Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug: Docker container is unhealthy and won't spin up - Host is unreachable (fd=3,code=113) #2705

Open
jinjan9 opened this issue Feb 15, 2025 · 6 comments

Comments

@jinjan9
Copy link

jinjan9 commented Feb 15, 2025

Is this urgent?

No

Host OS

Canonical-Ubuntu-22.04

CPU arch

aarch64

VPN service provider

ProtonVPN

What are you using to run the container

docker-compose

What is the version of Gluetun

Running version latest built on 2025-01-22T08:30:14.628Z (commit 13532c8)

What's the problem 🤔

I have a VM on Oracle Cloud. Since 2 days, I can't spin up the container because it is unhealthy/fails the health check. Nothing about the compose or configuration has changed. I did run a list of system updates/upgrades a few days ago, which I think aligns with when I started noticing the issue, but it could just be coincidental.

What I've tried

  • Deleting container and image and repulling/rebuilding 
    
  • generating new user and password from proton
    
  • used different countries
    
  • copying the server list from github and replacing the server list stored locally
    
  • removing and recreating the directory
    
  • Reverting to an older image -  version v3.39.1 built on 2024-09-29T18:16:23.495Z (commit 67ae5f5)
    
  • Updating server list the following command (seems to fail though):
    
      docker run --rm -v /opt/gluetun:/gluetun qmcgaw/gluetun update -enduser -providers protonvpn
      
      2025-02-15T10:04:22Z INFO merging by most recent 20776 hardcoded servers and 20776 servers read from /gluetun/servers.json
      2025-02-15T10:04:22Z INFO updating Protonvpn servers...
      2025-02-15T10:04:27Z ERROR updating server information: getting servers: Get "https://api.protonmail.ch/vpn/logicals": dial tcp: lookup api.protonmail.ch on 169.254.169.254:53: read udp 172.17.0.3:49395->169.254.169.254:53: read: no route to host
      2025-02-15T10:04:27Z INFO Shutdown successful~~

Share your logs (at least 10 lines)

gluetun  | ========================================
gluetun  | ========================================
gluetun  | =============== gluetun ================
gluetun  | ========================================
gluetun  | =========== Made with ❤️ by ============
gluetun  | ======= https://github.com/qdm12 =======
gluetun  | ========================================
gluetun  | ========================================
gluetun  | 
gluetun  | Running version latest built on 2025-01-22T08:30:14.628Z (commit 13532c8)
gluetun  | 
gluetun  | 🔧 Need help? ☕ Discussion? https://github.com/qdm12/gluetun/discussions/new/choose
gluetun  | 🐛 Bug? ✨ New feature? https://github.com/qdm12/gluetun/issues/new/choose
gluetun  | 💻 Email? quentin.mcgaw@gmail.com
gluetun  | 💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
gluetun  | 2025-02-15T09:26:22Z INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.7 and family v4
gluetun  | 2025-02-15T09:26:22Z INFO [routing] local ethernet link found: eth0
gluetun  | 2025-02-15T09:26:22Z INFO [routing] local ipnet found: 172.18.0.0/16
gluetun  | 2025-02-15T09:26:22Z INFO [firewall] enabling...
gluetun  | 2025-02-15T09:26:22Z INFO [firewall] enabled successfully
gluetun  | 2025-02-15T09:26:22Z INFO [storage] merging by most recent 20776 hardcoded servers and 20776 servers read from /gluetun/servers.json
gluetun  | 2025-02-15T09:26:23Z INFO Alpine version: 3.20.5
gluetun  | 2025-02-15T09:26:23Z INFO OpenVPN 2.5 version: 2.5.10
gluetun  | 2025-02-15T09:26:23Z INFO OpenVPN 2.6 version: 2.6.11
gluetun  | 2025-02-15T09:26:23Z INFO IPtables version: v1.8.10
gluetun  | 2025-02-15T09:26:23Z INFO Settings summary:
gluetun  | ├── VPN settings:
gluetun  | |   ├── VPN provider settings:
gluetun  | |   |   ├── Name: protonvpn
gluetun  | |   |   └── Server selection settings:
gluetun  | |   |       ├── VPN type: openvpn
gluetun  | |   |       ├── Countries: canada
gluetun  | |   |       └── OpenVPN server selection settings:
gluetun  | |   |           └── Protocol: UDP
gluetun  | |   └── OpenVPN settings:
gluetun  | |       ├── OpenVPN version: 2.6
gluetun  | |       ├── User: [set]
gluetun  | |       ├── Password: 2...0O
gluetun  | |       ├── Network interface: tun0
gluetun  | |       ├── Run OpenVPN as: root
gluetun  | |       └── Verbosity level: 1
gluetun  | ├── DNS settings:
gluetun  | |   ├── Keep existing nameserver(s): no
gluetun  | |   ├── DNS server address to use: 127.0.0.1
gluetun  | |   └── DNS over TLS settings:
gluetun  | |       ├── Enabled: yes
gluetun  | |       ├── Update period: every 24h0m0s
gluetun  | |       ├── Upstream resolvers:
gluetun  | |       |   └── cloudflare
gluetun  | |       ├── Caching: yes
gluetun  | |       ├── IPv6: no
gluetun  | |       └── DNS filtering settings:
gluetun  | |           ├── Block malicious: yes
gluetun  | |           ├── Block ads: no
gluetun  | |           ├── Block surveillance: no
gluetun  | |           └── Blocked IP networks:
gluetun  | |               ├── 127.0.0.1/8
gluetun  | |               ├── 10.0.0.0/8
gluetun  | |               ├── 172.16.0.0/12
gluetun  | |               ├── 192.168.0.0/16
gluetun  | |               ├── 169.254.0.0/16
gluetun  | |               ├── ::1/128
gluetun  | |               ├── fc00::/7
gluetun  | |               ├── fe80::/10
gluetun  | |               ├── ::ffff:127.0.0.1/104
gluetun  | |               ├── ::ffff:10.0.0.0/104
gluetun  | |               ├── ::ffff:169.254.0.0/112
gluetun  | |               ├── ::ffff:172.16.0.0/108
gluetun  | |               └── ::ffff:192.168.0.0/112
gluetun  | ├── Firewall settings:
gluetun  | |   └── Enabled: yes
gluetun  | ├── Log settings:
gluetun  | |   └── Log level: info
gluetun  | ├── Health settings:
gluetun  | |   ├── Server listening address: 127.0.0.1:9999
gluetun  | |   ├── Target address: cloudflare.com:443
gluetun  | |   ├── Duration to wait after success: 5s
gluetun  | |   ├── Read header timeout: 100ms
gluetun  | |   ├── Read timeout: 500ms
gluetun  | |   └── VPN wait durations:
gluetun  | |       ├── Initial duration: 6s
gluetun  | |       └── Additional duration: 5s
gluetun  | ├── Shadowsocks server settings:
gluetun  | |   └── Enabled: no
gluetun  | ├── HTTP proxy settings:
gluetun  | |   └── Enabled: no
gluetun  | ├── Control server settings:
gluetun  | |   ├── Listening address: :8000
gluetun  | |   ├── Logging: yes
gluetun  | |   └── Authentication file path: /gluetun/auth/config.toml
gluetun  | ├── Storage settings:
gluetun  | |   └── Filepath: /gluetun/servers.json
gluetun  | ├── OS Alpine settings:
gluetun  | |   ├── Process UID: 1000
gluetun  | |   ├── Process GID: 1000
gluetun  | |   └── Timezone: utc
gluetun  | ├── Public IP settings:
gluetun  | |   ├── IP file path: /tmp/gluetun/ip
gluetun  | |   ├── Public IP data base API: ipinfo
gluetun  | |   └── Public IP data backup APIs:
gluetun  | |       ├── ifconfigco
gluetun  | |       ├── ip2location
gluetun  | |       └── cloudflare
gluetun  | └── Version settings:
gluetun  |     └── Enabled: yes
gluetun  | 2025-02-15T09:26:23Z INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.7 and family v4
gluetun  | 2025-02-15T09:26:23Z INFO [routing] adding route for 0.0.0.0/0
gluetun  | 2025-02-15T09:26:23Z INFO [firewall] setting allowed subnets...
gluetun  | 2025-02-15T09:26:23Z INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.7 and family v4
gluetun  | 2025-02-15T09:26:23Z INFO [dns] using plaintext DNS at address 1.1.1.1
gluetun  | 2025-02-15T09:26:23Z INFO [http server] http server listening on [::]:8000
gluetun  | 2025-02-15T09:26:23Z INFO [healthcheck] listening on 127.0.0.1:9999
gluetun  | 2025-02-15T09:26:23Z INFO [firewall] allowing VPN connection...
gluetun  | 2025-02-15T09:26:23Z INFO [openvpn] OpenVPN 2.6.11 aarch64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
gluetun  | 2025-02-15T09:26:23Z INFO [openvpn] library versions: OpenSSL 3.3.2 3 Sep 2024, LZO 2.10
gluetun  | 2025-02-15T09:26:23Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]146.70.198.50:1194
gluetun  | 2025-02-15T09:26:23Z INFO [openvpn] UDPv4 link local: (not bound)
gluetun  | 2025-02-15T09:26:23Z INFO [openvpn] UDPv4 link remote: [AF_INET]146.70.198.50:1194
gluetun  | 2025-02-15T09:26:23Z INFO [openvpn] read UDPv4 [EHOSTUNREACH]: Host is unreachable (fd=3,code=113)
gluetun  | 2025-02-15T09:26:25Z INFO [openvpn] read UDPv4 [EHOSTUNREACH]: Host is unreachable (fd=3,code=113)
gluetun  | 2025-02-15T09:26:29Z INFO [healthcheck] program has been unhealthy for 6s: restarting VPN (healthcheck error: dialing: dial tcp4: lookup cloudflare.com on 1.1.1.1:53: write udp 172.18.0.7:47568->1.1.1.1:53: write: operation not permitted)
gluetun  | 2025-02-15T09:26:29Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
gluetun  | 2025-02-15T09:26:29Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
gluetun  | 2025-02-15T09:26:29Z INFO [vpn] stopping
gluetun  | 2025-02-15T09:26:29Z INFO [vpn] starting
gluetun  | 2025-02-15T09:26:29Z INFO [firewall] allowing VPN connection...
gluetun  | 2025-02-15T09:26:29Z INFO [openvpn] OpenVPN 2.6.11 aarch64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
gluetun  | 2025-02-15T09:26:29Z INFO [openvpn] library versions: OpenSSL 3.3.2 3 Sep 2024, LZO 2.10
gluetun  | 2025-02-15T09:26:29Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]185.159.157.231:1194
gluetun  | 2025-02-15T09:26:29Z INFO [openvpn] UDPv4 link local: (not bound)
gluetun  | 2025-02-15T09:26:29Z INFO [openvpn] UDPv4 link remote: [AF_INET]185.159.157.231:1194
gluetun  | 2025-02-15T09:26:29Z INFO [openvpn] read UDPv4 [EHOSTUNREACH]: Host is unreachable (fd=3,code=113)
gluetun  | 2025-02-15T09:26:31Z INFO [openvpn] read UDPv4 [EHOSTUNREACH]: Host is unreachable (fd=3,code=113)
gluetun  | 2025-02-15T09:26:35Z INFO [openvpn] read UDPv4 [EHOSTUNREACH]: Host is unreachable (fd=3,code=113)
gluetun  | 2025-02-15T09:26:40Z INFO [healthcheck] program has been unhealthy for 11s: restarting VPN (healthcheck error: dialing: dial tcp4: lookup cloudflare.com on 1.1.1.1:53: write udp 172.18.0.7:40277->1.1.1.1:53: write: operation not permitted)
gluetun  | 2025-02-15T09:26:40Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
gluetun  | 2025-02-15T09:26:40Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
gluetun  | 2025-02-15T09:26:40Z INFO [vpn] stopping
gluetun  | 2025-02-15T09:26:40Z INFO [vpn] starting
gluetun  | 2025-02-15T09:26:40Z INFO [firewall] allowing VPN connection...
gluetun  | 2025-02-15T09:26:40Z INFO [openvpn] OpenVPN 2.6.11 aarch64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
gluetun  | 2025-02-15T09:26:40Z INFO [openvpn] library versions: OpenSSL 3.3.2 3 Sep 2024, LZO 2.10
gluetun  | 2025-02-15T09:26:40Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]146.70.198.18:1194
gluetun  | 2025-02-15T09:26:40Z INFO [openvpn] UDPv4 link local: (not bound)
gluetun  | 2025-02-15T09:26:40Z INFO [openvpn] UDPv4 link remote: [AF_INET]146.70.198.18:1194
gluetun  | 2025-02-15T09:26:40Z INFO [openvpn] read UDPv4 [EHOSTUNREACH]: Host is unreachable (fd=3,code=113)
gluetun  | 2025-02-15T09:26:42Z INFO [openvpn] read UDPv4 [EHOSTUNREACH]: Host is unreachable (fd=3,code=113)
gluetun  | 2025-02-15T09:26:46Z INFO [openvpn] read UDPv4 [EHOSTUNREACH]: Host is unreachable (fd=3,code=113)
gluetun  | 2025-02-15T09:26:54Z INFO [openvpn] read UDPv4 [EHOSTUNREACH]: Host is unreachable (fd=3,code=113)
gluetun  | 2025-02-15T09:26:56Z INFO [healthcheck] program has been unhealthy for 16s: restarting VPN (healthcheck error: dialing: dial tcp4: lookup cloudflare.com on 1.1.1.1:53: write udp 172.18.0.7:51791->1.1.1.1:53: write: operation not permitted)
gluetun  | 2025-02-15T09:26:56Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
gluetun  | 2025-02-15T09:26:56Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
gluetun  | 2025-02-15T09:26:56Z INFO [vpn] stopping
gluetun  | 2025-02-15T09:26:56Z INFO [vpn] starting
gluetun  | 2025-02-15T09:26:56Z INFO [firewall] allowing VPN connection...
gluetun  | 2025-02-15T09:26:56Z INFO [openvpn] OpenVPN 2.6.11 aarch64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
gluetun  | 2025-02-15T09:26:56Z INFO [openvpn] library versions: OpenSSL 3.3.2 3 Sep 2024, LZO 2.10
gluetun  | 2025-02-15T09:26:56Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]149.88.97.110:1194
gluetun  | 2025-02-15T09:26:56Z INFO [openvpn] UDPv4 link local: (not bound)
gluetun  | 2025-02-15T09:26:56Z INFO [openvpn] UDPv4 link remote: [AF_INET]149.88.97.110:1194
gluetun  | 2025-02-15T09:26:56Z INFO [openvpn] read UDPv4 [EHOSTUNREACH]: Host is unreachable (fd=3,code=113)
Gracefully stopping... (press Ctrl+C again to force)

Share your configuration

gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    environment:
      - VPN_SERVICE_PROVIDER=protonvpn
      - OPENVPN_USER=
      - OPENVPN_PASSWORD=
      - SERVER_COUNTRIES=Canada
      - TZ=UTC
    ports:
      - 8888:8888/tcp # HTTP proxy
      - 8388:8388/tcp # Shadowsocks proxy
      - 8388:8388/udp # Shadowsocks proxy
    volumes:
      - /opt/gluetun/config:/gluetun
    restart: unless-stopped
    devices: 
      - /dev/net/tun:/dev/net/tun
Copy link
Contributor

@qdm12 is more or less the only maintainer of this project and works on it in his free time.
Please:

@neverwantit
Copy link

I had this issue as well, with a bit of searching I came across this post that fixed it for me by running sudo service docker restart and then sudo docker compose up -d. See if that works for you as well

@maxexcloo
Copy link

maxexcloo commented Feb 20, 2025

I have this issue also, removing the service, rebooting and then re-adding didn't fix the issue, nothing has changed except the system update. Did you manage to fix this?

@KraLeoD
Copy link

KraLeoD commented Feb 20, 2025

Got the same issue, no solution worked so far. What did work was restoring a backup where I didn't have the latest updates installed. I noticed the output of "docker ps" containing IPv6 syntax ([::] instead of 0.0.0.0) after the update, maybe that could be related to that?

@maxexcloo
Copy link

It may have something to do to this if you're using Tailscale also: moby/moby#49498

@jinjan9
Copy link
Author

jinjan9 commented Feb 22, 2025

@maxexcloo I tried a few more things as well as what @neverwantit suggested, but it still didn't work. I ended up mounting a boot volume backup I made in December and now everything is working as before.

If the dev picks up this thread and thinks it's container related, I'm happy to remount the problematic image to do some troubleshooting, but my guess is it might be an Oracle-related issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants