPTIONS IMPORT: explicit notify parm(s) modified
Sat Oct  9 14:51:51 2021 OPTIONS IMPORT: compression parms modified
Sat Oct  9 14:51:51 2021 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Sat Oct  9 14:51:51 2021 Socket Buffers: R=[212992->393216] S=[212992->393216]
Sat Oct  9 14:51:51 2021 OPTIONS IMPORT: --ifconfig/up options modified
Sat Oct  9 14:51:51 2021 OPTIONS IMPORT: route options modified
Sat Oct  9 14:51:51 2021 OPTIONS IMPORT: route-related options modified
Sat Oct  9 14:51:51 2021 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Oct  9 14:51:51 2021 OPTIONS IMPORT: peer-id set
Sat Oct  9 14:51:51 2021 OPTIONS IMPORT: adjusting link_mtu to 1625
Sat Oct  9 14:51:51 2021 OPTIONS IMPORT: data channel crypto options modified
Sat Oct  9 14:51:51 2021 Data Channel: using negotiated cipher 'AES-256-GCM'
Sat Oct  9 14:51:51 2021 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sat Oct  9 14:51:51 2021 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sat Oct  9 14:51:51 2021 ROUTE_GATEWAY 172.17.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:11:00:04
Sat Oct  9 14:51:51 2021 GDG6: remote_host_ipv6=n/a
Sat Oct  9 14:51:51 2021 ROUTE6: default_gateway=UNDEF
Sat Oct  9 14:51:51 2021 TUN/TAP device tun0 opened
Sat Oct  9 14:51:51 2021 TUN/TAP TX queue length set to 100
Sat Oct  9 14:51:51 2021 /sbin/ip link set dev tun0 up mtu 1500
Sat Oct  9 14:51:51 2021 /sbin/ip addr add dev tun0 100.120.49.67/21 broadcast 100.120.55.255
Sat Oct  9 14:51:51 2021 /sbin/ip -6 addr add 2001:db8:123::2/64 dev tun0
RTNETLINK answers: Permission denied
Sat Oct  9 14:51:51 2021 Linux ip -6 addr add failed: external program exited with error status: 2
Sat Oct  9 14:51:51 2021 Exiting due to fatal error

Is this failure a problem with my VPN provider and/or configuration, or is it a problem with the network configuration on my Mac? I checked all of my network interfaces on my Mac and they are all set to Automatic for IPv6.

Answered by pkishino

Oct 9, 2021

I think docker problem.. try adding the following to the config
sysctls:
- net.ipv6.conf.all.disable_ipv6=0

View full answer

pkishino · 2021-10-09T21:27:48Z

pkishino
Oct 9, 2021
Collaborator

I think docker problem.. try adding the following to the config
sysctls:
- net.ipv6.conf.all.disable_ipv6=0

2 replies

dannylevenson Oct 10, 2021
Author

Thank you... I added this to my docker run command and it started successfully:
--sysctl net.ipv6.conf.all.disable_ipv6=0

StevenXL Mar 4, 2023

I think docker problem.. try adding the following to the config
sysctls:

net.ipv6.conf.all.disable_ipv6=0

This worked! Thank you. I added it to a compose file:

sysctls:
  - net.ipv6.conf.all.disable_ipv6=0

pkishino · 2021-10-10T01:43:01Z

pkishino
Oct 10, 2021
Collaborator

Great

…

On Sun, Oct 10, 2021 at 10:17 Danny Levenson ***@***.***> wrote: Thank you... I added this to my docker run command and it started successfully: --sysctl net.ipv6.conf.all.disable_ipv6=0 — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#2000 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA7OFYSBD7UN5UP6XHFN2MTUGDSSRANCNFSM5FVMKWUQ> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Can't launch on Mac, related to IPv6 (I think) #2000

Uh oh!

{{title}}

Uh oh!

Replies: 2 comments 2 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Uh oh!

Can't launch on Mac, related to IPv6 (I think) #2000

Uh oh!

dannylevenson Oct 9, 2021

Replies: 2 comments · 2 replies

Uh oh!

pkishino Oct 9, 2021 Collaborator

Uh oh!

dannylevenson Oct 10, 2021 Author

Uh oh!

StevenXL Mar 4, 2023

Uh oh!

pkishino Oct 10, 2021 Collaborator

dannylevenson
Oct 9, 2021

Replies: 2 comments 2 replies

pkishino
Oct 9, 2021
Collaborator

dannylevenson Oct 10, 2021
Author

pkishino
Oct 10, 2021
Collaborator