Как включить соединение (ip), которое docker0 (docker0 порождён by marzban)?

[жучара]

Друзья! Я задумал VPN, который marzban, ибо openvpn на андроиде больше не работает, наверно палит провайдер. Поэтому marzban. На VPS-сервере смотрим соединения:

тут вывод команды ip a, всё поднято

$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:e0:ef:e9 brd ff:ff:ff:ff:ff:ff
altname enp0s3
altname enx525400e0efe9
inet 82.6.89.204/32 brd 82.6.89.204 scope global ens3
valid_lft forever preferred_lft forever
inet6 2a01:ecc0:bc0:e9::2/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::5054:ff:fee0:efe9/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
$

А дальше собственно устанавливаем marzban:

тут команда sudo bash -c "$(curl -sL https://github.com/Gozargah/Marzban-scripts/raw/master/marzban.sh)" @ install

$ sudo bash -c "$(curl -sL https://github.com/Gozargah/Marzban-scripts/raw/master/marzban.sh)" @ install

Updating package manager
Hit:1 http://security.debian.org/debian-security trixie-security InRelease
Hit:2 https://deb.debian.org/debian trixie InRelease
Hit:3 https://deb.debian.org/debian trixie-updates InRelease
Reading package lists... Done
Installing jq
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
libjq1 libonig5
The following NEW packages will be installed:
jq libjq1 libonig5
0 upgraded, 3 newly installed, 0 to remove and 82 not upgraded.
Need to get 436 kB of archives.
After this operation, 1,271 kB of additional disk space will be used.
Get:1 http://security.debian.org/debian-security trixie-security/main amd64 libjq1 amd64 1.7.1-6+deb13u3 [168 kB]
Get:2 http://security.debian.org/debian-security trixie-security/main amd64 jq amd64 1.7.1-6+deb13u3 [78.8 kB]
Get:3 https://deb.debian.org/debian trixie/main amd64 libonig5 amd64 6.9.9-1+b1 [189 kB]
Fetched 436 kB in 0s (2,631 kB/s)
Selecting previously unselected package libonig5:amd64.
(Reading database ... 29565 files and directories currently installed.)
Preparing to unpack .../libonig5_6.9.9-1+b1_amd64.deb ...
Unpacking libonig5:amd64 (6.9.9-1+b1) ...
Selecting previously unselected package libjq1:amd64.
Preparing to unpack .../libjq1_1.7.1-6+deb13u3_amd64.deb ...
Unpacking libjq1:amd64 (1.7.1-6+deb13u3) ...
Selecting previously unselected package jq.
Preparing to unpack .../jq_1.7.1-6+deb13u3_amd64.deb ...
Unpacking jq (1.7.1-6+deb13u3) ...
Setting up libonig5:amd64 (6.9.9-1+b1) ...
Setting up libjq1:amd64 (1.7.1-6+deb13u3) ...
Setting up jq (1.7.1-6+deb13u3) ...
Processing triggers for man-db (2.13.1-1) ...
Processing triggers for libc-bin (2.41-12+deb13u2) ...
Installing Docker
# Executing docker install script, commit: a23123f03978989e95d257beb9de0c5ad9da6e70
+ sh -c apt-get -qq update >/dev/null
+ sh -c DEBIAN_FRONTEND=noninteractive apt-get -y -qq install ca-certificates curl >/dev/null
+ sh -c install -m 0755 -d /etc/apt/keyrings
+ sh -c curl -fsSL "https://download.docker.com/linux/debian/gpg" -o /etc/apt/keyrings/docker.asc
+ sh -c chmod a+r /etc/apt/keyrings/docker.asc
+ sh -c echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian trixie stable" > /etc/apt/sources.list.d/docker.list
+ sh -c apt-get -qq update >/dev/null
+ apt_flags=-y -qq
+ [ -n ]
+ sh -c DEBIAN_FRONTEND=noninteractive apt-get -y -qq install docker-ce docker-ce-cli containerd.io docker-compose-plugin docker-ce-rootless-extras docker-buildx-plugin docker-model-plugin >/dev/null
Using systemd to manage Docker service
+ sh -c systemctl enable --now docker.service 2>/dev/null
INFO: Docker daemon enabled and started

+ sh -c docker version
Client: Docker Engine - Community
Version: 29.7.2
API version: 1.55
Go version: go1.26.5
Git commit: a7dcaa6
Built: Wed Aug 5 18:29:26 2026
OS/Arch: linux/amd64
Context: default

Server: Docker Engine - Community
Engine:
Version: 29.7.2
API version: 1.55 (minimum version 1.40)
Go version: go1.26.5
Git commit: 6a43e3d
Built: Wed Aug 5 18:29:26 2026
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: v2.3.3
GitCommit: aad11006b869517fcd3009450b6f82da282e1a9b
runc:
Version: 1.4.3
GitCommit: v1.4.3-0-gbb14dabe
docker-init:
Version: 0.19.0
GitCommit: de40ad0

================================================================================

To run Docker as a non-privileged user, consider setting up the
Docker daemon in rootless mode for your user:

dockerd-rootless-setuptool.sh install

Visit https://docs.docker.com/go/rootless/ to learn about rootless mode.


To run the Docker daemon as a fully privileged service, but granting non-root
users access, refer to https://docs.docker.com/go/daemon-access/

WARNING: Access to the remote API on a privileged Docker daemon is equivalent
to root access on the host. Refer to the 'Docker daemon attack surface'
documentation for details: https://docs.docker.com/go/attack-surface/

================================================================================

Docker installed successfully
Downloading yq from https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
100 13.1M 100 13.1M 0 0 19.4M 0 --:--:-- --:--:-- --:--:-- 65.0M
yq installed successfully!
yq is ready to use.
Installing marzban script
marzban script installed successfully
Setting up docker-compose.yml
----------------------------
Using SQLite as database
----------------------------
Fetching compose file
Installing latest version
File saved in /opt/marzban/docker-compose.yml
Fetching .env file
File saved in /opt/marzban/.env
Fetching xray config file
File saved in /var/lib/marzban/xray_config.json
Marzban's files downloaded successfully
Installing latest version
[+] up 14/14
✔ Image gozargah/marzban:latest Pulled 23.1s
✔ Container marzban-marzban-1 Started 2.1s
marzban-1 | INFO [alembic.runtime.migration] Context impl SQLiteImpl.
marzban-1 | INFO [alembic.runtime.migration] Will assume non-transactional DDL.
marzban-1 | INFO [alembic.runtime.migration] Running upgrade -> 94a5cc12c0d6, init user table
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 94a5cc12c0d6 -> 3cf36a5fde73, init system table
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 3cf36a5fde73 -> 9d5a518ae432, init jwt table
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 9d5a518ae432 -> 9b60be6cd0a2, add created_at field to users table
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 9b60be6cd0a2 -> 8e849e06f131, proxy table
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 8e849e06f131 -> 671621870b02, init admin
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 671621870b02 -> e91236993f1a, inbounds table & excluded_inbounds
marzban-1 | INFO [alembic.runtime.migration] Running upgrade e91236993f1a -> b3378dc6de01, hosts
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 671621870b02 -> d02dcfbf1517, add UserUsageResetLogs Model and data_limit_strategy field to user
marzban-1 | INFO [alembic.runtime.migration] Running upgrade d02dcfbf1517, b3378dc6de01 -> ece13c4c6f65, empty message
marzban-1 | INFO [alembic.runtime.migration] Running upgrade ece13c4c6f65 -> b15eba6e5867, add host and sni columns to hosts table
marzban-1 | INFO [alembic.runtime.migration] Running upgrade b15eba6e5867 -> 51e941ed9018, deactive user status
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 51e941ed9018 -> e3f0e888a563, rename deactive status to disabled
marzban-1 | INFO [alembic.runtime.migration] Running upgrade e3f0e888a563 -> 7cbe9d91ac11, ProxyHost: security added
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 7cbe9d91ac11 -> 5b84d88804a1, fix
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 5b84d88804a1 -> a0d3d400ea75, Admin: is_sudo field
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 5b84d88804a1 -> fad8b1997c3a, case insensitive username
marzban-1 | INFO [alembic.runtime.migration] Running upgrade fad8b1997c3a, a0d3d400ea75 -> e410e5f15c3f, merge fad8b1997c3a & a0d3d400ea75
marzban-1 | INFO [alembic.runtime.migration] Running upgrade e410e5f15c3f -> 97dd9311ab93, add user templates
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 97dd9311ab93 -> 37692c1c9715, nodes
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 37692c1c9715 -> e4a86bc8ec7b, node_user_usages
marzban-1 | INFO [alembic.runtime.migration] Running upgrade e4a86bc8ec7b -> 57fda18cd9e6, add xray version
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 57fda18cd9e6 -> c106bb40c861, alpn_fingerprint_hosts
marzban-1 | INFO [alembic.runtime.migration] Running upgrade c106bb40c861 -> fc01b1520e72, add node usages
marzban-1 | INFO [alembic.runtime.migration] Running upgrade fc01b1520e72 -> 35f7f8fa9cf2, add sub_revoked_at to users
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 35f7f8fa9cf2 -> c47250b790eb, add user note
marzban-1 | INFO [alembic.runtime.migration] Running upgrade c47250b790eb -> 015cf1dc6eca, sub_updated_at and sub_last_user_agent
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 015cf1dc6eca -> a6e3fff39291, add notification reminders
marzban-1 | INFO [alembic.runtime.migration] Running upgrade a6e3fff39291 -> 025d427831dd, sub_last_user_agent length
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 025d427831dd -> 1cf7d159fdbb, add online at
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 1cf7d159fdbb -> a0715c2615f0, Add allow in secure and disable host
marzban-1 | INFO [alembic.runtime.migration] Running upgrade a0715c2615f0 -> 77c86a261126, Nodes coefficient
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 77c86a261126 -> 7a0dbb8a2f65, init tls table
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 7a0dbb8a2f65 -> fe7796f840a4, remove certficiate from nodes
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 77c86a261126 -> 5a4446e7b165, add password_reset_at to admins
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 5a4446e7b165, fe7796f840a4 -> 0f720f5c54dd, empty message
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 0f720f5c54dd -> 08b381fc1bc7, update_shadowsocks_method
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 08b381fc1bc7 -> 947ebbd8debe, Add on hold
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 947ebbd8debe -> 714f227201a7, Fix User Template
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 714f227201a7 -> e56f1c781e46, Fix on hold
marzban-1 | INFO [alembic.runtime.migration] Running upgrade e56f1c781e46 -> 470465472326, add path to hosts
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 470465472326 -> 5575fe410515, add_telegram_id_to_admin
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 5575fe410515 -> dd725e4d3628, fix_mysql_collations
marzban-1 | INFO [alembic.runtime.migration] Running upgrade dd725e4d3628 -> adda2dd4a741, Add sockopt proxy_outbound mux_enable fragment_setting to hosts
marzban-1 | INFO [alembic.runtime.migration] Running upgrade dd725e4d3628 -> 852d951c9c08, drop_extra_index
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 852d951c9c08, adda2dd4a741 -> 1ad79b97fdcf, empty message
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 1ad79b97fdcf -> 4f045f53bef8, drop proxy_outbound and sockopt from hosts
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 4f045f53bef8 -> ccbf9d322ae3, user_auto_delete_in_days
marzban-1 | INFO [alembic.runtime.migration] Running upgrade ccbf9d322ae3 -> 07f9bbb3db4e, user_last_status_change
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 4f045f53bef8 -> 31f92220c0d0, Add Support Random User-Agent
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 31f92220c0d0 -> 305943d779c4, add h3 to alpn enum
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 305943d779c4, 07f9bbb3db4e -> 2313cdc30da3, empty message
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 2313cdc30da3 -> 54c4b8c525fc, last_status_change_for_expired_users
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 2313cdc30da3 -> a9cfd5611a82, add noise settings
marzban-1 | INFO [alembic.runtime.migration] Running upgrade a9cfd5611a82 -> 2ea33513efc0, noise for sqlite
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 2ea33513efc0 -> 21226bc711ac, add threshold to NotificationReminder
marzban-1 | INFO [alembic.runtime.migration] Running upgrade 21226bc711ac -> c3cd674b9bcd, Added next_plan for user
marzban-1 | INFO [alembic.runtime.migration] Running upgrade c3cd674b9bcd -> b25e7e6be241, Added users_usage to admin
marzban-1 | INFO [alembic.runtime.migration] Running upgrade b25e7e6be241 -> d0a3960f5dad, UsageLog table for Admin
marzban-1 | INFO [alembic.runtime.migration] Running upgrade d0a3960f5dad, 54c4b8c525fc -> be0c5f840473, fix multiple heads error
marzban-1 | INFO [alembic.runtime.migration] Running upgrade be0c5f840473 -> e7b869e999b4, increase length of the host and sni columns
marzban-1 | INFO [alembic.runtime.migration] Running upgrade e7b869e999b4 -> 2b231de97dc3, add use sni as host to hosts
marzban-1 |
marzban-1 | IMPORTANT!
marzban-1 | You're running Marzban without specifying UVICORN_SSL_CERTFILE and UVICORN_SSL_KEYFILE.
marzban-1 | The application will only be accessible through localhost. This means that Marzban and subscription URLs will not be accessible externally.
marzban-1 |
marzban-1 | If you need external access, please provide the SSL files to allow the server to bind to 0.0.0.0. Alternatively, you can run the server on localhost or a Unix socket and use a reverse proxy, such as Nginx or Caddy, to handle SSL termination and provide external access.
marzban-1 |
marzban-1 | If you wish to continue without SSL, you can use SSH port forwarding to access the application from your machine. note that in this case, subscription functionality will not work.
marzban-1 |
marzban-1 | Use the following command:
marzban-1 |
marzban-1 | ssh -L 8000:localhost:8000 user@server
marzban-1 |
marzban-1 | Then, navigate to http://127.0.0.1:8000 on your computer.
marzban-1 |
marzban-1 | INFO: Started server process [1]
marzban-1 | INFO: Waiting for application startup.
marzban-1 | INFO: Generating Xray core config
marzban-1 | INFO: Xray core config generated in 0.07 seconds
marzban-1 | INFO: Starting main Xray core
marzban-1 | WARNING: Xray core 24.12.31 started
marzban-1 | INFO: Starting nodes Xray core
marzban-1 | INFO: Application startup complete.
marzban-1 | INFO: Uvicorn running on http://127.0.0.1:8000 (Press CTRL+C to quit)
^C
$

Вот и всё, как я понимаю. Снова смотрим соединения. Вот обращаю внимание, появилось какое-то docker0 и оно DOWN

Shell

$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:e0:ef:e9 brd ff:ff:ff:ff:ff:ff
altname enp0s3
altname enx525400e0efe9
inet 82.6.89.204/32 brd 82.6.89.204 scope global ens3
valid_lft forever preferred_lft forever
inet6 2a01:ecc0:bc0:e9::2/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::5054:ff:fee0:efe9/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether ca:47:7b:b4:d9:4c brd ff:ff:ff:ff:ff:ff
inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
valid_lft forever preferred_lft forever
$

И этот docker0 ВСЕГДА в положении DOWN. Забегая вперёд, скажу, что я потом через браузер попадаю в панель marzban, что-то там пыхчу, какие-то протоколы выбираю, потом настройки экспортирую на андроид и всё зря- связи нет. А docker0 меж тем всегда выключен. Может, его включить как-то надо? А что я могу? Перезагружаю ось, потом

ip a, но docker0 всё равно DOWN

$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:e0:ef:e9 brd ff:ff:ff:ff:ff:ff
altname enp0s3
altname enx525400e0efe9
inet 82.6.89.204/32 brd 82.6.89.204 scope global ens3
valid_lft forever preferred_lft forever
inet6 2a01:ecc0:bc0:e9::2/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::5054:ff:fee0:efe9/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether b6:40:c4:28:da:83 brd ff:ff:ff:ff:ff:ff
inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
valid_lft forever preferred_lft forever
$

Можно ещё

рестартовать marzban

$ sudo marzban restart
[+] down 1/1
✔ Container marzban-marzban-1 Removed 1.2s
[+] up 1/1
✔ Container marzban-marzban-1 Started 0.6s
marzban-1 | INFO [alembic.runtime.migration] Context impl SQLiteImpl.
marzban-1 | INFO [alembic.runtime.migration] Will assume non-transactional DDL.
marzban-1 |
marzban-1 | IMPORTANT!
marzban-1 | You're running Marzban without specifying UVICORN_SSL_CERTFILE and UVICORN_SSL_KEYFILE.
marzban-1 | The application will only be accessible through localhost. This means that Marzban and subscription URLs will not be accessible externally.
marzban-1 |
marzban-1 | If you need external access, please provide the SSL files to allow the server to bind to 0.0.0.0. Alternatively, you can run the server on localhost or a Unix socket and use a reverse proxy, such as Nginx or Caddy, to handle SSL termination and provide external access.
marzban-1 |
marzban-1 | If you wish to continue without SSL, you can use SSH port forwarding to access the application from your machine. note that in this case, subscription functionality will not work.
marzban-1 |
marzban-1 | Use the following command:
marzban-1 |
marzban-1 | ssh -L 8000:localhost:8000 user@server
marzban-1 |
marzban-1 | Then, navigate to http://127.0.0.1:8000 on your computer.
marzban-1 |
marzban-1 | INFO: Started server process [1]
marzban-1 | INFO: Waiting for application startup.
marzban-1 | INFO: Generating Xray core config
marzban-1 | INFO: Xray core config generated in 0.08 seconds
marzban-1 | INFO: Starting main Xray core
marzban-1 | WARNING: Xray core 24.12.31 started
marzban-1 | INFO: Starting nodes Xray core
marzban-1 | INFO: Application startup complete.
marzban-1 | INFO: Uvicorn running on http://127.0.0.1:8000 (Press CTRL+C to quit)
^C
$

Бесполезно:

Shell

$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:e0:ef:e9 brd ff:ff:ff:ff:ff:ff
altname enp0s3
altname enx525400e0efe9
inet 82.6.89.204/32 brd 82.6.89.204 scope global ens3
valid_lft forever preferred_lft forever
inet6 2a01:ecc0:bc0:e9::2/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::5054:ff:fee0:efe9/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether b6:40:c4:28:da:83 brd ff:ff:ff:ff:ff:ff
inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
valid_lft forever preferred_lft forever
$

Можно вручную попытаться поднять соединение:

Shell

$ sudo ip link set docker0 up
$
$
$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:e0:ef:e9 brd ff:ff:ff:ff:ff:ff
altname enp0s3
altname enx525400e0efe9
inet 82.6.89.204/32 brd 82.6.89.204 scope global ens3
valid_lft forever preferred_lft forever
inet6 2a01:ecc0:bc0:e9::2/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::5054:ff:fee0:efe9/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether b6:40:c4:28:da:83 brd ff:ff:ff:ff:ff:ff
inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
valid_lft forever preferred_lft forever
$

То же самое. В общем, всё плохо. Не знаю вот, что делать. Потому САБЖ. А, собственно, надо ли его поднимать для VPN-а? Тайна великая сия есть. Зачем-то же он (docker0) появился да ещё и выключен до кучи. Не знаю я. Спасибо, кто откликнется.

[ormorph]

Тайна великая сия есть. Зачем-то же он (docker0) появился да ещё и выключен до кучи. Не знаю я. Спасибо, кто откликнется.

Ну так скрипт устанавливает docker, само собою что интерфейс должен быть поднят, но поднимается он автоматически при запуске какого нибудь образа. Обычно когда сервис docker запущен, тогда и появляется интерфейс docker0. Без него запущенные контейнеры не будут получать интернет. Обычно при запуске docker создаются ещё правила для интерфейса:

Shell

# nft list ruleset

Скорее всего сам docker запущен, а вот образы(контейнеры) нет.
Обычно запущенные контейнеры можно увидеть командой:

Shell

$ docker ps

Возможно ещё пользователя нужно будет добавить в группу docker, что бы запускать образы и контейнеры без sudo. На сколько я понял уже должны быть установлены образы gozargah/marzban и mariadb. Получить список установленных образов:

Shell

$ docker images

А так скорее всего это должно запускаться через тот самый сервер интерфейс которого у вас доступен через браузер. Возможно прав для пользователя просто не хватало или ещё чего что бы запустить контейнеры под пользователем. У вас должно запускаться два контейнера, локальная сеть между которыми организуется через плагин docker-compose. А вот что дальше кто его знает, я не пользуюсь этим скриптом, он для debian, а я на Gentoo. То что беглым взглядом просмотрел по скрипту установки, то и говорю, руками его не пробовал.