airvpnclient 13 Posted ... Just started working on setting up vpn on a clean server using the new Airvpn Suite. Nice work. Seems like a more robust architecture that doesn't need the manual System-D fixes that using Hummingbird did. Everything seems to be working as advertised when using goldcrest from a terminal prompt but does not work as expected via rc.local using this invocation: goldcrest --air-connect --air-country canada --air-user <myairvpnusername> --air-password <myairvpnpassword> Curiously, when I execute /etc/rc.local from the prompt, it works, but when rc.local is invoked on boot it fails to allow my user login (see post-boot journal grepped for bluetit below). Since my use case is to have vpn come up when the host boots and stay on permanently from then on, I am kinda stuck. Any help appreciated. Or maybe there is an easier way that I am missing? Dec 30 20:26:34 osmc bluetit[204]: Starting Bluetit - AirVPN OpenVPN 3 Service 1.0.0 RC 1 - 22 December 2020 Dec 30 20:26:34 osmc bluetit[204]: OpenVPN core 3.6.6 AirVPN linux arm 32-bit Dec 30 20:26:34 osmc bluetit[204]: Copyright (C) 2012-2020 OpenVPN Inc. All rights reserved. Dec 30 20:26:34 osmc bluetit[241]: Bluetit daemon started with PID 241 Dec 30 20:26:34 osmc bluetit[241]: Successfully connected to D-Bus Dec 30 20:26:34 osmc bluetit[241]: Reading run control directives from file /etc/airvpn/bluetit.rc Dec 30 20:26:34 osmc bluetit[241]: IPv6 is not available in this system Dec 30 20:26:34 osmc bluetit[241]: System country set to ca by Bluetit policy. Dec 30 20:26:34 osmc bluetit[241]: Bluetit successfully initialized and ready Dec 30 20:26:35 osmc bluetit[241]: AirVPN Manifest updater thread started Dec 30 20:26:35 osmc bluetit[241]: AirVPN Manifest update interval is 15 minutes Dec 30 20:26:35 osmc bluetit[241]: Updating AirVPN Manifest Dec 30 20:26:35 osmc bluetit[241]: AirVPN Manifest successfully retrieved from server Dec 30 20:26:36 osmc bluetit[241]: Requested method "version" Dec 30 20:26:36 osmc bluetit[241]: Requested method "openvpn_info" Dec 30 20:26:36 osmc bluetit[241]: Requested method "bluetit_status -> Bluetit is ready" Dec 30 20:26:36 osmc bluetit[241]: Requested method "reset_bluetit_options -> Bluetit options successfully reset" Dec 30 20:26:36 osmc bluetit[241]: Requested method "set_options: --air-ipv6 -> off" Dec 30 20:26:36 osmc bluetit[241]: Requested method "set_options: --proto -> tcp" Dec 30 20:26:36 osmc bluetit[241]: Requested method "set_options: --air-connect" Dec 30 20:26:36 osmc bluetit[241]: Requested method "set_options: --air-country -> canada" Dec 30 20:26:36 osmc bluetit[241]: Requested method "set_options: --air-user -> **********" <=== correct output obscured here for security Dec 30 20:26:36 osmc bluetit[241]: Requested method "set_options: --air-password -> ************" Dec 30 20:26:36 osmc bluetit[241]: Requested method "airvpn_start_connection" Dec 30 20:26:36 osmc bluetit[241]: OpenVPN3 connection successfully started Dec 30 20:26:36 osmc bluetit[241]: Logging in AirVPN user ********** <==== correct but obscured here for security Dec 30 20:26:36 osmc bluetit[241]: AirVPN login error: Login error Dec 30 20:26:36 osmc bluetit[241]: ERROR: AirVPN login failed for user ******** <=== obsured here Dec 30 20:41:46 osmc bluetit[241]: Updating AirVPN Manifest Quote Share this post Link to post
Staff 9973 Posted ... @airvpnclient Hello! An easier way will be available soon, in the next version, which will support a specific option to have Bluetit connect during the bootstrap (you will need bluetit.rc properly configured with your AirVPN credentials). As a first attempt, can you please change your account password into one which only contains ASCII characters in [a-z} U [A-Z} U [0-9]? We ask you to do that because the only difference we can currently spot is that in one case rc.local is launched by init, while in the other one it is launched by a shell which might have a different character set. By using only ASCII characters such a problem would be solved. We are looking forward to hearing from you. Kind regards Quote Share this post Link to post
airvpnclient 13 Posted ... Thought about that and wondered why the password was not interpreted as a string literal. Tried escaping the special character that is part of my password and also saving it double-quoted in a variable and expanding in the invocation, but that didn't work either. I will let you know whether simplifying the password works. Thanks, Quote Share this post Link to post
airvpnclient 13 Posted ... Well, same result with a simple password with characters limited to the following sets: [0-9][A-Z][a-z]. Very odd. Quote Share this post Link to post
Staff 9973 Posted ... @airvpnclient Hello! Indeed. Let's try to reproduce it. Which system do you run? Kind regards Quote Share this post Link to post
airvpnclient 13 Posted ... https://osmc.tv/download/ On rpi 2 -- ARML7 32bit. 1 Staff reacted to this Quote Share this post Link to post
airvpnclient 13 Posted ... image is here: https://ftp.fau.de/osmc/osmc/download//installers/diskimages/OSMC_TGT_rbp2_20201227.img.gz Quote Share this post Link to post
OpenSourcerer 1435 Posted ... Does your password happen to contain a space? Quote Hide OpenSourcerer's signature Hide all signatures NOT AN AIRVPN TEAM MEMBER. USE TICKETS FOR PROFESSIONAL SUPPORT. LZ1's New User Guide to AirVPN « Plenty of stuff for advanced users, too! Want to contact me directly? All relevant methods are on my About me page. Share this post Link to post
airvpnclient 13 Posted ... No space - just numerals and upper and lower case alpha. Should be able to reproduce on any Debian system, I expect. Happy 2021! Quote Share this post Link to post
airvpnclient 13 Posted ... For what it is worth, here is the output of the command: systemctl status rc-local.service: osmc@osmc:/etc/systemd/system$ sudo systemctl status rc-local.service ● rc-local.service - /etc/rc.local Compatibility Loaded: loaded (/lib/systemd/system/rc-local.service; enabled-runtime; vendor preset: enabled) Drop-In: /usr/lib/systemd/system/rc-local.service.d └─debian.conf Active: active (exited) since Thu 2020-12-31 15:20:03 EST; 1 day 4h ago Docs: man:systemd-rc-local-generator(8) Memory: 0B CGroup: /system.slice/rc-local.service Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 Bluetit - AirVPN OpenVPN 3 Service 1.0.0 RC 1 - 22 December 2020 Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 OpenVPN core 3.6.6 AirVPN linux arm 32-bit Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 Bluetit is ready Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 Bluetit options successfully reset Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 Bluetit successfully set to command line options Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 Requesting AirVPN connection to Bluetit Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 Logging in AirVPN user airvpnclient Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 ERROR: AirVPN login failed for user airvpnclient Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 VPN session terminated Dec 31 15:20:03 osmc systemd[1]: Started /etc/rc.local Compatibility. Quote Share this post Link to post
airvpnclient 13 Posted ... I keep fiddling with this when I have a minute. Tried adding an ExecStartPost directive to the bluetit service unit file to launch goldcrest command - i.e., /etc/systemd/system/bluetit.service: osmc@osmc:/etc/systemd/system$ cat bluetit.service [Unit] Description=AirVPN Bluetit Daemon Wants=network-online.service After=network-online.service [Service] Type=forking PIDFile=/etc/airvpn/bluetit.lock ExecStart=/sbin/bluetit ExecStartPost=-/usr/local/bin/goldcrest --air-connect --air-country canada --air-user airvpnclient --air-password ****** & #<= PW OBSCURED ExecStop=/bin/kill -- $MAINPID TimeoutStopSec=20 KillSignal=SIGTERM KillMode=process [Install] WantedBy=multi-user.target This failed, as we can see from the status output: osmc@osmc:/etc/systemd/system$ systemctl status bluetit ● bluetit.service - AirVPN Bluetit Daemon Loaded: loaded (/etc/systemd/system/bluetit.service; enabled; vendor preset: enabled) Active: failed (Result: timeout) since Sat 2021-01-02 16:12:22 EST; 13min ago Process: 3497 ExecStart=/sbin/bluetit (code=exited, status=0/SUCCESS) Process: 3500 ExecStartPost=/usr/local/bin/goldcrest --air-connect --air-country canada --air-user airvpnclient --air-password **obscured** & (code=exited, status=0/SUCCESS) Memory: 6.1M CGroup: /system.slice/bluetit.service └─3499 /sbin/bluetit Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 net_route_del: 104.254.90.237/32 via 192.168.1.1 dev eth0 table 0 metric 0 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 EVENT: DISCONNECTED Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 Successfully restored DNS settings Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 Network filter successfully restored Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 Logging out AirVPN user airvpnclient Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 VPN session terminated Jan 02 16:12:22 osmc systemd[1]: bluetit.service: Failed with result 'timeout'. Jan 02 16:12:22 osmc systemd[1]: Failed to start AirVPN Bluetit Daemon. Jan 02 16:25:54 osmc bluetit[3499]: Updating AirVPN Manifest But interestingly, I did briefly get logged in before something threw a SIGTERM as we see from grepping goldcrest in the journalctl output. Haven't gone through it closely, but there seems to be some difficulty with firewalling and DNS redirection...: Jan 02 16:08:41 osmc goldcrest[3457]: 2021-01-02 16:08:41 Reading run control directives from file /root/.goldcrest.rc Jan 02 16:08:41 osmc goldcrest[3457]: Goldcrest 1.0.0 RC 1 - 22 December 2020 Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 Bluetit - AirVPN OpenVPN 3 Service 1.0.0 RC 1 - 22 December 2020 Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 OpenVPN core 3.6.6 AirVPN linux arm 32-bit Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 Bluetit is ready Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 Bluetit options successfully reset Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 Bluetit successfully set to command line options Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 Requesting AirVPN connection to Bluetit Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 Logging in AirVPN user airvpnclient Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:42 User country set to ca by Bluetit policy. Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:42 AirVPN user airvpnclient successfully logged in Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:10:11 Caught SIGTERM signal. Terminating. Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:10:11 ERROR: D-Bus service org.airvpn.server is not available Jan 02 16:10:51 osmc goldcrest[3500]: 2021-01-02 16:10:51 Reading run control directives from file /root/.goldcrest.rc Jan 02 16:10:51 osmc goldcrest[3500]: Goldcrest 1.0.0 RC 1 - 22 December 2020 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 Bluetit - AirVPN OpenVPN 3 Service 1.0.0 RC 1 - 22 December 2020 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 OpenVPN core 3.6.6 AirVPN linux arm 32-bit Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 Bluetit is ready Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 Bluetit options successfully reset Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 Bluetit successfully set to command line options Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 Requesting AirVPN connection to Bluetit Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 Logging in AirVPN user airvpnclient Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 User country set to ca by Bluetit policy. Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 AirVPN user airvpnclient successfully logged in Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 Starting connection to currently best AirVPN server in Canada Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 Network lock set to 'on' by Bluetit policy Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 OpenVPN core 3.6.6 AirVPN linux arm 32-bit Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 Frame=512/2048/512 mssfix-ctrl=1250 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 UNUSED OPTIONS Jan 02 16:11:05 osmc goldcrest[3500]: 6 [resolv-retry] [infinite] Jan 02 16:11:05 osmc goldcrest[3500]: 7 [nobind] Jan 02 16:11:05 osmc goldcrest[3500]: 8 [persist-key] Jan 02 16:11:05 osmc goldcrest[3500]: 9 [persist-tun] Jan 02 16:11:05 osmc goldcrest[3500]: 10 [auth-nocache] Jan 02 16:11:05 osmc goldcrest[3500]: 11 [verb] [3] Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 EVENT: RESOLVE Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 Network filter and lock is using iptables-legacy Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 Successfully loaded kernel module iptable_filter Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 Successfully loaded kernel module iptable_nat Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Successfully loaded kernel module iptable_mangle Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 WARNING: Kernel module iptable_security not found. (-2) Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Successfully loaded kernel module iptable_raw Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Successfully loaded kernel module ip6table_filter Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 WARNING: Kernel module ip6table_nat not found. (-2) Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Successfully loaded kernel module ip6table_mangle Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 WARNING: Kernel module ip6table_security not found. (-2) Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Successfully loaded kernel module ip6table_raw Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Network filter successfully initialized Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Local IPv4 address 192.168.1.30 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Local interface eth0 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Setting up network filter and lock Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Allowing system DNS 192.168.1.1 to pass through the network filter Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:00 Resolved server ca3.vpn.airdns.org into IPv4 104.254.90.237 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:00 Adding IPv4 server 104.254.90.237 to network filter Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:00 ERROR: Cannot activate network filter and lock Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 Server poll timeout, trying next remote entry... Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 EVENT: RECONNECTING Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 ERROR: Backup copy of resolv.conf not found. Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 ERROR: N_RECONNECT Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 EVENT: RESOLVE Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 Setting up network filter and lock Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 Allowing system DNS 192.168.1.1 to pass through the network filter Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 ERROR: Cannot allow system DNS to pass through network filter Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 Resolved server ca3.vpn.airdns.org into IPv4 104.254.90.237 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 Adding IPv4 server 104.254.90.237 to network filter Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 ERROR: Cannot activate network filter and lock Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 Contacting 104.254.90.237:443 via TCPv4 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 EVENT: WAIT Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 net_route_best_gw query IPv4: 104.254.90.237/32 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 sitnl_route_best_gw result: via 192.168.1.1 dev eth0 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 net_route_add: 104.254.90.237/32 via 192.168.1.1 dev eth0 table 0 metric 0 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 Connecting to [ca3.vpn.airdns.org]:443 (104.254.90.237) via TCPv4 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 EVENT: CONNECTING Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 Tunnel Options:V4,dev-type tun,link-mtu 1524,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 Peer Info: Jan 02 16:11:05 osmc goldcrest[3500]: IV_VER=3.6.6 AirVPN Jan 02 16:11:05 osmc goldcrest[3500]: IV_PLAT=linux Jan 02 16:11:05 osmc goldcrest[3500]: IV_NCP=2 Jan 02 16:11:05 osmc goldcrest[3500]: IV_TCPNL=1 Jan 02 16:11:05 osmc goldcrest[3500]: IV_PROTO=30 Jan 02 16:11:05 osmc goldcrest[3500]: IV_CIPHERS=AES-256-GCM Jan 02 16:11:05 osmc goldcrest[3500]: IV_LZO_STUB=1 Jan 02 16:11:05 osmc goldcrest[3500]: IV_COMP_STUB=1 Jan 02 16:11:05 osmc goldcrest[3500]: IV_COMP_STUBv2=1 Jan 02 16:11:05 osmc goldcrest[3500]: UV_IPV6=no Jan 02 16:11:05 osmc goldcrest[3500]: IV_GUI_VER=Bluetit - AirVPN OpenVPN 3 Service 1.0.0 RC 1 Jan 02 16:11:05 osmc goldcrest[3500]: IV_SSL=OpenSSL 1.1.1d 10 Sep 2019 Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 VERIFY OK: depth=1, /C=IT/ST=IT/L=Perugia/O=airvpn.org/CN=airvpn.org CA/emailAddress=info@airvpn.org, signature: RSA-SHA1 Jan 02 16:12:22 osmc dbus-daemon[208]: [system] Rejected send message, 3 matched rules; type="error", sender=":1.124" (uid=0 pid=3500 comm="/usr/local/bin/goldcrest --air-connect --air-count") interface="(unset)" member="(unset)" error name="org.freedesktop.DBus.Error.UnknownMethod" requested_reply="0" destination=":1.123" (uid=0 pid=3499 comm="/sbin/bluetit ") Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:05 VERIFY OK: depth=0, /C=IT/ST=IT/L=Perugia/O=airvpn.org/CN=Chort/emailAddress=info@airvpn.org, signature: RSA-SHA512 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 SSL Handshake: peer certificate: CN=Chort, 4096 bit RSA, cipher: TLS_CHACHA20_POLY1305_SHA256 TLSv1.3 Kx=any Au=any Enc=CHACHA20/POLY1305(256) Mac=AEAD Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Session is ACTIVE Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 EVENT: WARN TLS: received certificate signed with SHA1. Please inform your admin to upgrade to a stronger algorithm. Support for SHA1 signatures will be dropped in the future Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 EVENT: GET_CONFIG Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Sending PUSH_REQUEST to server... Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 OPTIONS: Jan 02 16:12:22 osmc goldcrest[3500]: 0 [comp-lzo] [no] Jan 02 16:12:22 osmc goldcrest[3500]: 1 [redirect-gateway] [def1] [bypass-dhcp] Jan 02 16:12:22 osmc goldcrest[3500]: 2 [dhcp-option] [DNS] [10.14.59.1] Jan 02 16:12:22 osmc goldcrest[3500]: 3 [route-gateway] [10.14.59.1] Jan 02 16:12:22 osmc goldcrest[3500]: 4 [topology] [subnet] Jan 02 16:12:22 osmc goldcrest[3500]: 5 [ping] [10] Jan 02 16:12:22 osmc goldcrest[3500]: 6 [ping-restart] [60] Jan 02 16:12:22 osmc goldcrest[3500]: 7 [ifconfig] [10.14.59.24] [255.255.255.0] Jan 02 16:12:22 osmc goldcrest[3500]: 8 [peer-id] [0] Jan 02 16:12:22 osmc goldcrest[3500]: 9 [cipher] [AES-256-GCM] Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 PROTOCOL OPTIONS: Jan 02 16:12:22 osmc goldcrest[3500]: cipher: AES-256-GCM Jan 02 16:12:22 osmc goldcrest[3500]: digest: NONE Jan 02 16:12:22 osmc goldcrest[3500]: ncp enabled: yes Jan 02 16:12:22 osmc goldcrest[3500]: key-derivation: OpenVPN PRF Jan 02 16:12:22 osmc goldcrest[3500]: compress: LZO_STUB Jan 02 16:12:22 osmc goldcrest[3500]: peer ID: 0 Jan 02 16:12:22 osmc goldcrest[3500]: control channel: tls-crypt enabled Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 EVENT: ASSIGN_IP Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 VPN Server has pushed IPv4 DNS server 10.14.59.1 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Setting pushed IPv4 DNS server 10.14.59.1 in resolv.conf Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 net_iface_mtu_set: mtu 1500 for tun0 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 net_iface_up: set tun0 up Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 net_addr_add: 10.14.59.24/24 brd 10.14.59.255 dev tun0 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 net_route_add: 0.0.0.0/1 via 10.14.59.1 dev tun0 table 0 metric 0 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 net_route_add: 128.0.0.0/1 via 10.14.59.1 dev tun0 table 0 metric 0 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Connected via tun Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 LZO-ASYM init swap=0 asym=1 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Comp-stub init swap=0 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 EVENT: CONNECTED ca3.vpn.airdns.org:443 (104.254.90.237) via /TCPv4 on tun/10.14.59.24/ gw=[10.14.59.1/] Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Connected to currently best AirVPN server in Canada Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Server has pushed its own DNS. Removing system DNS from network filter. Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 System DNS 192.168.1.1 is now rejected by the network filter Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 ---------------------- Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 Connected to AirVPN server (, ) Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 Users 0 - Load 0% - Bandwidth 0 bit/s - Max 0 bit/s Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 Connection time: 00:00:57 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 Transferred data: In , Out Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 Current rate: In 0 bit/s, Out 0 bit/s Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 Maximum rate: In 0 bit/s, Out 0 bit/s Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:21 Caught SIGTERM signal. Terminating. Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:21 Bluetit is connected to VPN Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:21 Requesting VPN connection termination to Bluetit Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 net_route_del: 0.0.0.0/1 via 10.14.59.1 dev tun0 table 0 metric 0 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 net_addr_del: 10.14.59.24/24 dev tun0 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 net_iface_mtu_set: mtu 1500 for tun0 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 net_iface_up: set tun0 down Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 net_route_del: 104.254.90.237/32 via 192.168.1.1 dev eth0 table 0 metric 0 Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 EVENT: DISCONNECTED Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 Successfully restored DNS settings Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 Network filter successfully restored Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 Logging out AirVPN user airvpnclient Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 VPN session terminated Quote Share this post Link to post
Staff 9973 Posted ... @airvpnclient Hello! That's expected, as systemd does not support daemons which fork (Bluetit performs a double fork). See here:https://www.freedesktop.org/software/systemd/man/systemd.service.html Look at "Options" for "Type=": Quote If set to forking, it is expected that the process configured with ExecStart= will call fork() as part of its start-up. The parent process is expected to exit when start-up is complete and all communication channels are set up. The child continues to run as the main service process, and the service manager will consider the unit started when the parent process exits. This is the behavior of traditional UNIX services. You can then see why systemd sends SIGTERM when it meets a real daemon. That's obviously obscene filthy crap, but makes Windows-ish and other miserable wannabe programmers happy, because allows them to run at system bootstrap, as "units", even processes which are not real daemons, which do not respect UNIX policy. Nothing to be surprised of with systemd anyway, you can't expect much from a repellent, non POSIX compliant crouch. For your specific use case, you can consider to run Hummingbird, as runnning Goldcrest+Blueiti in that way does not make much sense, or you can wait for Bluetit release which (it's official now) will include options to connect at bootstrap. Kind regards Quote Share this post Link to post
airvpnclient 13 Posted ... Thanks. Figured that Hummingbird was the way to go for now. Yep -- not a fan of the Borg/Systemd myself. As you say -- philosopically non-unix. So long, and thanks for all the fish. Quote Share this post Link to post