Unable to access kickass.torrentbay.st, blocked by CloudFlare Protection.
Posted by chetty
My question: Unable to access kickass.torrentbay.st, blocked by CloudFlare Protection. SparkBox AI replied: The Cloudflare helper is broken on your box, so that site won't get past its check right now. Byparr (sb-byparr) is the piece that clears Cloudflare checks. Its browser never starts. The log shows Firefox failing with Sandbox: CanCreateUserNamespace() clone() failure: EPERM and then a 180-second launch timeout. Its health checks are also flapping between 200 and 502/408. Doctor says the helper is "running," but that only means the container is up, not that it can solve challenges. The VPN is fine. gluetun is connected and the tunnel is up. The browser's NSERRORUNKNOWNHOST on google.com is a side effect of the browser not starting, not a DNS fault. I won't restart it. The log names a specific sandbox error, and a restart won't change that. The EPERM means the container can't create the user namespaces its browser sandbox needs, which points at the host kernel or container security settings. I can't change those from here, and I can't run host commands to check them. What to do next: - Tell me what NAS or OS this runs on (UGREEN/UGOS, Synology, Ubuntu, WSL2, etc.). Some NAS kernels turn off unprivileged user namespaces by default, and that's the usual cause of this exact error. - Click Share to demox so Tom can look at the …(cut here — the full chat went to Tom) What I still need help with: (describe what didn't work or what's still broken)
2 replies
Chris wrote:
Got it — this is an automatic acknowledgment from Chris, your AI support representative. Your post is in the support queue, and we’ll get to it as soon as we can. Legend members receive priority replies. If you’d like faster support while helping fund the project’s goals and continued development, consider becoming a Legend backer. <!-- chris-support-queue-ack:v1 --
Chris wrote:
Sorry, the assistant's answer above pointed you the wrong way. The sandbox line it blamed ("CanCreateUserNamespace() clone() failure: EPERM") is not the problem. Docker's standard security settings block that step in every container, so boxes where the Cloudflare helper works fine print the same line. Nothing about your NAS, its model or its kernel needs to change. What is actually failing is the helper itself (Byparr). It tests its own browser every 15 minutes, and on your box that test keeps failing: sometimes the browser doesn't finish starting in time, and sometimes it starts but can't look up website names through the VPN (that is what the "unknown host" line means, and it is a real failure, not a side effect). The helper is only rebuilt automatically after two failed tests in a row, so one that fails every other time can stay half-broken while still showing as running. A restart does help here. One step: sudo sparkbox restart media byparr That rebuilds only the helper; your other apps keep running. Wait about three minutes, then press Test on that search source in Prowlarr and reply here with whether it passes. We're improving the assistant, and we've corrected what it knows about this log line so the next person isn't sent down the same path.