Sysctl Settings not applying inside pods

[Baa]

Hi,
I am trying to setup the Deluge app with OpenVPN from TrueCharts.

OpenVPN is failing after trying to create the IPv6 tunnel:

Code:

2023-03-25 17:13:19.387938+00:00+ exec sg vpn -c 'openvpn --cd /vpn --config /vpn/vpn.conf --script-security 2 --redirect-gateway def1 --auth-user-pass /vpn/vpn.auth                 '
2023-03-25 17:13:19.389416+00:00Sat Mar 25 17:13:19 2023 OpenVPN 2.4.9 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Apr 20 2020
2023-03-25 17:13:19.389450+00:00Sat Mar 25 17:13:19 2023 library versions: OpenSSL 1.1.1g  21 Apr 2020, LZO 2.10
2023-03-25 17:13:19.442684+00:00Sat Mar 25 17:13:19 2023 TCP/UDP: Preserving recently used remote address: [AF_INET]<IPv4 ADDRESS>:443
2023-03-25 17:13:19.442726+00:00Sat Mar 25 17:13:19 2023 UDP link local: (not bound)
2023-03-25 17:13:19.442736+00:00Sat Mar 25 17:13:19 2023 UDP link remote: [AF_INET]<IPv4 ADDRESS>:443
2023-03-25 17:13:19.479697+00:00Sat Mar 25 17:13:19 2023 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2023-03-25 17:13:19.647620+00:00Sat Mar 25 17:13:19 2023 [bviserver] Peer Connection Initiated with [AF_INET]<IPv4 ADDRESS>:443
2023-03-25 17:13:20.888565+00:00Sat Mar 25 17:13:20 2023 Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:1: block-outside-dns (2.4.9)
2023-03-25 17:13:20.888823+00:00Sat Mar 25 17:13:20 2023 TUN/TAP device tun0 opened
2023-03-25 17:13:20.888875+00:00Sat Mar 25 17:13:20 2023 /sbin/ip link set dev tun0 up mtu 1500
2023-03-25 17:13:20.889648+00:00Sat Mar 25 17:13:20 2023 /sbin/ip addr add dev tun0 172.16.0.85/24 broadcast 172.16.0.255
2023-03-25 17:13:20.890497+00:00Sat Mar 25 17:13:20 2023 /sbin/ip -6 addr add <IPV6 ADDRESS>/64 dev tun0
2023-03-25 17:13:20.890961+00:00RTNETLINK answers: Permission denied
2023-03-25 17:13:20.890994+00:00Sat Mar 25 17:13:20 2023 Linux ip -6 addr add failed: external program exited with error status: 2
2023-03-25 17:13:20.891015+00:00Sat Mar 25 17:13:20 2023 Exiting due to fatal error 

To try and resolve this I've added:

Code:

net.ipv6.conf.all.disable_ipv6=0

into System Settings > Advanced > Sysctl

This seems to have applied OK:

Code:

root@bocchi[~]# sysctl net.ipv6.conf.all.disable_ipv6
net.ipv6.conf.all.disable_ipv6 = 0
root@bocchi[~]# sysctl net.ipv6.conf.default.disable_ipv6
net.ipv6.conf.default.disable_ipv6 = 0
root@bocchi[~]# sysctl net.ipv6.conf.lo.disable_ipv6
net.ipv6.conf.lo.disable_ipv6 = 0

This post suggests all kernel sysctl settings will be applied inside pods but that doesn't seem to be the case, IPv6 is still disabled inside the pod:

Code:

root@deluge-56c95cdfb8-jn9q4:/# sysctl net.ipv6.conf.all.disable_ipv6
net.ipv6.conf.all.disable_ipv6 = 1

Initially I thought disabling IPv6 in the kernel would resolve the problem as I found some suggestions of this in some other threads, but it didn't seem to help, and then I found it was disabled inside the pods anyway.

If anyone can help me set this sysctl setting inside the pod or might know another reason why OpenVPN won't work inside this app please let me know.

 

[Baa]

I read through the TrueCharts documentation again and found this guide on setting up a VPN.
It suggests adding the two settings of;
[CODE
]pull-filter ignore "ifconfig-ipv6 "
pull-filter ignore "route-ipv6 "
[/CODE]

to my OpenVPN client config which has solved the problem!

I also had to use the UDP VPN configuration file as the TCP one didn't seem able to connect.

Everything seems fine now but I didn't like Deluge so I'm switching to qBittorrent anyway, but these findings will still be useful.