Jump to content
Not connected, Your IP: 18.191.62.68
AirVPN
airvpnclient

Bring AirVPN Suite RC1 up on boot -- rc.local issue

By airvpnclient, ... in Troubleshooting and Problems

Recommended Posts

airvpnclient    13

airvpnclient
Posted ...

Just started working on setting up vpn on a clean server using the new Airvpn Suite.  Nice work.  Seems like a more robust architecture that doesn't need the manual System-D fixes that using Hummingbird did.

Everything seems to be working as advertised when using goldcrest from a terminal prompt but does not work as expected via rc.local using this invocation:

goldcrest --air-connect --air-country canada --air-user <myairvpnusername> --air-password <myairvpnpassword>

Curiously, when I execute /etc/rc.local from the prompt, it works, but when rc.local is invoked on boot it fails to allow my user login (see post-boot journal grepped for bluetit below). 

Since my use case is to have vpn come up when the host boots and stay on permanently from then on, I am kinda stuck.   Any help appreciated.

Or maybe there is an easier way that I am missing?
  

Dec 30 20:26:34 osmc bluetit[204]: Starting Bluetit - AirVPN OpenVPN 3 Service 1.0.0 RC 1 - 22 December 2020
Dec 30 20:26:34 osmc bluetit[204]: OpenVPN core 3.6.6 AirVPN linux arm 32-bit
Dec 30 20:26:34 osmc bluetit[204]: Copyright (C) 2012-2020 OpenVPN Inc. All rights reserved.
Dec 30 20:26:34 osmc bluetit[241]: Bluetit daemon started with PID 241
Dec 30 20:26:34 osmc bluetit[241]: Successfully connected to D-Bus
Dec 30 20:26:34 osmc bluetit[241]: Reading run control directives from file /etc/airvpn/bluetit.rc
Dec 30 20:26:34 osmc bluetit[241]: IPv6 is not available in this system
Dec 30 20:26:34 osmc bluetit[241]: System country set to ca by Bluetit policy.
Dec 30 20:26:34 osmc bluetit[241]: Bluetit successfully initialized and ready
Dec 30 20:26:35 osmc bluetit[241]: AirVPN Manifest updater thread started
Dec 30 20:26:35 osmc bluetit[241]: AirVPN Manifest update interval is 15 minutes
Dec 30 20:26:35 osmc bluetit[241]: Updating AirVPN Manifest
Dec 30 20:26:35 osmc bluetit[241]: AirVPN Manifest successfully retrieved from server
Dec 30 20:26:36 osmc bluetit[241]: Requested method "version"
Dec 30 20:26:36 osmc bluetit[241]: Requested method "openvpn_info"
Dec 30 20:26:36 osmc bluetit[241]: Requested method "bluetit_status -> Bluetit is ready"
Dec 30 20:26:36 osmc bluetit[241]: Requested method "reset_bluetit_options -> Bluetit options successfully reset"
Dec 30 20:26:36 osmc bluetit[241]: Requested method "set_options: --air-ipv6 -> off"
Dec 30 20:26:36 osmc bluetit[241]: Requested method "set_options: --proto -> tcp"
Dec 30 20:26:36 osmc bluetit[241]: Requested method "set_options: --air-connect"
Dec 30 20:26:36 osmc bluetit[241]: Requested method "set_options: --air-country -> canada"
Dec 30 20:26:36 osmc bluetit[241]: Requested method "set_options: --air-user -> **********" <=== correct output obscured  here for security
Dec 30 20:26:36 osmc bluetit[241]: Requested method "set_options: --air-password -> ************"
Dec 30 20:26:36 osmc bluetit[241]: Requested method "airvpn_start_connection"
Dec 30 20:26:36 osmc bluetit[241]: OpenVPN3 connection successfully started
Dec 30 20:26:36 osmc bluetit[241]: Logging in AirVPN user ********** <==== correct but obscured here for security
Dec 30 20:26:36 osmc bluetit[241]: AirVPN login error: Login error
Dec 30 20:26:36 osmc bluetit[241]: ERROR: AirVPN login failed for user ******** <=== obsured here
Dec 30 20:41:46 osmc bluetit[241]: Updating AirVPN Manifest



 

Share this post

Link to post

Staff    9973

Staff
Posted ...
@airvpnclient

Hello!

An easier way will be available soon, in the next version, which will support a specific option to have Bluetit connect during the bootstrap (you will need bluetit.rc properly configured with your AirVPN credentials).

As a first attempt, can you please change your account password into one which only contains ASCII characters in [a-z} U [A-Z}  U [0-9]?  We ask you to do that because the only difference we can currently spot is that in one case rc.local is launched by init, while in the other one it is launched by a shell which might have a different character set. By using only ASCII characters such a problem would be solved.

We are looking forward to hearing from you.

Kind regards
 

Share this post

Link to post

airvpnclient    13

airvpnclient
Posted ...

Thought about that and wondered why the password was not interpreted as a string literal.  Tried escaping the special character that is part of my password and also saving it double-quoted in a variable and expanding in the invocation, but that didn't work either.

I will let you know whether simplifying the password works.

Thanks,

Share this post

Link to post

airvpnclient    13

airvpnclient
Posted ...

For what it is worth, here is the output of the command: systemctl status rc-local.service:
  

osmc@osmc:/etc/systemd/system$ sudo systemctl status rc-local.service
● rc-local.service - /etc/rc.local Compatibility
   Loaded: loaded (/lib/systemd/system/rc-local.service; enabled-runtime; vendor preset: enabled)
  Drop-In: /usr/lib/systemd/system/rc-local.service.d
           └─debian.conf
   Active: active (exited) since Thu 2020-12-31 15:20:03 EST; 1 day 4h ago
     Docs: man:systemd-rc-local-generator(8)
   Memory: 0B
   CGroup: /system.slice/rc-local.service

Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 Bluetit - AirVPN OpenVPN 3 Service 1.0.0 RC 1 - 22 December 2020
Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 OpenVPN core 3.6.6 AirVPN linux arm 32-bit
Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 Bluetit is ready
Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 Bluetit options successfully reset
Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 Bluetit successfully set to command line options
Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 Requesting AirVPN connection to Bluetit
Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 Logging in AirVPN user airvpnclient
Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 ERROR: AirVPN login failed for user airvpnclient
Dec 31 15:20:03 osmc rc.local[325]: 2020-12-31 15:20:03 VPN session terminated
Dec 31 15:20:03 osmc systemd[1]: Started /etc/rc.local Compatibility.

Share this post

Link to post

airvpnclient    13

airvpnclient
Posted ...

I keep fiddling with this when I have a minute.   Tried adding an ExecStartPost directive to the bluetit service unit file to launch goldcrest command - i.e.,
  

/etc/systemd/system/bluetit.service:

osmc@osmc:/etc/systemd/system$ cat bluetit.service 
[Unit]
Description=AirVPN Bluetit Daemon
Wants=network-online.service
After=network-online.service

[Service]
Type=forking
PIDFile=/etc/airvpn/bluetit.lock
ExecStart=/sbin/bluetit
ExecStartPost=-/usr/local/bin/goldcrest --air-connect --air-country canada --air-user airvpnclient --air-password ****** & #<= PW OBSCURED
ExecStop=/bin/kill -- $MAINPID
TimeoutStopSec=20
KillSignal=SIGTERM
KillMode=process

[Install]
WantedBy=multi-user.target

This failed, as we can see from the status output:
  
osmc@osmc:/etc/systemd/system$ systemctl status bluetit
● bluetit.service - AirVPN Bluetit Daemon
   Loaded: loaded (/etc/systemd/system/bluetit.service; enabled; vendor preset: enabled)
   Active: failed (Result: timeout) since Sat 2021-01-02 16:12:22 EST; 13min ago
  Process: 3497 ExecStart=/sbin/bluetit (code=exited, status=0/SUCCESS)
  Process: 3500 ExecStartPost=/usr/local/bin/goldcrest --air-connect --air-country canada --air-user airvpnclient --air-password **obscured** & (code=exited, status=0/SUCCESS)
   Memory: 6.1M
   CGroup: /system.slice/bluetit.service
           └─3499 /sbin/bluetit

Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 net_route_del: 104.254.90.237/32 via 192.168.1.1 dev eth0 table 0 metric 0
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 EVENT: DISCONNECTED
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 Successfully restored DNS settings
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 Network filter successfully restored
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 Logging out AirVPN user airvpnclient
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 VPN session terminated
Jan 02 16:12:22 osmc systemd[1]: bluetit.service: Failed with result 'timeout'.
Jan 02 16:12:22 osmc systemd[1]: Failed to start AirVPN Bluetit Daemon.
Jan 02 16:25:54 osmc bluetit[3499]: Updating AirVPN Manifest

But interestingly, I did briefly get logged in before something threw a SIGTERM as we see from grepping goldcrest in the journalctl output.  Haven't gone through it closely, but there seems to be some difficulty with firewalling and DNS redirection...:
  
Jan 02 16:08:41 osmc goldcrest[3457]: 2021-01-02 16:08:41 Reading run control directives from file /root/.goldcrest.rc
Jan 02 16:08:41 osmc goldcrest[3457]: Goldcrest 1.0.0 RC 1 - 22 December 2020
Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 Bluetit - AirVPN OpenVPN 3 Service 1.0.0 RC 1 - 22 December 2020
Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 OpenVPN core 3.6.6 AirVPN linux arm 32-bit
Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 Bluetit is ready
Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 Bluetit options successfully reset
Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 Bluetit successfully set to command line options
Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 Requesting AirVPN connection to Bluetit
Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:41 Logging in AirVPN user airvpnclient
Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:42 User country set to ca by Bluetit policy.
Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:08:42 AirVPN user airvpnclient successfully logged in
Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:10:11 Caught SIGTERM signal. Terminating.
Jan 02 16:10:11 osmc goldcrest[3457]: 2021-01-02 16:10:11 ERROR: D-Bus service org.airvpn.server is not available
Jan 02 16:10:51 osmc goldcrest[3500]: 2021-01-02 16:10:51 Reading run control directives from file /root/.goldcrest.rc
Jan 02 16:10:51 osmc goldcrest[3500]: Goldcrest 1.0.0 RC 1 - 22 December 2020
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 Bluetit - AirVPN OpenVPN 3 Service 1.0.0 RC 1 - 22 December 2020
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 OpenVPN core 3.6.6 AirVPN linux arm 32-bit
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 Bluetit is ready
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 Bluetit options successfully reset
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 Bluetit successfully set to command line options
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 Requesting AirVPN connection to Bluetit
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:51 Logging in AirVPN user airvpnclient
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 User country set to ca by Bluetit policy.
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 AirVPN user airvpnclient successfully logged in
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 Starting connection to currently best AirVPN server in Canada
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 Network lock set to 'on' by Bluetit policy
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 OpenVPN core 3.6.6 AirVPN linux arm 32-bit
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 Frame=512/2048/512 mssfix-ctrl=1250
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 UNUSED OPTIONS
Jan 02 16:11:05 osmc goldcrest[3500]: 6 [resolv-retry] [infinite]
Jan 02 16:11:05 osmc goldcrest[3500]: 7 [nobind]
Jan 02 16:11:05 osmc goldcrest[3500]: 8 [persist-key]
Jan 02 16:11:05 osmc goldcrest[3500]: 9 [persist-tun]
Jan 02 16:11:05 osmc goldcrest[3500]: 10 [auth-nocache]
Jan 02 16:11:05 osmc goldcrest[3500]: 11 [verb] [3]
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 EVENT: RESOLVE
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 Network filter and lock is using iptables-legacy
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 Successfully loaded kernel module iptable_filter
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:54 Successfully loaded kernel module iptable_nat
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Successfully loaded kernel module iptable_mangle
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 WARNING: Kernel module iptable_security not found. (-2)
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Successfully loaded kernel module iptable_raw
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Successfully loaded kernel module ip6table_filter
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 WARNING: Kernel module ip6table_nat not found. (-2)
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Successfully loaded kernel module ip6table_mangle
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 WARNING: Kernel module ip6table_security not found. (-2)
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Successfully loaded kernel module ip6table_raw
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Network filter successfully initialized
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Local IPv4 address 192.168.1.30
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Local interface eth0
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Setting up network filter and lock
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:10:55 Allowing system DNS 192.168.1.1 to pass through the network filter
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:00 Resolved server ca3.vpn.airdns.org into IPv4 104.254.90.237
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:00 Adding IPv4 server 104.254.90.237 to network filter
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:00 ERROR: Cannot activate network filter and lock
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 Server poll timeout, trying next remote entry...
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 EVENT: RECONNECTING
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 ERROR: Backup copy of resolv.conf not found.
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 ERROR: N_RECONNECT
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 EVENT: RESOLVE
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 Setting up network filter and lock
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:04 Allowing system DNS 192.168.1.1 to pass through the network filter
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 ERROR: Cannot allow system DNS to pass through network filter
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 Resolved server ca3.vpn.airdns.org into IPv4 104.254.90.237
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 Adding IPv4 server 104.254.90.237 to network filter
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 ERROR: Cannot activate network filter and lock
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 Contacting 104.254.90.237:443 via TCPv4
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 EVENT: WAIT
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 net_route_best_gw query IPv4: 104.254.90.237/32
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 sitnl_route_best_gw result: via 192.168.1.1 dev eth0
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 net_route_add: 104.254.90.237/32 via 192.168.1.1 dev eth0 table 0 metric 0
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 Connecting to [ca3.vpn.airdns.org]:443 (104.254.90.237) via TCPv4
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 EVENT: CONNECTING
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 Tunnel Options:V4,dev-type tun,link-mtu 1524,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 Peer Info:
Jan 02 16:11:05 osmc goldcrest[3500]: IV_VER=3.6.6 AirVPN
Jan 02 16:11:05 osmc goldcrest[3500]: IV_PLAT=linux
Jan 02 16:11:05 osmc goldcrest[3500]: IV_NCP=2
Jan 02 16:11:05 osmc goldcrest[3500]: IV_TCPNL=1
Jan 02 16:11:05 osmc goldcrest[3500]: IV_PROTO=30
Jan 02 16:11:05 osmc goldcrest[3500]: IV_CIPHERS=AES-256-GCM
Jan 02 16:11:05 osmc goldcrest[3500]: IV_LZO_STUB=1
Jan 02 16:11:05 osmc goldcrest[3500]: IV_COMP_STUB=1
Jan 02 16:11:05 osmc goldcrest[3500]: IV_COMP_STUBv2=1
Jan 02 16:11:05 osmc goldcrest[3500]: UV_IPV6=no
Jan 02 16:11:05 osmc goldcrest[3500]: IV_GUI_VER=Bluetit - AirVPN OpenVPN 3 Service 1.0.0 RC 1
Jan 02 16:11:05 osmc goldcrest[3500]: IV_SSL=OpenSSL 1.1.1d  10 Sep 2019
Jan 02 16:11:05 osmc goldcrest[3500]: 2021-01-02 16:11:05 VERIFY OK: depth=1, /C=IT/ST=IT/L=Perugia/O=airvpn.org/CN=airvpn.org CA/emailAddress=info@airvpn.org, signature: RSA-SHA1
Jan 02 16:12:22 osmc dbus-daemon[208]: [system] Rejected send message, 3 matched rules; type="error", sender=":1.124" (uid=0 pid=3500 comm="/usr/local/bin/goldcrest --air-connect --air-count") interface="(unset)" member="(unset)" error name="org.freedesktop.DBus.Error.UnknownMethod" requested_reply="0" destination=":1.123" (uid=0 pid=3499 comm="/sbin/bluetit ")
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:05 VERIFY OK: depth=0, /C=IT/ST=IT/L=Perugia/O=airvpn.org/CN=Chort/emailAddress=info@airvpn.org, signature: RSA-SHA512
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 SSL Handshake: peer certificate: CN=Chort, 4096 bit RSA, cipher: TLS_CHACHA20_POLY1305_SHA256 TLSv1.3 Kx=any      Au=any  Enc=CHACHA20/POLY1305(256) Mac=AEAD
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Session is ACTIVE
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 EVENT: WARN TLS: received certificate signed with SHA1. Please inform your admin to upgrade to a stronger algorithm. Support for SHA1 signatures will be dropped in the future
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 EVENT: GET_CONFIG
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Sending PUSH_REQUEST to server...
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 OPTIONS:
Jan 02 16:12:22 osmc goldcrest[3500]: 0 [comp-lzo] [no]
Jan 02 16:12:22 osmc goldcrest[3500]: 1 [redirect-gateway] [def1] [bypass-dhcp]
Jan 02 16:12:22 osmc goldcrest[3500]: 2 [dhcp-option] [DNS] [10.14.59.1]
Jan 02 16:12:22 osmc goldcrest[3500]: 3 [route-gateway] [10.14.59.1]
Jan 02 16:12:22 osmc goldcrest[3500]: 4 [topology] [subnet]
Jan 02 16:12:22 osmc goldcrest[3500]: 5 [ping] [10]
Jan 02 16:12:22 osmc goldcrest[3500]: 6 [ping-restart] [60]
Jan 02 16:12:22 osmc goldcrest[3500]: 7 [ifconfig] [10.14.59.24] [255.255.255.0]
Jan 02 16:12:22 osmc goldcrest[3500]: 8 [peer-id] [0]
Jan 02 16:12:22 osmc goldcrest[3500]: 9 [cipher] [AES-256-GCM]
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 PROTOCOL OPTIONS:
Jan 02 16:12:22 osmc goldcrest[3500]:   cipher: AES-256-GCM
Jan 02 16:12:22 osmc goldcrest[3500]:   digest: NONE
Jan 02 16:12:22 osmc goldcrest[3500]:   ncp enabled: yes
Jan 02 16:12:22 osmc goldcrest[3500]:   key-derivation: OpenVPN PRF
Jan 02 16:12:22 osmc goldcrest[3500]:   compress: LZO_STUB
Jan 02 16:12:22 osmc goldcrest[3500]:   peer ID: 0
Jan 02 16:12:22 osmc goldcrest[3500]:   control channel: tls-crypt enabled
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 EVENT: ASSIGN_IP
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 VPN Server has pushed IPv4 DNS server 10.14.59.1
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Setting pushed IPv4 DNS server 10.14.59.1 in resolv.conf
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 net_iface_mtu_set: mtu 1500 for tun0
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 net_iface_up: set tun0 up
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 net_addr_add: 10.14.59.24/24 brd 10.14.59.255 dev tun0
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 net_route_add: 0.0.0.0/1 via 10.14.59.1 dev tun0 table 0 metric 0
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 net_route_add: 128.0.0.0/1 via 10.14.59.1 dev tun0 table 0 metric 0
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Connected via tun
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 LZO-ASYM init swap=0 asym=1
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Comp-stub init swap=0
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 EVENT: CONNECTED ca3.vpn.airdns.org:443 (104.254.90.237) via /TCPv4 on tun/10.14.59.24/ gw=[10.14.59.1/]
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Connected to currently best AirVPN server in Canada
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 Server has pushed its own DNS. Removing system DNS from network filter.
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:06 System DNS 192.168.1.1 is now rejected by the network filter
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 ----------------------
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 Connected to AirVPN server  (, )
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 Users 0 - Load 0% - Bandwidth 0 bit/s - Max 0 bit/s
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 Connection time: 00:00:57
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 Transferred data: In , Out
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 Current rate: In 0 bit/s, Out 0 bit/s
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:11:51 Maximum rate: In 0 bit/s, Out 0 bit/s
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:21 Caught SIGTERM signal. Terminating.
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:21 Bluetit is connected to VPN
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:21 Requesting VPN connection termination to Bluetit
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 net_route_del: 0.0.0.0/1 via 10.14.59.1 dev tun0 table 0 metric 0
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 net_addr_del: 10.14.59.24/24 dev tun0
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 net_iface_mtu_set: mtu 1500 for tun0
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 net_iface_up: set tun0 down
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 net_route_del: 104.254.90.237/32 via 192.168.1.1 dev eth0 table 0 metric 0
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 EVENT: DISCONNECTED
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 Successfully restored DNS settings
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 Network filter successfully restored
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 Logging out AirVPN user airvpnclient
Jan 02 16:12:22 osmc goldcrest[3500]: 2021-01-02 16:12:22 VPN session terminated

Share this post

Link to post

Staff    9973

Staff
Posted ...
@airvpnclient

Hello!

That's expected, as systemd does not support daemons which fork (Bluetit performs a double fork). See here:
https://www.freedesktop.org/software/systemd/man/systemd.service.html

Look at "Options" for "Type=":
 
Quote

If set to forking, it is expected that the process configured with ExecStart= will call fork() as part of its start-up. The parent process is expected to exit when start-up is complete and all communication channels are set up. The child continues to run as the main service process, and the service manager will consider the unit started when the parent process exits. This is the behavior of traditional UNIX services.


You can then see why systemd sends SIGTERM when it meets a real daemon.

That's obviously obscene filthy crap, but makes Windows-ish and other miserable wannabe programmers happy, because allows them to run at system bootstrap, as "units", even processes which are not real daemons, which do not respect UNIX policy. Nothing to be surprised of with systemd anyway, you can't expect much from a repellent, non POSIX compliant crouch.

For your specific use case, you can consider to run Hummingbird, as runnning Goldcrest+Blueiti in that way does not make much sense, or you can wait for Bluetit release which (it's official now) will include options to connect at bootstrap.

Kind regards
 

Share this post

Link to post

airvpnclient    13

airvpnclient
Posted ...

Thanks.  Figured that Hummingbird was the way to go for now.  Yep -- not a fan of the Borg/Systemd myself.  As you say -- philosopically non-unix.

So long, and thanks for all the fish.

 

Share this post

Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
×
  • Security Check
    Play CAPTCHA Audio
    Refresh Image
Go To Topic Listing
×
×
  • Create New...