Network is unreachable - Mullvad

[xrayzhang]

Config:

version: '3.3'
services:
    transmission-openvpn:
        cap_add:
            - NET_ADMIN
        volumes:
            - '/home/Docker/transmission-openvpn/data/:/data'
            - '/home/Docker/transmission-openvpn/config/:/config'
        environment:
            - OPENVPN_PROVIDER=MULLVAD
            - OPENVPN_CONFIG=us_chi
            - OPENVPN_USERNAME=REDACTED
            - OPENVPN_PASSWORD=m
            - LOCAL_NETWORK=192.168.0.0/24
            - PUID=1000
            - PGID=100
        logging:
            driver: json-file
            options:
                max-size: 10m
        ports:
            - '9091:9091'
        image: haugene/transmission-openvpn

Logs:

Starting container with revision: b33d0fe4c938259a0d4eb844e55468f387456121
Creating TUN device /dev/net/tun
Using OpenVPN provider: MULLVAD
Running with VPN_CONFIG_SOURCE auto
No bundled config script found for MULLVAD. Defaulting to external config
Downloading configs from https://github.com/haugene/vpn-configs-contrib/archive/main.zip into /tmp/tmp.xPSk45cw0G
Extracting configs to /tmp/tmp.L5oBld7msQ
Found configs for MULLVAD in /tmp/tmp.L5oBld7msQ/vpn-configs-contrib-main/openvpn/mullvad, will replace current content in /etc/openvpn/mullvad
Cleanup: deleting /tmp/tmp.xPSk45cw0G and /tmp/tmp.L5oBld7msQ
Starting OpenVPN using config us_chi.ovpn
Modifying /etc/openvpn/mullvad/us_chi.ovpn for best behaviour in this container
Modification: Point auth-user-pass option to the username/password file
Modification: Change ca certificate path
Modification: Change ping options
Modification: Update/set resolv-retry to 15 seconds
Modification: Change tls-crypt keyfile path
Modification: Set output verbosity to 3
Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
Modification: Updating status for config failure detection
Setting OpenVPN credentials...
adding route to local network 192.168.0.0/24 via 172.19.0.1 dev eth0
2023-01-12 15:59:26 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2023-01-12 15:59:26 OpenVPN 2.5.5 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 14 2022
2023-01-12 15:59:26 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
2023-01-12 15:59:26 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2023-01-12 15:59:26 TCP/UDP: Preserving recently used remote address: [AF_INET]68.235.43.10:1197
2023-01-12 15:59:26 Socket Buffers: R=[212992->425984] S=[212992->425984]
2023-01-12 15:59:26 UDP link local: (not bound)
2023-01-12 15:59:26 UDP link remote: [AF_INET]68.235.43.10:1197
2023-01-12 15:59:26 TLS: Initial packet from [AF_INET]68.235.43.10:1197, sid=0c9ca812 9af85eac
2023-01-12 15:59:26 VERIFY OK: depth=2, C=SE, ST=Gotaland, L=Gothenburg, O=Amagicom AB, OU=Mullvad, CN=Mullvad Root CA v2, [email protected]
2023-01-12 15:59:26 VERIFY OK: depth=1, C=SE, ST=Gotaland, O=Amagicom AB, OU=Mullvad, CN=Mullvad Intermediate CA v5, [email protected]
2023-01-12 15:59:26 VERIFY KU OK
2023-01-12 15:59:26 Validating certificate extended key usage
2023-01-12 15:59:26 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2023-01-12 15:59:26 VERIFY EKU OK
2023-01-12 15:59:26 VERIFY OK: depth=0, C=SE, ST=Gotaland, O=Amagicom AB, OU=Mullvad, CN=us-chi-002.mullvad.net, [email protected]
2023-01-12 15:59:26 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1557', remote='link-mtu 1558'
2023-01-12 15:59:26 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
2023-01-12 15:59:26 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA256
2023-01-12 15:59:26 [us-chi-002.mullvad.net] Peer Connection Initiated with [AF_INET]68.235.43.10:1197
2023-01-12 15:59:28 SENT CONTROL [us-chi-002.mullvad.net]: 'PUSH_REQUEST' (status=1)
2023-01-12 15:59:33 SENT CONTROL [us-chi-002.mullvad.net]: 'PUSH_REQUEST' (status=1)
2023-01-12 15:59:33 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.11.0.1,redirect-gateway def1 bypass-dhcp,route-ipv6 0000::/2,route-ipv6 4000::/2,route-ipv6 8000::/2,route-ipv6 C000::/2,comp-lzo no,route-gateway 10.11.0.1,topology subnet,socket-flags TCP_NODELAY,ifconfig-ipv6 fdda:d0d0:cafe:1197::1017/64 fdda:d0d0:cafe:1197::,ifconfig 10.11.0.25 255.255.0.0,peer-id 24,cipher AES-256-GCM'
2023-01-12 15:59:33 OPTIONS IMPORT: compression parms modified
2023-01-12 15:59:33 OPTIONS IMPORT: --socket-flags option modified
2023-01-12 15:59:33 NOTE: setsockopt TCP_NODELAY=1 failed
2023-01-12 15:59:33 OPTIONS IMPORT: --ifconfig/up options modified
2023-01-12 15:59:33 OPTIONS IMPORT: route options modified
2023-01-12 15:59:33 OPTIONS IMPORT: route-related options modified
2023-01-12 15:59:33 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2023-01-12 15:59:33 OPTIONS IMPORT: peer-id set
2023-01-12 15:59:33 OPTIONS IMPORT: adjusting link_mtu to 1624
2023-01-12 15:59:33 OPTIONS IMPORT: data channel crypto options modified
2023-01-12 15:59:33 Data Channel: using negotiated cipher 'AES-256-GCM'
2023-01-12 15:59:33 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2023-01-12 15:59:33 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2023-01-12 15:59:33 net_route_v4_best_gw query: dst 0.0.0.0
2023-01-12 15:59:33 net_route_v4_best_gw result: via 172.19.0.1 dev eth0
2023-01-12 15:59:33 ROUTE_GATEWAY 172.19.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:13:00:02
2023-01-12 15:59:33 GDG6: remote_host_ipv6=n/a
2023-01-12 15:59:33 net_route_v6_best_gw query: dst ::
2023-01-12 15:59:33 sitnl_send: rtnl: generic error (-101): Network is unreachable
2023-01-12 15:59:33 ROUTE6: default_gateway=UNDEF
2023-01-12 15:59:33 TUN/TAP device tun0 opened
2023-01-12 15:59:33 net_iface_mtu_set: mtu 1500 for tun0
2023-01-12 15:59:33 net_iface_up: set tun0 up
2023-01-12 15:59:33 net_addr_v4_add: 10.11.0.25/16 dev tun0
2023-01-12 15:59:33 net_iface_mtu_set: mtu 1500 for tun0
2023-01-12 15:59:33 net_iface_up: set tun0 up
2023-01-12 15:59:33 net_addr_v6_add: fdda:d0d0:cafe:1197::1017/64 dev tun0
2023-01-12 15:59:33 sitnl_send: rtnl: generic error (-13): Permission denied
2023-01-12 15:59:33 Linux can't add IPv6 to interface tun0
2023-01-12 15:59:33 Exiting due to fatal error

I've looked for other similar issues, but have not found people who specifically cannot get the container to run with this error. I've looked at the FAQ, using that guide to find the correct local area network and subnet, but can't seem to shake this error

[ilike2burnthing]

https://haugene.github.io/docker-transmission-openvpn/provider-specific/#mullvad_ovpn

[xrayzhang]

Can't believe I didn't see this. I had tried disabling ipv6 as an environment variable which didn't work, but changing it to systctl did. Thanks so much!