docker-openvpn-ivpn-client

OpenVPN client docker image for ivpn.net.

Features:

• Does not require --privileged
• Does not run as root
• Less than 40MB in size (compressed)
• Multi-platform (amd64, arm64)

While this was built with ivpn.net in mind, this image can easily be used for any other vpn provider by mounting a volume to /config/client that contains .ovpn files.

Quickstart

The image is automatically built bi-weekly to stay up-to-date with the latest security updates.

ghcr.io

docker pull ghcr.io/egladman/openvpn-ivpn:latest

docker.io

docker pull docker.io/egladman/openvpn-ivpn:latest

Build

Create image openvpn-ivpn

make image

Advanced

1. Create image openvpn-ivpn

• Skip checksum validation
• Do not use cache when building image

make image DOCKER_BUILD_FLAGS="--no-cache --build-arg SKIP_CHECKSUM=1" 

2. Create devel image openvpn-ivpn

make image IMAGE_VARIANT=devel

Run

1. Determine which openvpn config to use. You can list all available .ovpn configs with the following command:

docker run --rm --env SKIP_ENTRYPOINTD=1 openvpn-ivpn:latest ls

2. Run container

docker run \
    --rm \
    --cap-add NET_ADMIN \
    --volume <path/to/empty/file>:/etc/resolv.conf \
    --env USERNAME=<user> \
    --env CONFIG=<config> \
    --device=/dev/net/tun \
    openvpn-ivpn:latest

Example

1. Create an empty file named resolv.conf and grant ownership to the image's uid/gid

touch resolv.conf && sudo chown 2222:2222 resolv.conf

2. Run container

docker run \
    --rm \
    --cap-add NET_ADMIN \
    --volume "${PWD}"/resolv.conf:/etc/resolv.conf \
    --env USERNAME=ivpnADCef123 \
    --env CONFIG=USA-New_York.ovpn \
    --device=/dev/net/tun \
    openvpn-ivpn:latest

Only your account ID is used for the authentication and is case-sensitive. The password can be anything, like "ivpn", if your client requires a non-blank password.

Source: ivpn docs

Variables

Runtime

Variable	Description	Default	Required
SKIP_ENTRYPOINTD	Disable running entrypoint scripts	0	False
DEBUG_ENTRYPOINT	Print debug logs	0	False
OPENVPN_LOGLEVEL	OpenVPN verbosity	4	False
USERNAME	vpn provider username		True
PASSWORD	vpn provider password	hunter2	False
CONFIG_DIR	OpenVPN config directory	/config/client	False
PASS_FILE	OpenVPN credentials file	/config/credentials	False
DNS_INTERNAL	vpn provider nameserver used by openvpn process	10.0.254.1	False
DNS_EXTERNAL	vpn provider nameserver used only by entrypoint	8.8.8.8	False