Failure to download over PIA (PVE Docker VM)

[BRCook]

Is there a pinned issue for this?

• I have read the pinned issues and could not find my issue

Is there an existing or similar issue/discussion for this?

• I have searched the existing issues
• I have searched the existing discussions

Is there any comment in the documentation for this?

• I have read the documentation, especially the FAQ and Troubleshooting parts

Is this related to a provider?

• I have checked the provider repo for issues
• My issue is NOT related to a provider

Are you using the latest release?

• I am using the latest release

Have you tried using the dev branch latest?

• I have tried using dev branch

Docker run config used

services:
    transmission-openvpn:
        container_name: transmission
        restart: unless-stopped
        cap_add:
            - NET_ADMIN
        volumes:
            - '/transmissionvpn/data/:/data'
            - '/transmissionvpn/config/:/config'
            - '/mnt/downloads:/downloads'
        environment:
            - OPENVPN_PROVIDER=PIA
            - OPENVPN_CONFIG=ca_montreal
            - OPENVPN_USERNAME=XXXXX
            - OPENVPN_PASSWORD=XXXXX
            - TRANSMISSION_DOWNLOAD_DIR=/downloads/Complete
            - TRANSMISSION_INCOMPLETE_DIR_ENABLED=true
            - TRANSMISSION_INCOMPLETE_DIR=/downloads/InProgress
            - LOCAL_NETWORK=10.10.100.0/24
            - PUID=3100
            - PGID=3100
        logging:
            driver: json-file
            options:
                max-size: 10m
        ports:
            - '9091:9091'
        image: haugene/transmission-openvpn

Current Behavior

Container creation goes smoothly. Within the container I have the correct PIA IP address and Transmission reports that its port is open. However, nothing downloads -- everything gets stuck on "retrieving metadata".

Expected Behavior

Downloads should work.

How have you tried to solve the problem?

1. Verified permissions on all directories and tested creating files and directories both inside and outside the container.
2. Tested a number of different magnets, all yield the same failure.
3. Tried different PIA servers.
4. Tried PIA desktop on Windows with qBitTorrent and everything there worked just fine.
5. Removed the Docker VM and made a new one.

Log output

Starting container with revision: fd609f2ace1970858d3c32fcbd6c271b3d274d39
TRANSMISSION_HOME is currently set to: /config/transmission-home
Creating TUN device /dev/net/tun
Using OpenVPN provider: PIA
Running with VPN_CONFIG_SOURCE auto
Provider PIA has a bundled setup script. Defaulting to internal config
Executing setup script for PIA
Downloading OpenVPN config bundle openvpn into temporary file /tmp/tmp.6lA5PA2DCb
Extract OpenVPN config bundle into PIA directory /etc/openvpn/pia
Starting OpenVPN using config ca_montreal.ovpn
Modifying /etc/openvpn/pia/ca_montreal.ovpn for best behaviour in this container
Modification: Point auth-user-pass option to the username/password file
Modification: Change ca certificate path
Modification: Change ping options
Modification: Update/set resolv-retry to 15 seconds
Modification: Change tls-crypt keyfile path
Modification: Set output verbosity to 3
Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
Modification: Updating status for config failure detection
Setting OpenVPN credentials...
adding route to local network 10.10.100.0/24 via 172.18.0.1 dev eth0
2025-06-26 15:24:02 DEPRECATED OPTION: --cipher set to 'aes-128-cbc' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'aes-128-cbc' to --data-ciphers or change --cipher 'aes-128-cbc' to --data-ciphers-fallback 'aes-128-cbc' to silence this warning.
2025-06-26 15:24:02 OpenVPN 2.5.11 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 17 2024
2025-06-26 15:24:02 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
2025-06-26 15:24:02 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2025-06-26 15:24:02 CRL: loaded 1 CRLs from file -----BEGIN X509 CRL-----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-----END X509 CRL-----

2025-06-26 15:24:02 TCP/UDP: Preserving recently used remote address: [AF_INET]84.247.105.205:1198
2025-06-26 15:24:02 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-06-26 15:24:02 UDP link local: (not bound)
2025-06-26 15:24:02 UDP link remote: [AF_INET]84.247.105.205:1198
2025-06-26 15:24:02 TLS: Initial packet from [AF_INET]84.247.105.205:1198, sid=21e7bead 931ff8b5
2025-06-26 15:24:02 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2025-06-26 15:24:02 VERIFY OK: depth=1, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=Private Internet Access, name=Private Internet Access, emailAddress=secure@privateinternetaccess.com
2025-06-26 15:24:02 VERIFY KU OK
2025-06-26 15:24:02 Validating certificate extended key usage
2025-06-26 15:24:02 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2025-06-26 15:24:02 VERIFY EKU OK
2025-06-26 15:24:02 VERIFY OK: depth=0, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=montreal427, name=montreal427
2025-06-26 15:24:02 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA512
2025-06-26 15:24:02 [montreal427] Peer Connection Initiated with [AF_INET]84.247.105.205:1198
2025-06-26 15:24:02 PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway def1,route-ipv6 2000::/3,dhcp-option DNS 10.0.0.243,route-gateway 10.3.112.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.3.112.154 255.255.255.0,peer-id 5,cipher AES-128-GCM'
2025-06-26 15:24:02 OPTIONS IMPORT: timers and/or timeouts modified
2025-06-26 15:24:02 OPTIONS IMPORT: compression parms modified
2025-06-26 15:24:02 OPTIONS IMPORT: --ifconfig/up options modified
2025-06-26 15:24:02 OPTIONS IMPORT: route options modified
2025-06-26 15:24:02 OPTIONS IMPORT: route-related options modified
2025-06-26 15:24:02 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2025-06-26 15:24:02 OPTIONS IMPORT: peer-id set
2025-06-26 15:24:02 OPTIONS IMPORT: adjusting link_mtu to 1625
2025-06-26 15:24:02 OPTIONS IMPORT: data channel crypto options modified
2025-06-26 15:24:02 Data Channel: using negotiated cipher 'AES-128-GCM'
2025-06-26 15:24:02 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
2025-06-26 15:24:02 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
2025-06-26 15:24:02 net_route_v4_best_gw query: dst 0.0.0.0
2025-06-26 15:24:02 net_route_v4_best_gw result: via 172.18.0.1 dev eth0
2025-06-26 15:24:02 ROUTE_GATEWAY 172.18.0.1/255.255.0.0 IFACE=eth0 HWADDR=3e:79:0b:c5:90:02
2025-06-26 15:24:02 GDG6: remote_host_ipv6=n/a
2025-06-26 15:24:02 net_route_v6_best_gw query: dst ::
2025-06-26 15:24:02 sitnl_send: rtnl: generic error (-101): Network is unreachable
2025-06-26 15:24:02 ROUTE6: default_gateway=UNDEF
2025-06-26 15:24:02 TUN/TAP device tun0 opened
2025-06-26 15:24:02 net_iface_mtu_set: mtu 1500 for tun0
2025-06-26 15:24:02 net_iface_up: set tun0 up
2025-06-26 15:24:02 net_addr_v4_add: 10.3.112.154/24 dev tun0
2025-06-26 15:24:02 net_route_v4_add: 84.247.105.205/32 via 172.18.0.1 dev [NULL] table 0 metric -1
2025-06-26 15:24:02 net_route_v4_add: 0.0.0.0/1 via 10.3.112.1 dev [NULL] table 0 metric -1
2025-06-26 15:24:02 net_route_v4_add: 128.0.0.0/1 via 10.3.112.1 dev [NULL] table 0 metric -1
2025-06-26 15:24:02 WARNING: OpenVPN was configured to add an IPv6 route. However, no IPv6 has been configured for tun0, therefore the route installation may fail or may not work as expected.
2025-06-26 15:24:02 add_route_ipv6(2000::/3 -> :: metric -1) dev tun0
2025-06-26 15:24:02 net_route_v6_add: 2000::/3 via :: dev tun0 table 0 metric -1
Up script executed with device=tun0 ifconfig_local=10.3.112.154
root@docker:~# docker logs transmission 
Starting container with revision: fd609f2ace1970858d3c32fcbd6c271b3d274d39
TRANSMISSION_HOME is currently set to: /config/transmission-home
Creating TUN device /dev/net/tun
Using OpenVPN provider: PIA
Running with VPN_CONFIG_SOURCE auto
Provider PIA has a bundled setup script. Defaulting to internal config
Executing setup script for PIA
Downloading OpenVPN config bundle openvpn into temporary file /tmp/tmp.6lA5PA2DCb
Extract OpenVPN config bundle into PIA directory /etc/openvpn/pia
Starting OpenVPN using config ca_montreal.ovpn
Modifying /etc/openvpn/pia/ca_montreal.ovpn for best behaviour in this container
Modification: Point auth-user-pass option to the username/password file
Modification: Change ca certificate path
Modification: Change ping options
Modification: Update/set resolv-retry to 15 seconds
Modification: Change tls-crypt keyfile path
Modification: Set output verbosity to 3
Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
Modification: Updating status for config failure detection
Setting OpenVPN credentials...
adding route to local network 10.10.100.0/24 via 172.18.0.1 dev eth0
2025-06-26 15:24:02 DEPRECATED OPTION: --cipher set to 'aes-128-cbc' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'aes-128-cbc' to --data-ciphers or change --cipher 'aes-128-cbc' to --data-ciphers-fallback 'aes-128-cbc' to silence this warning.
2025-06-26 15:24:02 OpenVPN 2.5.11 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 17 2024
2025-06-26 15:24:02 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
2025-06-26 15:24:02 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2025-06-26 15:24:02 CRL: loaded 1 CRLs from file -----BEGIN X509 CRL-----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-----END X509 CRL-----

2025-06-26 15:24:02 TCP/UDP: Preserving recently used remote address: [AF_INET]84.247.105.205:1198
2025-06-26 15:24:02 Socket Buffers: R=[212992->212992] S=[212992->212992]
2025-06-26 15:24:02 UDP link local: (not bound)
2025-06-26 15:24:02 UDP link remote: [AF_INET]84.247.105.205:1198
2025-06-26 15:24:02 TLS: Initial packet from [AF_INET]84.247.105.205:1198, sid=21e7bead 931ff8b5
2025-06-26 15:24:02 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2025-06-26 15:24:02 VERIFY OK: depth=1, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=Private Internet Access, name=Private Internet Access, emailAddress=secure@privateinternetaccess.com
2025-06-26 15:24:02 VERIFY KU OK
2025-06-26 15:24:02 Validating certificate extended key usage
2025-06-26 15:24:02 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2025-06-26 15:24:02 VERIFY EKU OK
2025-06-26 15:24:02 VERIFY OK: depth=0, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=montreal427, name=montreal427
2025-06-26 15:24:02 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA512
2025-06-26 15:24:02 [montreal427] Peer Connection Initiated with [AF_INET]84.247.105.205:1198
2025-06-26 15:24:02 PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway def1,route-ipv6 2000::/3,dhcp-option DNS 10.0.0.243,route-gateway 10.3.112.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.3.112.154 255.255.255.0,peer-id 5,cipher AES-128-GCM'
2025-06-26 15:24:02 OPTIONS IMPORT: timers and/or timeouts modified
2025-06-26 15:24:02 OPTIONS IMPORT: compression parms modified
2025-06-26 15:24:02 OPTIONS IMPORT: --ifconfig/up options modified
2025-06-26 15:24:02 OPTIONS IMPORT: route options modified
2025-06-26 15:24:02 OPTIONS IMPORT: route-related options modified
2025-06-26 15:24:02 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2025-06-26 15:24:02 OPTIONS IMPORT: peer-id set
2025-06-26 15:24:02 OPTIONS IMPORT: adjusting link_mtu to 1625
2025-06-26 15:24:02 OPTIONS IMPORT: data channel crypto options modified
2025-06-26 15:24:02 Data Channel: using negotiated cipher 'AES-128-GCM'
2025-06-26 15:24:02 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
2025-06-26 15:24:02 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
2025-06-26 15:24:02 net_route_v4_best_gw query: dst 0.0.0.0
2025-06-26 15:24:02 net_route_v4_best_gw result: via 172.18.0.1 dev eth0
2025-06-26 15:24:02 ROUTE_GATEWAY 172.18.0.1/255.255.0.0 IFACE=eth0 HWADDR=3e:79:0b:c5:90:02
2025-06-26 15:24:02 GDG6: remote_host_ipv6=n/a
2025-06-26 15:24:02 net_route_v6_best_gw query: dst ::
2025-06-26 15:24:02 sitnl_send: rtnl: generic error (-101): Network is unreachable
2025-06-26 15:24:02 ROUTE6: default_gateway=UNDEF
2025-06-26 15:24:02 TUN/TAP device tun0 opened
2025-06-26 15:24:02 net_iface_mtu_set: mtu 1500 for tun0
2025-06-26 15:24:02 net_iface_up: set tun0 up
2025-06-26 15:24:02 net_addr_v4_add: 10.3.112.154/24 dev tun0
2025-06-26 15:24:02 net_route_v4_add: 84.247.105.205/32 via 172.18.0.1 dev [NULL] table 0 metric -1
2025-06-26 15:24:02 net_route_v4_add: 0.0.0.0/1 via 10.3.112.1 dev [NULL] table 0 metric -1
2025-06-26 15:24:02 net_route_v4_add: 128.0.0.0/1 via 10.3.112.1 dev [NULL] table 0 metric -1
2025-06-26 15:24:02 WARNING: OpenVPN was configured to add an IPv6 route. However, no IPv6 has been configured for tun0, therefore the route installation may fail or may not work as expected.
2025-06-26 15:24:02 add_route_ipv6(2000::/3 -> :: metric -1) dev tun0
2025-06-26 15:24:02 net_route_v6_add: 2000::/3 via :: dev tun0 table 0 metric -1
Up script executed with device=tun0 ifconfig_local=10.3.112.154
Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 10.3.112.154
Enforcing ownership on transmission directories
Applying permissions to transmission directories
Setting owner for transmission paths to 3100:3100
Setting permissions for download and incomplete directories
umask: 2
Directories: 775
Files: 664
chmod: changing permissions of '/downloads/Complete': Operation not permitted
chmod: changing permissions of '/downloads/InProgress': Operation not permitted
Setting permission for watch directory (775) and its files (664)

-------------------------------------
Transmission will run as
-------------------------------------
User name:   abc
User uid:    3100
User gid:    3100
-------------------------------------

Updating Transmission settings.json with values from env variables
Attempting to use existing settings.json for Transmission
Successfully used existing settings.json /config/transmission-home/settings.json
Overriding bind-address-ipv4 because TRANSMISSION_BIND_ADDRESS_IPV4 is set to 10.3.112.154
Overriding download-dir because TRANSMISSION_DOWNLOAD_DIR is set to /downloads/Complete
Overriding incomplete-dir because TRANSMISSION_INCOMPLETE_DIR is set to /downloads/InProgress
Overriding incomplete-dir-enabled because TRANSMISSION_INCOMPLETE_DIR_ENABLED is set to true
Overriding rpc-password because TRANSMISSION_RPC_PASSWORD is set to [REDACTED]
Overriding rpc-port because TRANSMISSION_RPC_PORT is set to 9091
Overriding rpc-username because TRANSMISSION_RPC_USERNAME is set to 
Overriding watch-dir because TRANSMISSION_WATCH_DIR is set to /data/watch
sed'ing True to true
STARTING TRANSMISSION
Provider PIA has a script for automatic port forwarding. Will run it now.
If you want to disable this, set environment variable DISABLE_PORT_UPDATER=true
Transmission startup script complete.
2025-06-26 15:24:02 Initialization Sequence Completed
Running functions for token based port fowarding
Reserved Port: 48876  Thu Jun 26 15:24:08 UTC 2025
transmission auth not required
waiting for transmission to become responsive
transmission became responsive
     2    n/a       None  Unknown      0.0     0.0   None  Idle         3041785bdce4de892194137a1a56a6d97af1f881
Sum:                None               0.0     0.0
setting transmission port to 48876
localhost:9091/transmission/rpc/ responded: success
Checking port...
Port is open: Yes
#######################
        SUCCESS        
#######################
Port: 48876
Expiration Thu Aug 28 03:24:08 UTC 2025
#######################
Entering infinite while loop
Every 15 minutes, check port status

HW/SW Environment

- OS: PVE VM w/ Debian Bookworm, kernel 6.1.0-37-amd64, QEMU, Standard PC _i440FX + PIIX, 1996_, firmware 4.2025.02-3
- Docker: 28.3.0 38b7060

Anything else?

transmission.log is empty.

Folder structure is:

/
└───transmissionvpn
    │
    └───config
    │   │   openvpn-credentials.txt
    │   │   transmission-credentials.txt
    │   │   
    │   └───transmission-home
    │       │   bandwidth-groups.json
    │       │   settings.json
    │       │   transmission.log
    │       │
    │       └───blocklists
    │       └───resume
    │       └───torrents
    │   
    └───data
        │   
        └───watch

Here is settings.json:

{
    "alt-speed-down": 50,
    "alt-speed-enabled": false,
    "alt-speed-time-begin": 540,
    "alt-speed-time-day": 127,
    "alt-speed-time-enabled": false,
    "alt-speed-time-end": 1020,
    "alt-speed-up": 50,
    "announce-ip": "",
    "announce-ip-enabled": false,
    "anti-brute-force-enabled": false,
    "anti-brute-force-threshold": 100,
    "bind-address-ipv4": "10.3.112.154",
    "bind-address-ipv6": "::",
    "blocklist-enabled": false,
    "blocklist-url": "http://www.example.com/blocklist",
    "cache-size-mb": 4,
    "default-trackers": "",
    "dht-enabled": true,
    "download-dir": "/downloads/Complete",
    "download-queue-enabled": true,
    "download-queue-size": 5,
    "encryption": 1,
    "idle-seeding-limit": 30,
    "idle-seeding-limit-enabled": false,
    "incomplete-dir": "/downloads/InProgress",
    "incomplete-dir-enabled": true,
    "lpd-enabled": false,
    "message-level": 2,
    "peer-congestion-algorithm": "",
    "peer-id-ttl-hours": 6,
    "peer-limit-global": 240,
    "peer-limit-per-torrent": 60,
    "peer-port": 53356,
    "peer-port-random-high": 65535,
    "peer-port-random-low": 49152,
    "peer-port-random-on-start": false,
    "peer-socket-tos": "le",
    "pex-enabled": true,
    "port-forwarding-enabled": false,
    "preallocation": 1,
    "prefetch-enabled": true,
    "queue-stalled-enabled": true,
    "queue-stalled-minutes": 30,
    "ratio-limit": 2,
    "ratio-limit-enabled": false,
    "rename-partial-files": true,
    "rpc-authentication-required": false,
    "rpc-bind-address": "0.0.0.0",
    "rpc-enabled": true,
    "rpc-host-whitelist": "",
    "rpc-host-whitelist-enabled": false,
    "rpc-password": "{80d7dcf1ee69d2038ff9759a25ce300143ab7668VtDdiMXi",
    "rpc-port": 9091,
    "rpc-socket-mode": "0750",
    "rpc-url": "/transmission/",
    "rpc-username": "",
    "rpc-whitelist": "127.0.0.1,::1",
    "rpc-whitelist-enabled": false,
    "scrape-paused-torrents-enabled": true,
    "script-torrent-added-enabled": false,
    "script-torrent-added-filename": "",
    "script-torrent-done-enabled": false,
    "script-torrent-done-filename": "",
    "script-torrent-done-seeding-enabled": false,
    "script-torrent-done-seeding-filename": "",
    "seed-queue-enabled": false,
    "seed-queue-size": 10,
    "speed-limit-down": 100,
    "speed-limit-down-enabled": false,
    "speed-limit-up": 100,
    "speed-limit-up-enabled": false,
    "start-added-torrents": true,
    "tcp-enabled": true,
    "torrent-added-verify-mode": "fast",
    "trash-original-torrent-files": false,
    "umask": "002",
    "upload-slots-per-torrent": 14,
    "utp-enabled": false,
    "watch-dir": "/data/watch",
    "watch-dir-enabled": true,
    "watch-dir-force-generic": false
}

[BRCook]

Worth noting that everything worked fine until a few days ago when DL speeds began to choke. Now as of yesterday morning (June 25) I am not getting any connection whatsoever.

I can ping, curl, etc from within the container without issue.

[BRCook]

This appears to have been a PIA issue as downloads have now re-started.

[BRCook]

Downloads have stopped again.

[BRCook]

I am no longer convinced this is solely a PIA issue. Could be PIA and this container not cooperating somehow. It is unclear. however, the original issue persists. There have been no config changes or interesting log entries.

[BRCook]

Under "Tiers" for a particular download I have this for every entry:

Announce error: Connection failed - Today 11:39:01 PM
Announce not scheduled
Scrape error: Could not connect to tracker - Today 11:37:20 PM

[micahlt]

I'm encountering this exact same issue. Did you ever manage to solve this?

[BRCook]

=

I'm encountering this exact same issue. Did you ever manage to solve this?

Unfortunately not. Sometimes it just stops for a few days.