Commit Graph

457 Commits

Author SHA1 Message Date
Nikolai Rodionov b3abe62558
Use a newer builder
continuous-integration/drone/push Build is failing Details
2023-08-07 22:21:03 +02:00
Nikolai Rodionov 9d788c1408
Start the migration process
continuous-integration/drone/push Build is failing Details
2023-07-09 23:33:33 +02:00
Kyle Manna 1228577d45
Merge pull request #620 from kylemanna/dev
Fix /etc/openvpn/vars bug for old docker volumes
2020-12-04 09:11:37 -08:00
Kyle Manna 6ad931090b easy-rsa: Drop all mention of the vars file
* This exists to import/export a number of easy-rsa default values but
  creates headaches for old volumes due to changes where easy-rsa
  insists on loading the var file if the environment variable is set.
* Going forward people should pass the variables via:
    `docker run -e EASYRSA_var ...`
* Closes #608
2020-12-03 21:28:22 -08:00
Kyle Manna c4b94369cd README: Drop log-driver argument
* This is overly verbose.
2020-11-30 23:38:36 -08:00
Kyle Manna e47f86b0cc
Merge pull request #615 from kylemanna/dev
Cleanup some tests and documentation
2020-11-03 19:38:53 -08:00
Kyle Manna 192ce97375 test: Drop dependence on --net=host
* This is really hard to work on other things while running this test
  when the host networking stack is being manipulated, primarily the
  default route.
* Propagate DEBUG flag deeper where possible.
2020-11-01 23:01:44 -08:00
Kyle Manna dc81347dd1 docs: Drop --privileged docker run flag
* Fix all the docs to not mention this flag.
2020-11-01 23:01:19 -08:00
Kyle Manna 8931825841 test: Drop --privileged docker run flag
* Fix all the test to not require this flag.
2020-11-01 23:01:19 -08:00
Kyle Manna 52a91d22aa ovpn_run: Silence iptables rule checks
* It's fine for these to fail, it's expected.
2020-11-01 23:01:19 -08:00
Kyle Manna 9eae9306ea ovpn_run: Don't call sysctl which requires --privileged
* Instead encourage the user to change how they invoke docker.
2020-11-01 23:01:19 -08:00
Kyle Manna afc68a4378 test: Wait for children to exit
* Clean-up processes properly.
2020-11-01 23:01:19 -08:00
Kyle Manna 1c553563d9 dockerfile: Reduce ENV lines to single layer
* Results in a slightly simpler docker image.
2020-10-25 21:59:02 -07:00
Kyle Manna dfd1708159
Merge pull request #612 from kylemanna/km/fix-tests
Fix build and tests
2020-10-25 20:55:25 -07:00
Kyle Manna e8c614e836 test: otp: Drop iptables hackery
* Don't muck with iptables on the host machine.
2020-10-25 20:36:45 -07:00
Kyle Manna 7d372e5db8 test: dual-proto: Drop iptables hackery
* Don't muck with iptables on the host machine.
2020-10-25 20:36:45 -07:00
Kyle Manna 0fa57e5968 test: basic: Drop iptables hackery
* Don't muck with iptables on the host machine.
2020-10-25 20:36:45 -07:00
Kyle Manna 09819ad9cd test: iptables: Remove start-up race condition
* The iptables rule to check will only be present after the server has
  succeeded at starting-up.
* Spin up to ~10 seconds waiting.
* Fix eval which was intended to be an exec.
* Simplify kill + rm.
2020-10-25 20:36:45 -07:00
Kyle Manna a71140e0cf test: revocation: Minor style clean ups
* Always tear down test server if it exits for any reason.
* Give container + volume unique name.
* Drop iptables commands, these scare me as they are mucking with the
  state of my machine.
* Fix path to cert revocation list, the OpenVPN crl is copied at
  start-up and is a race condition.
2020-10-25 20:36:45 -07:00
Kyle Manna 1a22f6195e test: revocation: Fix EasyRSA revoke behavior
* EasyRSA moves the files aside now, see EasyRSA v3.0.6 for details
* 675fc990ed
2020-10-25 20:36:37 -07:00
Marco Ost 0b2e632047 remove remove_files function and second arg 2020-10-25 20:34:42 -07:00
Kyle Manna df80ea5663 otp: Disable confirmation in non-interactive mode
* This would hang the tests.
2020-10-25 18:22:51 -07:00
Eugene Chow a26aa01db2 'apk add libqrencode' because it's missing from the image 2020-10-25 18:17:09 -07:00
Chris Abella 6bee5e9a10 bin/ovpn_initpki: Touch vars file before init-pki
EasyRSA 3.0.7 introduces a check for the existence of vars in the
vars_setup() function. '$ easyrsa init-pki' fails without first
creating the file. See https://github.com/OpenVPN/easy-rsa/commit/
abaa2f57b48e218ac58ee6dc793f178aada31f82#diff-231cb43897d7aa2a98df
da5720c2b40f for the exact change.
2020-10-25 18:09:00 -07:00
Bohdan Maksymenko d53043e401
Fix typos in docker-openvpn@.service (#561) 2020-03-20 10:34:33 -07:00
Avner Cohen e9f92ebde8
[DOC] Fix to make sure the command allows interaction (#562) 2020-03-20 10:33:26 -07:00
Kyle Manna 76674b6a30 README: Drop Anchore
* This returns a 404 now. The magic of relying on cloud services.
2019-07-21 13:06:21 -07:00
Ivan Menshikh 79717903fa Fix indents in "quick start" (#454)
* fix indents in "quick start"

no more spaces before an command
2019-02-11 08:04:35 -08:00
Kyle Manna 47746e1bcb
Merge pull request #418 from darkmattercoder/patch-extended-clientstatus
extended client status for EXPIRED or other errors
2019-01-22 22:27:09 -08:00
Kyle Manna 04df4789fb
Merge pull request #436 from kunnix/patch-1
Update docker-openvpn@.service (docker.socket)
2019-01-22 22:24:19 -08:00
Kyle Manna 556c28fd15
Merge pull request #449 from rowanruseler/master
replaced 404 github link
2019-01-22 22:21:18 -08:00
Rowan Ruseler ec6549238a replaced 404 github link 2019-01-22 11:39:54 +01:00
Kyle Manna e83f0118e0
Merge pull request #446 from vansickle/patch-1
Update docker-compose debugging tips to include port publishing
2019-01-18 12:53:28 -08:00
Pavel Samokha 82dfe9cabd
Update docker-compose debugging tips to include port publishing
According to the documentation docker-compose run command does not create any of the ports specified in the service configuration. So published ports should be specified in run command, otherwise you wouldn't be able to connect to the openvpn server.
2019-01-18 17:35:09 +03:00
Benoit V bab729e2e4 Update docker-openvpn@.service (docker.socket)
Since version 1.12, Docker removed `docker.socket` <https://docs.docker.com/release-notes/docker-engine/>

The problem was already present on RPM systems (e.g. RHEL, Fedora, CentOS), and now also seems to affect Debian 9 (Stretch).

This change replaces `docker.socket` by `docker.service`.

It solves this problem:

```
> systemctl start docker-openvpn@.service
Failed to start docker-openvpn@.service: Unit docker.socket not found.
```

Related issues:

 - <https://github.com/kylemanna/docker-openvpn/issues/280>
 - <https://github.com/kylemanna/docker-openvpn/pull/286>
2018-11-08 11:24:57 +01:00
Kyle Manna 387d39e5d7
Merge pull request #426 from rca/patch-1
Update kernel "SubmittingPatches" link
2018-10-09 22:40:10 -07:00
Roberto Aguilar 2f3f99bc22
Use html version of SubmittingPatches URL 2018-10-10 00:14:53 -04:00
Roberto Aguilar f856ee6a52
Update kernel "SubmittingPatches" link 2018-10-09 08:05:00 -04:00
Jochen Bauer 3771097bc9
corrected the output line, was accidentially wrong 2018-08-30 17:08:04 +02:00
Bauer, Jochen ea19fbe932 extended client status for EXPIRED or other errors 2018-09-01 15:40:38 +02:00
Kyle Manna cf136d40df README: Add Anchore Image Overview
* Adds a handy security fix.
2018-08-21 10:27:21 -07:00
Kyle Manna 83b939456e
Merge pull request #400 from krlmlr/patch-1
README: Avoid logging for transient containers
2018-06-08 06:12:32 -07:00
Kirill Müller 5b2f6033c3
Avoid log driver for transient containers 2018-06-08 13:58:16 +02:00
Kyle Manna 73f8b02172
Merge pull request #383 from DZamataev/master
[bug fix] removes pushing 'comp-lzo' when it is enabled to avoid issues on Android
2018-05-05 19:44:40 -07:00
Denis Zamataev 49d36c2d64 implements setting 'comp-lzo no' on server conf by default 2018-05-03 15:19:02 +03:00
Denis Zamataev e1bd5b6450 removes pushing 'comp-lzo' when it is enabled 2018-05-01 21:04:31 +03:00
Kyle Manna 2b8a82ab4a
Merge pull request #382 from SizL75/patch-1
fixed typo
2018-04-29 15:59:16 -07:00
SizL75 092affef43
fixed type
missing space in line 372
2018-04-29 18:15:52 +02:00
Kyle Manna 5138981623
Merge pull request #380 from DZamataev/master
[bug fix] pushing comp-lzo setting to avoid error
2018-04-28 12:21:13 -07:00
Denis Zamataev f75f2e17a3 implements pushing comp-lzo setting 2018-04-27 14:34:29 +03:00