Transmission Client Unable to Download

[Ninjastandard]

Hello all,

I've been struggle the past few days to get this set up. I think I'm fairly close as everything seems to be functioning, my issue is that my download speeds are so low that they are unusable (<30kb/s) and it can't really connect to any peers. I'm testing this with a fairly popular torrent (Ubuntu iso) which downloads at 9 mb/s outside of Docker with OpenVPN (PIA) enabled.

Any help is greatly appreciated, I'm lost in what to try next.

Compose:

version: '3.3'
services:
    transmission-openvpn:
        cap_add:
            - NET_ADMIN
        volumes:
            - '/external/torrents/:/data'
            - '/external/torrents/config/:/config'
        environment:
            - OPENVPN_PROVIDER=pia
            - OPENVPN_CONFIG=ca_montreal
            - OPENVPN_USERNAME=*******
            - OPENVPN_PASSWORD=********
            - LOCAL_NETWORK=192.168.1.0/24
        logging:
            driver: json-file
            options:
                max-size: 10m
        ports:
            - '9091:9091'
        image: haugene/transmission-openvpn`

Log:

Creating network "config_default" with the default driver
Creating config_transmission-openvpn_1 ... done
Attaching to config_transmission-openvpn_1
transmission-openvpn_1  | Starting container with revision: 07f5a2b9aea5028c9bb75438c1552708e91dde71
transmission-openvpn_1  | TRANSMISSION_HOME is currently set to: /config/transmission-home
transmission-openvpn_1  | Creating TUN device /dev/net/tun
transmission-openvpn_1  | Using OpenVPN provider: PIA
transmission-openvpn_1  | Running with VPN_CONFIG_SOURCE auto
transmission-openvpn_1  | Provider PIA has a bundled setup script. Defaulting to internal config
transmission-openvpn_1  | Executing setup script for pia
transmission-openvpn_1  | Downloading OpenVPN config bundle openvpn into temporary file /tmp/tmp.EZB7rMmLth
transmission-openvpn_1  | Extract OpenVPN config bundle into PIA directory /etc/openvpn/pia
transmission-openvpn_1  | Starting OpenVPN using config ca_montreal.ovpntransmission-openvpn_1  | Modifying /etc/openvpn/pia/ca_montreal.ovpn for best behaviour in this container
transmission-openvpn_1  | Modification: Point auth-user-pass option to the username/password file
transmission-openvpn_1  | Modification: Change ca certificate path
transmission-openvpn_1  | Modification: Change ping options
transmission-openvpn_1  | Modification: Update/set resolv-retry to 15 seconds
transmission-openvpn_1  | Modification: Change tls-crypt keyfile path
transmission-openvpn_1  | Modification: Set output verbosity to 3
transmission-openvpn_1  | Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
transmission-openvpn_1  | Modification: Updating status for config failure detection
transmission-openvpn_1  | Setting OpenVPN credentials...
transmission-openvpn_1  | adding route to local network 192.168.1.0/24 via 172.20.0.1 dev eth0
transmission-openvpn_1  | 2024-01-03 20:49:05 DEPRECATED OPTION: --cipher set to 'aes-128-cbc' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'aes-128-cbc' to --data-ciphers or change --cipher 'aes-128-cbc' to --data-ciphers-fallback 'aes-128-cbc' to silence this warning.
transmission-openvpn_1  | 2024-01-03 20:49:05 OpenVPN 2.5.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 29 2023
transmission-openvpn_1  | 2024-01-03 20:49:05 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
transmission-openvpn_1  | 2024-01-03 20:49:05 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
transmission-openvpn_1  | 2024-01-03 20:49:05 CRL: loaded 1 CRLs from file -----BEGIN X509 CRL-----
transmission-openvpn_1  | MIICWDCCAUAwDQYJKoZIhvcNAQENBQAwgegxCzAJBgNVBAYTAlVTMQswCQYDVQQI
transmission-openvpn_1  | EwJDQTETMBEGA1UEBxMKTG9zQW5nZWxlczEgMB4GA1UEChMXUHJpdmF0ZSBJbnRl
transmission-openvpn_1  | cm5ldCBBY2Nlc3MxIDAeBgNVBAsTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSAw
transmission-openvpn_1  | HgYDVQQDExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4GA1UEKRMXUHJpdmF0
transmission-openvpn_1  | ZSBJbnRlcm5ldCBBY2Nlc3MxLzAtBgkqhkiG9w0BCQEWIHNlY3VyZUBwcml2YXRl
transmission-openvpn_1  | aW50ZXJuZXRhY2Nlc3MuY29tFw0xNjA3MDgxOTAwNDZaFw0zNjA3MDMxOTAwNDZa
transmission-openvpn_1  | MCYwEQIBARcMMTYwNzA4MTkwMDQ2MBECAQYXDDE2MDcwODE5MDA0NjANBgkqhkiG
transmission-openvpn_1  | 9w0BAQ0FAAOCAQEAQZo9X97ci8EcPYu/uK2HB152OZbeZCINmYyluLDOdcSvg6B5
transmission-openvpn_1  | jI+ffKN3laDvczsG6CxmY3jNyc79XVpEYUnq4rT3FfveW1+Ralf+Vf38HdpwB8EW
transmission-openvpn_1  | B4hZlQ205+21CALLvZvR8HcPxC9KEnev1mU46wkTiov0EKc+EdRxkj5yMgv0V2Re
transmission-openvpn_1  | ze7AP+NQ9ykvDScH4eYCsmufNpIjBLhpLE2cuZZXBLcPhuRzVoU3l7A9lvzG9mjA
transmission-openvpn_1  | 5YijHJGHNjlWFqyrn1CfYS6koa4TGEPngBoAziWRbDGdhEgJABHrpoaFYaL61zqy
transmission-openvpn_1  | MR6jC0K2ps9qyZAN74LEBedEfK7tBOzWMwr58A==
transmission-openvpn_1  | -----END X509 CRL-----
transmission-openvpn_1  |
transmission-openvpn_1  | 2024-01-03 20:49:05 TCP/UDP: Preserving recently used remote address: [AF_INET]140.228.21.173:1198
transmission-openvpn_1  | 2024-01-03 20:49:05 Socket Buffers: R=[212992->212992] S=[212992->212992]
transmission-openvpn_1  | 2024-01-03 20:49:05 UDP link local: (not bound)
transmission-openvpn_1  | 2024-01-03 20:49:05 UDP link remote: [AF_INET]140.228.21.173:1198
transmission-openvpn_1  | 2024-01-03 20:49:06 TLS: Initial packet from [AF_INET]140.228.21.173:1198, sid=8094187a 5fb8e9ec
transmission-openvpn_1  | 2024-01-03 20:49:06 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
transmission-openvpn_1  | 2024-01-03 20:49:06 VERIFY OK: depth=1, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=Private Internet Access, name=Private Internet Access, [email protected]
transmission-openvpn_1  | 2024-01-03 20:49:06 VERIFY KU OK
transmission-openvpn_1  | 2024-01-03 20:49:06 Validating certificate extended key usage
transmission-openvpn_1  | 2024-01-03 20:49:06 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
transmission-openvpn_1  | 2024-01-03 20:49:06 VERIFY EKU OK
transmission-openvpn_1  | 2024-01-03 20:49:06 VERIFY OK: depth=0, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=montreal423, name=montreal423
transmission-openvpn_1  | 2024-01-03 20:49:06 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA512
transmission-openvpn_1  | 2024-01-03 20:49:06 [montreal423] Peer Connection Initiated with [AF_INET]140.228.21.173:1198
transmission-openvpn_1  | 2024-01-03 20:49:06 PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway def1,route-ipv6 2000::/3,dhcp-option DNS 10.0.0.243,route-gateway 10.14.112.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.14.112.246 255.255.255.0,peer-id 8,cipher AES-128-GCM'
transmission-openvpn_1  | 2024-01-03 20:49:06 OPTIONS IMPORT: timers and/or timeouts modified
transmission-openvpn_1  | 2024-01-03 20:49:06 OPTIONS IMPORT: compression parms modified
transmission-openvpn_1  | 2024-01-03 20:49:06 OPTIONS IMPORT: --ifconfig/up options modified
transmission-openvpn_1  | 2024-01-03 20:49:06 OPTIONS IMPORT: route options modified
transmission-openvpn_1  | 2024-01-03 20:49:06 OPTIONS IMPORT: route-related options modified
transmission-openvpn_1  | 2024-01-03 20:49:06 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
transmission-openvpn_1  | 2024-01-03 20:49:06 OPTIONS IMPORT: peer-id set
transmission-openvpn_1  | 2024-01-03 20:49:06 OPTIONS IMPORT: adjusting link_mtu to 1625
transmission-openvpn_1  | 2024-01-03 20:49:06 OPTIONS IMPORT: data channel crypto options modified
transmission-openvpn_1  | 2024-01-03 20:49:06 Data Channel: using negotiated cipher 'AES-128-GCM'
transmission-openvpn_1  | 2024-01-03 20:49:06 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
transmission-openvpn_1  | 2024-01-03 20:49:06 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
transmission-openvpn_1  | 2024-01-03 20:49:06 net_route_v4_best_gw query: dst 0.0.0.0
transmission-openvpn_1  | 2024-01-03 20:49:06 net_route_v4_best_gw result: via 172.20.0.1 dev eth0
transmission-openvpn_1  | 2024-01-03 20:49:06 ROUTE_GATEWAY 172.20.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:14:00:02
transmission-openvpn_1  | 2024-01-03 20:49:06 GDG6: remote_host_ipv6=n/atransmission-openvpn_1  | 2024-01-03 20:49:06 net_route_v6_best_gw query: dst ::
transmission-openvpn_1  | 2024-01-03 20:49:06 sitnl_send: rtnl: generic error (-101): Network is unreachable
transmission-openvpn_1  | 2024-01-03 20:49:06 ROUTE6: default_gateway=UNDEF
transmission-openvpn_1  | 2024-01-03 20:49:06 TUN/TAP device tun0 openedtransmission-openvpn_1  | 2024-01-03 20:49:06 net_iface_mtu_set: mtu 1500 for tun0
transmission-openvpn_1  | 2024-01-03 20:49:06 net_iface_up: set tun0 up
transmission-openvpn_1  | 2024-01-03 20:49:06 net_addr_v4_add: 10.14.112.246/24 dev tun0
transmission-openvpn_1  | 2024-01-03 20:49:06 net_route_v4_add: 140.228.21.173/32 via 172.20.0.1 dev [NULL] table 0 metric -1
transmission-openvpn_1  | 2024-01-03 20:49:06 net_route_v4_add: 0.0.0.0/1 via 10.14.112.1 dev [NULL] table 0 metric -1
transmission-openvpn_1  | 2024-01-03 20:49:06 net_route_v4_add: 128.0.0.0/1 via 10.14.112.1 dev [NULL] table 0 metric -1
transmission-openvpn_1  | 2024-01-03 20:49:06 WARNING: OpenVPN was configured to add an IPv6 route. However, no IPv6 has been configured for tun0, therefore the route installation may fail or may not work as expected.
transmission-openvpn_1  | 2024-01-03 20:49:06 add_route_ipv6(2000::/3 -> :: metric -1) dev tun0
transmission-openvpn_1  | 2024-01-03 20:49:06 net_route_v6_add: 2000::/3 via :: dev tun0 table 0 metric -1
transmission-openvpn_1  | 2024-01-03 20:49:06 sitnl_send: rtnl: generic error (-13): Permission denied
transmission-openvpn_1  | 2024-01-03 20:49:06 ERROR: Linux IPv6 route can't be added
transmission-openvpn_1  | Up script executed with device=tun0 ifconfig_local=10.14.112.246
transmission-openvpn_1  | Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 10.14.112.246
transmission-openvpn_1  |
transmission-openvpn_1  | -------------------------------------
transmission-openvpn_1  | Transmission will run as
transmission-openvpn_1  | -------------------------------------
transmission-openvpn_1  | User name:   root
transmission-openvpn_1  | User uid:    0
transmission-openvpn_1  | User gid:    0
transmission-openvpn_1  | -------------------------------------
transmission-openvpn_1  |
transmission-openvpn_1  | Updating Transmission settings.json with values from env variables
transmission-openvpn_1  | Attempting to use existing settings.json for Transmission
transmission-openvpn_1  | Could not read existing settings.json. Generating settings.json for Transmission from environment and defaults /etc/transmission/default-settings.json
transmission-openvpn_1  | Overriding bind-address-ipv4 because TRANSMISSION_BIND_ADDRESS_IPV4 is set to 10.14.112.246
transmission-openvpn_1  | Overriding download-dir because TRANSMISSION_DOWNLOAD_DIR is set to /data/completed
transmission-openvpn_1  | Overriding incomplete-dir because TRANSMISSION_INCOMPLETE_DIR is set to /data/incomplete
transmission-openvpn_1  | Overriding rpc-password because TRANSMISSION_RPC_PASSWORD is set to [REDACTED]
transmission-openvpn_1  | Overriding rpc-port because TRANSMISSION_RPC_PORT is set to 9091
transmission-openvpn_1  | Overriding rpc-username because TRANSMISSION_RPC_USERNAME is set to
transmission-openvpn_1  | Overriding watch-dir because TRANSMISSION_WATCH_DIR is set to /data/watch
transmission-openvpn_1  | sed'ing True to true
transmission-openvpn_1  | STARTING TRANSMISSION
transmission-openvpn_1  | Provider PIA has a script for automatic port forwarding. Will run it now.
transmission-openvpn_1  | If you want to disable this, set environment variable DISABLE_PORT_UPDATER=true
transmission-openvpn_1  | Transmission startup script complete.
transmission-openvpn_1  | 2024-01-03 20:49:06 Initialization Sequence Completed
transmission-openvpn_1  | Running functions for token based port fowarding
transmission-openvpn_1  | Reserved Port: 34476  Wed Jan  3 20:49:12 UTC 2024
transmission-openvpn_1  | transmission auth not required
transmission-openvpn_1  | waiting for transmission to become responsive
transmission-openvpn_1  | transmission became responsive
transmission-openvpn_1  |     ID   Done       Have  ETA           Up    Down  Ratio  Status       Name
transmission-openvpn_1  | Sum:                None               0.0     0.0
transmission-openvpn_1  | setting transmission port to 34476
transmission-openvpn_1  | localhost:9091/transmission/rpc/ responded: success
transmission-openvpn_1  | Checking port...
transmission-openvpn_1  | Port is open: Yes
transmission-openvpn_1  | #######################
transmission-openvpn_1  |         SUCCESS
transmission-openvpn_1  | #######################
transmission-openvpn_1  | Port: 34476
transmission-openvpn_1  | Expiration Wed Mar  6 08:49:12 UTC 2024
transmission-openvpn_1  | #######################
transmission-openvpn_1  | Entering infinite while loop
transmission-openvpn_1  | Every 15 minutes, check port status

[Ninjastandard]

Update on this, the issue appears to be with the opvn files the image pulls for PIA. By setting the VPN provider to custom and supplying my own file I was able to connect.

[pkishino]

Ok, looks like the PIA files might need updating then

[Ninjastandard]

The workaround I am using at the moment is to initialize the container using "custom" which works well (no automated port forwarding), then stopping the container, changing the vpn provider in the compose back to "pia" and re-initializing the container. This seems to create a successful connection and initialize the port forwarding script.

FYI - I am using the ca_vancouver TCP server as my "custom" connection. Haven't tried too many other servers but wasn't having success with ca_toronto or ca_montreal.