🐛 [Qbittorrent] version 4.6.0 - external ip data leak with openvpn #1049

BeachyHeadCode · 2023-10-28T16:27:12Z

Description

After this update the external ip is leaking.

Reproduction steps

Set up openvpn and enable it. Review Qbittorrent info log and compare to external IP address.

Addon Logs

No logs to provide.

Architecture

No response

OS

HAos

SoccerCore11 · 2023-10-29T00:27:38Z

I'm getting the following errors after updating to the latest QBitorrent and HA. Not sure if related.

[20:26:27] INFO: Starting NGinx...
nginx: [emerg] bind() to 172.30.33.3:8099 failed (98: Address in use)
2023/10/28 20:26:27 [emerg] 2162#2162: bind() to 172.30.33.3:8099 failed (98: Address in use)
2023/10/28 20:26:27 [emerg] 2162#2162: bind() to 172.30.33.3:8099 failed (98: Address in use)
nginx: [emerg] bind() to 172.30.33.3:8099 failed (98: Address in use)
[28/Oct/2023:20:26:28 -0400] 404 192.168.50.19, 172.30.32.1(172.30.32.2) POST /api/v2/search/results HTTP/1.1 (Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0)
2023/10/28 20:26:27 [emerg] 2162#2162: bind() to 172.30.33.3:8099 failed (98: Address in use)
nginx: [emerg] bind() to 172.30.33.3:8099 failed (98: Address in use)
2023/10/28 20:26:27 [emerg] 2162#2162: bind() to 172.30.33.3:8099 failed (98: Address in use)
nginx: [emerg] bind() to 172.30.33.3:8099 failed (98: Address in use)

BeachyHeadCode · 2023-10-29T01:53:51Z

Yes same errors. Do not use this app until fixed. I already got a letter from the ISP with this app running for less than 30 min with an exposed address.

alexbelgium · 2023-10-29T13:06:18Z

Could you please post the full startup log, it is much more complicated to help otherwise. I've also reverted the previous version for the moment. Thanks

BeachyHeadCode · 2023-10-29T13:36:08Z

Don't have the full startup anymore just the qBittorrent.

(N) 2023-10-28T13:16:02 - qBittorrent v4.6.0 started
(N) 2023-10-28T13:16:02 - Using config directory: /config/addons_config/qBittorrent
(N) 2023-10-28T13:16:02 - Trying to listen on the following list of IP addresses: "0.0.0.0:59595,[::]:59595"
(I) 2023-10-28T13:16:02 - Peer ID: "-qB4600-"
(I) 2023-10-28T13:16:02 - HTTP User-Agent: "qBittorrent/4.6.0"
(I) 2023-10-28T13:16:02 - Distributed Hash Table (DHT) support: ON
(I) 2023-10-28T13:16:02 - Local Peer Discovery support: ON
(I) 2023-10-28T13:16:02 - Peer Exchange (PeX) support: ON
(I) 2023-10-28T13:16:02 - Anonymous mode: OFF
(I) 2023-10-28T13:16:02 - Encryption support: ON
(I) 2023-10-28T13:16:02 - Successfully listening on IP. IP: "127.0.0.1". Port: "TCP/59595"
(I) 2023-10-28T13:16:02 - Successfully listening on IP. IP: "127.0.0.1". Port: "UTP/59595"
(I) 2023-10-28T13:16:02 - Successfully listening on IP. IP: "172.30.33.5". Port: "TCP/59595"
(I) 2023-10-28T13:16:02 - Successfully listening on IP. IP: "172.30.33.5". Port: "UTP/59595"
(I) 2023-10-28T13:16:02 - IP geolocation database loaded. Type: DBIP-Country-Lite. Build time: Sat Sep 30 20:09:28 2023.
(N) 2023-10-28T13:16:02 - Using custom Web UI. Location: "/webui/vuetorrent/vuetorrent".
(W) 2023-10-28T13:16:02 - Couldn't load Web UI translation for selected locale (C).
(N) 2023-10-28T13:16:02 - Web UI: Now listening on IP: *, port: 8080
(I) 2023-10-28T13:16:02 - Detected external IP. IP: "***.***.***.***"

BeachyHeadCode · 2023-10-29T13:59:07Z

Downgrading the app now has an error for the open vpn:


[migrations] started
[migrations] no migrations found

-----------------------------------------------------------
 Add-on: Qbittorrent
 qBittorrent is a bittorrent client
-----------------------------------------------------------
───────────────────────────────────────

      ██╗     ███████╗██╗ ██████╗ 
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝ 

   Brought to you by linuxserver.io
───────────────────────────────────────

To support LSIO projects visit:
https://www.linuxserver.io/donate/

───────────────────────────────────────
GID/UID
───────────────────────────────────────

User UID:    ****
User GID:    ****
───────────────────────────────────────

 Add-on version: 4.5.5
 You are running the latest version of this add-on.
 System: Home Assistant OS 11.1  (aarch64 / yellow)
 Home Assistant Core: 2023.10.5
 Home Assistant Supervisor: 2023.10.1
-----------------------------------------------------------
 Please, share the above information when looking for help
 or support in, e.g., GitHub, forums
-----------------------------------------------------------
 Provided by: https://github.com/alexbelgium/hassio-addons 
-----------------------------------------------------------
 Defining permissions for main user : 
User UID: ****
User GID : ****
-----------------------------------------------------------
Local Disks mounting...
[09:51:43] INFO: Mounting sda1 of type ext4
[09:51:44] INFO: Execute /config/addons_autoscripts/qbittorrent.sh if existing
[09:51:44] INFO: ... no script found
[09:51:45] INFO: DNS SERVERS set to 1.1.1.1 8.8.8.8 
[09:51:46] INFO: Downloads can be found in /media/downloads
[09:51:47] INFO: Whitelisted subsets will not require a password : localhost,127.0.0.1,172.30.0.0/16,192.168.0.0/16
[09:51:47] INFO: WEBUI username set to admin
[09:51:47] INFO: Alternate UI enabled : vuetorrent. If webui don't work, disable this option
[09:51:48] INFO: Default username/password : admin/adminadmin
[09:51:48] INFO: Configuration can be found in /config/addons_config/qBittorrent
[09:51:49] INFO: Configuring openvpn
[09:51:49] INFO: openvpn correctly set, qbittorrent will run tunnelled through openvpn
Using interface binding in the qBittorrent app
... deleting previous interface settings
... binding tun0 interface in qBittorrent configuration
/etc/cont-init.d/93-openvpn.sh: line 89: 8
52: syntax error in expression (error token is "52")
cont-init: warning: some scripts exited nonzero
s6-rc: warning: unable to start service legacy-cont-init: command exited 1
/run/s6/basedir/scripts/rc.init: warning: s6-rc failed to properly bring all the services up! Check your logs (in /run/uncaught-logs/current if you have in-container logging) for more information.
/run/s6/basedir/scripts/rc.init: fatal: stopping the container.

alexbelgium · 2023-10-29T16:57:53Z

Downgrading the app now has an error for the open vpn:


[migrations] started
[migrations] no migrations found

-----------------------------------------------------------
 Add-on: Qbittorrent
 qBittorrent is a bittorrent client
-----------------------------------------------------------
───────────────────────────────────────

      ██╗     ███████╗██╗ ██████╗ 
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝ 

   Brought to you by linuxserver.io
───────────────────────────────────────

To support LSIO projects visit:
https://www.linuxserver.io/donate/

───────────────────────────────────────
GID/UID
───────────────────────────────────────

User UID:    ****
User GID:    ****
───────────────────────────────────────

 Add-on version: 4.5.5
 You are running the latest version of this add-on.
 System: Home Assistant OS 11.1  (aarch64 / yellow)
 Home Assistant Core: 2023.10.5
 Home Assistant Supervisor: 2023.10.1
-----------------------------------------------------------
 Please, share the above information when looking for help
 or support in, e.g., GitHub, forums
-----------------------------------------------------------
 Provided by: https://github.com/alexbelgium/hassio-addons 
-----------------------------------------------------------
 Defining permissions for main user : 
User UID: ****
User GID : ****
-----------------------------------------------------------
Local Disks mounting...
[09:51:43] INFO: Mounting sda1 of type ext4
[09:51:44] INFO: Execute /config/addons_autoscripts/qbittorrent.sh if existing
[09:51:44] INFO: ... no script found
[09:51:45] INFO: DNS SERVERS set to 1.1.1.1 8.8.8.8 
[09:51:46] INFO: Downloads can be found in /media/downloads
[09:51:47] INFO: Whitelisted subsets will not require a password : localhost,127.0.0.1,172.30.0.0/16,192.168.0.0/16
[09:51:47] INFO: WEBUI username set to admin
[09:51:47] INFO: Alternate UI enabled : vuetorrent. If webui don't work, disable this option
[09:51:48] INFO: Default username/password : admin/adminadmin
[09:51:48] INFO: Configuration can be found in /config/addons_config/qBittorrent
[09:51:49] INFO: Configuring openvpn
[09:51:49] INFO: openvpn correctly set, qbittorrent will run tunnelled through openvpn
Using interface binding in the qBittorrent app
... deleting previous interface settings
... binding tun0 interface in qBittorrent configuration
/etc/cont-init.d/93-openvpn.sh: line 89: 8
52: syntax error in expression (error token is "52")
cont-init: warning: some scripts exited nonzero
s6-rc: warning: unable to start service legacy-cont-init: command exited 1
/run/s6/basedir/scripts/rc.init: warning: s6-rc failed to properly bring all the services up! Check your logs (in /run/uncaught-logs/current if you have in-container logging) for more information.
/run/s6/basedir/scripts/rc.init: fatal: stopping the container.

It is the exact same add-on as before as it did not rebuild, so the issue would be due to the ha update. Or it's because the data folder had been updated. I'll check

EtienneMD · 2023-10-29T17:08:41Z

Can confirm I am having the exact same issue on reversion. The update to 4.6 must have messed with the add-on or openvpn config files. Will have a look if I get a chance next week if not fixed by then.

EtienneMD · 2023-10-29T17:27:43Z

Issue lies in the qBittorrent.conf file, probably in the proxy section. If you have a backup of your config, this file should be included. Either do a full config restore or extract the necessary file from the backup and overwrite the faulty config.

Addon is working normally as before on 4.5.5.

…sion #562 #1049

#1049 #562 (comment)

alexbelgium · 2023-10-30T15:44:15Z

I've corrected this error in the latest version. However, the VPN seems to work : qbittorrent is channeled through openvpn, and the ip in the log shows that the vpn is working. I did have however to update the config file I'm using. So please try to update to the latest version (5.6.0_WITHOUT_VPN), and paste a full log after startup in case of issue. Thanks

edit : tested working using https://www.whatismyip.net/tools/torrent-ip-checker

If security is critical for you I would suggest using the Transmission_openvpn image that has some additional securities

BeachyHeadCode · 2023-10-31T00:20:03Z

Will check it out tomorrow.

BeachyHeadCode · 2023-11-01T02:24:08Z

Version 4.6.0-2 fails to launch. The log is overwriting itself so i cannot post the entire log. What is not included is all of the asset loading logs.

if: fatal: unable to spawn s6-test: No such file or directory
2023-10-31 22:09:57 event_wait : Interrupted system call (fd=-1,code=4)
2023-10-31 22:09:57 /sbin/ip addr del dev tun0 10.10.19.7/24
2023-10-31 22:09:57 /etc/openvpn/down.sh tun0 1500 0 10.10.19.7 255.255.255.0 init
2023-10-31 22:09:57 SIGTERM[hard,] received, process exiting
Catching signal: SIGTERM
Exiting cleanly

alexbelgium · 2023-11-01T05:45:22Z

That's strange, for me it starts normally. This message is usually when the system is shutting down while still trying to raise s6 services I think. What is the log just before this message? Thank

It might be an issue with your config.xml located in /config/addons_config/qbittorrent

BeachyHeadCode · 2023-11-01T11:03:12Z

All the assets that are loading are being logged right before with the agent name and ip address.

The config file used was a backup from 4.5.5 so the upgrade to 4.6 failed.

alexbelgium · 2023-11-01T12:24:13Z

Hi, I don't understand your message. I've just updated qbittorrent, and here is my log using freevpn. This last line is especially important as it shows the ip in tun0. The script also checks that your normal ip is different than the one from tun0. That's why the log is important, as it is not possible to identify issues wihtout it.

Starting...
/etc/cont-init.d/00-banner.sh: executing

-----------------------------------------------------------
 Add-on: Qbittorrent
 qBittorrent is a bittorrent client
-----------------------------------------------------------
 Add-on version: 4.6.0-2
 You are running the latest version of this add-on.
 System: Home Assistant OS 11.1  (aarch64 / raspberrypi4-64)
 Home Assistant Core: 2023.10.5
 Home Assistant Supervisor: 2023.10.1
-----------------------------------------------------------
 Please, share the above information when looking for help
 or support in, e.g., GitHub, forums
-----------------------------------------------------------
 Provided by: https://github.com/alexbelgium/hassio-addons 
-----------------------------------------------------------
 Defining permissions for main user : 
User UID: 0
User GID : 0
-----------------------------------------------------------
/etc/cont-init.d/00-folders.sh: executing
/etc/cont-init.d/00-global_var.sh: executing
DNS_server='8.8.8.8,1.1.1.1'
PGID='0'
PUID='0'
SavePath='/mnt/NAS/downloads'
Username='XXXXXXXXXXXXXXXXXXX'
certfile='fullchain.pem'
cifspassword='XXXXXXXXXXXXXXXXXXX'
cifsusername='XXXXXXXXXXXXXXXXXXX'
customUI='vuetorrent'
keyfile='privkey.pem'
localdisks='NAS'
openvpn_config='file.ovpn'
openvpn_enabled='true'
openvpn_password='959050202'
openvpn_username='freeopenvpn'
ssl='false'
whitelist='XXXXXXXXXXXXXXXXXXX'
/etc/cont-init.d/00-local_mounts.sh: executing
/etc/cont-init.d/00-local_mounts.sh: executing
---------------------------------------------------
[13:13:17] INFO: Available Disks for mounting :
NAME        LABEL    SIZE FSTYPE RO
└─sda1      XXXXXXXXXXXXXXXXXXX1.8T ext4    0
└─sdb1      XXXXXXXXXXXXXXXXXXX1.8T ext4    0
---------------------------------------------------
Supported fs :  ext3 ext2 ext4 squashfs vfat msdos f2fs fuseblk ntfs3 exfat btrfs xfs
Inspired from : github.com/dianlight
---------------------------------------------------
Local Disks mounting...
... NAS is a device by label
[13:13:17] INFO: Mounting NAS of type ext4
[13:13:17] INFO: Success! NAS mounted to /mnt/NAS
/etc/cont-init.d/00-smb_mounts.sh: executing
/etc/cont-init.d/01-config_yaml.sh: executing
Load environment variables from /config/addons_config/qbittorrent/config.yaml if existing
---------------------------------------------------------
Wiki here : github.com/alexbelgium/hassio-addons/wiki/Add‐ons-feature-:-add-env-variables
... no env variables found, exiting
/etc/cont-init.d/01-custom_script.sh: executing
Execute /config/addons_autoscripts/qbittorrent.sh if existing
---------------------------------------------------------
Wiki here : github.com/alexbelgium/hassio-addons/wiki/Add-ons-feature-:-customisation
... no script found, exiting
/etc/cont-init.d/30-nginx.sh: executing
/etc/cont-init.d/90-dns_set.sh: executing
[13:13:19] INFO: DNS SERVERS set to 1.1.1.1 8.8.8.8 
/etc/cont-init.d/91-qbittorrent_configuration.sh: executing
[13:13:19] INFO: Downloads can be found in /mnt/NAS/downloads
[13:13:19] INFO: Whitelisted subsets will not require a password : XXXXXXXXXXXXXXXXXXX
[13:13:19] INFO: WEBUI username set to admin
[13:13:19] INFO: Alternate UI enabled : vuetorrent. If webui don't work, disable this option
[13:13:21] INFO: Default username/password : admin/adminadmin
[13:13:21] INFO: Configuration can be found in /config/addons_config/qBittorrent
/etc/cont-init.d/93-openvpn.sh: executing
[13:13:21] INFO: Configuring openvpn
[13:13:22] INFO: openvpn correctly set, qbittorrent will run tunnelled through openvpn
Using interface binding in the qBittorrent app
... deleting previous interface settings
... binding tun0 interface in qBittorrent configuration
... adding route-nopull to your config.ovpn
 
Starting the upstream container
 
[migrations] started
[migrations] no migrations found
───────────────────────────────────────

      ██╗     ███████╗██╗ ██████╗ 
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝ 

   Brought to you by linuxserver.io
───────────────────────────────────────

To support LSIO projects visit:
https://www.linuxserver.io/donate/

───────────────────────────────────────
GID/UID
───────────────────────────────────────

User UID:    0
User GID:    0
───────────────────────────────────────

[custom-init] No custom files found, skipping...
2023-11-01 13:13:23 OpenVPN 2.6.6 aarch64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
2023-11-01 13:13:23 library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2023-11-01 13:13:23 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2023-11-01 13:13:23 TCP/UDP: Preserving recently used remote address: [AF_INET]XXXXXXXXXXXXXXXXXXX
2023-11-01 13:13:23 Attempting to establish TCP connection with [AF_INET]XXXXXXXXXXXXXXXXXXX
2023-11-01 13:13:23 TCP connection established with [AF_INET]XXXXXXXXXXXXXXXXXXX
2023-11-01 13:13:23 TCPv4_CLIENT link local: (not bound)
2023-11-01 13:13:23 TCPv4_CLIENT link remote: [AF_INET]XXXXXXXXXXXXXXXXXXX
2023-11-01 13:13:23 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2023-11-01 13:13:23 VERIFY OK: depth=1, O=64fb4adcd10e761180851414, CN=64fb4adcd10e761180851418
2023-11-01 13:13:23 NOTE: --mute triggered...
2023-11-01 13:13:24 6 variation(s) on previous 3 message(s) suppressed by --mute
2023-11-01 13:13:24 [64fb4aded10e761180851426] Peer Connection Initiated with [AF_INET]XXXXXXXXXXXXXXXXXXX
2023-11-01 13:13:36 Options error: option 'redirect-gateway' cannot be used in this context ([PUSH-OPTIONS])
2023-11-01 13:13:36 NOTE: --mute triggered...
2023-11-01 13:13:36 1 variation(s) on previous 3 message(s) suppressed by --mute
2023-11-01 13:13:36 TUN/TAP device tun0 opened
2023-11-01 13:13:36 /sbin/ip link set dev tun0 up mtu 1500
2023-11-01 13:13:36 /sbin/ip link set dev tun0 up
2023-11-01 13:13:36 /sbin/ip addr add dev tun0 XXXXXXXXXXXXXXXXXXX
2023-11-01 13:13:36 /etc/openvpn/up.sh tun0 1500 0 XXXXXXXXXXXXXXXXXXX 255.255.255.0 init
2023-11-01 13:13:36 Initialization Sequence Completed
2023-11-01 13:13:36 Data Channel: cipher 'AES-128-GCM', peer-id: 0, compression: 'stub'
2023-11-01 13:13:36 NOTE: --mute triggered...
WebUI will be started shortly after internal preparations. Please wait...
Connection to localhost (127.0.0.1) 8080 port [tcp/http-alt] succeeded!
[ls.io-init] done.
[13:13:37] INFO: Starting NGinx...
[13:13:38] INFO: VPN is up and running with ip 185.154.12.64, based in country : NL

SoccerCore11 · 2023-11-01T12:40:33Z

It's working fine for me now with 4.6.0-2.
@BeachyHeadCode you might want to enable "anonymous mode" and specify a specific network adapter (for me 'tun0') within your qBittorrent settings so that if the VPN fails, it doesn't fall back to your ISP connection.

BeachyHeadCode · 2023-11-01T12:53:56Z

Hi, I don't understand your message. I've just updated qbittorrent, and here is my log using freevpn. This last line is especially important as it shows the ip in tun0. The script also checks that your normal ip is different than the one from tun0. That's why the log is important, as it is not possible to identify issues wihtout it.

Starting...
/etc/cont-init.d/00-banner.sh: executing

-----------------------------------------------------------
 Add-on: Qbittorrent
 qBittorrent is a bittorrent client
-----------------------------------------------------------
 Add-on version: 4.6.0-2
 You are running the latest version of this add-on.
 System: Home Assistant OS 11.1  (aarch64 / raspberrypi4-64)
 Home Assistant Core: 2023.10.5
 Home Assistant Supervisor: 2023.10.1
-----------------------------------------------------------
 Please, share the above information when looking for help
 or support in, e.g., GitHub, forums
-----------------------------------------------------------
 Provided by: https://github.com/alexbelgium/hassio-addons 
-----------------------------------------------------------
 Defining permissions for main user : 
User UID: 0
User GID : 0
-----------------------------------------------------------
/etc/cont-init.d/00-folders.sh: executing
/etc/cont-init.d/00-global_var.sh: executing
DNS_server='8.8.8.8,1.1.1.1'
PGID='0'
PUID='0'
SavePath='/mnt/NAS/downloads'
Username='XXXXXXXXXXXXXXXXXXX'
certfile='fullchain.pem'
cifspassword='XXXXXXXXXXXXXXXXXXX'
cifsusername='XXXXXXXXXXXXXXXXXXX'
customUI='vuetorrent'
keyfile='privkey.pem'
localdisks='NAS'
openvpn_config='file.ovpn'
openvpn_enabled='true'
openvpn_password='959050202'
openvpn_username='freeopenvpn'
ssl='false'
whitelist='XXXXXXXXXXXXXXXXXXX'
/etc/cont-init.d/00-local_mounts.sh: executing
/etc/cont-init.d/00-local_mounts.sh: executing
---------------------------------------------------
[13:13:17] INFO: Available Disks for mounting :
NAME        LABEL    SIZE FSTYPE RO
└─sda1      XXXXXXXXXXXXXXXXXXX1.8T ext4    0
└─sdb1      XXXXXXXXXXXXXXXXXXX1.8T ext4    0
---------------------------------------------------
Supported fs :  ext3 ext2 ext4 squashfs vfat msdos f2fs fuseblk ntfs3 exfat btrfs xfs
Inspired from : github.com/dianlight
---------------------------------------------------
Local Disks mounting...
... NAS is a device by label
[13:13:17] INFO: Mounting NAS of type ext4
[13:13:17] INFO: Success! NAS mounted to /mnt/NAS
/etc/cont-init.d/00-smb_mounts.sh: executing
/etc/cont-init.d/01-config_yaml.sh: executing
Load environment variables from /config/addons_config/qbittorrent/config.yaml if existing
---------------------------------------------------------
Wiki here : github.com/alexbelgium/hassio-addons/wiki/Add‐ons-feature-:-add-env-variables
... no env variables found, exiting
/etc/cont-init.d/01-custom_script.sh: executing
Execute /config/addons_autoscripts/qbittorrent.sh if existing
---------------------------------------------------------
Wiki here : github.com/alexbelgium/hassio-addons/wiki/Add-ons-feature-:-customisation
... no script found, exiting
/etc/cont-init.d/30-nginx.sh: executing
/etc/cont-init.d/90-dns_set.sh: executing
[13:13:19] INFO: DNS SERVERS set to 1.1.1.1 8.8.8.8 
/etc/cont-init.d/91-qbittorrent_configuration.sh: executing
[13:13:19] INFO: Downloads can be found in /mnt/NAS/downloads
[13:13:19] INFO: Whitelisted subsets will not require a password : XXXXXXXXXXXXXXXXXXX
[13:13:19] INFO: WEBUI username set to admin
[13:13:19] INFO: Alternate UI enabled : vuetorrent. If webui don't work, disable this option
[13:13:21] INFO: Default username/password : admin/adminadmin
[13:13:21] INFO: Configuration can be found in /config/addons_config/qBittorrent
/etc/cont-init.d/93-openvpn.sh: executing
[13:13:21] INFO: Configuring openvpn
[13:13:22] INFO: openvpn correctly set, qbittorrent will run tunnelled through openvpn
Using interface binding in the qBittorrent app
... deleting previous interface settings
... binding tun0 interface in qBittorrent configuration
... adding route-nopull to your config.ovpn
 
Starting the upstream container
 
[migrations] started
[migrations] no migrations found
───────────────────────────────────────

      ██╗     ███████╗██╗ ██████╗ 
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝ 

   Brought to you by linuxserver.io
───────────────────────────────────────

To support LSIO projects visit:
https://www.linuxserver.io/donate/

───────────────────────────────────────
GID/UID
───────────────────────────────────────

User UID:    0
User GID:    0
───────────────────────────────────────

[custom-init] No custom files found, skipping...
2023-11-01 13:13:23 OpenVPN 2.6.6 aarch64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
2023-11-01 13:13:23 library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2023-11-01 13:13:23 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2023-11-01 13:13:23 TCP/UDP: Preserving recently used remote address: [AF_INET]XXXXXXXXXXXXXXXXXXX
2023-11-01 13:13:23 Attempting to establish TCP connection with [AF_INET]XXXXXXXXXXXXXXXXXXX
2023-11-01 13:13:23 TCP connection established with [AF_INET]XXXXXXXXXXXXXXXXXXX
2023-11-01 13:13:23 TCPv4_CLIENT link local: (not bound)
2023-11-01 13:13:23 TCPv4_CLIENT link remote: [AF_INET]XXXXXXXXXXXXXXXXXXX
2023-11-01 13:13:23 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2023-11-01 13:13:23 VERIFY OK: depth=1, O=64fb4adcd10e761180851414, CN=64fb4adcd10e761180851418
2023-11-01 13:13:23 NOTE: --mute triggered...
2023-11-01 13:13:24 6 variation(s) on previous 3 message(s) suppressed by --mute
2023-11-01 13:13:24 [64fb4aded10e761180851426] Peer Connection Initiated with [AF_INET]XXXXXXXXXXXXXXXXXXX
2023-11-01 13:13:36 Options error: option 'redirect-gateway' cannot be used in this context ([PUSH-OPTIONS])
2023-11-01 13:13:36 NOTE: --mute triggered...
2023-11-01 13:13:36 1 variation(s) on previous 3 message(s) suppressed by --mute
2023-11-01 13:13:36 TUN/TAP device tun0 opened
2023-11-01 13:13:36 /sbin/ip link set dev tun0 up mtu 1500
2023-11-01 13:13:36 /sbin/ip link set dev tun0 up
2023-11-01 13:13:36 /sbin/ip addr add dev tun0 XXXXXXXXXXXXXXXXXXX
2023-11-01 13:13:36 /etc/openvpn/up.sh tun0 1500 0 XXXXXXXXXXXXXXXXXXX 255.255.255.0 init
2023-11-01 13:13:36 Initialization Sequence Completed
2023-11-01 13:13:36 Data Channel: cipher 'AES-128-GCM', peer-id: 0, compression: 'stub'
2023-11-01 13:13:36 NOTE: --mute triggered...
WebUI will be started shortly after internal preparations. Please wait...
Connection to localhost (127.0.0.1) 8080 port [tcp/http-alt] succeeded!
[ls.io-init] done.
[13:13:37] INFO: Starting NGinx...
[13:13:38] INFO: VPN is up and running with ip 185.154.12.64, based in country : NL

As mentioned, the log overwrites itself so I cannot provide any additional information. Even restarting the app and frantically refreshing this log generates in a fraction of a second.

This is what I mean by assets.

alexbelgium · 2023-11-01T13:47:11Z

Strange. Honestly I would recommend that you either restore an older backup and update, or just remove all data and reinstall a clean version (which means uninstalling the addon and deleting the folder /config/addons_config/qbittorrent). The addon should not be able to run without executing the banners & other visual text in the logs which should take at least 10-30 seconds to run

BeachyHeadCode · 2023-11-01T20:41:24Z

It appears the container got locked up. I had to shut down my device, go into docker and manually remove the old addon container and image. I have the latest version utilizing the VPN correctly.

BeachyHeadCode added the bug Something isn't working label Oct 28, 2023

alexbelgium added a commit that referenced this issue Oct 30, 2023

Fix : /etc/cont-init.d/93-openvpn.sh: line 89: syntax error in expres…

466c920

…sion #562 #1049

alexbelgium added a commit that referenced this issue Oct 30, 2023

Update config.json

bf240d1

#1049 #562 (comment)

BeachyHeadCode closed this as completed Nov 1, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

🐛 [Qbittorrent] version 4.6.0 - external ip data leak with openvpn #1049

🐛 [Qbittorrent] version 4.6.0 - external ip data leak with openvpn #1049

BeachyHeadCode commented Oct 28, 2023

SoccerCore11 commented Oct 29, 2023

BeachyHeadCode commented Oct 29, 2023

alexbelgium commented Oct 29, 2023

BeachyHeadCode commented Oct 29, 2023 •

edited

Loading

BeachyHeadCode commented Oct 29, 2023 •

edited

Loading

alexbelgium commented Oct 29, 2023 •

edited

Loading

EtienneMD commented Oct 29, 2023

EtienneMD commented Oct 29, 2023 •

edited

Loading

alexbelgium commented Oct 30, 2023 •

edited

Loading

BeachyHeadCode commented Oct 31, 2023

BeachyHeadCode commented Nov 1, 2023 •

edited

Loading

alexbelgium commented Nov 1, 2023 •

edited

Loading

BeachyHeadCode commented Nov 1, 2023 •

edited

Loading

alexbelgium commented Nov 1, 2023

SoccerCore11 commented Nov 1, 2023

BeachyHeadCode commented Nov 1, 2023

alexbelgium commented Nov 1, 2023

BeachyHeadCode commented Nov 1, 2023

🐛 [Qbittorrent] version 4.6.0 - external ip data leak with openvpn #1049

🐛 [Qbittorrent] version 4.6.0 - external ip data leak with openvpn #1049

Comments

BeachyHeadCode commented Oct 28, 2023

Description

Reproduction steps

Addon Logs

Architecture

OS

SoccerCore11 commented Oct 29, 2023

BeachyHeadCode commented Oct 29, 2023

alexbelgium commented Oct 29, 2023

BeachyHeadCode commented Oct 29, 2023 • edited Loading

BeachyHeadCode commented Oct 29, 2023 • edited Loading

alexbelgium commented Oct 29, 2023 • edited Loading

EtienneMD commented Oct 29, 2023

EtienneMD commented Oct 29, 2023 • edited Loading

alexbelgium commented Oct 30, 2023 • edited Loading

BeachyHeadCode commented Oct 31, 2023

BeachyHeadCode commented Nov 1, 2023 • edited Loading

alexbelgium commented Nov 1, 2023 • edited Loading

BeachyHeadCode commented Nov 1, 2023 • edited Loading

alexbelgium commented Nov 1, 2023

SoccerCore11 commented Nov 1, 2023

BeachyHeadCode commented Nov 1, 2023

alexbelgium commented Nov 1, 2023

BeachyHeadCode commented Nov 1, 2023

BeachyHeadCode commented Oct 29, 2023 •

edited

Loading

BeachyHeadCode commented Oct 29, 2023 •

edited

Loading

alexbelgium commented Oct 29, 2023 •

edited

Loading

EtienneMD commented Oct 29, 2023 •

edited

Loading

alexbelgium commented Oct 30, 2023 •

edited

Loading

BeachyHeadCode commented Nov 1, 2023 •

edited

Loading

alexbelgium commented Nov 1, 2023 •

edited

Loading

BeachyHeadCode commented Nov 1, 2023 •

edited

Loading