Thank you for your great videos ! Sorry to abuse of your kindness. I'm facing errors that prevent me from downloading files after the step to try and download torrents. Here is what I get any ideas : (I suspect a right errors on the folders, but I don't know where to look) Received error message from URL seed. Torrent: "FileName". URL: "official site". Message: "404 Not Found" File error alert. Torrent: "FileName". File: "/incomplete/FileName". Reason: "FileName file_open (/incomplete/FileName) error: Permission denied"
@@techbytetipswhich minute of your video tutorial is that. I did set the PUID to 1026 and PGID to 100, besides that I don't recall assigning a user to the container.
@@therealmerf with the PUID/PGID you are telling Docker to run the container with the privileges of the user with those IDs. You then have to make sure that in the NAS, that user has permissions.
@@techbytetips thank you for taking the time replying me, unfortunately my skills don't go that far. I don't know how to check the PUID and PGID of the nas users, and how to adjust them. I just put the numbers you mentioned while creating the container at the beginning of the video, I didn't know they were related to a specific user I don't recall you mentioning this at that point on the video. I'll start from scratch.
@@therealmerf those numbers should be the defaults for the first admin account Synology asks you to create. I uploaded a video on how to find out the PUID/PGID if you use another user.
OMG! Thank you for this video! I haven’t had a chance to install qBittorrent yet on my NAS, but from watching the entire video, it appears to have all the right answers to address my needs and any potential problems I might encounter. I can’t wait to get home and try this. Salute, sir!🫡 and proud to be a new subscriber to your channel.
Been having a great time following your tutorials and they are fantastic. Got a simple question. I setup qbit and everything seems to be fine with nord. Is there a way I can truly be sure through the qbit logs to see the ip address is the vpn one?
Hi, the logs should tell you where you are connecting and which IP it is receiving. You can always execute into the container and do an IP check in the command line. There is a website that you can CURL that gives you the Public IP that it recognizes... I just don't remember the name of it. curl icanhazip.com
This is so frustrating. There's so much missing information. What VPN are you using, because I can't find the crt files for Proton. Secondly, I'm thankful for some of the other information in the comments, such as lowercase, "yes", and the username and password not being your login info, but the IKEv2 username and password. I gave up on this.
Hi @amandabuckley6828, There is no missing information. I've provided everything that you need to set up the container properly. I do not promote a VPN provider because they are not paying me to do so. I'm using Private Internet Access. If you already have a VPN provider, they should be able to give you the certificate files that you need. Reach out to their support teams. That's what you pay them for. The username/password combination, in my case, is the VPN account's username and password. That's what you have to put in the environment variables and the credentials file. You need to follow the guide carefully. Most people have been successful at this.
For those who come across this video in the future and you're using Mulvad VPN and it DOES NOT work. 1. Make sure you're using the Android config from the website. It's okay that it doesn't have a crt file it's built into the config. 2. Open the config file to make some edits. Remove the tun-ipv6 line Add these 3 lines pull-filter ignore "dhcp-option DNS6 " pull-filter ignore "tun-ipv6 " pull-filter ignore "ifconfig-ipv6 " 3. Save and use this file as your config. 4. Restart container and it should work. This was my fix after spending probably 8 hours trying to figure out what to do.
This folder structure is confusing. I do not have a /docker/Configs folder. Am I meant to create the Configs folder? If I just create a qbittorrent folder under /docker, I do not get a /docker/qbittorrent/openvpn folder. Where did the openvpn folder come from?
Hi @js.7254! I created that file structure in a previous video of the series as it is easier to understand once you follow that specific file structure. You just create the top folder for each application. For example, you would create the folder for docker/Configs/qbittorrent. Once you start the container, it will create all of the files inside it. Once you get the error, then you can go inside and put the missing files. Please check out this video explaining the structure: ruclips.net/video/sBvlAD3Z4rQ/видео.html Basically: /docker --/config
Hey, I had this same issue since I did not follow the virtual NAS setup video. All you have to do is go into the file explorer and add permissions for read/write. I set my personal account to have admin privileges and it allowed me to create the folders you need. Hope this helps!
any Surfshark users get this to work? There is no option to get the files mentioned in the video. A view of a sample credentials.conf file would have been a great inclusion in this tutorial.
The credentials.conf just has 2 lines with: 1. VPN username 2. VPN password both in clear text. You can talk to your VPN provider's support team to get the files.
Yes, the files are in your online account. Login and select VPN > Manual Setup > OpenVPN. Copy the credentials for the conf file and select a location and download the UDP config. The certificates are right at the bottom of all the locations under the CA and TLS Certs tab.
Running into a fatal error in the log: cannot open tun/tap dev /dev/net/tun: no such file or directory (errno=2) Seems like some sort of permission error from my limited knowledge and google searching. If I go into Control Panel on my Synology NAS, I can manually start the VPN connection and I end up with an IP. Starting the QBitTorrent container ends with the referenced "cannot open.... errno=2" Turning off the VPN connection in Control Panel and running the container results with the same error, so different (it seems) than covered in the video. Where is /dev/net/tun located (under my user?) I can't seem to find it to check r/w authorization. My guess is the container doesn't have the ability to create the folder, and thus stops killing the process despite the container "running". Is there a file permission / path permission I'm somehow neglecting? Seems like the VPN works, but obviously QBitTorrent Web UI won't appear (kill switch). I've installed the container for Sonarr and that UI comes up, but obviously I can't complete set because QBitTorrent is running.
Seems like always the case, once you "give up" and ask for help the answer shows up. Documenting for others. I'm running Container Manager (this video is a few months old using Docker) ver. 20.10.23-1437. Inside the setup for the Container there is a Capabilities section (not shown in the video since it's using the older Docker). In there you can set "Execute container using high privilege". With this checked, everything works. I'm not 100% sure what this is doing though... I'd prefer to chmod the directory for the user and control access, that way I'd know for sure what is being allowed. "High privilege" is too vague IMO.
@@techbytetips thanks for the response. I must have missed my issue, because the other video seems to talks about starting the tunnel and issues with reboots and how to automate that via the tasks. That wasn't my actual issue. I could manual start the tunnel and still I got the fatal error. My issue was related to permissions for the directory as I pointed out. There are some differences in setup with Container Manager vs. Docker, and once you enable the flag for running in high privilege then everything worked.
Great series of videos. I'm trying to install both SABnzbd and QBittorrent on the same nas but they both use 8080 as WEBUI. I tried to set QBT to another port but it didn't work. How do I solve this issue?
Hi thanks for videos really helpful just noticed at 16.20 you have qbittorrent vpn then when you go to configure this is a different version did you update the vpn version or just used the info from the non vpn version video on how to configure this.
Yes, it all depends on your system. That's why it is recommended for you to SSH into your NAS and use the id command to get the IDs for the user that you plan to use. Glad it worked for you.
It is a great security suggestion. I've noticed that once the VPN stops working, like a kill switch, it won't output any traffic until the connection is restored. Never had any issue in all the years that I've had it running.
11.58, you said let me fix the creditianls. I am stuck at "[Soft, auth-failure]" received, process exiting". Could you please let me the correct way to update it?
Hello. Thank you very much for this tutorial! I am keep getting ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2) Although at vpn connection (network settings)says that i am successfully connected...
@@techbytetips I have to apologize to you because I did not read all the comments before I was writing for my problem. I tried the solutions from the other video but nothing worked. What it seems to work is only high privileges. I want to thank you very much for your effort and knowledge. You certenly deserve a donation from all the viewers. I really appreciate your guides and your efforts. Keep up the good work man!
Following these instructions leads to a container that fails to run then repeats endlessly. You'll get errors like "no OpenVPN config file" even when you have one and "unable to chown/chmod" whatever that means.
Hi @@SSloath , chown - Change ownership of files chmod - Change permissions of files It sounds like you are mounting the folders with a user that doesn’t have permissions. Make sure that the user that you assign exists and has permissions.
Thank you for the great resource! I have a question, please. Will the process be the same if I have a CG-NAT supplied wifi modem/router combo? I can't switch providers, unfortunately. What do I put on my port settings? Thanks TBT!
Hi @taranoodtayo, If you have a router that connects to a VPN and redirects all traffic through the VPN, then you don't even need to setup QBitTorrent with VPN. Plain QBitTorrent will do for you.
Hi im on a DS723+ with AirVPN. I have the Problem if i start everything setup right it says in the logs vpn = yes and vpn config file located. No error nothing. I searched on Github and found it is a Problem with the credentials. Someone said i have to add auth-user-pass credentials.conf into the .ovpn file. But when i do it says the file has spelling problems / invalid parameters. I dont know what to do. The VPN File works great if i add it as network interface on the nas so the problem is definitly with the credentials
If you are using special characters from another language, that could be a problem. It should be ASCII characters from the latin alphabet as far as I know. Never seen this before, so, hard to say.
Just did this and it works great. Is there a way to test and make sure it’s running via the vpn? If the vpn stops does communication stop? Looking for a safety.
In my experience it works like a built in kill switch. If the connection to the VPN drops, everything stops working. Your downloads won't do anything. I have not had an issue with it for years.
@@techbytetips Sorry me again. I installed the same thing you did and I only got version 4.3.8 and it has issues with Radarr. Is there a way to upgrade to a higher version. Im new to the docker setup with this.
Hi@@tommycornetto6665 ! I am sorry. I am not understanding the question. Are you talking about changing the version of QBitTorrent? For that, you would have to pick a different image version when you download it.
I had the wrong username/password combination in the Environment Variables and the credentials configuration file. Just changed them to the right ones.
Great tutorial, and everything was easy enough to follow. One issue im stuck on is when adding a torrent to qbit webui, the status is immediately set to Stalled and when checking the trackers the status is not working, peers set to -1 and message set to host not found non-authoritarive. Feel im pretty close to the end, any suggestions would be greatly appreciated
Are you testing with a good torrent that should be working? That's why I test with a public Linux distro image torrent. Usually Stalled happens when the torrent that you are trying to download has no seeders.
Hi, thanks for the reply. I have tried with several different Linux torrents, all are the same. I thought at first it may have been a firewall issue, but disabled it for a small test but didn't change things.
Mmm @@mayachan0308 It's hard to say. You should check the container logs to make sure that you connection is working properly. I don't see a reason why -if you are properly connected to your VPN provider, and they don't block torrenting- your container can't initiate downloads.
Great video! I have this setup but trying to figure out how to keep Qbitt up to date - unsure how to manually update without messing stuff up and watchtower doesn't seem to restart or update the container... any ideas?
Anyone had trouble getting the GUI to work? The app seems to run but I cannot connect to the Web GUI. Running a docker image without the VPN works fine.
Great information!!! One question. how to get .pem file? I have NordVPN sub but I dont see those files around. There are only .crt and .ovpn files available.
nordvpn.com/ovpn/ It doesn't look like your VPN provider provides the files necessary. They only make their .ovpn files available. You would have to place a support ticket to get the files. I saw this posted on reddit regarding those files: www.reddit.com/r/nordvpn/comments/aapxc6/config_crt_and_pem_files/
@@Capu57 There is a link with a "servers" zip file that only has .crt and .key files. I don't know how you could get all the other files from NordVPN. You have to reach out to their support. I don't use their service, so, I am unfamiliar with it.
Sonarr and Radarr can locate files and send them to QBitTorrent but they immediately go into an "Errored" state, is this a file privilege issue? I don't see any files saved within the specified folders
Hi @ion268! It's hard to say with so little information. It could be that the torrent file is corrupted, file permissions, or other things. Most torrents are magnets now a days, so, Sonarr/Radarr would most likely just pass the Magner URL to the torrent client and it fails there. So, your troubleshooting will most likely have to be done in the torrent client.
I keep receiving an exec/bin/bash: exec format error after adding the VPN files and restarting the container. man, I tried but I'm not able to find the solution. Would appreciate if you can help out. Thanks!
Are you making sure that the files are correct? It should be: 1. CA Root Certificate file (.crt) 2. credentials.conf file 3. x509 CRL certificate (.pem) 4. Open VPN file (.ovpn)
I have never seen that error. Are you using the same image? It's like it has a script expecting to have /bin/bash but the container image that they used doesn't actually have it.
@@techbytetips hi running with the same error. Im on Syn Ds223j with DSM7, quick google search says its because of the architecture version? can you help? Many thanks!
@@ricksanchez207 Sadly, if your synology device is running an ARM processor, you will need to find a container image for ARM. There is no way around that. You could also try to talk to the creator of the image that I am using to see if he can provide you with the dockerfile and you can build an image of your own for your architecture.
How do you access the web UI? when I go to localhost:8080 nothing happens. I've checked the container logs and everything appears to be fine. And when running netstat it doesn't show 8080 in use. I'm out of ideas
This series is based on the containers running on a Synology NAS. It will never show you anything in localhost because things are running on the NAS. You need to put the :
@@techbytetips Do you mean the same IP the nas webapp uses? Even when I replace localhost with the nas IP I get the same result. netstat also isn't returning anything using that port. Thanks for the quick response!
Hi @@zold5, I am assuming that you are following the same thing that I am doing here. If you are deploying the containers to the Synology NAS, you have to expose the container on some port. That port will be accessible from the IP of the NAS. It works like this: The connection comes from the network to the NAS IP, the NAS has reserved the port to forward traffic to the container. For example, if you mapped: 8888 (NAS) : 8080 (QBitTorrent Container) Then, you have to communicate with the container from the :.
@@techbytetips So I realized I missed a spot @5:40 where you put 8080 in the first port field. so I did that and it works! I don't really understand why that worked as it seems to contradict what you're saying since it only works with 8080. But idc, thanks for the help! But do you know if there's a way to confirm if the vpn is actually protecting qbittorrent?
Hi @@zold5, good to hear that you got it working. This container image won't even show you the user interface if it is not capable of connecting to the VPN. You can always confirm that by checking the logs. You will see that the connection is established.
@@techbytetips Okay. I just noticed it shows peers, but no seeds for most of the torrents. And some have downloaded a small amount and just stopped connecting. All this port stuff is kinda confusing. Not sure if I need to forward ports through my vpn or not. It only lets me pick from a small list of ports for a open vpn config file.
I don't get where you generate the 4 files (.conf, .crt, .pem & .ovpn). In the package VPN Server, I click on "export the configuration" and the .zip only contains the file .ovpn. So when I launch the container QBitTorrentVPN (that has the username "username" and password "password"), I get TSLHandshake errors. How to fix that ?
Hi! These files that are in the openvpn folder, you should get from your VPN provider: city.ovpn - Is the open vpn configuration file. ca.rsa.4096.crt - Is the Certificate Authority certificate used to connect. crl.rsa.4096.pem - Certificate Revocation List (CRL): A CRL is a time-stamped list of revoked certificates issued by the Certificate Authority (CA). ---- credentials.conf - Is a file that you create that contains your username and password, each in one line.
But those NEED to be in the environment variables AND in the credentials.conf ? I also got from /volume1/@appstore/VPNCenter/etc/openvpn 3 .crt files : ca_bundle.crt, ca_.crt and server.crt Which one do I have to choose ?
Hey! Thanks for the tutorials. I've done everything like you but at the end when I am testing, nothing happens. The torrent is not downloading. Any idea?
If your QBitTorrent is loading, then the connection was made successfully to your VPN provider. So, you can rule that out. Have you checked if the torrent that you add actually has people seeding it? If it stays on "stalled" it is most likely that. You can click on the torrent and then check the peers tab to see if you have people, and if the people have anything to share to you. Other than that, I don't see a reason for it not to work.
@@techbytetips the torrent don’t even shows in qbit when i click on download. So I copy the same link as you ( also tried with other link on the same website) and then click on download but nothing happens except closing that window. The torrent is not added to my download.
@@spylol24 I am not sure that I understand what you are saying. Are you downloading a torrent file and dropping it in the blackhole directory? Are you copying a magnet? Are you adding from an arr? It is not clear from your comment. If you are downloading a torrent: you must drop it in the blackhole directory that QBitTorrent is monitoring. If it doesn't load it, something is wrong with the blackhole configuration. It could be setting in the app, container mapping of the share, or permissions.
Hi @aghiles2893, if you do that, all of your traffic will go through the VPN. It will slow down Usenet if you are also using it as it will be capped at the VPNs max speed.
Hi @@cameronherman3380, I set a VPN profile in the NAS just to overcome the issue with the VPN not being able to connect in the docker container due to the /tun/tap error. I made a video on how to fix that later. You don't need to have the whole NAS running the VPN. It is actually bad for you if you are using Usenet as it will limit your download speeds. That's why the VPN is built into the QBitTorrent container. Prowlarr and other apps don't need a VPN. Only the torrent downloader needs to go through the VPN for your protection from ISP snooping and stuff related.
The WebUI is accessed using the port that you set up. In my case, I set it up in 8080 ( NASIP:8080 ). I have noticed that sometimes, if you change the port it simply won't come up. That's why I left it at the default. In order for you to access the applications outside of your network you need one of these two: 1. Expose the application through your router and then connect to it from your Public IP. 2. Use a VPN to your home. By default, it will be accessible for all devices inside your network.
Hi@@YourAnimeSongs, I am not understanding what you are asking here. A container can only write to the volumes that you mount to it. So, if you want to put files in different directories, you have to map those folders to the container in a given path. That's what I did when I set up the Volumes in the video. I have a video explaining the folder structure for this series in the playlist.
@@techbytetips I will try to clarify things. I have 1 volume: Volume 1. We install Qbit on Volume 1 within the docker directory. Can i let Qbit write to another folder outside the docker directory but on volume 1.
I am not familiar with your VPN provider. You should reach out to their support team to get the needed files. After all, you are paying for the service.
Hey, thks to create this video! By the way, the problem with TUN/TAP dev it not fixed with connect manually the VPN created. You have another solution to fix this? :\ Many thks !
Interesting, that usually solves it for me. You could also try giving the container Highest Privileges. This should allow it to create the TUN/TAP interface. Just not a common security practice. You can also follow this guide: www.blackvoid.club/qbittorrent-via-vpn-docker-container-running-on-synology-nas/ There is a section that talks about adding an environment flag to DSM 7 to solve the /DEV/TUN issue.
You router can give you that. Also, in Windows, open command prompt and type ipconfig /all and you should see the IP assigned to your machine. Usually in the 192.168.x.x or 10.0.x.x
Hi @@JuangaPR07 , yes. Whenever you make a reference to the IP, you use the (internal) IP of the NAS in your network. Usual suspects: 192.168.0.X 10.0.0.X
You need to have the ovpn + certificate files first. I am not familiar with NordVPN but you should be able to request the files from them. Then, you put your user/password in the credentials file or ENV variables.
@@techbytetips when adding the variables such as VPN_ENABLE, etc. You added username and password. Do you actually write username and password or it's our password and username from the vpn provider? I mean on the variables
@@techbytetips i think something is wrong with my path folders. do you have the order of setting up all this arrs? What is the first video? Do you have a video of creating the folders first of all?
@@damspt Here is the full playlist: ruclips.net/video/dj-pCQNXlDs/видео.html&pp=gAQBiAQB Check a few things: 1. The paths are correct 2. The user that you are assigning has permissions to read/write to the folders in the NAS.
You should always check the logs of the container. You will see that it connected to another network and it assigned your container a different IP. If the VPN is not working, your torrents will also not download or upload at all.
As long as they give you the files that you need, it will work with any VPN provider. I believe that they don't make those available easily, you might have to reach out to their support to get them. Files: CRT + PEM + OVPN
![My Torrents Keep Seeding And Won't Stop [Video Request]](http://i.ytimg.com/vi/uR6HgaW1xv0/mqdefault.jpg)
![My Torrents Keep Seeding And Won't Stop [Video Request]](/img/tr.png)
Thank you for your great videos !
Sorry to abuse of your kindness. I'm facing errors that prevent me from downloading files after the step to try and download torrents. Here is what I get any ideas :
(I suspect a right errors on the folders, but I don't know where to look)
Received error message from URL seed. Torrent: "FileName". URL: "official site". Message: "404 Not Found"
File error alert. Torrent: "FileName". File: "/incomplete/FileName". Reason: "FileName file_open (/incomplete/FileName) error: Permission denied"
Sounds like you need to check the permissions of the user that you assigned to the container (PUID/PGID).
@@techbytetipswhich minute of your video tutorial is that. I did set the PUID to 1026 and PGID to 100, besides that I don't recall assigning a user to the container.
@@therealmerf with the PUID/PGID you are telling Docker to run the container with the privileges of the user with those IDs. You then have to make sure that in the NAS, that user has permissions.
@@techbytetips thank you for taking the time replying me, unfortunately my skills don't go that far. I don't know how to check the PUID and PGID of the nas users, and how to adjust them. I just put the numbers you mentioned while creating the container at the beginning of the video, I didn't know they were related to a specific user I don't recall you mentioning this at that point on the video. I'll start from scratch.
@@therealmerf those numbers should be the defaults for the first admin account Synology asks you to create.
I uploaded a video on how to find out the PUID/PGID if you use another user.
OMG! Thank you for this video! I haven’t had a chance to install qBittorrent yet on my NAS, but from watching the entire video, it appears to have all the right answers to address my needs and any potential problems I might encounter. I can’t wait to get home and try this. Salute, sir!🫡 and proud to be a new subscriber to your channel.
Thanks a lot! Hope you continue to find my videos useful.
Just wanted to throw it out there to make sure the VPN_ENABLED variable says "yes" in lowercase. It wouldn't connect to the VPN if it was uppercase.
Thanks for clarifying for everyone.
Hi Im unable to get to the qbittorent web ui. I've used the same ports as described in your video
If you try to use other than 8080, it tends to complain and give you an error.
Awesome video. Thanks for the help!
Been having a great time following your tutorials and they are fantastic. Got a simple question. I setup qbit and everything seems to be fine with nord. Is there a way I can truly be sure through the qbit logs to see the ip address is the vpn one?
Hi, the logs should tell you where you are connecting and which IP it is receiving. You can always execute into the container and do an IP check in the command line. There is a website that you can CURL that gives you the Public IP that it recognizes... I just don't remember the name of it.
curl icanhazip.com
This is so frustrating. There's so much missing information. What VPN are you using, because I can't find the crt files for Proton. Secondly, I'm thankful for some of the other information in the comments, such as lowercase, "yes", and the username and password not being your login info, but the IKEv2 username and password. I gave up on this.
Hi @amandabuckley6828,
There is no missing information. I've provided everything that you need to set up the container properly.
I do not promote a VPN provider because they are not paying me to do so. I'm using Private Internet Access. If you already have a VPN provider, they should be able to give you the certificate files that you need. Reach out to their support teams. That's what you pay them for.
The username/password combination, in my case, is the VPN account's username and password. That's what you have to put in the environment variables and the credentials file.
You need to follow the guide carefully. Most people have been successful at this.
For those who come across this video in the future and you're using Mulvad VPN and it DOES NOT work.
1. Make sure you're using the Android config from the website. It's okay that it doesn't have a crt file it's built into the config.
2. Open the config file to make some edits.
Remove the tun-ipv6 line
Add these 3 lines
pull-filter ignore "dhcp-option DNS6 "
pull-filter ignore "tun-ipv6 "
pull-filter ignore "ifconfig-ipv6 "
3. Save and use this file as your config.
4. Restart container and it should work. This was my fix after spending probably 8 hours trying to figure out what to do.
Thanks for sharing.
My man, youre a life saver
This folder structure is confusing. I do not have a /docker/Configs folder. Am I meant to create the Configs folder? If I just create a qbittorrent folder under /docker, I do not get a /docker/qbittorrent/openvpn folder. Where did the openvpn folder come from?
Hi @js.7254!
I created that file structure in a previous video of the series as it is easier to understand once you follow that specific file structure.
You just create the top folder for each application. For example, you would create the folder for docker/Configs/qbittorrent. Once you start the container, it will create all of the files inside it. Once you get the error, then you can go inside and put the missing files.
Please check out this video explaining the structure:
ruclips.net/video/sBvlAD3Z4rQ/видео.html
Basically:
/docker
--/config
Hey, I had this same issue since I did not follow the virtual NAS setup video. All you have to do is go into the file explorer and add permissions for read/write. I set my personal account to have admin privileges and it allowed me to create the folders you need. Hope this helps!
any Surfshark users get this to work? There is no option to get the files mentioned in the video. A view of a sample credentials.conf file would have been a great inclusion in this tutorial.
The credentials.conf just has 2 lines with:
1. VPN username
2. VPN password
both in clear text.
You can talk to your VPN provider's support team to get the files.
Yes, the files are in your online account. Login and select VPN > Manual Setup > OpenVPN. Copy the credentials for the conf file and select a location and download the UDP config. The certificates are right at the bottom of all the locations under the CA and TLS Certs tab.
@@DR_THE_OG Thanks for helping people out.
Running into a fatal error in the log:
cannot open tun/tap dev /dev/net/tun: no such file or directory (errno=2)
Seems like some sort of permission error from my limited knowledge and google searching. If I go into Control Panel on my Synology NAS, I can manually start the VPN connection and I end up with an IP. Starting the QBitTorrent container ends with the referenced "cannot open.... errno=2"
Turning off the VPN connection in Control Panel and running the container results with the same error, so different (it seems) than covered in the video. Where is /dev/net/tun located (under my user?) I can't seem to find it to check r/w authorization. My guess is the container doesn't have the ability to create the folder, and thus stops killing the process despite the container "running".
Is there a file permission / path permission I'm somehow neglecting? Seems like the VPN works, but obviously QBitTorrent Web UI won't appear (kill switch). I've installed the container for Sonarr and that UI comes up, but obviously I can't complete set because QBitTorrent is running.
Seems like always the case, once you "give up" and ask for help the answer shows up. Documenting for others.
I'm running Container Manager (this video is a few months old using Docker) ver. 20.10.23-1437. Inside the setup for the Container there is a Capabilities section (not shown in the video since it's using the older Docker). In there you can set "Execute container using high privilege".
With this checked, everything works.
I'm not 100% sure what this is doing though... I'd prefer to chmod the directory for the user and control access, that way I'd know for sure what is being allowed. "High privilege" is too vague IMO.
Hi@@RichHammond, the /dev/tun or /tun/tap issue is addressed in another video in the Playlist. Please check it out.
@@techbytetips thanks for the response. I must have missed my issue, because the other video seems to talks about starting the tunnel and issues with reboots and how to automate that via the tasks. That wasn't my actual issue. I could manual start the tunnel and still I got the fatal error. My issue was related to permissions for the directory as I pointed out. There are some differences in setup with Container Manager vs. Docker, and once you enable the flag for running in high privilege then everything worked.
Hi@@RichHammond, that's for sharing. Yeah, High Privileges tends to solve network issues. Even with the Docker version.
Great series of videos. I'm trying to install both SABnzbd and QBittorrent on the same nas but they both use 8080 as WEBUI. I tried to set QBT to another port but it didn't work. How do I solve this issue?
Hi! Use 8080 for QBit and 8081 for SAB. QBitTorrent is just annoying and wants to control that port no matter what.
Hi thanks for videos really helpful just noticed at 16.20 you have qbittorrent vpn then when you go to configure this is a different version did you update the vpn version or just used the info from the non vpn version video on how to configure this.
Hi, the section at 16:25 is the same as QBitTorrent without VPN.
Great video! I ran into a weird issue where my torrents in QBitTorrent kept failing. I replaced the values of PUID and GUID with 0 and it worked
Yes, it all depends on your system. That's why it is recommended for you to SSH into your NAS and use the id command to get the IDs for the user that you plan to use.
Glad it worked for you.
Don't you want to limit the network connection to the tunnel interface in the qbittorrent advance settings? Otherwise you could leak your IP.
It is a great security suggestion. I've noticed that once the VPN stops working, like a kill switch, it won't output any traffic until the connection is restored. Never had any issue in all the years that I've had it running.
11.58, you said let me fix the creditianls. I am stuck at "[Soft, auth-failure]" received, process exiting". Could you please let me the correct way to update it?
5:20 is where you put the credentials and in the file mentioned at 9:33
Hello. Thank you very much for this tutorial! I am keep getting ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)
Although at vpn connection (network settings)says that i am successfully connected...
Hi! I made a separate video on how to fix that error.
@@techbytetips I have to apologize to you because I did not read all the comments before I was writing for my problem. I tried the solutions from the other video but nothing worked. What it seems to work is only high privileges. I want to thank you very much for your effort and knowledge. You certenly deserve a donation from all the viewers. I really appreciate your guides and your efforts. Keep up the good work man!
@@netrionio1 yes, sadly, giving it highest privileges is necessary in Synology even after applying the fix.
Following these instructions leads to a container that fails to run then repeats endlessly. You'll get errors like "no OpenVPN config file" even when you have one and "unable to chown/chmod" whatever that means.
Hi @@SSloath ,
chown - Change ownership of files
chmod - Change permissions of files
It sounds like you are mounting the folders with a user that doesn’t have permissions. Make sure that the user that you assign exists and has permissions.
Thank you for the great resource! I have a question, please.
Will the process be the same if I have a CG-NAT supplied wifi modem/router combo? I can't switch providers, unfortunately.
What do I put on my port settings? Thanks TBT!
Hi @taranoodtayo, If you have a router that connects to a VPN and redirects all traffic through the VPN, then you don't even need to setup QBitTorrent with VPN. Plain QBitTorrent will do for you.
Hi im on a DS723+ with AirVPN. I have the Problem if i start everything setup right it says in the logs vpn = yes and vpn config file located. No error nothing. I searched on Github and found it is a Problem with the credentials. Someone said i have to add auth-user-pass credentials.conf into the .ovpn file. But when i do it says the file has spelling problems / invalid parameters. I dont know what to do. The VPN File works great if i add it as network interface on the nas so the problem is definitly with the credentials
If you are using special characters from another language, that could be a problem. It should be ASCII characters from the latin alphabet as far as I know. Never seen this before, so, hard to say.
Just did this and it works great.
Is there a way to test and make sure it’s running via the vpn? If the vpn stops does communication stop? Looking for a safety.
In my experience it works like a built in kill switch. If the connection to the VPN drops, everything stops working. Your downloads won't do anything. I have not had an issue with it for years.
@@techbytetipsAwesome. Thanks! Your video was perfect!
@@techbytetips Sorry me again. I installed the same thing you did and I only got version 4.3.8 and it has issues with Radarr. Is there a way to upgrade to a higher version. Im new to the docker setup with this.
Hi@@tommycornetto6665 ! I am sorry. I am not understanding the question. Are you talking about changing the version of QBitTorrent? For that, you would have to pick a different image version when you download it.
@@techbytetips okay good to know. Thanks.
I just can't get this. I keep getting the TUN/TAP error.
I made a video on how to solve that issue.
ruclips.net/video/GaKxCAJvWsI/видео.html
Hello at around 11:59 in the video you run into some problem and then fix that offscreen. What is it that you did? i think i have the same issue
I had the wrong username/password combination in the Environment Variables and the credentials configuration file. Just changed them to the right ones.
Great tutorial, and everything was easy enough to follow. One issue im stuck on is when adding a torrent to qbit webui, the status is immediately set to Stalled and when checking the trackers the status is not working, peers set to -1 and message set to host not found non-authoritarive.
Feel im pretty close to the end, any suggestions would be greatly appreciated
Are you testing with a good torrent that should be working? That's why I test with a public Linux distro image torrent.
Usually Stalled happens when the torrent that you are trying to download has no seeders.
Hi, thanks for the reply. I have tried with several different Linux torrents, all are the same. I thought at first it may have been a firewall issue, but disabled it for a small test but didn't change things.
Mmm @@mayachan0308 It's hard to say. You should check the container logs to make sure that you connection is working properly.
I don't see a reason why -if you are properly connected to your VPN provider, and they don't block torrenting- your container can't initiate downloads.
I get a "TUN/TAP error" and it crashes, can't figure it out
I have made a video regarding that issue and how to solve it: ruclips.net/video/GaKxCAJvWsI/видео.html
Great video! I have this setup but trying to figure out how to keep Qbitt up to date - unsure how to manually update without messing stuff up and watchtower doesn't seem to restart or update the container... any ideas?
I already published a video on how to update the containers. Just use the latest tag and follow my guide. It is in the same playlist.
Anyone had trouble getting the GUI to work? The app seems to run but I cannot connect to the Web GUI. Running a docker image without the VPN works fine.
The application will not load if the VPN cannot connect properly.
@@techbytetips The VPN shows as connected in the log. I used the binhex image with VPN and it worked fine with the same setup and VPN files.
@@DR_THE_OG Are you using port 8080? I noticed that this specific image doesn't load the interface if you try to use another port.
[warn] Unable to chown/chmod /config/openvpn/, assuming SMB mountpoint any ideas please?
The information is not useful as it is. You must provide context and details if you want people to help you.
Great information!!!
One question. how to get .pem file? I have NordVPN sub but I dont see those files around. There are only .crt and .ovpn files available.
nordvpn.com/ovpn/
It doesn't look like your VPN provider provides the files necessary. They only make their .ovpn files available. You would have to place a support ticket to get the files.
I saw this posted on reddit regarding those files:
www.reddit.com/r/nordvpn/comments/aapxc6/config_crt_and_pem_files/
@@techbytetips Per the reddit link it just has talks about a .CA and .TLS file will these work instead of a .PEM file?
@@Capu57 There is a link with a "servers" zip file that only has .crt and .key files. I don't know how you could get all the other files from NordVPN. You have to reach out to their support. I don't use their service, so, I am unfamiliar with it.
Maybe they can convert them to the format you need.
Nevermind it did. I followed the step below where you giving it the highest privelage setting and that fixed it.
Sonarr and Radarr can locate files and send them to QBitTorrent but they immediately go into an "Errored" state, is this a file privilege issue? I don't see any files saved within the specified folders
Hi @ion268! It's hard to say with so little information. It could be that the torrent file is corrupted, file permissions, or other things. Most torrents are magnets now a days, so, Sonarr/Radarr would most likely just pass the Magner URL to the torrent client and it fails there. So, your troubleshooting will most likely have to be done in the torrent client.
Thank you for the reply! I’ll dig a bit deeper into my torrent software
I keep receiving an exec/bin/bash: exec format error after adding the VPN files and restarting the container. man, I tried but I'm not able to find the solution. Would appreciate if you can help out. Thanks!
Are you making sure that the files are correct? It should be:
1. CA Root Certificate file (.crt)
2. credentials.conf file
3. x509 CRL certificate (.pem)
4. Open VPN file (.ovpn)
Hello, the container stops as soon as it starts. The error I get is "exec /bin/bash: exec format error". Any ideas?
I have never seen that error. Are you using the same image? It's like it has a script expecting to have /bin/bash but the container image that they used doesn't actually have it.
@@techbytetips hi running with the same error. Im on Syn Ds223j with DSM7, quick google search says its because of the architecture version? can you help? Many thanks!
@@ricksanchez207 Sadly, if your synology device is running an ARM processor, you will need to find a container image for ARM. There is no way around that. You could also try to talk to the creator of the image that I am using to see if he can provide you with the dockerfile and you can build an image of your own for your architecture.
How do you access the web UI? when I go to localhost:8080 nothing happens. I've checked the container logs and everything appears to be fine. And when running netstat it doesn't show 8080 in use. I'm out of ideas
This series is based on the containers running on a Synology NAS. It will never show you anything in localhost because things are running on the NAS. You need to put the :
@@techbytetips Do you mean the same IP the nas webapp uses? Even when I replace localhost with the nas IP I get the same result. netstat also isn't returning anything using that port.
Thanks for the quick response!
Hi @@zold5, I am assuming that you are following the same thing that I am doing here. If you are deploying the containers to the Synology NAS, you have to expose the container on some port.
That port will be accessible from the IP of the NAS.
It works like this:
The connection comes from the network to the NAS IP, the NAS has reserved the port to forward traffic to the container.
For example, if you mapped:
8888 (NAS) : 8080 (QBitTorrent Container)
Then, you have to communicate with the container from the :.
@@techbytetips So I realized I missed a spot @5:40 where you put 8080 in the first port field. so I did that and it works! I don't really understand why that worked as it seems to contradict what you're saying since it only works with 8080. But idc, thanks for the help!
But do you know if there's a way to confirm if the vpn is actually protecting qbittorrent?
Hi @@zold5, good to hear that you got it working.
This container image won't even show you the user interface if it is not capable of connecting to the VPN.
You can always confirm that by checking the logs. You will see that the connection is established.
I have bee trying but i dont understand how to get the required files... i had Nordvpn but could not work it out
Hi! Reach out to your VPN provider. They should provide you the files. If they don’t, switch providers. You are paying for the service.
Thanks! i switched from Nord to TorGuard@@techbytetips
Thanks i switched from Nord to TorGuard. I think i almost have it working@@techbytetips
I don't get the parameter "Name_Servers" parameter, where do I find these?
That is the Domain Name Servers, or DNS. You can use Google's DNS: 8.8.8.8 or OpenDNS 1.1.1.1
19:01 Wait, earlier you changed it to 8999, but said to leave it at 6881 here. Is that right?
It doesn't really matter what you put here. Just make sure that your router allows the port's traffic to go into the IP of the NAS.
@@techbytetips Okay. I just noticed it shows peers, but no seeds for most of the torrents. And some have downloaded a small amount and just stopped connecting. All this port stuff is kinda confusing. Not sure if I need to forward ports through my vpn or not. It only lets me pick from a small list of ports for a open vpn config file.
@@zairman that sounds like the torrents simply have no people sharing the files. If it were not working, it wouldn’t even have downloaded a bit.
@@techbytetips Okay, thanks! I guess I have it working okay then. Now to find a location with good speeds.
I don't get where you generate the 4 files (.conf, .crt, .pem & .ovpn). In the package VPN Server, I click on "export the configuration" and the .zip only contains the file .ovpn. So when I launch the container QBitTorrentVPN (that has the username "username" and password "password"), I get TSLHandshake errors.
How to fix that ?
Hi! These files that are in the openvpn folder, you should get from your VPN provider:
city.ovpn - Is the open vpn configuration file.
ca.rsa.4096.crt - Is the Certificate Authority certificate used to connect.
crl.rsa.4096.pem - Certificate Revocation List (CRL): A CRL is a time-stamped list of revoked certificates issued by the Certificate Authority (CA).
----
credentials.conf - Is a file that you create that contains your username and password, each in one line.
The username and password are for your VPN provider.
But I use OpenVPN on my NAS. I never entered any log information :/
But those NEED to be in the environment variables AND in the credentials.conf ?
I also got from /volume1/@appstore/VPNCenter/etc/openvpn 3 .crt files : ca_bundle.crt, ca_.crt and server.crt
Which one do I have to choose ?
@@ML-by7ig If you already have ALL connections from your NAS going through the VPN, then you don't need to put the VPN inside the container.
Hey! Thanks for the tutorials.
I've done everything like you but at the end when I am testing, nothing happens. The torrent is not downloading.
Any idea?
If your QBitTorrent is loading, then the connection was made successfully to your VPN provider. So, you can rule that out.
Have you checked if the torrent that you add actually has people seeding it? If it stays on "stalled" it is most likely that. You can click on the torrent and then check the peers tab to see if you have people, and if the people have anything to share to you.
Other than that, I don't see a reason for it not to work.
@@techbytetips the torrent don’t even shows in qbit when i click on download.
So I copy the same link as you ( also tried with other link on the same website) and then click on download but nothing happens except closing that window. The torrent is not added to my download.
@@spylol24 I am not sure that I understand what you are saying. Are you downloading a torrent file and dropping it in the blackhole directory? Are you copying a magnet? Are you adding from an arr? It is not clear from your comment.
If you are downloading a torrent: you must drop it in the blackhole directory that QBitTorrent is monitoring. If it doesn't load it, something is wrong with the blackhole configuration. It could be setting in the app, container mapping of the share, or permissions.
@@techbytetips i did exactly what you are doing in the testing part of this video but nothing change in qbit. The download does not even appear
@@spylol24 Not sure... if you are adding the torrent or magent directly. It should work. Unless there is something wrong with it.
Isn't it enough to create a vpn profil (in network/interface) and connect to it ? No need to add the credentials to the container ?
Hi @aghiles2893, if you do that, all of your traffic will go through the VPN. It will slow down Usenet if you are also using it as it will be capped at the VPNs max speed.
Hi @@techbytetips, I see... Thank you!
@@techbytetips but how would you go about accessing public torrents on prowlarr, if you disable the vpn profile for the whole synology nas?
Hi @@cameronherman3380, I set a VPN profile in the NAS just to overcome the issue with the VPN not being able to connect in the docker container due to the /tun/tap error. I made a video on how to fix that later.
You don't need to have the whole NAS running the VPN. It is actually bad for you if you are using Usenet as it will limit your download speeds.
That's why the VPN is built into the QBitTorrent container. Prowlarr and other apps don't need a VPN. Only the torrent downloader needs to go through the VPN for your protection from ISP snooping and stuff related.
@@techbytetips thanks for the insight there, do you know why they get stalled on qbittorrent? Seems to be intermittent.
I use Surfshark, I can't get such files for configuration on their website, is the only option to write to support?
Yes, only they can give you the files that you need to connect.
did you ever sort this out? I also use Surfshark, have no idea how to get the referenced files, and can't complete the installation.
@@duckdodgers2843Unfortunately no, I gave up
How can you go to the Qbit web ui? And can i acces this from any computer or only within my own network?
And is it possible to let Qbit write outside the Docker files, for example i have:
Docker \ Qbittorrent-VPN
Plex \ Movies
Plex \ Tv shows
etc.
The WebUI is accessed using the port that you set up. In my case, I set it up in 8080 ( NASIP:8080 ). I have noticed that sometimes, if you change the port it simply won't come up. That's why I left it at the default.
In order for you to access the applications outside of your network you need one of these two:
1. Expose the application through your router and then connect to it from your Public IP.
2. Use a VPN to your home.
By default, it will be accessible for all devices inside your network.
Hi@@YourAnimeSongs, I am not understanding what you are asking here. A container can only write to the volumes that you mount to it. So, if you want to put files in different directories, you have to map those folders to the container in a given path. That's what I did when I set up the Volumes in the video. I have a video explaining the folder structure for this series in the playlist.
@@techbytetips Thanks
@@techbytetips I will try to clarify things. I have 1 volume: Volume 1. We install Qbit on Volume 1 within the docker directory. Can i let Qbit write to another folder outside the docker directory but on volume 1.
Airvpn doesn't provide a Ca Certificate and the vpn says .ovpn contains invalid parameters...
I am not familiar with your VPN provider. You should reach out to their support team to get the needed files. After all, you are paying for the service.
@@techbytetips I actually found it now but it still claims the .ovpn file contains invalid parameters... :(
@@UltimateArts13 you can edit the .ovpn file with notepad or any text editor. If it tells you in the logs what is wrong, you can remove it.
@@techbytetips Thanks, sadly it just says invalid parameters.
Hey, thks to create this video! By the way, the problem with TUN/TAP dev it not fixed with connect manually the VPN created. You have another solution to fix this? :\ Many thks !
Interesting, that usually solves it for me. You could also try giving the container Highest Privileges. This should allow it to create the TUN/TAP interface. Just not a common security practice.
You can also follow this guide: www.blackvoid.club/qbittorrent-via-vpn-docker-container-running-on-synology-nas/
There is a section that talks about adding an environment flag to DSM 7 to solve the /DEV/TUN issue.
Please report in the comments if that worked for you, as others might have the same issue.
@@techbytetips container with Highest Privileges works! Thks
@@wilsonlspacheco Awesome! Thanks for reporting. It will help others with the same problem.
Same issue. Only executing at highest privilege worked, unfortunately. Not very secure.
How do I get my Local Area Network Subnet?
You router can give you that.
Also, in Windows, open command prompt and type ipconfig /all and you should see the IP assigned to your machine.
Usually in the 192.168.x.x or 10.0.x.x
@@techbytetips Am I using the LAN IP for the NAS?
Hi @@JuangaPR07 , yes. Whenever you make a reference to the IP, you use the (internal) IP of the NAS in your network.
Usual suspects:
192.168.0.X
10.0.0.X
can i use this with a vpn like surfshark?
Hi! Yes, you just need to reach out to your VPN provider to get you the certificate file, the CRL file and the OpenVPN file.
i have nordvpn. do i use the username and password from my nordvpn?
You need to have the ovpn + certificate files first. I am not familiar with NordVPN but you should be able to request the files from them. Then, you put your user/password in the credentials file or ENV variables.
@@techbytetips when adding the variables such as VPN_ENABLE, etc. You added username and password. Do you actually write username and password or it's our password and username from the vpn provider? I mean on the variables
@@damspt That should be your username and password.
@@techbytetips i think something is wrong with my path folders. do you have the order of setting up all this arrs? What is the first video? Do you have a video of creating the folders first of all?
@@damspt Here is the full playlist: ruclips.net/video/dj-pCQNXlDs/видео.html&pp=gAQBiAQB
Check a few things:
1. The paths are correct
2. The user that you are assigning has permissions to read/write to the folders in the NAS.
How does one check if the VPN is working?
You should always check the logs of the container. You will see that it connected to another network and it assigned your container a different IP.
If the VPN is not working, your torrents will also not download or upload at all.
@@techbytetips Thank you!
Where do I get the VPN files from?
You get those from your VPN provider. Reach their support if you can't find them on their website.
IO dnt have that docker what what
This made no sense.
Will this work with NordVPN?
As long as they give you the files that you need, it will work with any VPN provider. I believe that they don't make those available easily, you might have to reach out to their support to get them.
Files: CRT + PEM + OVPN
I believe you linked a Reddit post to someone asking about NordVPN closer to the top, and they provide a link for both the ovpn and other files