I'm trying hard to deploy docker container following this wiki page [url]https://community.openvpn.net/openvpn/wiki/UnprivilegedUser[/url] but it seems like to be deprecated. Can't find the next code at /etc/rc.d/init.d/openvpn [code]$openvpn --daemon --writepid $piddir/$bn.pid --config $c --cd $work $script_security[/code] Can someone update the tutorial or help me with running docker ovpn client without root? I can't really find any useful articles about my problem, but at the same time I have found a lot of articles about the danger of running root images. All suggestions are welcome.

Unprivileged openvpn user

zog22

I'm trying hard to deploy docker container following this wiki page https://community.openvpn.net/openvpn/wiki/UnprivilegedUser but it seems like to be deprecated.

Can't find the next code at /etc/rc.d/init.d/openvpn

$openvpn --daemon --writepid $piddir/$bn.pid --config $c --cd $work $script_security

Can someone update the tutorial or help me with running docker ovpn client without root?
I can't really find any useful articles about my problem, but at the same time I have found a lot of articles about the danger of running root images.
All suggestions are welcome.

zog22

Hi everybody
I'm trying to run ovpn by an unprivileged user in docker container following this tutorial: https://community.openvpn.net/openvpn/wiki/UnprivilegedUser
Here is my dockerfile:

FROM debian

RUN apt -y update && apt-get -y install sudo iproute2 build-essential libssl-dev liblzo2-dev libpam0g-dev curl \
    && adduser -q --disabled-password openvpn && usermod -aG openvpn openvpn  \
    && echo "openvpn ALL=(ALL) NOPASSWD: /sbin/ip" >> /etc/sudoers && echo "Defaults:openvpn !requiretty" >> /etc/sudoers \
    && mkdir /usr/local/lib/gssntlmssp && mkdir -p /usr/etc/gss/mech.d
COPY unpriv-ip /usr/local/sbin/unpriv-ip
RUN chmod 755 /usr/local/sbin/unpriv-ip
COPY entrypoint.sh /

COPY openvpn-2.5.3.tar.gz /opt
WORKDIR /opt
RUN tar xfz openvpn-2.5.3.tar.gz
WORKDIR /opt/openvpn-2.5.3
RUN ./configure --enable-iproute2 && make && make install
COPY client.ovpn /etc/openvpn/client.ovpn

COPY openvpn.sh /etc/init.d/openvpn
RUN chmod 755 /etc/init.d/openvpn

COPY openvpn-startup /etc/openvpn/openvpn-startup.conf
COPY service /etc/init.d/openvpn-su
RUN  ls -la /etc/init.d/ &&   service openvpn condrestart  && update-rc.d openvpn-su start 3 && service --status-all 
RUN touch /etc/rc.local && chmod +x /etc/rc.local && echo "#!/bin/sh" >> /etc/rc.local \
    && echo "openvpn --rmtun --dev tun0" >> /etc/rc.local \
    && echo "openvpn --mktun --dev tun0 --dev-type tun --user openvpn --group openvpn" >> /etc/rc.local \
    && echo "pizdec;`date`" >> /home/openvpn/text
USER openvpn
ENTRYPOINT /entrypoint.sh

I still have the next error:

2021-08-19 08:52:48 ERROR: Cannot ioctl TUNSETIFF tun0: Operation not permitted (errno=1)

2021-08-19 08:52:48 Exiting due to fatal error

How can I fix this in my situation?