Quick Tryout Nextcloud Docker not working

User Support
1

Can’t get it working… :frowning:
Had to cut the logs since too long.

Certificate request self-signature ok
subject=C = DE, ST = BW, L = Stuttgart, O = Dummy Authority, CN = localhost
wsd-00001-00001 2025-03-19 21:40:12.648082 +0000 [ coolwsd ] INF  Initializing wsd. Local time: Wed 2025-03-19 21:40:12 +0000. Log level is [8]| common/Log.cpp:686
wsd-00001-00001 2025-03-19 21:40:12.648158 +0000 [ coolwsd ] INF  Setting log-level to [trace] and delaying setting to [warning] until after WSD initialization.| wsd/COOLWSD.cpp:1456
wsd-00001-00001 2025-03-19 21:40:12.648189 +0000 [ coolwsd ] INF  Initializing coolwsd 24.04.13.2 server []. Experimental features are enabled.| wsd/COOLWSD.cpp:1467
wsd-00001-00001 2025-03-19 21:40:12.652058 +0000 [ coolwsd ] INF  Loaded config file [/etc/coolwsd/coolwsd.xml] (non-default values):
        cache_files.expiry_min: 1000
        cache_files.path: /opt/cool/cache
        logging.anonymize.anonymize_user_data: false
        logging.color: false
        logging_ui_cmd.merge_display_end_time: true
        ssl.ca_file_path: /tmp/ssl/certs/ca/root.crt.pem
        ssl.cert_file_path: /tmp/ssl/certs/servers/localhost/cert.pem
        ssl.enable: false
        ssl.key_file_path: /tmp/ssl/certs/servers/localhost/privkey.pem
        storage.ssl.enable: 
| wsd/COOLWSD.cpp:1476
wsd-00001-00001 2025-03-19 21:40:12.652119 +0000 [ coolwsd ] INF  Anonymization of user-data is configurable.| wsd/COOLWSD.cpp:1545
wsd-00001-00001 2025-03-19 21:40:12.652288 +0000 [ coolwsd ] INF  Anonymization of user-data is disabled.| wsd/COOLWSD.cpp:1592
wsd-00001-00001 2025-03-19 21:40:12.652318 +0000 [ coolwsd ] INF  SSL support: SSL is disabled.| wsd/COOLWSD.cpp:1639
wsd-00001-00001 2025-03-19 21:40:12.652322 +0000 [ coolwsd ] INF  SSL support: termination is disabled.| wsd/COOLWSD.cpp:1640
wsd-00001-00001 2025-03-19 21:40:12.652333 +0000 [ coolwsd ] DBG  Setting envar PDFIMPORT_RESOLUTION_DPI=96 per config per_document.pdf_resolution_dpi| wsd/COOLWSD.cpp:1667
wsd-00001-00001 2025-03-19 21:40:12.652362 +0000 [ coolwsd ] INF  Creating childroot: /opt/cool/child-roots/1-51b230f1/| wsd/COOLWSD.cpp:1708
wsd-00001-00001 2025-03-19 21:40:12.654018 +0000 [ coolwsd ] DBG  Move into user namespace as uid 0| wsd/COOLWSD.cpp:1206
wsd-00001-00001 2025-03-19 21:40:12.654203 +0000 [ coolwsd ] ERR  enterMountingNS, unshare failed: Operation not permitted| common/JailUtil.cpp:70
wsd-00001-00001 2025-03-19 21:40:12.654229 +0000 [ coolwsd ] ERR  creating usernamespace for mount user failed.| wsd/COOLWSD.cpp:1210
wsd-00001-00001 2025-03-19 21:40:12.654400 +0000 [ coolwsd ] INF  Cleaning up childroot directory [/opt/cool/child-roots/].| common/JailUtil.cpp:336
wsd-00001-00001 2025-03-19 21:40:12.654606 +0000 [ coolwsd ] DBG  Removing [/opt/cool/child-roots/tmp] recursively.| common/FileUtil.cpp:212
wsd-00001-00001 2025-03-19 21:40:12.654628 +0000 [ coolwsd ] DBG  Removing [/opt/cool/child-roots/linkable] recursively.| common/FileUtil.cpp:212
wsd-00001-00001 2025-03-19 21:40:12.654645 +0000 [ coolwsd ] DBG  Unmounting [/opt/cool/child-roots/]| common/JailUtil.cpp:192
wsd-00001-00001 2025-03-19 21:40:12.654673 +0000 [ coolwsd ] TRC  Executing coolmount command: /usr/bin/coolmount -u -s /opt/cool/child-roots| common/JailUtil.cpp:143
sh: 1: /usr/bin/coolmount: Operation not permitted
wsd-00001-00001 2025-03-19 21:40:12.657785 +0000 [ coolwsd ] DBG  Failed to unmount [/opt/cool/child-roots/]| common/JailUtil.cpp:205
wsd-00001-00001 2025-03-19 21:40:12.657843 +0000 [ coolwsd ] DBG  Removing empty directories at [/opt/cool/child-roots/] recursively| common/FileUtil.cpp:269
wsd-00001-00001 2025-03-19 21:40:12.658074 +0000 [ coolwsd ] INF  Cleaning up childroot directory [/opt/cool/child-roots/1-51b230f1/].| common/JailUtil.cpp:336
wsd-00001-00001 2025-03-19 21:40:12.658089 +0000 [ coolwsd ] TRC  Directory [/opt/cool/child-roots/1-51b230f1/] is not a jail directory or doesn't exist.| common/JailUtil.cpp:341
wsd-00001-00001 2025-03-19 21:40:12.658094 +0000 [ coolwsd ] INF  Creating jail path (if missing): /opt/cool/child-roots/1-51b230f1//tmp/incoming/fonts| common/JailUtil.cpp:419
wsd-00001-00001 2025-03-19 21:40:12.658283 +0000 [ coolwsd ] INF  Creating jail path (if missing): /opt/cool/child-roots/1-51b230f1//tmp/sharedpresets| common/JailUtil.cpp:419
wsd-00001-00001 2025-03-19 21:40:12.658335 +0000 [ coolwsd ] DBG  Mounting [/opt/cool/systemplate] -> [/opt/cool/child-roots/1-51b230f1/cool_test_mount]| common/JailUtil.cpp:149

...

wsd-00001-00022 2025-03-19 21:40:22.178284 +0000 [ prisoner_poll ] TRC  #17: Upgrading to WebSocket| net/WebSocketHandler.hpp:993
wsd-00001-00022 2025-03-19 21:40:22.178295 +0000 [ prisoner_poll ] INF  #17: WebSocket version: 13, key: [V0bu4XgbF3kjkUHhCmV8PA==], protocol: [chat]| net/WebSocketHandler.hpp:1003
wsd-00001-00022 2025-03-19 21:40:22.179319 +0000 [ prisoner_poll ] TRC  #17: Sending WS Upgrade response: Date: Wed, 19 Mar 2025 21:40:22
Server:  
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: 36qu51FrFXKxcDvt0ZGau2Rox70=
| net/WebSocketHandler.hpp:1015
wsd-00001-00022 2025-03-19 21:40:22.180083 +0000 [ prisoner_poll ] TRC  #17: Wrote 173 bytes of 173 buffered data| net/Socket.hpp:1628
wsd-00001-00022 2025-03-19 21:40:22.180130 +0000 [ prisoner_poll ] INF  ChildProcess ctor [28].| wsd/Process.hpp:41
wsd-00001-00022 2025-03-19 21:40:22.180139 +0000 [ prisoner_poll ] TRC  Adding a new child 28 with config  to NewChildren, have 0 outstanding requests| wsd/COOLWSD.cpp:667
wsd-00001-00022 2025-03-19 21:40:22.180146 +0000 [ prisoner_poll ] INF  Have 1 spare child after adding [28]. Notifying.| wsd/COOLWSD.cpp:676
wsd-00001-00022 2025-03-19 21:40:22.180187 +0000 [ prisoner_poll ] TRC  #16: Handling poll events of prisoner_poll at index 1 (of 3): 0x0| net/Socket.cpp:647
wsd-00001-00022 2025-03-19 21:40:22.180196 +0000 [ prisoner_poll ] TRC  #15: Handling poll events of prisoner_poll at index 0 (of 3): 0x0| net/Socket.cpp:647
wsd-00001-00022 2025-03-19 21:40:22.180203 +0000 [ prisoner_poll ] TRC  #15: setupPollFds getPollEvents: 0x1| net/Socket.hpp:982
wsd-00001-00022 2025-03-19 21:40:22.180209 +0000 [ prisoner_poll ] TRC  #16: setupPollFds getPollEvents: 0x1| net/Socket.hpp:982
wsd-00001-00022 2025-03-19 21:40:22.180213 +0000 [ prisoner_poll ] TRC  #17: setupPollFds getPollEvents: 0x1| net/Socket.hpp:982
wsd-00001-00022 2025-03-19 21:40:22.180216 +0000 [ prisoner_poll ] TRC  ppoll start, timeoutMicroS: 16853900 size 3| net/Socket.cpp:503
wsd-00001-00001 2025-03-19 21:40:22.180205 +0000 [ coolwsd ] TRC  Have 1 new children.| wsd/COOLWSD.cpp:3682
wsd-00001-00001 2025-03-19 21:40:22.180239 +0000 [ coolwsd ] INF  WSD initialization complete: setting log-level to [warning] as configured.| wsd/COOLWSD.cpp:3697
Ready to accept connections on port 9980.

wsd-00001-00001 2025-03-19 21:40:22.180848 +0000 [ coolwsd ] WRN  Waking up dead poll thread [main], started: false, finished: false| net/Socket.hpp:826
frk-00023-00023 2025-03-19 21:40:22.181471 +0000 [ forkit ] WRN  The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.| common/JailUtil.cpp:587
frk-00023-00023 2025-03-19 21:40:22.186947 +0000 [ forkit ] WRN  The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.| common/JailUtil.cpp:587
frk-00023-00023 2025-03-19 21:40:22.194619 +0000 [ forkit ] WRN  The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.| common/JailUtil.cpp:587
kit-00033-00033 2025-03-19 21:40:22.474370 +0000 [ kit_spare_002 ] ERR  Failed to get the realpath of [/opt/cool/child-roots/1-51b230f1/tmp/sharedpresets/template] (ENOENT: No such file or directory)| common/FileUtil.cpp:284
kit-00033-00033 2025-03-19 21:40:22.474484 +0000 [ kit_spare_002 ] ERR  linkOrCopy: nftw() failed for '/opt/cool/child-roots/1-51b230f1/tmp/sharedpresets/template'| kit/Kit.cpp:594
kit-00035-00035 2025-03-19 21:40:22.491777 +0000 [ kit_spare_004 ] ERR  Failed to get the realpath of [/opt/cool/child-roots/1-51b230f1/tmp/sharedpresets/template] (ENOENT: No such file or directory)| common/FileUtil.cpp:284
kit-00035-00035 2025-03-19 21:40:22.491863 +0000 [ kit_spare_004 ] ERR  linkOrCopy: nftw() failed for '/opt/cool/child-roots/1-51b230f1/tmp/sharedpresets/template'| kit/Kit.cpp:594
kit-00034-00034 2025-03-19 21:40:22.515991 +0000 [ kit_spare_003 ] ERR  Failed to get the realpath of [/opt/cool/child-roots/1-51b230f1/tmp/sharedpresets/template] (ENOENT: No such file or directory)| common/FileUtil.cpp:284
kit-00034-00034 2025-03-19 21:40:22.516087 +0000 [ kit_spare_003 ] ERR  linkOrCopy: nftw() failed for '/opt/cool/child-roots/1-51b230f1/tmp/sharedpresets/template'| kit/Kit.cpp:594

The page just shows OK

$ curl -X GET http://localhost:9980
OK
2

Hii @kitingChris welcome to collabora online forum!

It looks like your Nextcloud + Collabora setup inside Docker is failing due to namespace and mount-related permissions.

  1. Run with --privileged (Temporary Test)

    Try running your Collabora container with --privileged to see if that resolves the issue:

     docker run --privileged -d <your-collabora-params>

If this works, the issue is related to security restrictions in your container runtime.

3 
docker run --privileged -t -d -p 9980:9980 -e "extra_params=--o:ssl.enable=false" collabora/code

wsd-00001-00019 2025-03-20 19:34:31.939157 +0000 [ prisoner_poll ] TRC  #17: Wrote 173 bytes of 173 buffered data| net/Socket.hpp:1628
wsd-00001-00019 2025-03-20 19:34:31.939164 +0000 [ prisoner_poll ] INF  ChildProcess ctor [25].| wsd/Process.hpp:41
wsd-00001-00019 2025-03-20 19:34:31.939169 +0000 [ prisoner_poll ] TRC  Adding a new child 25 with config  to NewChildren, have 0 outstanding requests| wsd/COOLWSD.cpp:667
wsd-00001-00019 2025-03-20 19:34:31.939173 +0000 [ prisoner_poll ] INF  Have 1 spare child after adding [25]. Notifying.| wsd/COOLWSD.cpp:676
wsd-00001-00019 2025-03-20 19:34:31.939197 +0000 [ prisoner_poll ] TRC  #16: Handling poll events of prisoner_poll at index 1 (of 3): 0x0| net/Socket.cpp:647
wsd-00001-00019 2025-03-20 19:34:31.939212 +0000 [ prisoner_poll ] TRC  #15: Handling poll events of prisoner_poll at index 0 (of 3): 0x0| net/Socket.cpp:647
wsd-00001-00019 2025-03-20 19:34:31.939216 +0000 [ prisoner_poll ] TRC  #15: setupPollFds getPollEvents: 0x1| net/Socket.hpp:982
wsd-00001-00019 2025-03-20 19:34:31.939219 +0000 [ prisoner_poll ] TRC  #16: setupPollFds getPollEvents: 0x1| net/Socket.hpp:982
wsd-00001-00019 2025-03-20 19:34:31.939222 +0000 [ prisoner_poll ] TRC  #17: setupPollFds getPollEvents: 0x1| net/Socket.hpp:982
wsd-00001-00019 2025-03-20 19:34:31.939224 +0000 [ prisoner_poll ] TRC  ppoll start, timeoutMicroS: 17989781 size 3| net/Socket.cpp:503
wsd-00001-00001 2025-03-20 19:34:31.939447 +0000 [ coolwsd ] TRC  Have 1 new children.| wsd/COOLWSD.cpp:3682
wsd-00001-00001 2025-03-20 19:34:31.939475 +0000 [ coolwsd ] INF  WSD initialization complete: setting log-level to [warning] as configured.| wsd/COOLWSD.cpp:3697
Ready to accept connections on port 9980.

wsd-00001-00001 2025-03-20 19:34:31.940489 +0000 [ coolwsd ] WRN  Waking up dead poll thread [main], started: false, finished: false| net/Socket.hpp:826
frk-00020-00020 2025-03-20 19:34:31.940670 +0000 [ forkit ] WRN  The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.| common/JailUtil.cpp:587
frk-00020-00020 2025-03-20 19:34:31.950046 +0000 [ forkit ] WRN  The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.| common/JailUtil.cpp:587
frk-00020-00020 2025-03-20 19:34:31.958662 +0000 [ forkit ] WRN  The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.| common/JailUtil.cpp:587

But I still get a “OK” when opening in my browser…

I am also trying to run “Collabora Online - Built-in CODE Server” but when I go to Administration settings > Nextcloud Office I just get “Access forbidden”

4

@kitingChris can you share full logs as i am not seeing any error message here to troubleshot the issue…