Cannot connect to Collabora server

Reiner_Nippes · March 26, 2020, 6:19pm

sudo docker exec -it <container_name> /bin/sh with the container_name from your compose file.

just start with ping collabora

kevdog · March 26, 2020, 6:47pm

My setup is a little bit different than yours. I have my reverse proxy running natively on FreeBSD. Nextcloud also is installed on same machine as the the reverse proxy. Because I wanted originally to use Collabora, I needed a linux machine in the mix which I could either do a direct installation or go the docker route. I chose the docker method, so I have an Ubuntu Virtualized Installation with a docker collabora. Nextcloud has its own domain as well as Collabora similar to your setup.

It sounds like you’ve done things correct up to this point, but just make sure the router on your network can resolved the domain names to the internal LAN addresses. I usually have to create DNS Host Overrides at the router level to help me with this. An alternative would be to modify the /etc/hosts file on each VM/Machine/etc where you would add the domain name and associate it with an internal LAN address.

You need to make sure that each VM/Machine/Container/etc can see the other VM’s/Containers/etc. You can do this by doing the ping statement from each VM/Machine/Container to the other. You want to ping by domain name although you could check by IP address as well. It’s important to make sure you can ping by domain name since the domain name is attached to your SSL certficate. During the SSL handshake the domain names need to be resolved, so hence its important computers in your LAN be able to resolved each other by domain name. Docker has its own internal DNS resolver but I think if it doesn’t find the domain name within the its Docker LAN it uses the resources of the host machine.

You seem like you know what you’re doing with the Docker Images.
I’m not trying to dissuade you from what you’re trying to accomplish. I recently had the Docker Collabora setup and functioning within my Ubuntu VM/Docker setup. On a whim I wanted to compare Collabora to OnlyOffice and I installed OnlyOffice Docker last night on the same machine as Collabora. In terms of speed and overall features, OnlyOffice (OO) was a clear winner. I’m not trying to dissuade you from Collabora since setting up the OO Docker container was nearly the exact same steps as Collabora – so basically if you get one working you can get the other working as well. Honestly however I’d be hard pressed to recommend Collabora over OO based on features and just execution speed.

PopeRigby · March 26, 2020, 9:43pm

I was hesitant to use OO, because of this whole debacle: https://github.com/ONLYOFFICE/DocumentServer/issues/805

kevdog · March 27, 2020, 1:12am

IDK, I never tried with the mobile app. But I did just try it now. You are correct in that the documents can not be edited but only viewed at least on my iphone. My only issue with Collabora was the connection seemed so slow it was barely usuable. It could my internet connection, but OO does some client side processing whereas with CB its all server side processing.

Either way the setup is nearly the same. The setup is virtually identical

PopeRigby · March 28, 2020, 7:21am

I think I want to try and stick with Collabora. Do you know what the problem might be?

Reiner_Nippes · March 28, 2020, 10:23am

maybe this helps:

kevdog · March 28, 2020, 4:24pm

I’d be happy to help.

Ok a couple of things.

Follow the advice of Reiner_Nippes about the domain setting within the docker-configuration.yml file.

For example (this is a snippet) (Assuming your nextcloud domain is called cloud.mydomain.com)

environment:
  - domain=cloud\\.mydomain\\.com

Couple of other things. You’ve done a great job with the nginx.conf file. However can you do one thing for me (since it will be a lot easier to make changes and debug).

Within each section you have the following:

    set $upstream_app collabora;
    set $upstream_port 9980;
    set $upstream_proto https;
    proxy_pass $upstream_proto://$upstream_app:$upstream_port;

I want you to first include this block right below the include /config/nginx/ssl.conf; line (I’ll begin this block with include /config/nginx/ssl.conf)

include /config/nginx/ssl.conf;
set $upstream http://collabora:9980;

We are going to be first testing with http and then we’ll upgrade later to https. (https just adds another layer of confusion at first).

Then within each of your location blocks replace:

    set $upstream_app collabora;
    set $upstream_port 9980;
    set $upstream_proto https;
    proxy_pass $upstream_proto://$upstream_app:$upstream_port;

with:

    proxy_pass $upstream

The variable proxy_pass defined within the server block will filter down and be inherited by all the location blocks. Makes it easy to flip flop back and forth between http and https

Ok awesome

Now lets just first try to work with collabora without any https. Also within your docker-configuration.yml file under the collabora section, I want you to add the following environment variables:

environment:
  - domain=cloud\\.mydomain\\.com
  - DONT_GEN_SSL_CERT="True"
  - server_name=office.mydomain.com
  - extra_params=--o:ssl.enable=false --o:ssl.termination=true

These commands are telling the collabora docker instance to not generate any SSL certs (since we are only testing with http at the moment). In terms of your other environment variables – VIRTUAL_HOST, VIRTUAL_PORT, VIRTUAL_PROTO, LETSENCRYPT_HOST, LETSENCRYPT_EMAIL – I’m not sure where you got these variables. Looking at the documentation for collabora docker I don’t see any of these variables being used within the container. Because the documentation doesn’t support use of these variables I’m assuming they are being ignored (big assumption).

I want you to post the result of the following command to verify the listening ports of docker containers. Run this command on the linux host where docker is installed:

lsof -i -P -n | grep LISTEN

I also want to verify that the nextcloud container is able to resolve collabora (it probably does but lets just check). You’ll first need to enter the nextcloud container. So from the docker host:

docker exec -it nextcloud /bin/bash

This should give you a shell within the nextcloud container. Try to ping the collabora container

ping collabora

Now its possible the nextcloud container doesn’t have the ping function installed. Looking at the docker hub nextcloud page, it looks like nextcloud is built on top of alpine-linux. I’m not totally familiar with alpine linux at all. It looks like alpine either uses apt or apk as its package manager. So you might have to do (use apt or apk) not both.

apt (or apk) update
apt (or apk) install iputils

Then try pinging the collabora container. Also while you are on the command line try installing wget

apt (or apk) install wget

Now lets just try to get a page from the collabora container on the command line:

wget http://collabora:9980

You should just get a page response that says “OK”

In terms of nextcloud - within the CODE settings (if you want to try and gotten this far and things seem to be working, change the settings the http://collabora:9980)

I’ll stop here just to verify http is working. Once I can confirm basic http is working, we can add back in the https and SSL stuff

PopeRigby · March 28, 2020, 9:06pm

kevdog:

Follow the advice of Reiner_Nippes about the domain setting within the docker-configuration.yml file.

For example (this is a snippet) (Assuming your nextcloud domain is called cloud.mydomain.com)
environment:
  - domain=cloud\\.mydomain\\.com

From the looks of that, it seems liked Reiner_Nippes wanted me to do do domain=office.mydomain\\.com|cloud.mydomain\\.com. Am I just supposed to do cloud\\.mydomain\\.com?

So, should it look like this?

server {
    listen 443 ssl;
    listen [::]:443 ssl;

    server_name office.*;

    include /config/nginx/ssl.conf;
    set $upstream http://collabora:9980;

    # static files
    location ^~ /loleaflet {
        resolver 127.0.0.11 valid=30s;
        proxy_pass $upstream

        proxy_set_header Host $http_host;
    }

    # WOPI discovery URL
    location ^~ /hosting/discovery {
        resolver 127.0.0.11 valid=30s;
        proxy_pass $upstream

        proxy_set_header Host $http_host;
    }

    # Capabilities
    location ^~ /hosting/capabilities {
        resolver 127.0.0.11 valid=30s;
        proxy_pass $upstream

        proxy_set_header Host $http_host;
    }

    # main websocket
    location ~ ^/lool/(.*)/ws$ {
        resolver 127.0.0.11 valid=30s;
        proxy_pass $upstream

        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $http_host;
        proxy_read_timeout 36000s;
    }

    # download, presentation and image upload
    location ~ ^/lool {
        resolver 127.0.0.11 valid=30s;
        proxy_pass $upstream

        proxy_set_header Host $http_host;
    }

    # Admin Console websocket
    location ^~ /lool/adminws {
        resolver 127.0.0.11 valid=30s;
        proxy_pass $upstream

        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $http_host;
        proxy_read_timeout 36000s;
    }
}

Got it. Now my collabora block in my docker-compose.yml looks like this:

collabora:
    image: collabora/code
    container_name: collabora
    hostname: office.mydomain.com
    ports:  
      - 9980:9980
    cap_add:    
      - MKNOD    
    environment: 
      - domain=cloud\\.mydomain\\.com  
      - DONT_GEN_SSL_CERT="True"   
      - server_name=office.mydomain.com
      - extra_params=--o:ssl.enable=false --o:ssl.termination=true

    restart: unless-stopped

kevdog:

I want you to post the result of the following command to verify the listening ports of docker containers. Run this command on the linux host where docker is installed:
lsof -i -P -n | grep LISTEN

That gives me:

sshd        503    root    3u  IPv4    15106      0t0  TCP *:22 (LISTEN)
sshd        503    root    4u  IPv6    15108      0t0  TCP *:22 (LISTEN)
docker-pr 21836    root    4u  IPv6 26789537      0t0  TCP *:9980 (LISTEN)
docker-pr 22738    root    4u  IPv6 24139201      0t0  TCP *:8096 (LISTEN)
docker-pr 22835    root    4u  IPv6 24139369      0t0  TCP *:443 (LISTEN)
docker-pr 22848    root    4u  IPv6 24137545      0t0  TCP *:80 (LISTEN)
docker-pr 22922    root    4u  IPv6 24137670      0t0  TCP *:3306 (LISTEN)
docker-pr 23146    root    4u  IPv6 24138752      0t0  TCP *:1587 (LISTEN)

Ok. I’m able to ping it from the collabora container:

PING collabora (172.18.0.4): 56 data bytes
64 bytes from 172.18.0.4: seq=0 ttl=64 time=0.169 ms
64 bytes from 172.18.0.4: seq=1 ttl=64 time=0.165 ms
64 bytes from 172.18.0.4: seq=2 ttl=64 time=0.155 ms
^C
--- collabora ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 0.155/0.163/0.169 ms

Ok, this is strange. After doing all that, I’m getting a “Problem loading page” when going to cloud.mydomain.com

This is my current docker-compose.yml:

version: "3.6"
services:
  nextcloud:
    image: linuxserver/nextcloud
    container_name: nextcloud
    environment:
      - PUID=1001
      - PGID=1001
      - TZ=Country/City
    volumes:
      - /opt/docker/config/nextcloud:/config
      - /opt/docker/data/nextcloud:/data
    restart: unless-stopped
  mariadb:
    image: linuxserver/mariadb
    container_name: mariadb
    environment:
      - PUID=1001
      - PGID=1001
      - MYSQL_ROOT_PASSWORD=super_secret_password
      - MYSQL_PASSWORD=nextcloud
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
      - TZ=Country/City
    volumes:
      - /opt/docker/config/mariadb:/config
    ports:
      - 3306:3306
    restart: unless-stopped
  ddclient:
    image: linuxserver/ddclient
    container_name: ddclient
    environment:
      - PUID=1001
      - PGID=1001
      - TZ=Country/City
    volumes:
      - /opt/docker/config/ddclient:/config
    restart: unless-stopped
  letsencrypt:
    image: linuxserver/letsencrypt
    container_name: letsencrypt
    cap_add:
      - NET_ADMIN
    environment:
      - PUID=1001
      - PGID=1001
      - TZ=Country/City
      - URL=mydomain.com
      - SUBDOMAINS=wildcard
      - VALIDATION=dns
      - DNSPLUGIN=cloudflare
    volumes:
      - /opt/docker/config/letsencrypt:/config
    ports:
      - 443:443
      - 80:80
    restart: unless-stopped
  postfix:
    hostname: "mail"
    image: "boky/postfix"
    container_name: postfix
    restart: always
    healthcheck:
      test: [ "CMD", "sh", "-c", "netstat -an | fgrep 587 | fgrep -q LISTEN" ]
      interval: 10s
      timeout: 5s
      start_period: 10s
      retries: 2
    ports:
      - 1587:587
    volumes:
      - /opt/docker/config/postfix:/etc/opendkim/keys
    environment:
      - ALLOWED_SENDER_DOMAINS=mail.mydomain.com
      - INBOUND_DEBUGGING=1
      - MASQUERADED_DOMAINS=mydomain.com
  clamav:
    image: mkodockx/docker-clamav:alpine
    container_name: clamav
    restart: unless-stopped
  jellyfin:
    image: linuxserver/jellyfin
    container_name: jellyfin
    environment:
      - PUID=1001
      - PGID=1001
      - TZ=Country/City
    volumes:
      - /opt/docker/config/jellyfin:/config
      - /opt/media/tvshows:/data/tvshows
      - /opt/media/movies:/data/movies
    ports:
      - 8096:8096

kevdog · March 28, 2020, 9:30pm

Ok – its always two steps forward and one step backwards

All the changes we’ve made so far have been just with either collabora or your nginx config for your office.* site. Theoretically it would be possible to throw away the collabora section within the docker-compose file and you’d have everything still up and running without collabora.

If you could post some logs that would be great. For example since nginx is running within your letsencrypt container:

docker logs letsencrypt

Are you able to post your nginx conf files for nextcloud and office? I think you might have already posted office nginx conf already.

Also make you restart all your containers and clear your browser cache. In testing things I usually have windows opened up in Chrome and Firefox. Since I don’t use FF all that much, I make this the test browser where I can easily delete all the cached content.

PopeRigby · March 28, 2020, 9:57pm

This looks relevant. This is from the letsencrypt logs:

nginx: [emerg] invalid number of arguments in "proxy_pass" directive in /config/nginx/proxy-confs/collabora.subdomain.conf:17

Here’s that:

server {
    listen 443 ssl;
    listen [::]:443 ssl;

    server_name cloud.*;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    location / {
        include /config/nginx/proxy.conf;
        resolver 127.0.0.11 valid=30s;
        set $upstream_nextcloud nextcloud;
        proxy_max_temp_file_size 2048m;
        proxy_pass https://$upstream_nextcloud:443;
    }
}

My Jellyfin URL is working anymore either, for some reason.

kevdog · March 29, 2020, 12:25am

Ok

When you make a nginx change. always check with

nginx -t

since it will tell you about syntax errors.

Ok your error (which I should have noticed) is that you don’t have a semicolon after your proxy_pass $upstream statements within your collabora.conf file. It should be

proxy_pass $upstream;

Nothing is working since nginx didn’t start properly.

PopeRigby · March 29, 2020, 6:14pm

Alright. Adding those semicolons is now just giving me a white screen when I click on my test.odt. Progress!

kevdog · March 29, 2020, 9:08pm

So great??? or not?

What if you open another odt or doc file? Can you edit a file and save it?

PopeRigby · March 29, 2020, 10:47pm

It just gives me the white screen for any office file I open.

kevdog · March 30, 2020, 12:48am

Can you post maybe some logs from nextcloud or the collabora container?

From any computer on the same LAN, what do you get in the browser if you type:

http://<docker host IP>:9980

PopeRigby · March 30, 2020, 4:14am

It just gives me a blank screen that says “OK”. There is a LibreOffice favicon though.

kevdog · March 30, 2020, 4:26am

Ok is what you want. Great. It means the collabora server is visible on the network.

Any log files? I can’t imagine why you are getting a blank screen with every file.

thijssie85 · March 30, 2020, 4:28am

You get a wopi error because the domain is not alowt to edit. What is the line, that you start youre collabora docker?

kevdog · March 30, 2020, 4:32am

Hi @thijssie85, thanks for helping.

I’ve seen that WOPI error message on my end plenty. What makes you think he’s getting a WOPI error? He starts his collabora docker with docker-compose.

PopeRigby · March 30, 2020, 4:32am

This is a lot, but here’s the latest lines of the collabora log:

wsd-00006-00016 2020-03-30 04:14:36.393740 [ prisoner_poll ] TRC  Poll completed with 0 live polls max (5000ms)(timedout)| ./net/Socket.hpp:601
wsd-00006-00016 2020-03-30 04:14:36.393813 [ prisoner_poll ] TRC  Poll start, timeoutMs: 5000| ./net/Socket.hpp:592
kit-00019-00017 2020-03-30 04:14:36.405974 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/program/resource/hu/LC_MESSAGES/sca.mo" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/program/resource/hu/LC_MESSAGES/sca.mo"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:36.456107 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/program/resource/hu/LC_MESSAGES/editeng.mo" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/program/resource/hu/LC_MESSAGES/editeng.mo"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:36.506446 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/program/resource/hu/LC_MESSAGES/xsc.mo" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/program/resource/hu/LC_MESSAGES/xsc.mo"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:36.556872 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/program/mailmerge.py" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/program/mailmerge.py"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:36.607227 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/program/senddoc" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/program/senddoc"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:36.657334 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/program/msgbox.py" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/program/msgbox.py"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:36.707571 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/program/libplds4.so" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/program/libplds4.so"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:36.757880 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/program/pagein-calc" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/program/pagein-calc"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:36.808103 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/program/libsqlite3.so" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/program/libsqlite3.so"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:36.866616 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/program/intro-highres.png" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/program/intro-highres.png"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:36.916933 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/program/libnssckbi.so" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/program/libnssckbi.so"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:36.975382 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/EULA_en-US.rtf" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/EULA_en-US.rtf"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:37.025856 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/LICENSE" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/LICENSE"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:37.076065 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/LICENSE.html" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/LICENSE.html"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:37.126112 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/NOTICE" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/NOTICE"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:37.176603 [ kit_spare_001 ] INF  Linking file "/opt/collaboraoffice6.2/CREDITS.fodt" to "/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/CREDITS.fodt"| kit/Kit.cpp:209
kit-00019-00017 2020-03-30 04:14:37.235257 [ kit_spare_001 ] INF  Linking/Copying of files to /opt/lool/child-roots/Hhu4Pih04FZ0rx7H/lo/ finished.| kit/Kit.cpp:315
kit-00019-00017 2020-03-30 04:14:37.360964 [ kit_spare_001 ] DBG  Initialized jail files.| kit/Kit.cpp:2478
kit-00019-00017 2020-03-30 04:14:37.361191 [ kit_spare_001 ] INF  chroot("/opt/lool/child-roots/Hhu4Pih04FZ0rx7H/")| kit/Kit.cpp:2502
kit-00019-00017 2020-03-30 04:14:37.361251 [ kit_spare_001 ] TRC  Capabilities first: = cap_fowner,cap_sys_chroot,cap_mknod+eip cap_chown,cap_dac_override,cap_fsetid,cap_kill,cap_setgid,cap_setuid,cap_setpcap,cap_net_bind_service,cap_net_raw,cap_audit_write,cap_setfcap+i| kit/Kit.cpp:334
kit-00019-00017 2020-03-30 04:14:37.361288 [ kit_spare_001 ] TRC  Capabilities now: = cap_fowner,cap_mknod+eip cap_chown,cap_dac_override,cap_fsetid,cap_kill,cap_setgid,cap_setuid,cap_setpcap,cap_net_bind_service,cap_net_raw,cap_sys_chroot,cap_audit_write,cap_setfcap+i| kit/Kit.cpp:353
kit-00019-00017 2020-03-30 04:14:37.361314 [ kit_spare_001 ] TRC  Capabilities first: = cap_fowner,cap_mknod+eip cap_chown,cap_dac_override,cap_fsetid,cap_kill,cap_setgid,cap_setuid,cap_setpcap,cap_net_bind_service,cap_net_raw,cap_sys_chroot,cap_audit_write,cap_setfcap+i| kit/Kit.cpp:334
kit-00019-00017 2020-03-30 04:14:37.361333 [ kit_spare_001 ] TRC  Capabilities now: = cap_fowner+eip cap_chown,cap_dac_override,cap_fsetid,cap_kill,cap_setgid,cap_setuid,cap_setpcap,cap_net_bind_service,cap_net_raw,cap_sys_chroot,cap_mknod,cap_audit_write,cap_setfcap+i| kit/Kit.cpp:353
kit-00019-00017 2020-03-30 04:14:37.361354 [ kit_spare_001 ] TRC  Capabilities first: = cap_fowner+eip cap_chown,cap_dac_override,cap_fsetid,cap_kill,cap_setgid,cap_setuid,cap_setpcap,cap_net_bind_service,cap_net_raw,cap_sys_chroot,cap_mknod,cap_audit_write,cap_setfcap+i| kit/Kit.cpp:334
kit-00019-00017 2020-03-30 04:14:37.361374 [ kit_spare_001 ] TRC  Capabilities now: = cap_chown,cap_dac_override,cap_fowner,cap_fsetid,cap_kill,cap_setgid,cap_setuid,cap_setpcap,cap_net_bind_service,cap_net_raw,cap_sys_chroot,cap_mknod,cap_audit_write,cap_setfcap+i| kit/Kit.cpp:353
kit-00019-00017 2020-03-30 04:14:37.361385 [ kit_spare_001 ] DBG  Initialized jail nodes, dropped caps.| kit/Kit.cpp:2521
kit-00019-00017 2020-03-30 04:14:37.389363 [ kit_spare_001 ] TRC  Install seccomp filter successfully.| common/Seccomp.cpp:246
kit-00019-00017 2020-03-30 04:14:37.389401 [ kit_spare_001 ] INF  RLIMIT_AS is 16777216.0 TiB (18446744073709551615 bytes)| kit/Kit.cpp:2577
kit-00019-00017 2020-03-30 04:14:37.389434 [ kit_spare_001 ] INF  RLIMIT_STACK is 7.8 MiB (8192000 bytes)| kit/Kit.cpp:2582
kit-00019-00017 2020-03-30 04:14:37.389445 [ kit_spare_001 ] INF  RLIMIT_FSIZE is 16777216.0 TiB (18446744073709551615 bytes)| kit/Kit.cpp:2587
kit-00019-00017 2020-03-30 04:14:37.389455 [ kit_spare_001 ] INF  RLIMIT_NOFILE is 1048576 files.| kit/Kit.cpp:2592
kit-00019-00017 2020-03-30 04:14:37.389461 [ kit_spare_001 ] INF  Process is ready.| kit/Kit.cpp:2596
office version details: { "ProductName": "Collabora Office", "ProductVersion": "6.2", "ProductExtension": ".10.8", "BuildId": "5ebb43f59dff06d95841f35177055fe73e62cb62" }
kit-00019-00017 2020-03-30 04:14:37.389637 [ kit_spare_001 ] DBG  #24 Thread affinity set to 0x7f9d6f0d8780.| net/Socket.hpp:322
kit-00019-00017 2020-03-30 04:14:37.389646 [ kit_spare_001 ] DBG  StreamSocket ctor #24| net/Socket.hpp:876
kit-00019-00017 2020-03-30 04:14:37.389652 [ kit_spare_001 ] TRC  #24 Connected to WS Handler 0x5650c9fc35e0| ./net/WebSocketHandler.hpp:101
kit-00019-00017 2020-03-30 04:14:37.389657 [ kit_spare_001 ] DBG  Connected to local UDS loolwsd-9VA9Qspz #24| net/Socket.cpp:329
kit-00019-00017 2020-03-30 04:14:37.389662 [ kit_spare_001 ] TRC  Requesting upgrade of websocket at path /loolws/newchild?jailid=Hhu4Pih04FZ0rx7H&version=%7B%20%22ProductName%22:%20%22Collabora%20Office%22%2C%20%22ProductVersion%22:%20%226.2%22%2C%20%22ProductExtension%22:%20%22.10.8%22%2C%20%22BuildId%22:%20%225ebb43f59dff06d95841f35177055fe73e62cb62%22%20%7D #24| net/Socket.cpp:286
kit-00019-00017 2020-03-30 04:14:37.389679 [ kit_spare_001 ] TRC  #24: Wrote outgoing data 503 bytes of 503 bytes buffered.| net/Socket.hpp:1166
wsd-00006-00016 2020-03-30 04:14:37.389660 [ prisoner_poll ] TRC  Poll completed with 1 live polls max (5000ms)| ./net/Socket.hpp:601kit-00019-00017 2020-03-30 04:14:37.389685 [ kit_spare_001 ] TRC  #24 Connected to WS Handler 0x5650c9fc35e0| ./net/WebSocketHandler.hpp:101
kit-00019-00017 2020-03-30 04:14:37.389694 [ kit_spare_001 ] DBG  Inserting socket #24 into kit| ./net/Socket.hpp:729

kit-00019-00017 2020-03-30 04:14:37.389699 [ kit_spare_001 ] DBG  #24 Thread affinity set to 0 (was 0x7f9d6f0d8780).| ./net/Socket.hpp:282
kit-00019-00017 2020-03-30 04:14:37.389726 [ kit_spare_001 ] INF  New kit client websocket inserted.| kit/Kit.cpp:2655
kit-00019-00017 2020-03-30 04:14:37.389732 [ kit_spare_001 ] INF  Kit initialization complete: setting log-level to [warning] as configured.| kit/Kit.cpp:2660
wsd-00006-00016 2020-03-30 04:14:37.389734 [ prisoner_poll ] DBG  Accepted prisoner socket #19, creating socket object.| net/Socket.cpp:564
wsd-00006-00016 2020-03-30 04:14:37.389750 [ prisoner_poll ] DBG  #19 Thread affinity set to 0x7f8cf02ab700.| ./net/Socket.hpp:322
wsd-00006-00016 2020-03-30 04:14:37.389780 [ prisoner_poll ] DBG  StreamSocket ctor #19| ./net/Socket.hpp:876
wsd-00006-00016 2020-03-30 04:14:37.389793 [ prisoner_poll ] TRC  #19 Prisoner connected.| wsd/LOOLWSD.cpp:1837
wsd-00006-00016 2020-03-30 04:14:37.389816 [ prisoner_poll ] DBG  Accepted socket is UDS - address uds-to-pid-6 and uid/gid 101/101| net/Socket.cpp:593
wsd-00006-00016 2020-03-30 04:14:37.389825 [ prisoner_poll ] DBG  Accepted client #19| net/ServerSocket.hpp:89
wsd-00006-00016 2020-03-30 04:14:37.389834 [ prisoner_poll ] DBG  Inserting socket #19 into prisoner_poll| ./net/Socket.hpp:729
wsd-00006-00016 2020-03-30 04:14:37.389842 [ prisoner_poll ] DBG  #19 Thread affinity set to 0 (was 0x7f8cf02ab700).| ./net/Socket.hpp:282
wsd-00006-00016 2020-03-30 04:14:37.389871 [ prisoner_poll ] TRC  Poll start, timeoutMs: 5000| ./net/Socket.hpp:592
wsd-00006-00016 2020-03-30 04:14:37.389883 [ prisoner_poll ] TRC  Poll completed with 1 live polls max (5000ms)| ./net/Socket.hpp:601
wsd-00006-00016 2020-03-30 04:14:37.389895 [ prisoner_poll ] DBG  #19 Thread affinity set to 0x7f8cf02ab700 (was 0).| ./net/Socket.hpp:282
wsd-00006-00016 2020-03-30 04:14:37.389904 [ prisoner_poll ] TRC  PrisonerPoll - wakes up with 0 new children and 0 brokers and 1 kits forking| wsd/LOOLWSD.cpp:1583
wsd-00006-00016 2020-03-30 04:14:37.389918 [ prisoner_poll ] TRC  rebalance children to 1| wsd/LOOLWSD.cpp:431
wsd-00006-00016 2020-03-30 04:14:37.389941 [ prisoner_poll ] WRN  ForKit not responsive for 331290 ms forking 1 children. Resetting.| wsd/LOOLWSD.cpp:443
wsd-00006-00016 2020-03-30 04:14:37.389951 [ prisoner_poll ] DBG  prespawnChildren: Have 0 spare children, and 0 outstanding, forking 1 more.| wsd/LOOLWSD.cpp:455
wsd-00006-00016 2020-03-30 04:14:37.389960 [ prisoner_poll ] TRC  Request forkit to spawn 1 new child(ren)| wsd/LOOLWSD.cpp:378
wsd-00006-00016 2020-03-30 04:14:37.389983 [ prisoner_poll ] INF  Filesystem [/opt/lool/child-roots/.] has 577188 MB free (62.5131%).| common/FileUtil.cpp:400
wsd-00006-00016 2020-03-30 04:14:37.390003 [ prisoner_poll ] DBG  MasterToForKit: spawn 1| wsd/LOOLWSD.cpp:389
wsd-00006-00016 2020-03-30 04:14:37.390022 [ prisoner_poll ] TRC  Poll start, timeoutMs: 5000| ./net/Socket.hpp:592
wsd-00006-00016 2020-03-30 04:14:37.390035 [ prisoner_poll ] TRC  Poll completed with 1 live polls max (5000ms)| ./net/Socket.hpp:601
wsd-00006-00016 2020-03-30 04:14:37.390055 [ prisoner_poll ] TRC  #19: Incoming data buffer 503 bytes, closeSocket? false| ./net/Socket.hpp:1096
wsd-00006-00016 2020-03-30 04:14:37.390069 [ prisoner_poll ] TRC  #19 handling incoming 503 bytes.| net/Socket.cpp:641
wsd-00006-00016 2020-03-30 04:14:37.390107 [ prisoner_poll ] INF  #19: Prisoner HTTP Request: GET /loolws/newchild?jailid=Hhu4Pih04FZ0rx7H&version=%7B%20%22ProductName%22:%20%22Collabora%20Office%22%2C%20%22ProductVersion%22:%20%226.2%22%2C%20%22ProductExtension%22:%20%22.10.8%22%2C%20%22BuildId%22:%20%225ebb43f59dff06d95841f35177055fe73e62cb62%22%20%7D HTTP/1.1 / Connection: Upgrade / User-Foo: Adminbits / Sec-WebSocket-Key: fxTaWTEMVhq1PkWsMoLxGw== / Upgrade: websocket / Accept-Language: en / Cache-Control: no-cache / Pragma: no-cache / Sec-WebSocket-Version: 13 / User-Agent: LOOLWSD WOPI Agent 4.2.1| net/Socket.cpp:680
wsd-00006-00016 2020-03-30 04:14:37.390128 [ prisoner_poll ] TRC  Child connection with URI [/loolws/newchild?jailid=Hhu4Pih04FZ0rx7H&version=%7B%20%22ProductName%22:%20%22Collabora%20Office%22%2C%20%22ProductVersion%22:%20%226.2%22%2C%20%22ProductExtension%22:%20%22.10.8%22%2C%20%22BuildId%22:%20%225ebb43f59dff06d95841f35177055fe73e62cb62%22%20%7D].| wsd/LOOLWSD.cpp:1882
wsd-00006-00016 2020-03-30 04:14:37.390154 [ prisoner_poll ] INF  New child [19], jailId: Hhu4Pih04FZ0rx7H.| wsd/LOOLWSD.cpp:1917
wsd-00006-00016 2020-03-30 04:14:37.390165 [ prisoner_poll ] TRC  Calling make_shared<ChildProcess>, for NewChildren?| wsd/LOOLWSD.cpp:1925
wsd-00006-00016 2020-03-30 04:14:37.390176 [ prisoner_poll ] TRC  #19: Upgrading to WebSocket.| ./net/WebSocketHandler.hpp:701
wsd-00006-00016 2020-03-30 04:14:37.390190 [ prisoner_poll ] INF  #19: WebSocket version: 13, key: [fxTaWTEMVhq1PkWsMoLxGw==], protocol: [chat].| ./net/WebSocketHandler.hpp:711
wsd-00006-00016 2020-03-30 04:14:37.390210 [ prisoner_poll ] TRC  #19: Sending WS Upgrade response: HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: GAcwqP21iVOY2yKefQ64c0yVN5M=

| ./net/WebSocketHandler.hpp:726
wsd-00006-00016 2020-03-30 04:14:37.390225 [ prisoner_poll ] TRC  #19: Wrote outgoing data 129 bytes of 129 bytes buffered.| ./net/Socket.hpp:1166
wsd-00006-00016 2020-03-30 04:14:37.390237 [ prisoner_poll ] INF  ChildProcess ctor [19].| wsd/DocumentBroker.hpp:78
wsd-00006-00016 2020-03-30 04:14:37.390249 [ prisoner_poll ] DBG  Removing socket #19 (of 2) from prisoner_poll| ./net/Socket.hpp:682
wsd-00006-00016 2020-03-30 04:14:37.390259 [ prisoner_poll ] DBG  #19 Thread affinity set to 0 (was 0x7f8cf02ab700).| ./net/Socket.hpp:282
wsd-00006-00016 2020-03-30 04:14:37.390271 [ prisoner_poll ] TRC  Calling addNewChild in disposition's move thing to add to NewChildren| wsd/LOOLWSD.cpp:1935
wsd-00006-00016 2020-03-30 04:14:37.390282 [ prisoner_poll ] TRC  Adding one child to NewChildren| wsd/LOOLWSD.cpp:483
wsd-00006-00016 2020-03-30 04:14:37.390293 [ prisoner_poll ] INF  Have 1 spare child after adding [19].| wsd/LOOLWSD.cpp:487
wsd-00006-00016 2020-03-30 04:14:37.390304 [ prisoner_poll ] TRC  Notifying NewChildrenCV| wsd/LOOLWSD.cpp:490
wsd-00006-00016 2020-03-30 04:14:37.390336 [ prisoner_poll ] TRC  Poll start, timeoutMs: 5000| ./net/Socket.hpp:592
wsd-00006-00006 2020-03-30 04:14:37.390378 [ loolwsd ] TRC  Have 1 new children.| wsd/LOOLWSD.cpp:3444
wsd-00006-00006 2020-03-30 04:14:37.390416 [ loolwsd ] INF  WSD initialization complete: setting log-level to [warning] as configured.| wsd/LOOLWSD.cpp:3451

I’m using docker compose. It’s:

collabora:
    image: collabora/code
    container_name: collabora
    hostname: office.mydomain.com
    ports:
      - 9980:9980
    cap_add:
      - MKNOD
    environment:
      - domain=cloud\\.mydomain\\.com
      - DONT_GEN_SSL_CERT="True"
      - server_name=office.mydomain.com
      - extra_params=--o:ssl.enable=false --o:ssl.termination=true