2014-07-01 07:04:20 +00:00
|
|
|
# Debugging
|
|
|
|
|
|
|
|
|
|
Random things I do to debug the containers.
|
|
|
|
|
|
2014-07-09 19:09:47 +00:00
|
|
|
## Login Shells
|
|
|
|
|
|
|
|
|
|
* Create a shell in the running docker container (aka namespace) with [nsenter](https://github.com/jpetazzo/nsenter)
|
|
|
|
|
* If you don't have nsenter/docker-enter, you can mount the data container and modify it with
|
|
|
|
|
|
2016-09-03 23:08:49 +00:00
|
|
|
docker run --rm -it -v $OVPN_DATA:/etc/openvpn kylemanna/openvpn bash -l
|
2014-07-09 19:09:47 +00:00
|
|
|
|
2014-07-01 07:04:20 +00:00
|
|
|
## Stream OpenVPN Logs
|
|
|
|
|
|
|
|
|
|
1. Get the container's name or container ID:
|
|
|
|
|
|
|
|
|
|
root@vpn:~/docker-openvpn# docker ps
|
|
|
|
|
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
|
|
|
|
|
ed335aaa9b82 kylemanna/openvpn:latest ovpn_run 5 minutes ago Up 5 minutes 0.0.0.0:1194->1194/udp sad_lovelace
|
|
|
|
|
|
|
|
|
|
2. Tail the logs:
|
|
|
|
|
|
|
|
|
|
root@vpn:~/docker-openvpn# docker logs -f sad_lovelace
|
|
|
|
|
+ mkdir -p /dev/net
|
|
|
|
|
+ [ ! -c /dev/net/tun ]
|
|
|
|
|
+ mknod /dev/net/tun c 10 200
|
|
|
|
|
+ [ ! -d /etc/openvpn/ccd ]
|
|
|
|
|
+ iptables -t nat -A POSTROUTING -s 192.168.254.0/24 -o eth0 -j MASQUERADE
|
|
|
|
|
+ iptables -t nat -A POSTROUTING -s 192.168.255.0/24 -o eth0 -j MASQUERADE
|
|
|
|
|
+ conf=/etc/openvpn/openvpn.conf
|
|
|
|
|
+ [ ! -s /etc/openvpn/openvpn.conf ]
|
|
|
|
|
+ conf=/etc/openvpn/udp1194.conf
|
|
|
|
|
+ openvpn --config /etc/openvpn/udp1194.conf
|
|
|
|
|
Tue Jul 1 06:56:48 2014 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Mar 17 2014
|
|
|
|
|
Tue Jul 1 06:56:49 2014 Diffie-Hellman initialized with 2048 bit key
|
|
|
|
|
Tue Jul 1 06:56:49 2014 Control Channel Authentication: using '/etc/openvpn/pki/ta.key' as a OpenVPN static key file
|
|
|
|
|
Tue Jul 1 06:56:49 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
|
|
|
|
|
Tue Jul 1 06:56:49 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
|
|
|
|
|
Tue Jul 1 06:56:49 2014 Socket Buffers: R=[212992->131072] S=[212992->131072]
|
|
|
|
|
|
