FN11.3 iocage jails - Plex, Tautulli, Sonarr, Radarr, Lidarr, Jackett, Transmission, Organizr

[ZodiacUHD]

I think I actually just ran into this. Updated to U2 and suddenly plex can't bind on start and fails:

Code:

Feb 21, 2018 14:20:17.594 [0x80a218000] ERROR - HttpServer: Error binding acceptor: Can't assign requested address
Feb 21, 2018 14:20:17.594 [0x80a218000] ERROR - Error: Unable to set up server: listen: Can't assign requested address (N5boost16exception_detail10clone_implINS0_19error_info_injectorINS_6system12system_errorEEEEE)

Interface in the jail is epair0 now. Debating how to proceed to get it back up and running, as even though it was requested over 5 years ago plex still can't bind to a specific interface.

I had the same issue. I ended up restoring 11.1u1. Sorry i cannot add much to the conversation, i'll wait for a solution as well.

 

[Celena]

I had the same issue. I ended up restoring 11.1u1. Sorry i cannot add much to the conversation, i'll wait for a solution as well.

You can run this command inside the Jail and that solve the problem : sysrc ifconfig_epair0_name="epair0b"

 

[Pistolwhip]

You can run this command inside the Jail and that solve the problem : sysrc ifconfig_epair0_name="epair0b"

Confirming this works for U2.

iocage exec <jail> 'sysrc ifconfig_epair0_name="epair0b"'
iocage restart <jail>

Thanks for the workaround @Celena

 

[ere109]

"iocage had to change back to calling them epair0... during setup would it be best to define it in another way?

iocage exec <jail> 'sysrc ifconfig_epair0_name="epair0b"'
iocage restart <jail>@Celena

Given the above, would it make sense to drop vnet0 in place of epair0b in the setup? Do multiple name reassignments threaten to confuse the player?

 

[Prasanth]

Just upgraded to U2 and have issues trying access any of my iocage jail web interfaces. Did do the above changes with epair0b but didn't work . Also tried to downgrade to U1 and same issues cropped up there too. Is there a network setting I'm missing now?

Doing an ifconfig within the jail shows this

root@plex:~ # ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
inet 127.0.0.1 netmask 0xff000000
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
groups: lo

epair0b: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 02:ff:60:14:fa:0a
hwaddr 02:e6:a0:00:09:0b
inet 192.168.2.103 netmask 0xffffff00 broadcast 192.168.2.255
nd6 options=1<PERFORMNUD>
media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
status: active
groups: epair

root@plex:~ #


I tried to ping from server -> jail and I get a host is down message even though plex appears to be running and shows up in the freenas new GUI

 

[Pistolwhip]

Just upgraded to U2 and have issues trying access any of my iocage jail web interfaces. Did do the above changes with epair0b but didn't work . Also tried to downgrade to U1 and same issues cropped up there too. Is there a network setting I'm missing now?

Doing an ifconfig within the jail shows this

root@plex:~ # ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
inet 127.0.0.1 netmask 0xff000000
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
groups: lo

epair0b: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 02:ff:60:14:fa:0a
hwaddr 02:e6:a0:00:09:0b
inet 192.168.2.103 netmask 0xffffff00 broadcast 192.168.2.255
nd6 options=1<PERFORMNUD>
media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
status: active
groups: epair

root@plex:~ #


I tried to ping from server -> jail and I get a host is down message even though plex appears to be running and shows up in the freenas new GUI

You might be missing the tuneables fix mentioned earlier in this thread which fix the initial setup of the veth bridge on system reboot. Basically the setup of the bridge device iocage uses needs to happen at boot right now, and you need to configure that to happen manually, else the bridge your jail is trying to use won't exist.

 

[Prasanth]

You might be missing the tuneables fix mentioned earlier in this thread which fix the initial setup of the veth bridge on system reboot. Basically the setup of the bridge device iocage uses needs to happen at boot right now, and you need to configure that to happen manually, else the bridge your jail is trying to use won't exist.

Thanks for the information. I added the tunables and restarted my freenas. Same issues. still unable to ping from server ->Jail and vice versa. I get "host is down"

 

[kranzel]

You can run this command inside the Jail and that solve the problem : sysrc ifconfig_epair0_name="epair0b"

Worked for me as well. Thank you.

 

[Prasanth]

You might be missing the tuneables fix mentioned earlier in this thread which fix the initial setup of the veth bridge on system reboot. Basically the setup of the bridge device iocage uses needs to happen at boot right now, and you need to configure that to happen manually, else the bridge your jail is trying to use won't exist.

Ok my mistake
in the tunables i just copied and pasted the igb0 that everyone else was when i should have been using em0 per my system.

thanks for the help!

 

[cleansman]

My iocage jails also stopped having outside network connectivity after the upgrade to U2.

Maybe somebody has an idea how I can fix this...

This is my setup with one jail activated:

I have configured the following rc.conf tunables:

cloned_interfaces=lagg0
ifconfig_lagg0=addm lagg0 up
iocage_enable=YES

Host network config

em0: flags=8c02<BROADCAST,OACTIVE,SIMPLEX,MULTICAST> metric 0 mtu 1500

options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>

ether 18:66:da:31:1d:33

hwaddr 18:66:da:31:1d:33

nd6 options=9<PERFORMNUD,IFDISABLED>

media: Ethernet autoselect

status: no carrier

em1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500

options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>

ether 00:1f:29:56:a4:4d

hwaddr 00:1f:29:56:a4:4d

nd6 options=9<PERFORMNUD,IFDISABLED>

media: Ethernet autoselect (1000baseT <full-duplex>)

status: active

em2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500

options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>

ether 00:1f:29:56:a4:4d

hwaddr 00:1f:29:56:a4:4c

nd6 options=9<PERFORMNUD,IFDISABLED>

media: Ethernet autoselect (1000baseT <full-duplex>)

status: active

em3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500

options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>

ether 00:1f:29:56:a4:4d

hwaddr 00:1f:29:56:a4:4f

nd6 options=9<PERFORMNUD,IFDISABLED>

media: Ethernet autoselect (1000baseT <full-duplex>)

status: active

em4: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500

options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>

ether 00:1f:29:56:a4:4d

hwaddr 00:1f:29:56:a4:4e

nd6 options=9<PERFORMNUD,IFDISABLED>

media: Ethernet autoselect (1000baseT <full-duplex>)

status: active

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384

options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>

inet6 ::1 prefixlen 128

inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6

inet 127.0.0.1 netmask 0xff000000

nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

groups: lo

lagg0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500

options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>

ether 00:1f:29:56:a4:4d

inet 10.10.10.13 netmask 0xffffff00 broadcast 10.10.10.255

nd6 options=9<PERFORMNUD,IFDISABLED>

media: Ethernet autoselect

status: active

groups: lagg

laggproto lacp lagghash l2,l3,l4

laggport: em1 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>

laggport: em2 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>

laggport: em3 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>

laggport: em4 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>

bridge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500

ether 02:dd:2e:0f:13:00

nd6 options=9<PERFORMNUD,IFDISABLED>

groups: bridge

id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15

maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200

root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0

member: vnet0:12 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>

ifmaxaddr 0 port 9 priority 128 path cost 2000

vnet0:12: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500

description: associated with jail: plex

options=8<VLAN_MTU>

ether 02:ff:60:14:fa:09

hwaddr 02:d9:50:00:09:0a

nd6 options=1<PERFORMNUD>

media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)

status: active

groups: epair


Host route table:

root@freenas:~ # netstat -r

Routing tables


Internet:

Destination Gateway Flags Netif Expire

default 10.10.10.1 UGS lagg0

10.10.10.0/24 link#7 U lagg0

10.10.10.13 link#7 UHS lo0

localhost link#6 UH lo0


Internet6:

Destination Gateway Flags Netif Expire

::/96 localhost UGRS lo0

localhost link#6 UH lo0

::ffff:0.0.0.0/96 localhost UGRS lo0

fe80::/10 localhost UGRS lo0

fe80::%lo0/64 link#6 U lo0

fe80::1%lo0 link#6 UHS lo0

ff02::/16 localhost UGRS lo0


Outside ping is working on the host:

root@freenas:~ # ping 8.8.8.8

PING 8.8.8.8 (8.8.8.8): 56 data bytes

64 bytes from 8.8.8.8: icmp_seq=0 ttl=61 time=14.334 ms

64 bytes from 8.8.8.8: icmp_seq=1 ttl=61 time=14.397 ms

64 bytes from 8.8.8.8: icmp_seq=2 ttl=61 time=14.300 ms

^C

--- 8.8.8.8 ping statistics ---

3 packets transmitted, 3 packets received, 0.0% packet loss

round-trip min/avg/max/stddev = 14.300/14.344/14.397/0.040 ms

root@freenas:~ #



Jail network config

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384

options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>

inet6 ::1 prefixlen 128

inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1

inet 127.0.0.1 netmask 0xff000000

nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

groups: lo

epair0b: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500

options=8<VLAN_MTU>

ether 02:ff:60:14:fa:0a

hwaddr 02:d9:a0:00:0a:0b

inet 10.10.10.50 netmask 0xffffff00 broadcast 10.10.10.255

nd6 options=1<PERFORMNUD>

media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)

status: active

groups: epair



Jail route table overview:

root@plex:~ # netstat -r

netstat: kvm not available: /dev/mem: No such file or directory

Routing tables


Internet:

Destination Gateway Flags Netif Expire


default 10.10.10.1 UGS epair0b

10.10.10.0/24 link#2 U epair0b

10.10.10.50 link#2 UHS lo0

localhost link#1 UH lo0


Internet6:

Destination Gateway Flags Netif Expire

::/96 localhost UGRS lo0

localhost link#1 UH lo0

::ffff:0.0.0.0/96 localhost UGRS lo0

fe80::/10 localhost UGRS lo0

fe80::%lo0/64 link#1 U lo0

fe80::1%lo0 link#1 UHS lo0

ff02::/16 localhost UGRS lo0


Outside ping is not working:

root@plex:~ # ping 8.8.8.8

PING 8.8.8.8 (8.8.8.8): 56 data bytes

ping: sendto: No route to host

ping: sendto: No route to host

ping: sendto: No route to host

^C

--- 8.8.8.8 ping statistics ---

8 packets transmitted, 0 packets received, 100.0% packet loss


 

[Mr Snow]

You can run this command inside the Jail and that solve the problem : sysrc ifconfig_epair0_name="epair0b"

This didn't actually work for me. I'm only having a problem with plex. Everything else works fine.
During initial setup of my jails, I specified to use a DHCP address

Code:

iocage create -n "plex" -r 11.1-RELEASE vnet=on dhcp=on bpf=yes allow_raw_sockets=1 boot=on

and when I try the epair0 rename thing, restarting the jail removes the line from rc.conf and replaces it with

Code:

ifconfig_epair0="DHCP"

I'm back on 11.1. Anyone have any thoughts? :)

Regards,

CJ

 

[magev958]

I’m a total newbie and tried to follow this tutorial but I can’t find the settings.json in Transmission to allow access to the webgui. I thing I tried every path on Google with no luck.
Please help

 

[cleansman]

Got it working.


ifconfig bridge0 addm lagg0 up


Solved it for me. [edit]Without any other tunables.[/edit]

ifconfig of the working setup

lagg0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500

options=98<VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>

ether 00:1f:29:56:a4:4d

inet 10.10.10.13 netmask 0xffffff00 broadcast 10.10.10.255

nd6 options=9<PERFORMNUD,IFDISABLED>

media: Ethernet autoselect

status: active

groups: lagg

laggproto lacp lagghash l2,l3,l4

laggport: em1 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>

laggport: em2 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>

laggport: em3 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>

laggport: em4 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>

bridge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500

ether 02:dd:2e:0f:13:00

nd6 options=9<PERFORMNUD,IFDISABLED>

groups: bridge

id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15

maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200

root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0

member: lagg0 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>

ifmaxaddr 0 port 7 priority 128 path cost 5000

member: vnet0:1 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>

ifmaxaddr 0 port 9 priority 128 path cost 2000

vnet0:1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500

description: associated with jail: plex

options=8<VLAN_MTU>

ether 02:ff:60:14:fa:09

hwaddr 02:d9:50:00:09:0a

nd6 options=1<PERFORMNUD>

media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)

status: active

groups: epair



 

[Prasanth]

Also I noticed that sabnzbd was not updating and further research revealed it's set on a quarterly update cycle.
I did the following to make it use the latest instead

Code:

iocage exec sabnzbd 'mkdir -p /usr/local/etc/pkg/repos'
iocage exec sabnzbd 'ee /usr/local/etc/pkg/repos/FreeBSD.conf'

Copy and paste this into the file

Code:

FreeBSD: {				 
  url: "pkg+http://pkg.FreeBSD.org/${ABI}/latest"
}	

fyi esc button shows menu and option is given to save while exiting out of ee(used to use nano but always ended up with errors when pasting text)

Then i just run to get the latest upgrade

Code:

iocage exec sabnzbd 'pkg update && pkg upgrade'

This is similar to the changes we made to plex in the resource to have it upgrade more frequently

more info at
https://forums.freebsd.org/threads/pkg-repository-changed-to-quarterly-in-10-2.52843/#post-296554
and
How to Update IOCAGE Jails

 

[srtviperjr]

Have a weird issue happening on my newly created transmission iocage jail. Followed the instructions but get the following issue when trying to start openvpn:

Code:

Cannot allocate TUN/TAP dev dynamically

Transmission works fine, turned off the firewall, blew away the iocage jail and recreated it - still no vpn

** EDIT ** Added the below:

Code:

 devfs rule -s 4 add path 'tun*' unhide 

to pre-init on the freenas host, rebooted and all is good now.

:)

 

[afmiller]

Which is better to use? Sabnzb or nbzget? Assuming you can use the same set up for openvpn like the instructions for transmission

 

[ere109]

Plex issue that I think I have a solution to - if it's repeating for others. Fresh install using the guide on Page 1 - editing fstab to put config off disk and mount media at /mnt/video. However, when I click "browse for media" Plex begins inside the "config" directory and won't allow me to browse back to the /mnt/video location. I can manually type /mnt/video to point to folders and build libraries, but I can't view/browse. Would it make sense to change the symlink landing point to something like:

Code:

iocage fstab -a plex /mnt/tank1/video /mnt/config/video nullfs ro 0 0

Are other people having this issue?

 

[Celena]

Plex issue that I think I have a solution to - if it's repeating for others. Fresh install using the guide on Page 1 - editing fstab to put config off disk and mount media at /mnt/video. However, when I click "browse for media" Plex begins inside the "config" directory and won't allow me to browse back to the /mnt/video location. I can manually type /mnt/video to point to folders and build libraries, but I can't view/browse. Would it make sense to change the symlink landing point to something like:

Code:

iocage fstab -a plex /mnt/tank1/video /mnt/config/video nullfs ro 0 0

Are other people having this issue?

you can add manually the path without browsing like this :

It's in french but same window

 

[afmiller]

Ive tried to set up an openvpn gateway using your transmission w/ openvpn set up. But when I have ipfw started and I do a wget for the ip address, I get a valid ip address that is my real address. Also I am able to ping google.com. Below is what I've tried to mirror from the set up guide

Code:

# Allow internal traffic
add 03000 allow IP from 172.16.0.14/32 to 172.16.0.0/23 keep-state
add 03000 allow IP from 172.16.0.0/23 to 172.16.0.14/32 keep-state

# Allow access to Entrace IP for VPN
add 04000 allow IP from 172.16.0.14/32 to <IP of VPN Entrance Node> keep-state

# Allow any traffic over the VPN interface
add 05000 allow IP from any to any via tun*

# Deny any other traffic
add 65534 deny IP from any to any

I changed it to my current set up. This is in the /config/ipfw_rules. Which loads everytime I do service ipfw start

Code:

# Allow internal traffic
add 03000 allow IP from 192.168.1.2/24 to 192.168.0.0/24 keep-state
add 03000 allow IP from 192.168.0.0/24 to 192.168.1.2/24 keep-state

# Allow access to Entrace IP for VPN
add 04000 allow IP from 192.168.1.2/24 to 108.0.0.0/8 keep-state

# Allow any traffic over the VPN interface
add 05000 allow IP from any to any via tun*

# Deny any other traffic
add 65534 deny IP from any to any

Here is what the loaded firewall rules look like with ipfw list

Code:

00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
00400 deny ip from any to ::1
00500 deny ip from ::1 to any
00600 allow ipv6-icmp from :: to ff02::/16
00700 allow ipv6-icmp from fe80::/10 to fe80::/10
00800 allow ipv6-icmp from fe80::/10 to ff02::/16
00900 allow ipv6-icmp from any to any ip6 icmp6types 1
01000 allow ipv6-icmp from any to any ip6 icmp6types 2,135,136
03000 allow ip from 192.168.1.0/24 to 192.168.0.0/24 keep-state :default
03000 allow ip from 192.168.0.0/24 to 192.168.1.0/24 keep-state :default
04000 allow ip from 192.168.1.0/24 to 108.0.0.0/8 keep-state :default
05000 allow ip from any to any via tun*
65534 deny ip from any to any
65535 allow ip from any to any

 

[Michael De Cou]

Tried following your plexpass tutorial, but running into issues with it.

I follow these steps but get the error below. I am unable to outside ips inside the jail and unable to ping to the .150 from other PCs

echo '{"pkgs":["plexmediaserver-plexpass","ca_root_nss"]}' > /tmp/pkg.json
iocage create -n "plex" -p /tmp/pkg.json -r 11.1-RELEASE ip4_addr="vnet0|<192.168.1.150/24" defaultrouter="192.168.1.1" vnet="on" allow_raw_sockets="1" boot="on"

Error

root@freenas:~ # iocage create -n "plex" -p /tmp/pkg.json -r 11.1-RELEASE ip4_addr="vnet0|192.168.1.150/24" defaultrouter="192.168.1.1" vnet="on" allow_raw_sockets="1" boot="on"
plex successfully created!
Testing SRV response to FreeBSD
Error: error sending query: Error creating socket

Command run: drill _http._tcp.pkg.freebsd.org SRV
root@freenas:~ #



Thanks for the Help

Did you get this resolved? I am having the same problem. I have tried the tunables, with no luck.