opencloud icon indicating copy to clipboard operation
opencloud copied to clipboard

Collabora container never starts

Open notian85 opened this issue 5 months ago • 4 comments

Describe the bug

The collabora container always unhealthy when admin password is set as forbidden.

Steps to reproduce

  1. Block admin password as log-in as forbidden for security reasons
  2. docker compose down
  3. docker compose up -d

Expected behavior

Expected the container to start healthy even when admin password in env file is forbidden to log in with externally. Internal communications between containers should not be blocked.

Actual behavior

Container does not start healthy, please see below docker log file.

2025-07-30T21:49:35.977514807Z wsd-00001-00014 2025-07-30 21:49:35.973430 +0000 [ prisoner_poll ] TRC #17: New child spawned after 1ms of requesting| wsd/COOLWSD.cpp:3050 2025-07-30T21:49:35.977522147Z wsd-00001-00014 2025-07-30 21:49:35.973611 +0000 [ prisoner_poll ] INF #17: New child [36], jailId: ohBiK2AQfnDwuJFU, configId: | wsd/COOLWSD.cpp:3082 2025-07-30T21:49:35.977528087Z wsd-00001-00014 2025-07-30 21:49:35.973657 +0000 [ prisoner_poll ] TRC #17: Calling make_shared<ChildProcess>, for NewChildren?| wsd/COOLWSD.cpp:3088 2025-07-30T21:49:35.977533897Z wsd-00001-00014 2025-07-30 21:49:35.973666 +0000 [ prisoner_poll ] TRC #17: Upgrading to WebSocket| net/WebSocketHandler.hpp:1013 2025-07-30T21:49:35.977539728Z wsd-00001-00014 2025-07-30 21:49:35.973686 +0000 [ prisoner_poll ] INF #17: WebSocket version: 13, key: [5CpBhrnXmGMMsU3ZPhdQOA==], protocol: [chat]| net/WebSocketHandler.hpp:1023 2025-07-30T21:49:35.977545728Z wsd-00001-00014 2025-07-30 21:49:35.973718 +0000 [ prisoner_poll ] TRC #17: Sending WS Upgrade response: Date: Wed, 30 Jul 2025 21:49:35 2025-07-30T21:49:35.977551587Z Server:
2025-07-30T21:49:35.977557757Z Upgrade: websocket 2025-07-30T21:49:35.977602119Z Connection: Upgrade 2025-07-30T21:49:35.977609469Z Sec-WebSocket-Accept: XDpsOYiFGf70xzx0wIReKL26310= 2025-07-30T21:49:35.977616648Z | net/WebSocketHandler.hpp:1047 2025-07-30T21:49:35.977623819Z wsd-00001-00014 2025-07-30 21:49:35.973934 +0000 [ prisoner_poll ] TRC #17: Wrote 173 bytes of 173 buffered data| net/Socket.hpp:1763 2025-07-30T21:49:35.992477921Z frk-00015-00015 2025-07-30 21:49:35.992316 +0000 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.| common/JailUtil.cpp:587 2025-07-30T21:49:36.003805267Z frk-00015-00015 2025-07-30 21:49:36.003613 +0000 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.| common/JailUtil.cpp:587 2025-07-30T21:49:36.014083403Z frk-00015-00015 2025-07-30 21:49:36.013866 +0000 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.| common/JailUtil.cpp:587 2025-07-30T21:49:36.170008169Z wsd-00001-00014 2025-07-30 21:49:35.973955 +0000 [ prisoner_poll ] INF ChildProcess ctor [36].| wsd/Process.hpp:39 2025-07-30T21:49:36.170024528Z wsd-00001-00014 2025-07-30 21:49:36.169716 +0000 [ prisoner_poll ] TRC Adding a new child 36 with config to NewChildren, have 3 outstanding requests| wsd/COOLWSD.cpp:677 2025-07-30T21:49:36.170030188Z wsd-00001-00014 2025-07-30 21:49:36.169749 +0000 [ prisoner_poll ] INF Have 1 spare child after adding [36]. Notifying.| wsd/COOLWSD.cpp:686 2025-07-30T21:49:36.170033359Z wsd-00001-00014 2025-07-30 21:49:36.169862 +0000 [ prisoner_poll ] TRC #15: setupPollFds getPollEvents: 0x1| net/Socket.hpp:1081 2025-07-30T21:49:36.170835557Z wsd-00001-00001 2025-07-30 21:49:22.508242 +0000 [ coolwsd ] INF Waiting for a new child for a max of 20000ms| wsd/COOLWSD.cpp:3679 2025-07-30T21:49:36.170847408Z wsd-00001-00001 2025-07-30 21:49:36.170727 +0000 [ coolwsd ] TRC Have 1 new children.| wsd/COOLWSD.cpp:3688 2025-07-30T21:49:36.375380336Z kit-00036-00036 2025-07-30 21:49:35.971720 +0000 [ kit_spare_001 ] TRC #25: Set socket buffer size to 262144| net/Socket.hpp:306 2025-07-30T21:49:36.375399866Z kit-00036-00036 2025-07-30 21:49:35.971729 +0000 [ kit_spare_001 ] INF New kit client websocket inserted.| kit/Kit.cpp:3845 2025-07-30T21:49:36.375404136Z kit-00036-00036 2025-07-30 21:49:35.971737 +0000 [ kit_spare_001 ] INF Kit initialization complete: setting log-level to [warning] as configured.| kit/Kit.cpp:3859 2025-07-30T21:49:36.486213261Z wsd-00001-00051 2025-07-30 21:49:36.429160 +0000 [ websrv_poll ] ERR #22: Read failed, have 1 buffered bytes (ECONNRESET: Connection reset by peer)| net/Socket.hpp:1415 2025-07-30T21:49:36.486314984Z wsd-00001-00051 2025-07-30 21:49:36.486151 +0000 [ websrv_poll ] ERR #21: Read failed, have 1 buffered bytes (ECONNRESET: Connection reset by peer)| net/Socket.hpp:1415 2025-07-30T21:49:36.486320484Z wsd-00001-00051 2025-07-30 21:49:36.486194 +0000 [ websrv_poll ] ERR #23: Read failed, have 1 buffered bytes (ECONNRESET: Connection reset by peer)| net/Socket.hpp:1415 2025-07-30T21:49:36.814834685Z Ready to accept connections on port 9980. 2025-07-30T21:49:36.814852735Z 2025-07-30T21:49:37.239392115Z kit-00047-00047 2025-07-30 21:49:37.239147 +0000 [ kit_spare_004 ] ERR Failed to get the realpath of [/opt/cool/child-roots/1-b84bb4e8/tmp/sharedpresets/template] (ENOENT: No such file or directory)| common/FileUtil.cpp:284 2025-07-30T21:49:37.242855814Z kit-00047-00047 2025-07-30 21:49:37.242751 +0000 [ kit_spare_004 ] ERR linkOrCopy: nftw() failed for '/opt/cool/child-roots/1-b84bb4e8/tmp/sharedpresets/template'| kit/Kit.cpp:600 2025-07-30T21:49:37.294596725Z kit-00046-00046 2025-07-30 21:49:37.294435 +0000 [ kit_spare_003 ] ERR Failed to get the realpath of [/opt/cool/child-roots/1-b84bb4e8/tmp/sharedpresets/template] (ENOENT: No such file or directory)| common/FileUtil.cpp:284 2025-07-30T21:49:37.294620456Z kit-00046-00046 2025-07-30 21:49:37.294502 +0000 [ kit_spare_003 ] ERR linkOrCopy: nftw() failed for '/opt/cool/child-roots/1-b84bb4e8/tmp/sharedpresets/template'| kit/Kit.cpp:600 2025-07-30T21:49:37.295550078Z kit-00048-00048 2025-07-30 21:49:37.295473 +0000 [ kit_spare_005 ] ERR Failed to get the realpath of [/opt/cool/child-roots/1-b84bb4e8/tmp/sharedpresets/template] (ENOENT: No such file or directory)| common/FileUtil.cpp:284 2025-07-30T21:49:37.296230293Z kit-00048-00048 2025-07-30 21:49:37.295525 +0000 [ kit_spare_005 ] ERR linkOrCopy: nftw() failed for '/opt/cool/child-roots/1-b84bb4e8/tmp/sharedpresets/template'| kit/Kit.cpp:600 2025-07-30T21:49:37.309733793Z kit-00045-00045 2025-07-30 21:49:37.309583 +0000 [ kit_spare_002 ] ERR Failed to get the realpath of [/opt/cool/child-roots/1-b84bb4e8/tmp/sharedpresets/template] (ENOENT: No such file or directory)| common/FileUtil.cpp:284 2025-07-30T21:49:37.309899778Z kit-00045-00045 2025-07-30 21:49:37.309819 +0000 [ kit_spare_002 ] ERR linkOrCopy: nftw() failed for '/opt/cool/child-roots/1-b84bb4e8/tmp/sharedpresets/template'| kit/Kit.cpp:600 2025-07-30T21:49:41.450590090Z wsd-00001-00014 2025-07-30 21:49:36.169882 +0000 [ prisoner_poll ] TRC #16: setupPollFds getPollEvents: 0x1| net/Socket.hpp:1081 2025-07-30T21:49:41.450648401Z wsd-00001-00014 2025-07-30 21:49:36.169886 +0000 [ prisoner_poll ] TRC #17: setupPollFds getPollEvents: 0x1| net/Socket.hpp:1081 2025-07-30T21:49:41.450659421Z wsd-00001-00014 2025-07-30 21:49:36.169888 +0000 [ prisoner_poll ] TRC ppoll start, timeoutMicroS: 5276306 size 3| net/Socket.cpp:509 2025-07-30T21:49:52.855456260Z wsd-00001-00051 2025-07-30 21:49:52.855084 +0000 [ websrv_poll ] ERR #32: Read failed, have 1 buffered bytes (ECONNRESET: Connection reset by peer)| net/Socket.hpp:1415 2025-07-30T21:50:23.091019723Z wsd-00001-00051 2025-07-30 21:50:23.090878 +0000 [ websrv_poll ] ERR #32: Read failed, have 1 buffered bytes (ECONNRESET: Connection reset by peer)| net/Socket.hpp:1415 2025-07-30T21:50:53.367191564Z wsd-00001-00051 2025-07-30 21:50:53.366767 +0000 [ websrv_poll ] ERR #32: Read failed, have 1 buffered bytes (ECONNRESET: Connection reset by peer)| net/Socket.hpp:1415 2025-07-30T21:51:23.470082674Z wsd-00001-00051 2025-07-30 21:51:23.469672 +0000 [ websrv_poll ] ERR #32: Read failed, have 1 buffered bytes (ECONNRESET: Connection reset by peer)| net/Socket.hpp:1415 2025-07-30T21:51:53.657123321Z wsd-00001-00051 2025-07-30 21:51:53.656853 +0000 [ websrv_poll ] ERR #32: Read failed, have 1 buffered bytes (ECONNRESET: Connection reset by peer)| net/Socket.hpp:1415 2025-07-30T21:52:23.855877197Z wsd-00001-00051 2025-07-30 21:52:23.844733 +0000 [ websrv_poll ] ERR #32: Read failed, have 1 buffered bytes (ECONNRESET: Connection reset by peer)| net/Socket.hpp:1415

Setup

Please describe how you started the server and provide a list of relevant environment variables or configuration files.

OC_XXX=somevalue
OC_YYY=somevalue
PROXY_XXX=somevalue

Additional context

Add any other context about the problem here.

notian85 avatar Jul 30 '25 21:07 notian85

How did you deploy openCloud?

micbar avatar Jul 31 '25 05:07 micbar

Deployed via docker compose following instructions in the docs. See attached env file (domains and passwords deleted and replaced by ***)

env.txt

notian85 avatar Jul 31 '25 15:07 notian85

when admin password is set as forbidden.

I do not get that? Do you set the password to the string forbidden?

micbar avatar Aug 04 '25 18:08 micbar

Does it work with other passwords?

micbar avatar Aug 04 '25 18:08 micbar

Closing. Please re open if necessary or talk with the collabora community.

micbar avatar Nov 17 '25 08:11 micbar