How can i use openVPN in bitbucket pipelines

[Abdoulaye Tandian]

Hello , i'm trying to implement an CI tests on bitbucket pipelines 

To do so ; i need to connect the pipelines to my OpenVPN server to be able to communicate with other client 

Here is my bitbucket-pipelines.yml  : 

image: alpine:latest

pipelines:
default:
- step:
     script:
       - apk update 
       - apk upgrade 
       - apk --no-cache --no-progress add bash curl ip6tables iptables openvpn shadow tini sudo
       - adduser --system --no-create-home vpn
       - addgroup -S vpn
       - mkdir /dev/net
       - mknod /dev/net/tun c 10 200
       - chmod 666 /dev/net/tun
       - cp cloud.conf /etc/openvpn/
       - sudo openvpn --config /etc/openvpn/cloud.conf

I tried with/without sudo ( the pipelines is already in root ). with/without adduser/addgroup . 

I also tried it with Ubuntu image 

the problem remain : 

Wed May 15 09:02:50 2019 WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address.  You are using something (255.255.255.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)
Wed May 15 09:02:50 2019 ROUTE_GATEWAY 169.xxx.1.1
Wed May 15 09:02:50 2019 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
Wed May 15 09:02:50 2019 Exiting due to fatal error

Is someone know how to implement an openvpn client in bitbucket pipelines ? 

[Daniel Santos · Accepted solution]

Hi @Abdoulaye Tandian

I don't have good news, unfortunately.
Long story short, this is not possible in Pipelines at the moment due to infrastructure limitations based on security. This subject was discussed in this post:

• Bitbucket Pipelines and OpenVPN

Philip is one of our developers. He shared an enhancement request already tracked in our system:

• #12753 - Allow customers to connect the pipelines builds to their own VPN server

And a survey where more information could be collected so they can better evaluate and prioritize this issue among others.

•  https://docs.google.com/forms/d/e/1FAIpQLSdzEBor1vVSxopOnLnTheJ_QoozXqn5i1JIL9KQW-h6g1wkaQ/viewform

The only option we have now is to leave comments on that enhancement request, fill the survey requested by Philip and wait.

[Abdoulaye Tandian]

thanks

[Daniel Santos]

Hi @Abdoulaye Tandian

Thank you for following up!
If you think this response will help others in our community, please click accept this answer.

Have a good one!

[Vicente Agrizzi Neto]

I look forward to

[Ajay Kumar]

is there any update on this? 

[Daniel Santos]

Hi @Ajay Kumar

The channel to get updates on this implementation is:
#12753 - Allow customers to connect the pipelines builds to their own VPN server.
That is the channel our developers use to deliver their news and update the status of the issue/feature/bug.

That suggestion will be prioritized among other requests considering our Implementation of New Features Policy.