PIA Curl Error

[flyingfishflash]

Is there a pinned issue for this?

• I have read the pinned issues and could not find my issue

Is there an existing or similar issue/discussion for this?

• I have searched the existing issues
• I have searched the existing discussions

Is there any comment in the documentation for this?

• I have read the documentation, especially the FAQ and Troubleshooting parts

Is this related to a provider?

• I have checked the provider repo for issues
• My issue is NOT related to a provider

Are you using the latest release?

• I am using the latest release

Have you tried using the dev branch latest?

• I have tried using dev branch

Docker run config used

[container-runner@nas ~]$ cat containers/podman/transmission/pm-transmission.container 
[Unit]
Description=Transmission/OpenVpn - Bittorrent Client
StartLimitBurst=5
StartLimitIntervalSec=225

[Container]
AutoUpdate=registry
ContainerName=transmission
Environment=PUID=6900
Environment=PGID=6900
Environment=LOCAL_NETWORK=192.168.x.0/24
Environment=OPENVPN_PROVIDER=PIA
Environment=OPENVPN_CONFIG=ca_toronto,ca_vancouver,czech_republic,de_berlin,de_frankfurt,france,romania,spain,switzerland
Environment=OPENVPN_USERNAME=
Environment=OPENVPN_PASSWORD=
Environment=PIA_OPENVPN_CONFIG_BUNDLE=openvpn
Environment=CREATE_TUN_DEVICE=false
Environment=DEBUG=true
Environment=TRANSMISSION_WEB_UI=combustion
Environment=TRANSMISSION_UMASK=18
Environment=TRANSMISSION_INCOMPLETE_DIR=/downloads/incomplete
Environment=TRANSMISSION_DOWNLOAD_DIR=/downloads/complete
Environment=TRANSMISSION_IDLE_SEEDING_LIMIT_ENABLED=true
Environment=TRANSMISSION_IDLE_SEEDING_LIMIT=2
Environment=TRANSMISSION_RATIO_LIMIT_ENABLED=true
Environment=TRANSMISSION_RATIO_LIMIT=0
Environment=WEBPROXY_ENABLED=false
Image=transmission-openvpn:latest
LogDriver=journald
Network=transmission.network
PodmanArgs=--privileged
PublishPort=53961:9091
Volume=transmission_data:/data
Volume=/mnt/local/warehouse-1/warehouse/staging/incoming/bittorrent/transmission/incomplete:/downloads/incomplete
Volume=/mnt/local/warehouse-1/warehouse/staging/incoming/bittorrent/complete:/downloads/complete

Current Behavior

Is anyone else getting this error when running w/ podman?

(curl SSL connection closed)

The curl command works perfectly on the host and retrieves the files.

Dec 14 15:22:22 nas transmission[11480]: Downloading OpenVPN config bundle openvpn into temporary file /tmp/tmp.HeuqDxpAkz

Dec 14 15:22:22 nas transmission[11480]: ++ echo 'Downloading OpenVPN config bundle openvpn into temporary file /tmp/tmp.HeuqDxpAkz'

Dec 14 15:22:22 nas transmission[11480]: ++ curl -sSL --cookie /dev/null https://www.privateinternetaccess.com/openvpn/openvpn.zip -o /tmp/tmp.HeuqDxpAkz

Dec 14 15:22:37 nas transmission[11480]: curl: (56) OpenSSL SSL_read: error:0A000126:SSL routines::unexpected eof while reading, errno 0

Expected Behavior

the SSL connection to openvpn website would complete and enable downloading of config files

How have you tried to solve the problem?

yeah

Log output

see above

HW/SW Environment

Arch linux
rootless podman


host:
  arch: amd64
  buildahVersion: 1.42.2
  cgroupControllers:
  - cpu
  - memory
  - pids
  cgroupManager: systemd
  cgroupVersion: v2
  conmon:
    package: conmon-1:2.1.13-1
    path: /usr/bin/conmon
    version: 'conmon version 2.1.13, commit: 82de887596ed8ee6d9b2ee85e4f167f307bb569b'
  cpuUtilization:
    idlePercent: 96.82
    systemPercent: 0.56
    userPercent: 2.62
  cpus: 24
  databaseBackend: boltdb
  distribution:
    distribution: arch
    version: unknown
  eventLogger: journald
  freeLocks: 1978
  hostname: nas
  idMappings:
    gidmap:
    - container_id: 0
      host_id: 4005
      size: 1
    - container_id: 1
      host_id: 427680
      size: 65536
    uidmap:
    - container_id: 0
      host_id: 4005
      size: 1
    - container_id: 1
      host_id: 427680
      size: 65536
  kernel: 6.17.9-arch1-1
  linkmode: dynamic
  logDriver: journald
  memFree: 22615048192
  memTotal: 33437491200
  networkBackend: netavark
  networkBackendInfo:
    backend: netavark
    dns:
      package: aardvark-dns-1.17.0-1
      path: /usr/lib/podman/aardvark-dns
      version: aardvark-dns 1.17.0
    package: netavark-1.17.1-1
    path: /usr/lib/podman/netavark
    version: netavark 1.17.1
  ociRuntime:
    name: crun
    package: crun-1.25.1-1
    path: /usr/bin/crun
    version: |-
      crun version 1.25.1
      commit: 156ae065d4a322d149c7307034f98d9637aa92a2
      rundir: /run/user/4005/crun
      spec: 1.0.0
      +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +LIBKRUN +YAJL
  os: linux
  pasta:
    executable: /usr/bin/pasta
    package: passt-2025_12_10.d04c480-1
    version: |
      pasta 2025_12_10.d04c480
      Copyright Red Hat
      GNU General Public License, version 2 or later
        <https://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
      This is free software: you are free to change and redistribute it.
      There is NO WARRANTY, to the extent permitted by law.
  remoteSocket:
    exists: true
    path: /run/user/4005/podman/podman.sock
  rootlessNetworkCmd: pasta
  security:
    apparmorEnabled: false
    capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
    rootless: true
    seccompEnabled: true
    seccompProfilePath: /etc/containers/seccomp.json
    selinuxEnabled: false
  serviceIsRemote: false
  slirp4netns:
    executable: /usr/bin/slirp4netns
    package: slirp4netns-1.3.3-1
    version: |-
      slirp4netns version 1.3.3
      commit: 944fa94090e1fd1312232cbc0e6b43585553d824
      libslirp: 4.9.1
      SLIRP_CONFIG_VERSION_MAX: 6
      libseccomp: 2.5.6
  swapFree: 0
  swapTotal: 0
  uptime: 0h 5m 5.00s
  variant: ""
plugins:
  authorization: null
  log:
  - k8s-file
  - none
  - passthrough
  - journald
  network:
  - bridge
  - macvlan
  - ipvlan
  volume:
  - local
registries: {}
store:
  configFile: /home/container-runner/.config/containers/storage.conf
  containerStore:
    number: 40
    paused: 0
    running: 28
    stopped: 12
  graphDriverName: overlay
  graphOptions: {}
  graphRoot: /home/container-runner/.local/share/containers/storage
  graphRootAllocated: 490304405504
  graphRootUsed: 338816643072
  graphStatus:
    Backing Filesystem: extfs
    Native Overlay Diff: "true"
    Supports d_type: "true"
    Supports shifting: "false"
    Supports volatile: "true"
    Using metacopy: "false"
  imageCopyTmpDir: /var/tmp
  imageStore:
    number: 97
  runRoot: /run/user/4005/containers
  transientStore: false
  volumePath: /home/container-runner/.local/share/containers/storage/volumes
version:
  APIVersion: 5.7.1
  Built: 1765447754
  BuiltTime: Thu Dec 11 05:09:14 2025
  GitCommit: f845d14e941889ba4c071f35233d09b29d363c75
  GoVersion: go1.25.5 X:nodwarf5
  Os: linux
  OsArch: linux/amd64
  Version: 5.7.1

Anything else?

dev version gives different error for same reason though:

Dec 14 15:48:15 nas transmission[27610]: curl: (56) Failure when receiving data from the peer
Dec 14 15:48:15 nas transmission[27610]: [dumb-init] Received signal 17.
Dec 14 15:48:15 nas transmission[27610]: [dumb-init] A child with PID 2 exited with exit status 56.
Dec 14 15:48:15 nas transmission[27610]: [dumb-init] Forwarded signal 15 to children.
Dec 14 15:48:15 nas transmission[27610]: [dumb-init] Child exited with status 56. Goodbye.

[flyingfishflash]

I am able to work around by using the new feature in the dev image faciliting custom PIA bundle.

Seems to be related to: containers/podman#27765

[TDurrr1]

I'm also experiencing this. It was running fine until I had to restart the container. Now I can't get it to start back up.

[TDurrr1]

Ah, forget it, I might have borked something beyond this container. I can't get DNS working in any of my containers suddenly.