vnc and jdownloader shutting down after ovpn established a connection

[ckocyigit]

When restarting the docker whe WebUI runs as long as the ovpn client does not establish the connection to my vpn. After connecting to the vpn the WebUI dies and some empty network traffic reads appear in the logs.

[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 00-app-niceness.sh: executing...
[cont-init.d] 00-app-niceness.sh: exited 0.
[cont-init.d] 00-app-script.sh: executing...
[cont-init.d] 00-app-script.sh: exited 0.
[cont-init.d] 00-app-user-map.sh: executing...
[cont-init.d] 00-app-user-map.sh: exited 0.
[cont-init.d] 00-clean-logmonitor-states.sh: executing...
[cont-init.d] 00-clean-logmonitor-states.sh: exited 0.
[cont-init.d] 00-clean-tmp-dir.sh: executing...
[cont-init.d] 00-clean-tmp-dir.sh: exited 0.
[cont-init.d] 00-set-app-deps.sh: executing...
[cont-init.d] 00-set-app-deps.sh: exited 0.
[cont-init.d] 00-set-home.sh: executing...
[cont-init.d] 00-set-home.sh: exited 0.
[cont-init.d] 00-take-config-ownership.sh: executing...
[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 00-app-niceness.sh: executing...
[cont-init.d] 00-app-niceness.sh: exited 0.
[cont-init.d] 00-app-script.sh: executing...
[cont-init.d] 00-app-script.sh: exited 0.
[cont-init.d] 00-app-user-map.sh: executing...
[cont-init.d] 00-app-user-map.sh: exited 0.
[cont-init.d] 00-clean-logmonitor-states.sh: executing...
[cont-init.d] 00-clean-logmonitor-states.sh: exited 0.
[cont-init.d] 00-clean-tmp-dir.sh: executing...
[cont-init.d] 00-clean-tmp-dir.sh: exited 0.
[cont-init.d] 00-set-app-deps.sh: executing...
[cont-init.d] 00-set-app-deps.sh: exited 0.
[cont-init.d] 00-set-home.sh: executing...
[cont-init.d] 00-set-home.sh: exited 0.
[cont-init.d] 00-take-config-ownership.sh: executing...
[cont-init.d] 00-take-config-ownership.sh: exited 0.
[cont-init.d] 00-xdg-runtime-dir.sh: executing...
[cont-init.d] 00-xdg-runtime-dir.sh: exited 0.
[cont-init.d] 10-certs.sh: executing...
[cont-init.d] 10-certs.sh: exited 0.
[cont-init.d] 10-cjk-font.sh: executing...
[cont-init.d] 10-cjk-font.sh: exited 0.
[cont-init.d] 10-nginx.sh: executing...
[cont-init.d] 10-nginx.sh: exited 0.
[cont-init.d] 10-vnc-password.sh: executing...
[cont-init.d] 10-vnc-password.sh: exited 0.
[cont-init.d] 10-web-index.sh: executing...
[cont-init.d] 10-web-index.sh: exited 0.
[cont-init.d] jdownloader2.sh: executing...
[cont-init.d] jdownloader2.sh: exited 0.
[cont-init.d] done.
[services.d] starting services
[services.d] starting s6-fdholderd...
[services.d] starting nginx...
[services.d] starting xvfb...
[nginx] starting...
[xvfb] starting...
[services.d] starting certsmonitor...
[services.d] starting x11vnc...
[services.d] starting logmonitor...
[certsmonitor] disabling service: secure connection not enabled.
[services.d] starting statusmonitor...
[x11vnc] starting...
[logmonitor] no file to monitor: disabling service...
[services.d] starting openbox...
[statusmonitor] no file to monitor: disabling service...
19/07/2020 15:51:21 passing arg to libvncserver: -rfbport
19/07/2020 15:51:21 passing arg to libvncserver: 5900
19/07/2020 15:51:21 passing arg to libvncserver: -rfbportv6
19/07/2020 15:51:21 passing arg to libvncserver: -1
19/07/2020 15:51:21 passing arg to libvncserver: -httpportv6
19/07/2020 15:51:21 passing arg to libvncserver: -1
19/07/2020 15:51:21 passing arg to libvncserver: -desktop
19/07/2020 15:51:21 passing arg to libvncserver: JDownloader 2
19/07/2020 15:51:21 x11vnc version: 0.9.14 lastmod: 2015-11-14 pid: 5211
[openbox] starting...
19/07/2020 15:51:21 Using X display :0
19/07/2020 15:51:21 rootwin: 0x43 reswin: 0x200001 dpy: 0xd24489e0
19/07/2020 15:51:21
19/07/2020 15:51:21 ------------------ USEFUL INFORMATION ------------------
19/07/2020 15:51:21 X DAMAGE available on display, using it for polling hints.
19/07/2020 15:51:21 To disable this behavior use: '-noxdamage'
19/07/2020 15:51:21
19/07/2020 15:51:21 Most compositing window managers like 'compiz' or 'beryl'
19/07/2020 15:51:21 cause X DAMAGE to fail, and so you may not see any screen
19/07/2020 15:51:21 updates via VNC. Either disable 'compiz' (recommended) or
19/07/2020 15:51:21 supply the x11vnc '-noxdamage' command line option.
19/07/2020 15:51:21 X COMPOSITE available on display, using it for window polling.
19/07/2020 15:51:21 To disable this behavior use: '-noxcomposite'
19/07/2020 15:51:21
19/07/2020 15:51:21 Wireframing: -wireframe mode is in effect for window moves.
19/07/2020 15:51:21 If this yields undesired behavior (poor response, painting
19/07/2020 15:51:21 errors, etc) it may be disabled:
19/07/2020 15:51:21 - use '-nowf' to disable wireframing completely.
19/07/2020 15:51:21 - use '-nowcr' to disable the Copy Rectangle after the
19/07/2020 15:51:21 moved window is released in the new position.
19/07/2020 15:51:21 Also see the -help entry for tuning parameters.
19/07/2020 15:51:21 You can press 3 Alt_L's (Left "Alt" key) in a row to
19/07/2020 15:51:21 repaint the screen, also see the -fixscreen option for
19/07/2020 15:51:21 periodic repaints.
19/07/2020 15:51:21 GrabServer control via XTEST.
19/07/2020 15:51:21
19/07/2020 15:51:21 Scroll Detection: -scrollcopyrect mode is in effect to
19/07/2020 15:51:21 use RECORD extension to try to detect scrolling windows
19/07/2020 15:51:21 (induced by either user keystroke or mouse input).
19/07/2020 15:51:21 If this yields undesired behavior (poor response, painting
19/07/2020 15:51:21 errors, etc) it may be disabled via: '-noscr'
19/07/2020 15:51:21 Also see the -help entry for tuning parameters.
19/07/2020 15:51:21 You can press 3 Alt_L's (Left "Alt" key) in a row to
19/07/2020 15:51:21 repaint the screen, also see the -fixscreen option for
19/07/2020 15:51:21 periodic repaints.
19/07/2020 15:51:21
19/07/2020 15:51:21 XKEYBOARD: number of keysyms per keycode 7 is greater
19/07/2020 15:51:21 than 4 and 51 keysyms are mapped above 4.
19/07/2020 15:51:21 Automatically switching to -xkb mode.
19/07/2020 15:51:21 If this makes the key mapping worse you can
19/07/2020 15:51:21 disable it with the "-noxkb" option.
19/07/2020 15:51:21 Also, remember "-remap DEAD" for accenting characters.
19/07/2020 15:51:21
19/07/2020 15:51:21 X FBPM extension not supported.
Xlib: extension "DPMS" missing on display ":0".
19/07/2020 15:51:21 X display is not capable of DPMS.
19/07/2020 15:51:21 --------------------------------------------------------
19/07/2020 15:51:21
19/07/2020 15:51:21 Default visual ID: 0x21
19/07/2020 15:51:21 Read initial data from X display into framebuffer.
19/07/2020 15:51:21 initialize_screen: fb_depth/fb_bpp/fb_Bpl 24/32/5120
19/07/2020 15:51:21
19/07/2020 15:51:21 X display :0 is 32bpp depth=24 true color
19/07/2020 15:51:21
19/07/2020 15:51:21 Listening for VNC connections on TCP port 5900
19/07/2020 15:51:21
19/07/2020 15:51:21 Xinerama is present and active (e.g. multi-head).
19/07/2020 15:51:21 Xinerama: number of sub-screens: 1
19/07/2020 15:51:21 Xinerama: no blackouts needed (only one sub-screen)
19/07/2020 15:51:21
19/07/2020 15:51:21 fb read rate: 2976 MB/sec
19/07/2020 15:51:21 fast read: reset -wait ms to: 10
19/07/2020 15:51:21 fast read: reset -defer ms to: 10
19/07/2020 15:51:21 The X server says there are 10 mouse buttons.
19/07/2020 15:51:21 screen setup finished.
19/07/2020 15:51:21

The VNC desktop is: e825425ebbc3:0

0

---

Have you tried the x11vnc '-ncache' VNC client-side pixel caching feature yet?

The scheme stores pixel data offscreen on the VNC viewer side for faster
retrieval. It should work with any VNC viewer. Try it by running:

x11vnc -ncache 10 ...

One can also add -ncache_cr for smooth 'copyrect' window motion.
More info: http://www.karlrunge.com/x11vnc/faq.html#faq-client-caching

[services.d] starting app...
[app] starting JDownloader 2...
[services.d] done.
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
Sun Jul 19 15:52:00 2020 WARNING: file 'pass' is group or others accessible
Sun Jul 19 15:52:00 2020 OpenVPN 2.4.6 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 26 2018
Sun Jul 19 15:52:00 2020 library versions: OpenSSL 1.1.1b 26 Feb 2019, LZO 2.10
Sun Jul 19 15:52:00 2020 WARNING: --ping should normally be used with --ping-restart or --ping-exit
Sun Jul 19 15:52:00 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Jul 19 15:52:00 2020 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sun Jul 19 15:52:00 2020 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sun Jul 19 15:52:00 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]89.187.165.151:1194
Sun Jul 19 15:52:00 2020 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sun Jul 19 15:52:00 2020 UDP link local: (not bound)
Sun Jul 19 15:52:00 2020 UDP link remote: [AF_INET]89.187.165.151:1194
Sun Jul 19 15:52:00 2020 TLS: Initial packet from [AF_INET]89.187.165.151:1194, sid=4f6786b5 9bcd1144
Sun Jul 19 15:52:00 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Jul 19 15:52:00 2020 VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA
Sun Jul 19 15:52:00 2020 VERIFY OK: depth=1, C=PA, O=NordVPN, CN=NordVPN CA5
Sun Jul 19 15:52:00 2020 VERIFY KU OK
Sun Jul 19 15:52:00 2020 Validating certificate extended key usage
Sun Jul 19 15:52:00 2020 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sun Jul 19 15:52:00 2020 VERIFY EKU OK
Sun Jul 19 15:52:00 2020 VERIFY OK: depth=0, CN=ch264.nordvpn.com
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
Sun Jul 19 15:52:00 2020 WARNING: file 'pass' is group or others accessible
Sun Jul 19 15:52:00 2020 OpenVPN 2.4.6 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 26 2018
Sun Jul 19 15:52:00 2020 library versions: OpenSSL 1.1.1b 26 Feb 2019, LZO 2.10
Sun Jul 19 15:52:00 2020 WARNING: --ping should normally be used with --ping-restart or --ping-exit
Sun Jul 19 15:52:00 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Jul 19 15:52:00 2020 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sun Jul 19 15:52:00 2020 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sun Jul 19 15:52:00 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]89.187.165.151:1194
Sun Jul 19 15:52:00 2020 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sun Jul 19 15:52:00 2020 UDP link local: (not bound)
Sun Jul 19 15:52:00 2020 UDP link remote: [AF_INET]89.187.165.151:1194
Sun Jul 19 15:52:00 2020 TLS: Initial packet from [AF_INET]89.187.165.151:1194, sid=4f6786b5 9bcd1144
Sun Jul 19 15:52:00 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Jul 19 15:52:00 2020 VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA
Sun Jul 19 15:52:00 2020 VERIFY OK: depth=1, C=PA, O=NordVPN, CN=NordVPN CA5
Sun Jul 19 15:52:00 2020 VERIFY KU OK
Sun Jul 19 15:52:00 2020 Validating certificate extended key usage
Sun Jul 19 15:52:00 2020 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sun Jul 19 15:52:00 2020 VERIFY EKU OK
Sun Jul 19 15:52:00 2020 VERIFY OK: depth=0, CN=ch264.nordvpn.com
Sun Jul 19 15:52:01 2020 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Sun Jul 19 15:52:01 2020 [ch264.nordvpn.com] Peer Connection Initiated with [AF_INET]89.187.165.151:1194
Sun Jul 19 15:52:02 2020 SENT CONTROL [ch264.nordvpn.com]: 'PUSH_REQUEST' (status=1)
Sun Jul 19 15:52:02 2020 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 103.86.96.100,dhcp-option DNS 103.86.99.100,sndbuf 524288,rcvbuf 524288,explicit-exit-notify,comp-lzo no,route-gateway 10.8.3.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.8.3.2 255.255.255.0,peer-id 3,cipher AES-256-GCM'
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: timers and/or timeouts modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: explicit notify parm(s) modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: compression parms modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Sun Jul 19 15:52:02 2020 Socket Buffers: R=[212992->1048576] S=[212992->1048576]
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: --ifconfig/up options modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: route options modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: route-related options modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: peer-id set
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: adjusting link_mtu to 1657
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: data channel crypto options modified
Sun Jul 19 15:52:02 2020 Data Channel: using negotiated cipher 'AES-256-GCM'
Sun Jul 19 15:52:02 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Jul 19 15:52:02 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Jul 19 15:52:02 2020 ROUTE_GATEWAY 172.17.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:11:00:0a
Sun Jul 19 15:52:02 2020 TUN/TAP device tun0 opened
Sun Jul 19 15:52:02 2020 TUN/TAP TX queue length set to 100
Sun Jul 19 15:52:02 2020 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sun Jul 19 15:52:02 2020 /sbin/ip link set dev tun0 up mtu 1500
Sun Jul 19 15:52:02 2020 /sbin/ip addr add dev tun0 10.8.3.2/24 broadcast 10.8.3.255
Sun Jul 19 15:52:02 2020 /etc/openvpn/up.sh tun0 1500 1585 10.8.3.2 255.255.255.0 init
Sun Jul 19 15:52:02 2020 /sbin/ip route add 89.187.165.151/32 via 172.17.0.1
Sun Jul 19 15:52:02 2020 /sbin/ip route add 0.0.0.0/1 via 10.8.3.1
Sun Jul 19 15:52:02 2020 /sbin/ip route add 128.0.0.0/1 via 10.8.3.1
Sun Jul 19 15:52:02 2020 Initialization Sequence Completed
Sun Jul 19 15:52:02 2020 SENT CONTROL [ch264.nordvpn.com]: 'PUSH_REQUEST' (status=1)
Sun Jul 19 15:52:02 2020 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 103.86.96.100,dhcp-option DNS 103.86.99.100,sndbuf 524288,rcvbuf 524288,explicit-exit-notify,comp-lzo no,route-gateway 10.8.3.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.8.3.2 255.255.255.0,peer-id 3,cipher AES-256-GCM'
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: timers and/or timeouts modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: explicit notify parm(s) modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: compression parms modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Sun Jul 19 15:52:02 2020 Socket Buffers: R=[212992->1048576] S=[212992->1048576]
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: --ifconfig/up options modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: route options modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: route-related options modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: peer-id set
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: adjusting link_mtu to 1657
Sun Jul 19 15:52:02 2020 OPTIONS IMPORT: data channel crypto options modified
Sun Jul 19 15:52:02 2020 Data Channel: using negotiated cipher 'AES-256-GCM'
Sun Jul 19 15:52:02 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Jul 19 15:52:02 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Jul 19 15:52:02 2020 ROUTE_GATEWAY 172.17.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:11:00:0a
Sun Jul 19 15:52:02 2020 TUN/TAP device tun0 opened
Sun Jul 19 15:52:02 2020 TUN/TAP TX queue length set to 100
Sun Jul 19 15:52:02 2020 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sun Jul 19 15:52:02 2020 /sbin/ip link set dev tun0 up mtu 1500
Sun Jul 19 15:52:02 2020 /sbin/ip addr add dev tun0 10.8.3.2/24 broadcast 10.8.3.255
Sun Jul 19 15:52:02 2020 /etc/openvpn/up.sh tun0 1500 1585 10.8.3.2 255.255.255.0 init
Sun Jul 19 15:52:02 2020 /sbin/ip route add 89.187.165.151/32 via 172.17.0.1
Sun Jul 19 15:52:02 2020 /sbin/ip route add 0.0.0.0/1 via 10.8.3.1
Sun Jul 19 15:52:02 2020 /sbin/ip route add 128.0.0.0/1 via 10.8.3.1
Sun Jul 19 15:52:02 2020 Initialization Sequence Completed
[jdsupervisor] JDownloader2 not started yet. Proceeding...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed

[ghost]

I got the same issue, did you manage to fix it?

[ckocyigit]

sorry, did not get it to work. Just went with a VM

[ghost]

Yeah I ended up doing exactly what this docker was trying to fix, having 2 dockers.
I think its something to do with Openvpn changing something internally since JDownloader works if you remove your openvpn config (just using your own ip). Hopefully owner of this docker will fix it one day so we can come back to it.

[h1f0x]

Hi there, sorry i haven't checked the repos in a long time. :( Sorry for that, indeed some changes were happening, haven't figured it out yet sadly.