Tranmission does not start

[lAnubisl]

Docker-compose:

version: '3.3'
services:
    transmission-openvpn:
        cap_add:
            - NET_ADMIN
        volumes:
            - './data:/data'
            - './config/protonvpn:/etc/openvpn/custom'
        environment:
            - OPENVPN_PROVIDER=custom
            - OPENVPN_USERNAME=XXXXXXXXX
            - OPENVPN_PASSWORD=XXXXXXXXX
            - LOCAL_NETWORK=192.168.0.0/16
        logging:
            driver: json-file
            options:
                max-size: 10m
        ports:
            - '9091:9091'
        image: haugene/transmission-openvpn

Console log:

Starting container with revision: a95f586492b2b7e8ff2cc8ac7f91bc43c0cccc40
Creating TUN device /dev/net/tun
Using OpenVPN provider: CUSTOM
Running with VPN_CONFIG_SOURCE auto
No bundled config script found for CUSTOM. Defaulting to external config
Downloading configs from https://github.com/haugene/vpn-configs-contrib/archive/main.zip into /tmp/tmp.goqzF6ZAVJ
Extracting configs to /tmp/tmp.8jkFuI4uPS
ERROR: Could not find any configs for provider CUSTOM in downloaded configs
Cleanup: deleting /tmp/tmp.goqzF6ZAVJ and /tmp/tmp.8jkFuI4uPS
No VPN configuration provided. Using default.
Modifying /etc/openvpn/custom/default.ovpn for best behaviour in this container
Modification: Point auth-user-pass option to the username/password file
Modification: Change ca certificate path
Modification: Change ping options
Modification: Update/set resolv-retry to 15 seconds
Modification: Change tls-crypt keyfile path
Modification: Set output verbosity to 3
Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
Setting OpenVPN credentials...
adding route to local network 192.168.0.0/16 via 172.19.0.1 dev eth0
Thu Sep 29 20:07:21 2022 Multiple --up scripts defined.  The previously configured script is overridden.
Thu Sep 29 20:07:21 2022 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Mar 22 2022
Thu Sep 29 20:07:21 2022 library versions: OpenSSL 1.1.1f  31 Mar 2020, LZO 2.10
Thu Sep 29 20:07:21 2022 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu Sep 29 20:07:21 2022 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Sep 29 20:07:21 2022 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Sep 29 20:07:21 2022 TCP/UDP: Preserving recently used remote address: [AF_INET]5.8.16.146:1194
Thu Sep 29 20:07:21 2022 Socket Buffers: R=[212992->212992] S=[212992->212992]
Thu Sep 29 20:07:21 2022 UDP link local: (not bound)
Thu Sep 29 20:07:21 2022 UDP link remote: [AF_INET]5.8.16.146:1194
Thu Sep 29 20:07:21 2022 TLS: Initial packet from [AF_INET]5.8.16.146:1194, sid=8a970f41 e621fff9
Thu Sep 29 20:07:21 2022 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Sep 29 20:07:21 2022 VERIFY OK: depth=2, C=CH, O=ProtonVPN AG, CN=ProtonVPN Root CA
Thu Sep 29 20:07:21 2022 VERIFY OK: depth=1, C=CH, O=ProtonVPN AG, CN=ProtonVPN Intermediate CA 1
Thu Sep 29 20:07:21 2022 VERIFY KU OK
Thu Sep 29 20:07:21 2022 Validating certificate extended key usage
Thu Sep 29 20:07:21 2022 ++ Certificate has EKU (str) 1.3.6.1.5.5.8.2.2, expects TLS Web Server Authentication
Thu Sep 29 20:07:21 2022 ++ Certificate has EKU (oid) 1.3.6.1.5.5.8.2.2, expects TLS Web Server Authentication
Thu Sep 29 20:07:21 2022 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Thu Sep 29 20:07:21 2022 VERIFY EKU OK
Thu Sep 29 20:07:21 2022 VERIFY OK: depth=0, CN=node-ru-03.protonvpn.net
Thu Sep 29 20:07:21 2022 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1633', remote='link-mtu 1634'
Thu Sep 29 20:07:21 2022 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Thu Sep 29 20:07:21 2022 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 4096 bit RSA
Thu Sep 29 20:07:21 2022 [node-ru-03.protonvpn.net] Peer Connection Initiated with [AF_INET]5.8.16.146:1194
Thu Sep 29 20:07:22 2022 SENT CONTROL [node-ru-03.protonvpn.net]: 'PUSH_REQUEST' (status=1)
Thu Sep 29 20:07:22 2022 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.21.0.1,sndbuf 524288,rcvbuf 524288,redirect-gateway def1,explicit-exit-notify,comp-lzo no,route-gateway 10.21.0.1,topology subnet,ping 10,ping-restart 60,socket-flags TCP_NODELAY,ifconfig 10.21.0.2 255.255.0.0,peer-id 327680,cipher AES-256-GCM'
Thu Sep 29 20:07:22 2022 OPTIONS IMPORT: timers and/or timeouts modified
Thu Sep 29 20:07:22 2022 OPTIONS IMPORT: explicit notify parm(s) modified
Thu Sep 29 20:07:22 2022 OPTIONS IMPORT: compression parms modified
Thu Sep 29 20:07:22 2022 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Thu Sep 29 20:07:22 2022 Socket Buffers: R=[212992->425984] S=[212992->425984]
Thu Sep 29 20:07:22 2022 OPTIONS IMPORT: --socket-flags option modified
Thu Sep 29 20:07:22 2022 NOTE: setsockopt TCP_NODELAY=1 failed
Thu Sep 29 20:07:22 2022 OPTIONS IMPORT: --ifconfig/up options modified
Thu Sep 29 20:07:22 2022 OPTIONS IMPORT: route options modified
Thu Sep 29 20:07:22 2022 OPTIONS IMPORT: route-related options modified
Thu Sep 29 20:07:22 2022 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Sep 29 20:07:22 2022 OPTIONS IMPORT: peer-id set
Thu Sep 29 20:07:22 2022 OPTIONS IMPORT: adjusting link_mtu to 1656
Thu Sep 29 20:07:22 2022 OPTIONS IMPORT: data channel crypto options modified
Thu Sep 29 20:07:22 2022 Data Channel: using negotiated cipher 'AES-256-GCM'
Thu Sep 29 20:07:22 2022 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Sep 29 20:07:22 2022 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Sep 29 20:07:22 2022 ROUTE_GATEWAY 172.19.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:13:00:02
Thu Sep 29 20:07:22 2022 TUN/TAP device tun0 opened
Thu Sep 29 20:07:22 2022 TUN/TAP TX queue length set to 100
Thu Sep 29 20:07:22 2022 /sbin/ip link set dev tun0 up mtu 1500
Thu Sep 29 20:07:22 2022 /sbin/ip addr add dev tun0 10.21.0.2/16 broadcast 10.21.255.255
Thu Sep 29 20:07:22 2022 /etc/openvpn/update-resolv-conf tun0 1500 1584 10.21.0.2 255.255.0.0 init
Thu Sep 29 20:07:22 2022 /sbin/ip route add 5.8.16.146/32 via 172.19.0.1
Thu Sep 29 20:07:22 2022 /sbin/ip route add 0.0.0.0/1 via 10.21.0.1
Thu Sep 29 20:07:22 2022 /sbin/ip route add 128.0.0.0/1 via 10.21.0.1
Thu Sep 29 20:07:22 2022 Initialization Sequence Completed

ps -ef

UID        PID  PPID  C STIME TTY          TIME CMD
root         1     0  0 20:07 ?        00:00:00 dumb-init /etc/openvpn/start.sh
root         7     1  0 20:07 ?        00:00:00 openvpn --script-security 2 --up-delay --up /etc/openvpn/tunnelUp.sh --route-pre-down /etc/open
root        63     0  0 20:07 pts/0    00:00:00 /bin/sh
root       647    63  0 20:24 pts/0    00:00:00 ps -ef

ifconfig (after packet installation)

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 172.19.0.2  netmask 255.255.0.0  broadcast 172.19.255.255
        ether 02:42:ac:13:00:02  txqueuelen 0  (Ethernet)
        RX packets 35458  bytes 50781419 (50.7 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 15579  bytes 1465028 (1.4 MB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 212  bytes 18750 (18.7 KB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 212  bytes 18750 (18.7 KB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
        inet 10.21.0.2  netmask 255.255.0.0  destination 10.21.0.2
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 100  (UNSPEC)
        RX packets 18836  bytes 25251931 (25.2 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 8442  bytes 506169 (506.1 KB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Traceroute says traffic goes through the tunnel correctly.
What is missing?

[pkishino]

I see this:

Thu Sep 29 20:07:21 2022 Multiple --up scripts defined.  The previously configured script is overridden.

it looks like something is disabling the --up script that starts transmission.
can you post the ovpn contents as well please?
also, please use the :dev branch container

[lAnubisl]

Thank you for this catch.
I use ProtonVPN and my ovpn file had

script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

I don't know if it is actually required to execute these scripts. but once I removed the 2 lines the service is up and running.