Need a bit of help, network interface related (I think)

[Arelius-D]

Hi guys,

I have a connection issue since Gluetun is somehow trying to use the network interface which dose not have link (eth0 not having link is by my choice and design) also it has "unhealthy" status..

Please correct me if I'm wrong but shouldn't Gluetun use the default Docker interface (and I think the Bridge aka docker0)?
Or is the problem the fact that the .yml "devices" is point to /dev/net/tun if so, how would I go about and influence this?

I'll try to keep this short but also provide info so those of you who actually know what you are doing (basically 99.99% of every user out there) can glance at this and hopefully help me or push me in the right path for a solution.

I truly appreciate the inputs.

route show

default via 10.0.0.1 dev eth1 proto dhcp src 10.0.0.10 metric 100
10.0.0.0/24 dev eth1 proto kernel scope link src 10.0.0.10 metric 100
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown
172.18.0.0/16 dev br-166aeed9a694 proto kernel scope link src 172.18.0.1 linkdown

docker -v; docker compose version; docker image ls; docker ps -a

Docker version 26.1.1, build 4cf5afa
Docker Compose version v2.27.0
REPOSITORY       TAG       IMAGE ID       CREATED        SIZE
qmcgaw/gluetun   latest    5c3c0f94f6c6   44 hours ago   51MB
CONTAINER ID   IMAGE                   COMMAND                 CREATED          STATUS                      PORTS     NAMES
cd7af6ba407d   qmcgaw/gluetun:latest   "/gluetun-entrypoint"   18 minutes ago   Exited (0) 18 minutes ago             gluetun

cat ~/docker/gluetun/docker-compose.yml

services:
  gluetun:
    image: qmcgaw/gluetun:latest
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 8888:8888/tcp
      - 8085:8085
      - 6881:6881
      - 6881:6881/udp
    volumes:
      - ./:/gluetun
    environment:
      - VPN_SERVICE_PROVIDER=mullvad
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=LOST_IT
      - WIREGUARD_ADDRESSES=WHY_IS_ADDRESS
      - SERVER_CITIES=THE_MOON
      #- TZ=${TZ}
      - TZ=NOT_ON_EARTH
      - UPDATER_PERIOD=24h
    restart: unless-stopped

And here is error log when i run it with docker compose up

[+] Running 1/0
 ✔ Container gluetun  Created                                                                                                                         0.0s
Attaching to gluetun
gluetun  | ========================================
gluetun  | ========================================
gluetun  | =============== gluetun ================
gluetun  | ========================================
gluetun  | =========== Made with ❤️ by ============
gluetun  | ======= https://github.com/qdm12 =======
gluetun  | ========================================
gluetun  | ========================================
gluetun  |
gluetun  | Running version latest built on 2024-05-04T16:22:29.394Z (commit ef6874f)
gluetun  |
gluetun  | 🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
gluetun  | 🐛 Bug? https://github.com/qdm12/gluetun/issues/new
gluetun  | ✨ New feature? https://github.com/qdm12/gluetun/issues/new
gluetun  | ☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
gluetun  | 💻 Email? quentin.mcgaw@gmail.com
gluetun  | 💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
gluetun  | 2024-05-06T14:38:12+02:00 INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.2 and family v4
gluetun  | 2024-05-06T14:38:12+02:00 INFO [routing] local ethernet link found: eth0
gluetun  | 2024-05-06T14:38:12+02:00 INFO [routing] local ipnet found: 172.18.0.0/16
gluetun  | 2024-05-06T14:38:12+02:00 INFO [firewall] enabling...
gluetun  | 2024-05-06T14:38:12+02:00 INFO [firewall] enabled successfully
gluetun  | 2024-05-06T14:38:13+02:00 INFO [storage] merging by most recent 19425 hardcoded servers and 19425 servers read from /gluetun/servers.json
gluetun  | 2024-05-06T14:38:13+02:00 INFO Alpine version: 3.19.1
gluetun  | 2024-05-06T14:38:13+02:00 INFO OpenVPN 2.5 version: 2.5.8
gluetun  | 2024-05-06T14:38:13+02:00 INFO OpenVPN 2.6 version: 2.6.8
gluetun  | 2024-05-06T14:38:13+02:00 INFO Unbound version: 1.19.3
gluetun  | 2024-05-06T14:38:13+02:00 INFO IPtables version: v1.8.10
gluetun  | 2024-05-06T14:38:13+02:00 INFO Settings summary:
gluetun  | ├── VPN settings:
gluetun  | |   ├── VPN provider settings:
gluetun  | |   |   ├── Name: mullvad
gluetun  | |   |   └── Server selection settings:
gluetun  | |   |       ├── VPN type: wireguard
gluetun  | |   |       ├── Cities: gothenburg
gluetun  | |   |       └── Wireguard selection settings:
gluetun  | |   └── Wireguard settings:
gluetun  | |       ├── Private key: yGv...FM=
gluetun  | |       ├── Interface addresses:
gluetun  | |       |   └── 10.67.132.223/32
gluetun  | |       ├── Allowed IPs:
gluetun  | |       |   ├── 0.0.0.0/0
gluetun  | |       |   └── ::/0
gluetun  | |       └── Network interface: tun0
gluetun  | |           └── MTU: 1400
gluetun  | ├── DNS settings:
gluetun  | |   ├── Keep existing nameserver(s): no
gluetun  | |   ├── DNS server address to use: 127.0.0.1
gluetun  | |   └── DNS over TLS settings:
gluetun  | |       ├── Enabled: yes
gluetun  | |       ├── Update period: every 24h0m0s
gluetun  | |       ├── Unbound settings:
gluetun  | |       |   ├── Authoritative servers:
gluetun  | |       |   |   └── cloudflare
gluetun  | |       |   ├── Caching: yes
gluetun  | |       |   ├── IPv6: no
gluetun  | |       |   ├── Verbosity level: 1
gluetun  | |       |   ├── Verbosity details level: 0
gluetun  | |       |   ├── Validation log level: 0
gluetun  | |       |   ├── System user: root
gluetun  | |       |   └── Allowed networks:
gluetun  | |       |       ├── 0.0.0.0/0
gluetun  | |       |       └── ::/0
gluetun  | |       └── DNS filtering settings:
gluetun  | |           ├── Block malicious: yes
gluetun  | |           ├── Block ads: no
gluetun  | |           ├── Block surveillance: no
gluetun  | |           └── Blocked IP networks:
gluetun  | |               ├── 127.0.0.1/8
gluetun  | |               ├── 10.0.0.0/8
gluetun  | |               ├── 172.16.0.0/12
gluetun  | |               ├── 192.168.0.0/16
gluetun  | |               ├── 169.254.0.0/16
gluetun  | |               ├── ::1/128
gluetun  | |               ├── fc00::/7
gluetun  | |               ├── fe80::/10
gluetun  | |               ├── ::ffff:127.0.0.1/104
gluetun  | |               ├── ::ffff:10.0.0.0/104
gluetun  | |               ├── ::ffff:169.254.0.0/112
gluetun  | |               ├── ::ffff:172.16.0.0/108
gluetun  | |               └── ::ffff:192.168.0.0/112
gluetun  | ├── Firewall settings:
gluetun  | |   └── Enabled: yes
gluetun  | ├── Log settings:
gluetun  | |   └── Log level: info
gluetun  | ├── Health settings:
gluetun  | |   ├── Server listening address: 127.0.0.1:9999
gluetun  | |   ├── Target address: cloudflare.com:443
gluetun  | |   ├── Duration to wait after success: 5s
gluetun  | |   ├── Read header timeout: 100ms
gluetun  | |   ├── Read timeout: 500ms
gluetun  | |   └── VPN wait durations:
gluetun  | |       ├── Initial duration: 6s
gluetun  | |       └── Additional duration: 5s
gluetun  | ├── Shadowsocks server settings:
gluetun  | |   └── Enabled: no
gluetun  | ├── HTTP proxy settings:
gluetun  | |   └── Enabled: no
gluetun  | ├── Control server settings:
gluetun  | |   ├── Listening address: :8000
gluetun  | |   └── Logging: yes
gluetun  | ├── OS Alpine settings:
gluetun  | |   ├── Process UID: 1000
gluetun  | |   ├── Process GID: 1000
gluetun  | |   └── Timezone: Europe/Stockholm
gluetun  | ├── Public IP settings:
gluetun  | |   ├── Fetching: every 12h0m0s
gluetun  | |   ├── IP file path: /tmp/gluetun/ip
gluetun  | |   └── Public IP data API: ipinfo
gluetun  | ├── Server data updater settings:
gluetun  | |   ├── Update period: 24h0m0s
gluetun  | |   ├── DNS address: 1.1.1.1:53
gluetun  | |   ├── Minimum ratio: 0.8
gluetun  | |   └── Providers to update: mullvad
gluetun  | └── Version settings:
gluetun  |     └── Enabled: yes
gluetun  | 2024-05-06T14:38:13+02:00 INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.2 and family v4
gluetun  | 2024-05-06T14:38:13+02:00 INFO [routing] adding route for 0.0.0.0/0
gluetun  | 2024-05-06T14:38:13+02:00 INFO [firewall] setting allowed subnets...
gluetun  | 2024-05-06T14:38:13+02:00 INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.2 and family v4
gluetun  | 2024-05-06T14:38:13+02:00 INFO [dns] using plaintext DNS at address 1.1.1.1
gluetun  | 2024-05-06T14:38:13+02:00 INFO [http server] http server listening on [::]:8000
gluetun  | 2024-05-06T14:38:13+02:00 INFO [healthcheck] listening on 127.0.0.1:9999
gluetun  | 2024-05-06T14:38:13+02:00 INFO [firewall] allowing VPN connection...
gluetun  | 2024-05-06T14:38:13+02:00 INFO [wireguard] Using available kernelspace implementation
gluetun  | 2024-05-06T14:38:13+02:00 INFO [wireguard] Connecting to [2a03:1b20:5:f011::a10f]:51820
gluetun  | 2024-05-06T14:38:13+02:00 INFO [wireguard] Wireguard setup is complete. Note Wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the Wireguard connection is not working.
gluetun  | 2024-05-06T14:38:13+02:00 INFO [dns] downloading DNS over TLS cryptographic files
gluetun  | 2024-05-06T14:38:21+02:00 INFO [healthcheck] program has been unhealthy for 6s: restarting VPN