AiO: Collabora stop working after nextcloud/debian update

Support intro

Sorry to hear you’re facing problems. :slightly_frowning_face:

The community help forum (help.nextcloud.com) is for home and non-enterprise users. Support is provided by other community members on a best effort / “as available” basis. All of those responding are volunteering their time to help you.

If you’re using Nextcloud in a business/critical setting, paid and SLA-based support services can be accessed via portal.nextcloud.com where Nextcloud engineers can help ensure your business keeps running smoothly.

Getting help

In order to help you as efficiently (and quickly!) as possible, please fill in as much of the below requested information as you can.

Before clicking submit: Please check if your query is already addressed via the following resources:

(Utilizing these existing resources is typically faster. It also helps reduce the load on our generous volunteers while elevating the signal to noise ratio of the forums otherwise arising from the same queries being posted repeatedly).

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can. :heart:

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
    • 33.0.8.2
  • Operating system and version (e.g., Ubuntu 24.04):
    • Debian 13
  • Web server and version (e.g, Apache 2.4.25):
    • nextcloud-aio-apache
  • Reverse proxy and version _(e.g. nginx 1.27.2)
    • Nginx Proxy Manager v2.15.1
  • PHP version (e.g, 8.3):
    • 8.3.33
  • Is this the first time you’ve seen this error? (Yes / No):
    • yes
  • When did this problem seem to first start?
    • In July i think
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • AIO
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • No

Summary of the issue you are facing:

When I try to open a document from my Nextcloud using Nextcloud Office (Collabora) (such as a .docx or .xlsx file), I get the following error message: “Failed to load the documentNextcloud Office failed to load—please try again later”

Steps to replicate it (hint: details matter!):

  1. Using Nextcloud Office

  2. Open a docx, xlsx, pptx file

  3. File won’t open

Log entries

Nextcloud

Please provide the log entries from your Nextcloud log that are generated during the time of problem (via the Copy raw option from Administration settings->Logging screen or from your nextcloud.log located in your data directory). Feel free to use a pastebin/gist service if necessary.

https://pastebin.com/6bvMgGqQ

Web Browser

If the problem is related to the Web interface, open your browser inspector Console and Network tabs while refreshing (reloading) and reproducing the problem. Provide any relevant output/errors here that appear.

PASTE

Web server / Reverse Proxy

The output of your Apache/nginx/system log in /var/log/____:

[ERROR] viewer: Could not register handler 
Object
app
: 
"viewer"
error
: 
"The handler is already registered"
handler
: 
{…}
level
: 
0
uid
: 
"585C8545-A4D0-43BB-88AC-460280BB66DE"
[[Prototype]]
: 
Object


vue.runtime.esm.js:3065 Error: [tiptap error]: The editor view is not available. Cannot access view['dom']. The editor may not be mounted yet.

Executing inline script violates the following Content Security Policy directive 'script-src 'self' 'unsafe-eval''. Either the 'unsafe-inline' keyword, a hash ('sha256-XOKVOFK7V9e6jZNxqxXAysnMDxOlDWPKzWhBg2PT2Os='), or a nonce ('nonce-...') is required to enable inline execution. The action has been blocked.

Office.vue:390
 Document loading failed due to timeout: Please check for failing network requests
(anonymous)	@	Office.vue:390

Configuration

Nextcloud

The output of occ config:list system or similar is best, but, if not possible, the contents of your config.php file from /path/to/nextcloud is fine (make sure to remove any identifiable information!):

<?php
$CONFIG = array (
  'one-click-instance' => true,
  'one-click-instance.user-limit' => 100,
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'apps_paths' => 
  array (
    0 => 
    array (
      'path' => '/var/www/html/apps',
      'url' => '/apps',
      'writable' => false,
    ),
    1 => 
    array (
      'path' => '/var/www/html/custom_apps',
      'url' => '/custom_apps',
      'writable' => true,
    ),
  ),
  'check_data_directory_permissions' => false,
  'memcache.distributed' => '\\OC\\Memcache\\Redis',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'redis' => 
  array (
    'host' => 'nextcloud-aio-redis',
    'password' => 'cached',
    'port' => 6379,
    'timeout' => 3.0,
    'read_timeout' => 10.0,
  ),
  'overwritehost' => 'cloud.lanisys.fr',
  'overwriteprotocol' => 'https',
  'passwordsalt' => 'cached',
  'secret' => 'cached',
  'trusted_domains' => 
  array (
    0 => 'localhost',
    1 => 'cloud.lanisys.fr',
  ),
  'datadirectory' => '/mnt/ncdata',
  'dbtype' => 'pgsql',
  'version' => '33.0.8.2',
  'overwrite.cli.url' => 'https://cloud.lanisys.fr/',
  'dbname' => 'nextcloud_database',
  'dbhost' => 'nextcloud-aio-database:5432',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'dbuser' => 'oc_nextcloud',
  'dbpassword' => 'cached',
  'installed' => true,
  'instanceid' => 'cached',
  'maintenance' => false,
  'updatedirectory' => '/nc-updater',
  'loglevel' => 0,
  'log_type' => 'file',
  'logfile' => '/var/www/html/data/nextcloud.log',
  'log_rotate_size' => 10485760,
  'log.condition' => 
  array (
    'apps' => 
    array (
      0 => 'admin_audit',
    ),
  ),
  'preview_max_x' => 2048,
  'preview_max_y' => 2048,
  'jpeg_quality' => 60,
  'enabledPreviewProviders' => 
  array (
    1 => 'OC\\Preview\\Image',
    2 => 'OC\\Preview\\MarkDown',
    3 => 'OC\\Preview\\MP3',
    4 => 'OC\\Preview\\TXT',
    5 => 'OC\\Preview\\OpenDocument',
    6 => 'OC\\Preview\\Movie',
    7 => 'OC\\Preview\\Krita',
    0 => 'OC\\Preview\\Imaginary',
    23 => 'OC\\Preview\\ImaginaryPDF',
  ),
  'enable_previews' => true,
  'upgrade.disable-web' => true,
  'mail_smtpmode' => 'smtp',
  'trashbin_retention_obligation' => 'auto, 30',
  'versions_retention_obligation' => 'auto, 30',
  'activity_expire_days' => 30,
  'simpleSignUpLink.shown' => false,
  'share_folder' => '/Shared',
  'one-click-instance.link' => 'https://nextcloud.com/all-in-one/',
  'upgrade.cli-upgrade-link' => 'https://github.com/nextcloud/all-in-one/discussions/2726',
  'maintenance_window_start' => 100,
  'allow_local_remote_servers' => true,
  'davstorage.request_timeout' => 3600,
  'documentation_url.server_logs' => 'https://github.com/nextcloud/all-in-one/discussions/5425',
  'htaccess.RewriteBase' => '/',
  'dbpersistent' => false,
  'auth.bruteforce.protection.enabled' => true,
  'ratelimit.protection.enabled' => true,
  'files_external_allow_create_new_local' => false,
  'trusted_proxies' => 
  array (
    0 => '127.0.0.1',
    1 => '::1',
    10 => '172.21.0.0/16',
  ),
  'preview_imaginary_url' => 'http://nextcloud-aio-imaginary:9000',
  'preview_imaginary_key' => 'cached',
  'mail_sendmailmode' => 'smtp',
  'mail_from_address' => 'cloud',
  'mail_domain' => 'lanisys.fr',
  'mail_smtphost' => '192.168.10.6',
  'mail_smtpport' => '587',
  'mail_smtpauth' => true,
  'mail_smtpname' => 'nicolas',
  'mail_smtppassword' => 'cached',
  'forbidden_filename_basenames' => 
  array (
    0 => 'con',
    1 => 'prn',
    2 => 'aux',
    3 => 'nul',
    4 => 'com0',
    5 => 'com1',
    6 => 'com2',
    7 => 'com3',
    8 => 'com4',
    9 => 'com5',
    10 => 'com6',
    11 => 'com7',
    12 => 'com8',
    13 => 'com9',
    14 => 'comš',
    15 => 'com²',
    16 => 'comÂł',
    17 => 'lpt0',
    18 => 'lpt1',
    19 => 'lpt2',
    20 => 'lpt3',
    21 => 'lpt4',
    22 => 'lpt5',
    23 => 'lpt6',
    24 => 'lpt7',
    25 => 'lpt8',
    26 => 'lpt9',
    27 => 'lptš',
    28 => 'lpt²',
    29 => 'lptÂł',
  ),
  'forbidden_filename_characters' => 
  array (
    0 => '<',
    1 => '>',
    2 => ':',
    3 => '"',
    4 => '|',
    5 => '?',
    6 => '*',
    7 => '\\',
    8 => '/',
  ),
  'forbidden_filename_extensions' => 
  array (
    0 => ' ',
    1 => '.',
    2 => '.filepart',
    3 => '.part',
  ),
  'twofactor_enforced' => 'true',
  'twofactor_enforced_groups' => 
  array (
  ),
  'twofactor_enforced_excluded_groups' => 
  array (
    0 => 'admin',
  ),
  'ldapProviderFactory' => 'OCA\\User_LDAP\\LDAPProviderFactory',
  'updatechecker' => false,
  'serverid' => 445,
  'log_type_audit' => 'file',
  'logfile_audit' => '/var/www/html/data/audit.log',
  'update_channel' => 'stable',
  'mail_smtpstreamoptions' => 
  array (
    'ssl' => 
    array (
      'allow_self_signed' => true,
      'verify_peer' => false,
      'verify_peer_name' => false,
    ),
  ),
);

Apps

The output of occ app:list (if possible).

occ command not found

Tips for increasing the likelihood of a response

  • Use the preformatted text formatting option in the editor for all log entries and configuration output.
  • If screenshots are useful, feel free to include them.
    • If possible, also include key error output in text form so it can be searched for.
  • Try to edit log output only minimally (if at all) so that it can be ran through analyzers / formatters by those trying to help you.

Thank a lot for your help

  • you are using AiO so I think it’s good idea to double check if all containers are up to date and started
  • your log is full of lines like

“app”:“user_ldap”,“method”:“GET”,“url”:"/index.php/apps/richdocuments/wopi/settings?type=systemconfig..

which is is kind of weird because it looks like user_ldap app is processing requests of richdocuments app, please double check the richdocuments app is still installed, activated and up-to-date

  • I would be really surprised AiOs CSP is wrong - please explain if you rewrite headers/CSP in your NPM reverse proxy?

Hello,

Thank you very much for your help.

When I log on to the admin interface of the mastercontainer (port 8080), it tells me that all the containers are running and up to date.

I don’t think I’ve changed the network configuration, especially nginx proxy manager. I will nevertheless try to redirect the 443 stream directly to the nextcloud conrainer to test.

I think everything worked at the end of July .

Moreover, the server checker (which is on the same page as the button to open the admin interface of the mastercontainer) no longer works.
I also try to remove the collabora container, delete the image so that docker.pull from hub.

Would it be interesting to try to remove all containers + images? I’m not in danger of losing data/configuration?

Hello,I forgot to include the most important logs:

wsd-00011-00011 2026-09-16 12:04:37.658196 [ coolwsd ] ERR enterMountingNS, root mount failed (EACCES: Permission denied)|common/JailUtil.cpp:103

wsd-00010-00010 2026-09-16 12:04:37.659027 [ coolwsd ] ERR creating usernamespace for mount user failed.|wsd/COOLWSD.cpp:1357

/usr/bin/coolmount: mount failed to bind [/opt/cool/systemplate] to [/opt/cool/child-roots/7-5233F2B5/cool_test_mount]: Permission denied.

wsd-00010-00010 2026-09-16 12:04:37.665023 [ coolwsd ] ERR Failed to bind-mount [/opt/cool/systemplate] → [/opt/cool/child-roots/7-5233F2B5/cool_test_mount]|common/JailUtil.cpp:171

wsd-00010-00010 2026-09-16 12:04:37.665058 [ coolwsd ] ERR Bind-Mounting fails and will be disabled for this run. To disable permanently set mount_jail_tree config entry in coolwsd.xml to false.|common/JailUtil.cpp:505

wsd-00007-00007 2026-09-16 12:04:40.344848 [ coolwsd ] ERR Could not open proof RSA key, Poco exception: I/O error: EVPPKey::loadKey(‘/etc/coolwsd/proof_key’)

|wsd/ProofKey.cpp:140

coolforkit version details: 26.04.2.1 - de013a57f9

Init vcl

preload: merged testuno vbaswobj sw_writerfilter swd sw sm msword pdfimport sdui sd vbaobj solver scd sc scn pcr migrationoo2 sdd smd PresentationMinimizer stocservices invocation reflection io calc uuresolver bootstrap scfilt introspection writer binaryurp LanguageTool namingservice migrationoo3 invocadapt proxyfac

Disabled: cmdmail dbp abp

Preload textencodings

Allowlisted languages: de_DE en_GB en_US es_ES fr_FR it nl pt_BR pt_PT ru

Preloading local dictionaries: de-DE en-US fr-FR it-IT nl-NL pt-BR ru-RU en-GB it-CH nl-BE pt-PT es-ES

Preloading local thesauri: de-DE en-US fr-FR it-IT pt-BR ru-RU en-GB it-CH pt-PT es-ES

Preloading local hyphenators: de-DE en-US fr-FR it-IT nl-NL pt-BR ru-RU en-GB it-CH nl-BE pt-PT es-ES

Preloading breakiterator

Preload icons

Preload short cut accelerators

Preload languages

Preload fonts

Preload config

frk-00016-00016 2026-09-16 12:04:45.043246 [ coolforkit-caps ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.|common/JailUtil.cpp:631

frk-00016-00016 2026-09-16 12:04:45.043292 [ coolforkit-caps ] WRN Failed to update the dynamic files in [/opt/cool/systemplate]. Will clone dynamic elements of systemplate to the jails.|common/JailUtil.cpp:706

frk-00016-00016 2026-09-16 12:04:45.044005 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.|common/JailUtil.cpp:631

office version details: { “ProductName”: “Collabora Office”, “ProductVersion”: “26.04”, “ProductExtension”: “.2.1”, “BuildId”: “de013a57f9dd43658ce09b01cc34cbfa82f81afd”, “BuildConfig”: “‘–enable-hardening-flags’ ‘–with-vendor=Collabora Productivity Limited’ ‘–with-branding=icon-themes/galaxy/brand_cp’ ‘–with-system-dicts’ ‘–with-myspell-dicts’ ‘–with-system-zlib’ ‘–enable-cairo-rgba’ ‘–without-system-cairo’ ‘–without-system-fontconfig’ ‘–without-system-freetype’ ‘–without-system-graphite’ ‘–without-system-harfbuzz’ ‘–without-system-openssl’ ‘–without-system-libpng’ ‘–without-system-libxml’ ‘–without-system-jpeg’ ‘–without-system-expat’ ‘–without-system-curl’ ‘–without-system-icu’ ‘–without-system-nss’ ‘–without-system-jars’ ‘–without-junit’ ‘–without-help’ ‘–disable-xmlhelp’ ‘–enable-ld’ ‘–with-linker-hash-style=both’ ‘–with-fonts’ ‘–with-docrepair-fonts’ ‘–enable-noto-font’ ‘–with-galleries=no’ ‘–with-theme=colibre colibre_svg’ ‘–with-external-thes-dir=/usr/share/mythes’ ‘–with-external-hyph-dir=/usr/share/hyphen’ ‘–with-external-dict-dir=/usr/share/hunspell’ ‘–disable-dbus’ ‘–disable-kf5’ ‘–disable-gtk3’ ‘–disable-qt5’ ‘–disable-evolution2’ ‘–disable-gio’ ‘–disable-gui’ ‘–disable-sdremote’ ‘–disable-sdremote-bluetooth’ ‘–disable-randr’ ‘–enable-epm’ ‘–enable-python=internal’ ‘–disable-dconf’ ‘–enable-mergelibs’ ‘–with-package-format=deb rpm’ ‘–with-lang=ar bg ca cs cy da de el en-US en-GB eo es eu fi fr ga gl he hr hu hy id is it ja kk ko lo nb nl oc pl pt pt-BR ro ru sk sl sq sv tr uk vi zh-CN zh-TW’ ‘–enable-symbols’ ‘–enable-sal-log’ ‘–without-templates’ ‘–with-buildconfig-recorded’ ‘–disable-librelogo’ ‘–without-gssapi’ ‘–enable-quickjs’ ‘–srcdir=/home/collabora/jenkins/workspace/online/engine’ ‘–enable-option-checking=fatal’ ‘PKG_CONFIG_PATH=/opt/rh/devtoolset-12/root/usr/lib64/pkgconfig’” }

Ready to accept connections on port 9980.

frk-00016-00016 2026-09-16 12:04:47.650600 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.|common/JailUtil.cpp:631

frk-00016-00016 2026-09-16 12:04:47.665747 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.|common/JailUtil.cpp:631

frk-00016-00016 2026-09-16 12:04:47.680973 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.|common/JailUtil.cpp:631

wsd-00007-00015 2026-09-16 12:04:47.969442 [ prisoner_poll ] WRN #17: Unassociated Kit (27) disconnected unexpectedly|wsd/COOLWSD.cpp:3082

wsd-00007-00015 2026-09-16 12:04:48.217067 [ prisoner_poll ] WRN #22: Unassociated Kit (32) disconnected unexpectedly|wsd/COOLWSD.cpp:3082

wsd-00007-00015 2026-09-16 12:04:48.328644 [ prisoner_poll ] WRN #22: Unassociated Kit (34) disconnected unexpectedly|wsd/COOLWSD.cpp:3082

wsd-00007-00015 2026-09-16 12:04:48.330026 [ prisoner_poll ] WRN #23: Unassociated Kit (33) disconnected unexpectedly|wsd/COOLWSD.cpp:3082

frk-00016-00016 2026-09-16 12:04:48.477507 [ forkit ] WRN No live Kits exist, and we are not terminating yet.|kit/ForKit.cpp:387

frk-00016-00016 2026-09-16 12:04:48.938253 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.|common/JailUtil.cpp:631

frk-00016-00016 2026-09-16 12:04:48.953769 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.|common/JailUtil.cpp:631

frk-00016-00016 2026-09-16 12:04:49.535262 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.|common/JailUtil.cpp:631

wsd-00007-00015 2026-09-16 12:04:49.546471 [ prisoner_poll ] WRN #27: Unassociated Kit (60) disconnected unexpectedly|wsd/COOLWSD.cpp:3082

wsd-00007-00015 2026-09-16 12:04:49.550281 [ prisoner_poll ] WRN #22: Unassociated Kit (59) disconnected unexpectedly|wsd/COOLWSD.cpp:3082

frk-00016-00016 2026-09-16 12:04:49.553389 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.|common/JailUtil.cpp:631

Thank a lot