My ip dont change when i using new .ovpn config from ovpnadmin.

[mezzaninja]

I just testing this option with docker and compose
I have 2 containers and gui from 8080 port

when i execute new .ovpn config on my station i have :

2022-12-22 17:16:35 us=356019 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key 2022-12-22 17:16:35 us=356254 TUN/TAP device tun0 opened 2022-12-22 17:16:35 us=356271 do_ifconfig, ipv4=1, ipv6=0 2022-12-22 17:16:35 us=356296 net_iface_mtu_set: mtu 1500 for tun0 2022-12-22 17:16:35 us=356347 net_iface_up: set tun0 up 2022-12-22 17:16:35 us=356559 net_addr_v4_add: 10.9.0.2/24 dev tun0 2022-12-22 17:16:35 us=356747 Initialization Sequence Completed
but if i check my external ip its dont change
curl ifconfig.me

my

docker-compose.yaml

`version: '3'

services:
  openvpn:
    build:
      context: .
      dockerfile: Dockerfile.openvpn
    image: openvpn:local
    command: /etc/openvpn/setup/configure.sh
    environment:
      OVPN_SERVER_NET: "10.9.0.0"
      OVPN_SERVER_MASK: "255.255.255.0"
      OVPN_PASSWD_AUTH: "true"
    cap_add:
      - NET_ADMIN
    ports:
      - 7777:1194 # for openvpn
      - 8080:8080 # for ovpn-admin because of network_mode
    volumes:
      - ./easyrsa_master:/etc/openvpn/easyrsa
      - ./ccd_master:/etc/openvpn/ccd
  ovpn-admin:
    build:
      context: .
    image: ovpn-admin:local
    command: /app/ovpn-admin
    environment:
      OVPN_DEBUG: "true"
      OVPN_VERBOSE: "true"
      OVPN_NETWORK: "10.9.0.0/24"
      OVPN_CCD: "true"
      OVPN_CCD_PATH: "/mnt/ccd"
      EASYRSA_PATH: "/mnt/easyrsa"
      OVPN_SERVER: "$MYPUUBLICSERVERIP:7777:tcp"
      OVPN_INDEX_PATH: "/mnt/easyrsa/pki/index.txt"
      OVPN_AUTH: "true"
      OVPN_AUTH_DB_PATH: "/mnt/easyrsa/pki/users.db"
      LOG_LEVEL: "debug"
    network_mode: service:openvpn
    volumes:
      - ./easyrsa_master:/mnt/easyrsa
      - ./ccd_master:/mnt/ccd
`

Can you pls help me?)

[pashcovich]

try to uncomment this line in your ovpn file

#redirect-gateway def1

[mezzaninja]

# server 172.16.100.0 255.255.255.0
verb 3
tls-server
ca /etc/openvpn/easyrsa/pki/ca.crt
key /etc/openvpn/easyrsa/pki/private/server.key
cert /etc/openvpn/easyrsa/pki/issued/server.crt
dh /etc/openvpn/easyrsa/pki/dh.pem
crl-verify /etc/openvpn/easyrsa/pki/crl.pem
tls-auth /etc/openvpn/easyrsa/pki/ta.key
key-direction 0
cipher AES-128-CBC
#management 127.0.0.1 8989
keepalive 10 60
persist-key
persist-tun
topology subnet
#duplicate-cn
#proto tcp
#port 1194
#dev tun0
status /tmp/openvpn-status.log
user nobody
group nogroup
push "topology subnet"
push "route-metric 9999"
push "dhcp-option DNS 1.1.1.1"

i have this conf in container

How i can to rebuild him?

[pashcovich]

in .ovpn config from ovpn-admin, which you use to connect with

[mezzaninja]

yes its works fine now

[mezzaninja]

but i still have problem i wanna change some options in docker cont)
Ok i will test it. Thx!!!!

[pashcovich]

change this file and then rebuild the docker container
or pass additional parameters through this file

[mezzaninja]

i try to use ovpn from udp ( because for 1 step i have too much ping and slow connection)

`Successfully built 10f76a3177b4
Successfully tagged ovpn-admin:local
Recreating openvpn-master_openvpn_1 ... done
Recreating 406a1dafdc96_openvpn-master_ovpn-admin_1 ... error

ERROR: for 406a1dafdc96_openvpn-master_ovpn-admin_1  Cannot start service ovpn-admin: failed to create shim task: OCI runtime create failed: runc create failed: unable to create new parent process: namespace path: lstat /proc/14358/ns/net: no such file or directory: unknown

ERROR: for ovpn-admin  Cannot start service ovpn-admin: failed to create shim task: OCI runtime create failed: runc create failed: unable to create new parent process: namespace path: lstat /proc/14358/ns/net: no such file or directory: unknown
ERROR: Encountered errors while bringing up the project.`

configure.sh

`mkdir -p /etc/openvpn/ccd

openvpn --config /etc/openvpn/openvpn.conf --client-config-dir /etc/openvpn/ccd --port 1194 --proto udp --management 127.0.0.1 8989 --dev tun0 --server ${OVPN_SRV_NET} ${OVPN_SRV_MASK}`

openvpn.conf

server $myserverpublicip
verb 3
tls-server
ca /etc/openvpn/easyrsa/pki/ca.crt
key /etc/openvpn/easyrsa/pki/private/server.key
cert /etc/openvpn/easyrsa/pki/issued/server.crt
dh /etc/openvpn/easyrsa/pki/dh.pem
crl-verify /etc/openvpn/easyrsa/pki/crl.pem
tls-auth /etc/openvpn/easyrsa/pki/ta.key
key-direction 0
cipher AES-128-CBC
#management 127.0.0.1 8989
keepalive 10 60
persist-key
persist-tun
topology subnet
#duplicate-cn
proto udp
port 1194
dev tun0
status /tmp/openvpn-status.log
user nobody
group nogroup
push "topology subnet"
push "route-metric 9999"
push "dhcp-option DNS 1.1.1.1"

@pashcovich can you pls tell what i do wrong?