How can i use openVPN in bitbucket pipelines

Abdoulaye Tandian

Hello , i'm trying to implement an CI tests on bitbucket pipelines 

To do so ; i need to connect the pipelines to my OpenVPN server to be able to communicate with other client 

Here is my bitbucket-pipelines.yml  : 

image: alpine:latest

pipelines:
default:
- step:
     script:
       - apk update 
       - apk upgrade 
       - apk --no-cache --no-progress add bash curl ip6tables iptables openvpn shadow tini sudo
       - adduser --system --no-create-home vpn
       - addgroup -S vpn
       - mkdir /dev/net
       - mknod /dev/net/tun c 10 200
       - chmod 666 /dev/net/tun
       - cp cloud.conf /etc/openvpn/
       - sudo openvpn --config /etc/openvpn/cloud.conf

I tried with/without sudo ( the pipelines is already in root ). with/without adduser/addgroup . 

I also tried it with Ubuntu image 

the problem remain : 

<span>Wed May 15 09:02:50 2019 ROUTE_GATEWAY 169.xxx.1.1</span><span><br>Wed May 15 09:02:50 2019 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)</span><span><br>Wed May 15 09:02:50 2019 Exiting due to fatal error</span><span>Wed May 15 09:02:50 2019 WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address.  You are using something (255.255.255.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)<br></span>

 

Is someone know how to implement an openvpn client in bitbucket pipelines ? 

 

Daniel Santos_157bm4

Hi @Abdoulaye Tandian

I don't have good news, unfortunately.
Long story short, this is not possible in Pipelines at the moment due to infrastructure limitations based on security. This subject was discussed in this post:

• Bitbucket Pipelines and OpenVPN

Philip is one of our developers. He shared an enhancement request already tracked in our system:

• #12753 - Allow customers to connect the pipelines builds to their own VPN server

And a survey where more information could be collected so they can better evaluate and prioritize this issue among others.

•  https://docs.google.com/forms/d/e/1FAIpQLSdzEBor1vVSxopOnLnTheJ_QoozXqn5i1JIL9KQW-h6g1wkaQ/viewform

The only option we have now is to leave comments on that enhancement request, fill the survey requested by Philip and wait.