Collabora broken in my AIO nextcloud

ℹ️ Support
,
1
Support intro

Sorry to hear you’re facing problems. :slightly_frowning_face:

The community help forum (help.nextcloud.com) is for home and non-enterprise users. Support is provided by other community members on a best effort / “as available” basis. All of those responding are volunteering their time to help you.

If you’re using Nextcloud in a business/critical setting, paid and SLA-based support services can be accessed via portal.nextcloud.com where Nextcloud engineers can help ensure your business keeps running smoothly.

Getting help

In order to help you as efficiently (and quickly!) as possible, please fill in as much of the below requested information as you can.

Before clicking submit: Please check if your query is already addressed via the following resources:

(Utilizing these existing resources is typically faster. It also helps reduce the load on our generous volunteers while elevating the signal to noise ratio of the forums otherwise arising from the same queries being posted repeatedly).

Some days ago my nextcloud-aio-collabora broke. I’m not sure if it has been for an automatic nextcloud update, or updates in my SO. Please, help.

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
    • Nextcloud Hub 10 (31.0.8)
  • Operating system and version (e.g., Ubuntu 24.04):
    • Ubuntu 24.04.3 LTS
  • Reverse proxy and version _(e.g. nginx 1.27.2)
    • Traefik 3.3.6
  • Is this the first time you’ve seen this error? (Yes / No):
    • Yes
  • When did this problem seem to first start?
    • I'm not sure. Maybe after automatic ubuntu update, or automatic AIO update
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • AIOwith docker run
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • No. My DNS is in cloudflare but I don't use their reverse proxy
  • Docker version:
    • Docker version 28.4.0, build d8eb465

Summary of the issue you are facing:

Those are the logs from the nextcloud-aio-collabora:

root@zero:~# docker logs nextcloud-aio-collabora 
wsd-00007-00010 2025-09-17 17:10:47.510702 +0200 [ coolwsd ] ERR  enterMountingNS, root mount failed: Permission denied| common/JailUtil.cpp:79
wsd-00007-00010 2025-09-17 17:10:47.510815 +0200 [ coolwsd ] ERR  creating usernamespace for mount user failed.| wsd/COOLWSD.cpp:1298
wsd-00007-00007 2025-09-17 17:10:49.186752 +0200 [ coolwsd ] WRN  File not found: Private key file: /etc/coolwsd/proof_key
No proof-key will be present in discovery.
If you need to use WOPI security, generate an RSA key using this command:
    sudo coolconfig generate-proof-key
or if your config dir is not /etc, you can run ssh-keygen manually:
    ssh-keygen -t rsa -N "" -m PEM -f "/etc/coolwsd/proof_key"
Note: the proof_key file must be readable by the coolwsd process.| wsd/ProofKey.cpp:149
coolforkit version details: 25.04.5.1 - b037cf11b3
frk-00015-00015 2025-09-17 17:10:49.190752 +0200 [ coolforkit-caps ] ERR  Security: Running without the ability to filter system calls is ill advised.| kit/ForKit.cpp:957
frk-00015-00015 2025-09-17 17:10:49.190776 +0200 [ coolforkit-caps ] ERR  Capability cap_sys_chroot is not set for the coolforkit program.| kit/ForKit.cpp:251
frk-00015-00015 2025-09-17 17:10:49.190781 +0200 [ coolforkit-caps ] ERR  Capability cap_fowner is not set for the coolforkit program.| kit/ForKit.cpp:251
frk-00015-00015 2025-09-17 17:10:49.190785 +0200 [ coolforkit-caps ] ERR  Capability cap_chown is not set for the coolforkit program.| kit/ForKit.cpp:251
Capabilities are not set for the coolforkit program.
frk-00015-00015 2025-09-17 17:10:49.190790 +0200 [ coolforkit-caps ] FTL  Capabilities are not set for the coolforkit program.| kit/ForKit.cpp:1002
Please make sure that the current partition was *not* mounted with the 'nosuid' option.
frk-00015-00015 2025-09-17 17:10:49.190794 +0200 [ coolforkit-caps ] FTL  Please make sure that the current partition was *not* mounted with the 'nosuid' option.| kit/ForKit.cpp:1003
If you are on SLES11, please set 'file_caps=1' as kernel boot option.
frk-00015-00015 2025-09-17 17:10:49.190799 +0200 [ coolforkit-caps ] FTL  If you are on SLES11, please set 'file_caps=1' as kernel boot option.| kit/ForKit.cpp:1004

And this is the test curl -vvv https://$NC_DOMAIN:443/hosting/discovery

root@zero:~# sudo docker exec -it nextcloud-aio-nextcloud bash
Warning: You have logged in into the Nextcloud container as root user.
See https://github.com/nextcloud/all-in-one#how-to-run-occ-commands if you want to run occ commands.
Apart from that, you can use 'sudo -E -u www-data php occ <your-command>' in order to run occ commands.
Of course <your-command> needs to be substituted with the command that you want to use.
nextcloud-aio-nextcloud:/var/www/html# curl -vvv https://$NC_DOMAIN:443/hosting/discovery
17:52:37.857238 [0-x] == Info: [READ] client_reset, clear readers
17:52:38.030099 [0-0] == Info: Host nextcloud.mydomain.com:443 was resolved.
17:52:38.030531 [0-0] == Info: IPv6: (none)
17:52:38.030803 [0-0] == Info: IPv4: 83.33.132.13
17:52:38.031114 [0-0] == Info: [HTTPS-CONNECT] adding wanted h2
17:52:38.031607 [0-0] == Info: [HTTPS-CONNECT] added
17:52:38.031931 [0-0] == Info: [HTTPS-CONNECT] connect, init
17:52:38.032312 [0-0] == Info:   Trying 83.33.132.13:443...
17:52:38.032992 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
17:52:38.033440 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
17:52:38.033878 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
17:52:38.034425 [0-0] == Info: [SSL] cf_connect()
17:52:38.034813 [0-0] == Info: [SSL] ossl_connect, step1
17:52:38.045336 [0-0] == Info: ALPN: curl offers h2,http/1.1
17:52:38.045674 [0-0] == Info: [SSL] ossl_connect, step2
17:52:38.047554 [0-0] => Send SSL data, 5 bytes (0x5)
0000: .....
17:52:38.048043 [0-0] == Info: TLSv1.3 (OUT), TLS handshake, Client hello (1):
17:52:38.048469 [0-0] => Send SSL data, 1567 bytes (0x61f)
0000: .........hu(.R(9...+D"t.fA....qZF..Y@. %Q>...n.mn Ax.......e...Y
0040: .b.CW.1.<.......,.0.........+./...$.(.k.#.'.g.....9.....3.....=.
0080: <.5./..................nextcloud.mydomain.com....................
00c0: .................h2.http/1.1.........1.....6.4..................
0100: ...................................+........-.....3.............
0140: %..E.;".*....?.3.po.....w\+...n...~Q....Eyp.DC....z...j..%.#..;1
0180: ..O9Qa.e...CCEpsaY...r..!`K.5.Lr......?.3..6(#'f.'^.!?....r.2.N.
01c0: w3c1H....|+.F..[6........i..W...zP0l.....}Qa..W......5..."..u.. 
0200: %?......2._'.=....$..I..n.#\y....=T.........&m...|.C....&?....c#
0240: $..+;....Ti..SO4T......cv..V&`f0.,..G......s>.J.%.+..G..>..+D..F
0280: ..!..i......./..5.I..Sp.q)V{..R.a#..)d..i..(R.JLt...'O!..p..'...
02c0: .%....O...M.).B.....&.z.s{.....H.<I.;....!b..GY.D...Er.u..Y.4..`
0300: .........,.xF.O...yq#.&I.1t.._..=........J....|...X.U.R..'(1.".w
0340: 1]n.zH....=..s....\:T5..S.a..q.|i...C5.|<-..g....G1%Jh.$.$.....`
0380: .IR..s.h'.i..H..z...)0.9Cqu..).@.Mx....\ZQ...,.V...&.YX,..Tv.B.}
03c0: ....VW7.<13..lZ..#.......A4..Pp;l..Q3....5....:...s&..FD.R..P"..
0400: .t.A.4.o...1.......K...+.2%.9...EH.7.:.u6.....6..I.IM.....J..hte
0440: .~@..(.g...x..kyb...(...V.I..;)J...3.O..O..G.Y{eF.....a"u.twT...
0480: ....+%G.Y......Y.tB.I....1rN.&.....4.h......6.e..Ts.'.9Hz.......
04c0: U&s.t+..`.....u..C..0...D.....u:4S.Y5SS.E.....9.......|...N.....
0500: /..h.iK.@L..PB.%.../@..W.......Qsc.....uv..\!.E.o+)....i!..<4...
0540: ...A.*..!.c"QY2.W..47.q.b;...If...p..zd..{..\..].$...[G.].....^2
0580: ....sk. .11..........:7........|.... m..'.."t.XR7.JL...J\""6Y.Y.
05c0: 9.H.J+.....'..}..bN..V(.3[.Ef...&.\i...E.q..PR......@.+E..@... .
0600: Z.[..t2.DI>.$...P.'.....B@I...5
17:52:38.059490 [0-0] == Info: [SSL] ossl_bio_cf_out_write(len=1572) -> 1572, err=0
17:52:38.059849 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> -1, err=81
17:52:38.060135 [0-0] == Info: [SSL] ossl_populate_x509_store, path=/etc/ssl/cert.pem, blob=0
17:52:38.086677 [0-0] == Info:  CAfile: /etc/ssl/cert.pem
17:52:38.086776 [0-0] == Info:  CApath: /etc/ssl/certs
17:52:38.086855 [0-0] == Info: [SSL] SSL_connect() -> err=-1, detail=2
17:52:38.086972 [0-0] == Info: [SSL] SSL_connect() -> want recv
17:52:38.087049 [0-0] == Info: [SSL] cf_connect() -> 0, done=0
17:52:38.087166 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
17:52:38.087291 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
17:52:38.087424 [0-0] == Info: [SSL] adjust_pollset, POLLIN fd=4
17:52:38.087517 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
17:52:38.087625 [0-0] == Info: [SSL] cf_connect()
17:52:38.087711 [0-0] == Info: [SSL] ossl_connect, step2
17:52:38.087798 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> 5, err=0
17:52:38.087894 [0-0] <= Recv SSL data, 5 bytes (0x5)
0000: ....z
17:52:38.087999 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=122) -> 122, err=0
17:52:38.088127 [0-0] == Info: TLSv1.3 (IN), TLS handshake, Server hello (2):
17:52:38.088247 [0-0] <= Recv SSL data, 122 bytes (0x7a)
0000: ...v.._".1.O../@......k~...3n...`....p %Q>...n.mn Ax.......e...Y
0040: .b.CW.1......+.....3.$... %..+"H..%'. G... .....-G)..4.x..
17:52:38.088878 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> 5, err=0
17:52:38.089013 [0-0] <= Recv SSL data, 5 bytes (0x5)
0000: .....
17:52:38.089098 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=1) -> 1, err=0
17:52:38.089184 [0-0] == Info: TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
17:52:38.089298 [0-0] <= Recv SSL data, 1 bytes (0x1)
0000: .
17:52:38.089401 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> 5, err=0
17:52:38.089504 [0-0] <= Recv SSL data, 5 bytes (0x5)
0000: .... 
17:52:38.089589 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=32) -> 32, err=0
17:52:38.089683 [0-0] <= Recv SSL data, 1 bytes (0x1)
0000: .
17:52:38.089784 [0-0] == Info: TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
17:52:38.089891 [0-0] <= Recv SSL data, 15 bytes (0xf)
0000: .............h2
17:52:38.089999 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> 5, err=0
17:52:38.090090 [0-0] <= Recv SSL data, 5 bytes (0x5)
0000: ....6
17:52:38.090164 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=2870) -> 2870, err=0
17:52:38.090223 [0-0] <= Recv SSL data, 1 bytes (0x1)
0000: .
17:52:38.090272 [0-0] == Info: TLSv1.3 (IN), TLS handshake, Certificate (11):
17:52:38.090318 [0-0] <= Recv SSL data, 2853 bytes (0xb25)
0000: ...!.......0...0...........g..L....pF...4I4l0...*.H........031.0
0040: ...U....US1.0...U....Let's Encrypt1.0...U....R130...250831110305
0080: Z..251129110304Z0 1.0...U....nextcloud.mydomain.com0.."0...*.H...
00c0: ..........0...........1.Q....e..H]T.!.....V.tb,.....Z...........
0100: xLX}..27...1WF!.$...oU.1s.s.......W.@C..t...3p...5.(...,^&...K..
0140: .&(...RTw3....0.]ul}I.=3.h.54......C7..I....@..........`.....zB%
0180: .:...:..1.Q...x..%....L....{..l@i.m......>.V1..<m..!...W.+f..0V.
01c0: ..Pzn.....U......P.a.z,...@..p...w*N[v.<..:.~9..-......=zpE...H.
0200: \."b......[.^...gek....D..(\, K...........T.]...&.HK....j{..eF..
0240: .6{..o.jV.xa.#.......>...z.ZCU.]|.'...E..&-.0..7.!.*_..vK..g.~..
0280: .........6H.(..C*.....L.....0..uJe.p.'/...l>.....oN.ksa........d
02c0: ...v...Ov.IzNP>...K........%0..!0...U...........0...U.%..0...+..
0300: .......+.......0...U.......0.0...U......u..s..7.PC..L......?0...
0340: U.#..0.......,3.S.^Ox....;..303..+........'0%0#..+.....0...http:
0380: //r13.i.lencr.org/0 ..U....0...nextcloud.mydomain.com0...U. ..0.0
03c0: ...g.....0/..U...(0&0$.". ..http://r13.c.lencr.org/109.crl0.....
0400: +.....y............v....0+...@b...U..Gt|...0..B..~N.4.......[...
0440: ..G0E. >PN.{X.......N0.....g..o.......G.!.....&..../..Pin.~."..[
0480: ..7..:..'..u....I.T.@........g/N..#@h.k.@...}.............F0D. .
04c0: .W..i...9"o(s...B]2.Z.u(....c...  ....x.3d.a......xwN..B7..L.0..
0500: G0...*.H.............\I....k..V......c.l.,>1.GT|H.48..6......,..
0540: i.u..U........&b.......).7........r....U%...+.C.,....<Y....~+5..
0580: go.vU).Hq......Uj.G...Af...%y9...[1.X|A......U/..*U.Q...[H3}[...
05c0: .9...]...p....r...tg...wy....pT{...0....1}d>"...F..TJD....E...x.
0600: .~...u.B..V...............0...0..........Z.........AW.)..0...*.H
0640: ........0O1.0...U....US1)0'..U... Internet Security Research Gro
0680: up1.0...U....ISRG Root X10...240313000000Z..270312235959Z031.0..
06c0: .U....US1.0...U....Let's Encrypt1.0...U....R130.."0...*.H.......
0700: ......0.........gp..V.d..a........&P7..c.T............`QCH}+.H..
0740: .-...';W........0.o......2>XN5oEXhq..>.]../.Ql..].Y.5e.....7...]
0780: .I.4..+....q,..........^|.........]..{..vBp..M"..wo.._...u..W...
07c0: \..s.h..t.u.~........8..D.....I5..4.....GN...6.GO..).u....\.^...
0800: ..C.J.....0.2..........0..0...U...........0...U.%..0...+........
0840: .+.......0...U.......0.......0...U..........,3.S.^Ox....;..30...
0880: U.#..0...y.Y.{....s.....X...n02..+........&0$0"..+.....0...http:
08c0: //x1.i.lencr.org/0...U. ..0.0...g.....0'..U... 0.0.......http://
0900: x1.c.lencr.org/0...*.H.............Q7XR.".5.M........T....;...pr
0940: .e. }.Cr........./.^...#|...z.o.q........."......u.......\W*..p.
0980: Mp..?.k.7hEL'd......~Z@..(..;..\...n.m..8..........Y.n/.4.......
09c0: +.z~............ar|..4.."0..P".d............C".....m...2.......%
0a00: ..,...o...4..I.e..........p.Z......[..5..,Ju.l^...h..D*U........
0a40: .;...A+.....o.h...\....[.~......Q^Z...h.....5.....Z.k..-}.LcS^X.
0a80: i.S...$}s...d.|..d.l.o*.........D.i+.P.qu.%.^I.Z..8Fr..iq..TA.._
0ac0: .U....6.H=...#--+gbDCKH]...pm....Ex[7.[.U.E[.....V.+.-.....P....
0b00: .w--.g!..*...Y..%4...a.JG.Vn|!w......
17:52:38.094305 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> 5, err=0
17:52:38.094414 [0-0] <= Recv SSL data, 5 bytes (0x5)
0000: .....
17:52:38.094519 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=537) -> 537, err=0
17:52:38.094624 [0-0] <= Recv SSL data, 1 bytes (0x1)
0000: .
17:52:38.094717 [0-0] == Info: TLSv1.3 (IN), TLS handshake, CERT verify (15):
17:52:38.094812 [0-0] <= Recv SSL data, 520 bytes (0x208)
0000: ............Fr...`..:Qq....^...E.f{.x].f:|YF/.......@*..W\|o.H..
0040: ..C*.....].&...|IC~..H.P..f....B......_!...+.....p....1.f<...u..
0080: =..SS.h.....Z.........gq....d.p&....R..PN/3..<9<.....^@._...r9.a
00c0: [t..>q..Q/U.].y7...R.R.Q+...}Ok...'?...O.y!.^...w.#yY~.5...'....
0100: .7#-0.O#.9nr'..u..;Y..........e?s.s.1T.Q..:ry...7..]..5..iV8.b..
0140: ...v&.l..47...$z.....k.].]V{y.f.....D...h%x..g.v^zu..&F.....J...
0180: ^1q^...]r.K..).Lx.. 4.=.K......JK........u$......T....5.......(.
01c0: rJ....@....<.Sy..4s..6[.N....z..YW..4....X..VT.........q...&..A.
0200: .M...p..
17:52:38.095629 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> 5, err=0
17:52:38.095745 [0-0] <= Recv SSL data, 5 bytes (0x5)
0000: ....5
17:52:38.095855 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=53) -> 53, err=0
17:52:38.095939 [0-0] <= Recv SSL data, 1 bytes (0x1)
0000: .
17:52:38.096029 [0-0] == Info: TLSv1.3 (IN), TLS handshake, Finished (20):
17:52:38.096119 [0-0] <= Recv SSL data, 36 bytes (0x24)
0000: ... ):8.x..N2./.....kf.'&}.VYlp$2..Z
17:52:38.096333 [0-0] => Send SSL data, 5 bytes (0x5)
0000: .....
17:52:38.096422 [0-0] == Info: TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
17:52:38.096514 [0-0] => Send SSL data, 1 bytes (0x1)
0000: .
17:52:38.096634 [0-0] => Send SSL data, 5 bytes (0x5)
0000: ....5
17:52:38.096676 [0-0] => Send SSL data, 1 bytes (0x1)
0000: .
17:52:38.096713 [0-0] == Info: TLSv1.3 (OUT), TLS handshake, Finished (20):
17:52:38.096757 [0-0] => Send SSL data, 36 bytes (0x24)
0000: ... .6D.[..TH....x}N.Jd)..}..Z.Db.M.
17:52:38.096868 [0-0] == Info: [SSL] ossl_bio_cf_out_write(len=64) -> 64, err=0
17:52:38.096961 [0-0] == Info: SSL connection using TLSv1.3 / TLS_AES_128_GCM_SHA256 / x25519 / RSASSA-PSS
17:52:38.097031 [0-0] == Info: ALPN: server accepted h2
17:52:38.097064 [0-0] == Info: [SSL] ossl_connect, step3
17:52:38.097099 [0-0] == Info: Server certificate:
17:52:38.097133 [0-0] == Info:  subject: CN=nextcloud.mydomain.com
17:52:38.097174 [0-0] == Info:  start date: Aug 31 11:03:05 2025 GMT
17:52:38.097215 [0-0] == Info:  expire date: Nov 29 11:03:04 2025 GMT
17:52:38.097261 [0-0] == Info:  subjectAltName: host "nextcloud.mydomain.com" matched cert's "nextcloud.mydomain.com"
17:52:38.097331 [0-0] == Info:  issuer: C=US; O=Let's Encrypt; CN=R13
17:52:38.097372 [0-0] == Info:  SSL certificate verify ok.
17:52:38.097411 [0-0] == Info:   Certificate level 0: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
17:52:38.097491 [0-0] == Info:   Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
17:52:38.097570 [0-0] == Info:   Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
17:52:38.097792 [0-0] == Info: [SSL] ossl_connect, done
17:52:38.097854 [0-0] == Info: [SSL] cf_connect() -> 0, done=1
17:52:38.097927 [0-0] == Info: [HTTPS-CONNECT] connect+handshake h2: 65ms, 1st data: 55ms
17:52:38.099289 [0-0] == Info: [HTTP/2] [0] created h2 session
17:52:38.099388 [0-0] == Info: [HTTP/2] [0] -> FRAME[SETTINGS, len=18]
17:52:38.099471 [0-0] == Info: [HTTP/2] [0] -> FRAME[WINDOW_UPDATE, incr=1048510465]
17:52:38.099570 [0-0] == Info: [HTTP/2] cf_connect() -> 0, 1, 
17:52:38.099663 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=1
17:52:38.099733 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=1
17:52:38.099826 [0-0] == Info: Connected to nextcloud.mydomain.com (83.33.132.13) port 443
17:52:38.099929 [0-0] == Info: using HTTP/2
17:52:38.100028 [0-0] == Info: [HTTP/2] [1] OPENED stream for https://nextcloud.mydomain.com:443/hosting/discovery
17:52:38.100156 [0-0] == Info: [HTTP/2] [1] [:method: GET]
17:52:38.100222 [0-0] == Info: [HTTP/2] [1] [:scheme: https]
17:52:38.100353 [0-0] == Info: [HTTP/2] [1] [:authority: nextcloud.mydomain.com]
17:52:38.100434 [0-0] == Info: [HTTP/2] [1] [:path: /hosting/discovery]
17:52:38.100493 [0-0] == Info: [HTTP/2] [1] [user-agent: curl/8.14.1]
17:52:38.100573 [0-0] == Info: [HTTP/2] [1] [accept: */*]
17:52:38.100648 [0-0] == Info: [HTTP/2] [1] submit -> 100, 0
17:52:38.100747 [0-0] == Info: [HTTP/2] [1] -> FRAME[HEADERS, len=49, hend=1, eos=1]
17:52:38.100875 [0-0] => Send SSL data, 5 bytes (0x5)
0000: .....
17:52:38.100946 [0-0] => Send SSL data, 1 bytes (0x1)
0000: .
17:52:38.101102 [0-0] == Info: [SSL] ossl_bio_cf_out_write(len=144) -> 144, err=0
17:52:38.101200 [0-0] == Info: [HTTP/2] [0] egress: wrote 122 bytes
17:52:38.101252 [0-0] == Info: [HTTP/2] [1] cf_send(len=100) -> 100, 0, eos=1, h2 windows 65535-65535 (stream-conn), buffers 0-0 (stream-conn)
17:52:38.101359 [0-0] => Send header, 100 bytes (0x64)
0000: GET /hosting/discovery HTTP/2
001f: Host: nextcloud.mydomain.com
003c: User-Agent: curl/8.14.1
0055: Accept: */*
0062: 
17:52:38.101546 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> 5, err=0
17:52:38.101626 [0-0] <= Recv SSL data, 5 bytes (0x5)
0000: .....
17:52:38.101705 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=139) -> 139, err=0
17:52:38.101796 [0-0] <= Recv SSL data, 1 bytes (0x1)
0000: .
17:52:38.101896 [0-0] == Info: TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
17:52:38.102167 [0-0] <= Recv SSL data, 122 bytes (0x7a)
0000: ...v..:....r..i..q.Ru_.R,.'R...<w.Dr..}.>.jH..^Nz.mFq}m._l|.L.u6
0040: D3Q.......@.u._c,w_....P....%...U..'G..t...6qL1..kG..;/i..
17:52:38.102527 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> 5, err=0
17:52:38.102579 [0-0] <= Recv SSL data, 5 bytes (0x5)
0000: ....8
17:52:38.102981 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=56) -> 56, err=0
17:52:38.103069 [0-0] <= Recv SSL data, 1 bytes (0x1)
0000: .
17:52:38.103120 [0-0] == Info: [SSL] cf_recv(len=16384) -> 39, 0
17:52:38.103159 [0-0] == Info: [HTTP/2] [0] ingress: read 39 bytes
17:52:38.103203 [0-0] == Info: [HTTP/2] [0] <- FRAME[SETTINGS, len=30]
17:52:38.103245 [0-0] == Info: [HTTP/2] [0] MAX_CONCURRENT_STREAMS: 250
17:52:38.103287 [0-0] == Info: [HTTP/2] [0] ENABLE_PUSH: TRUE
17:52:38.103323 [0-0] == Info: [HTTP/2] [0] notify MAX_CONCURRENT_STREAMS: 250
17:52:38.103370 [0-0] == Info: [HTTP/2] [1] DRAIN select_bits=1
17:52:38.103408 [0-0] == Info: [HTTP/2] [0] progress ingress: inbufg=0
17:52:38.103453 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> 5, err=0
17:52:38.103496 [0-0] <= Recv SSL data, 5 bytes (0x5)
0000: .....
17:52:38.103537 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=30) -> 30, err=0
17:52:38.103583 [0-0] <= Recv SSL data, 1 bytes (0x1)
0000: .
17:52:38.103677 [0-0] == Info: [SSL] cf_recv(len=16384) -> 13, 0
17:52:38.103737 [0-0] == Info: [HTTP/2] [0] ingress: read 13 bytes
17:52:38.103818 [0-0] == Info: [HTTP/2] [0] <- FRAME[WINDOW_UPDATE, incr=983041]
17:52:38.103925 [0-0] == Info: [HTTP/2] [0] progress ingress: inbufg=0
17:52:38.104007 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> 5, err=0
17:52:38.104069 [0-0] <= Recv SSL data, 5 bytes (0x5)
0000: .....
17:52:38.104198 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=26) -> 26, err=0
17:52:38.104294 [0-0] <= Recv SSL data, 1 bytes (0x1)
0000: .
17:52:38.104374 [0-0] == Info: [SSL] cf_recv(len=16384) -> 9, 0
17:52:38.104454 [0-0] == Info: [HTTP/2] [0] ingress: read 9 bytes
17:52:38.104534 [0-0] == Info: [HTTP/2] [0] <- FRAME[SETTINGS, ack=1]
17:52:38.104689 [0-0] == Info: [HTTP/2] [0] progress ingress: inbufg=0
17:52:38.104805 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> -1, err=81
17:52:38.104909 [0-0] == Info: [SSL] cf_recv(len=16384) -> -1, 81
17:52:38.105021 [0-0] == Info: [HTTP/2] [0] progress ingress: done
17:52:38.105142 [0-0] == Info: [HTTP/2] [0] -> FRAME[SETTINGS, ack=1]
17:52:38.105238 [0-0] => Send SSL data, 5 bytes (0x5)
0000: .....
17:52:38.105331 [0-0] => Send SSL data, 1 bytes (0x1)
0000: .
17:52:38.105435 [0-0] == Info: [SSL] ossl_bio_cf_out_write(len=31) -> 31, err=0
17:52:38.105526 [0-0] == Info: [HTTP/2] [0] egress: wrote 9 bytes
17:52:38.105637 [0-0] == Info: [HTTP/2] [1] cf_recv(len=102400) -> -1 81, window=0/65536, connection 1048576000/1048576000
17:52:38.105784 [0-0] == Info: Request completely sent off
17:52:38.105837 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> -1, err=81
17:52:38.105922 [0-0] == Info: [SSL] cf_recv(len=16384) -> -1, 81
17:52:38.105999 [0-0] == Info: [HTTP/2] [0] progress ingress: done
17:52:38.106066 [0-0] == Info: [HTTP/2] [1] cf_recv(len=102400) -> -1 81, window=0/65536, connection 1048576000/1048576000
17:52:38.106211 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> -1, err=81
17:52:38.106287 [0-0] == Info: [SSL] cf_recv(len=16384) -> -1, 81
17:52:38.106364 [0-0] == Info: [HTTP/2] [0] progress ingress: done
17:52:38.106421 [0-0] == Info: [HTTP/2] [1] cf_recv(len=102400) -> -1 81, window=0/65536, connection 1048576000/1048576000
17:52:39.106878 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> -1, err=81
17:52:39.107357 [0-0] == Info: [SSL] cf_recv(len=16384) -> -1, 81
17:52:39.107736 [0-0] == Info: [HTTP/2] [0] progress ingress: done

A vanilla new nextcloud aio in the same server gets the same problem, but in my laptop works fine, so I suppose is something in the server environment.

Nextcloud

nextcloud-aio-nextcloud:/var/www/html# php occ config:list system
{
    "system": {
        "one-click-instance": true,
        "one-click-instance.user-limit": 100,
        "memcache.local": "\\OC\\Memcache\\APCu",
        "apps_paths": [
            {
                "path": "\/var\/www\/html\/apps",
                "url": "\/apps",
                "writable": false
            },
            {
                "path": "\/var\/www\/html\/custom_apps",
                "url": "\/custom_apps",
                "writable": true
            }
        ],
        "check_data_directory_permissions": false,
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "password": "***REMOVED SENSITIVE VALUE***",
            "port": 6379
        },
        "overwritehost": "nextcloud.mydomain.com",
        "overwriteprotocol": "https",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "localhost",
            "nextcloud.mydomain.com"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "pgsql",
        "version": "31.0.8.1",
        "overwrite.cli.url": "https:\/\/nextcloud.mydomain.com\/",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "maintenance": false,
        "loglevel": 2,
        "log_type": "file",
        "logfile": "\/var\/www\/html\/data\/nextcloud.log",
        "log_rotate_size": 10485760,
        "log.condition": {
            "apps": [
                "admin_audit"
            ]
        },
        "preview_max_x": 2048,
        "preview_max_y": 2048,
        "jpeg_quality": 60,
        "enabledPreviewProviders": {
            "1": "OC\\Preview\\Image",
            "2": "OC\\Preview\\MarkDown",
            "3": "OC\\Preview\\MP3",
            "4": "OC\\Preview\\TXT",
            "5": "OC\\Preview\\OpenDocument",
            "6": "OC\\Preview\\Movie",
            "7": "OC\\Preview\\Krita",
            "0": "OC\\Preview\\Imaginary",
            "23": "OC\\Preview\\ImaginaryPDF"
        },
        "enable_previews": true,
        "upgrade.disable-web": true,
        "mail_smtpmode": "smtp",
        "trashbin_retention_obligation": "auto, 30",
        "versions_retention_obligation": "auto, 90",
        "activity_expire_days": 30,
        "simpleSignUpLink.shown": false,
        "share_folder": "\/Shared",
        "one-click-instance.link": "https:\/\/nextcloud.com\/all-in-one\/",
        "upgrade.cli-upgrade-link": "https:\/\/github.com\/nextcloud\/all-in-one\/discussions\/2726",
        "updatedirectory": "\/nc-updater",
        "maintenance_window_start": 100,
        "allow_local_remote_servers": true,
        "davstorage.request_timeout": 3600,
        "documentation_url.server_logs": "https:\/\/github.com\/nextcloud\/all-in-one\/discussions\/5425",
        "htaccess.RewriteBase": "\/",
        "dbpersistent": false,
        "auth.bruteforce.protection.enabled": true,
        "ratelimit.protection.enabled": true,
        "files_external_allow_create_new_local": false,
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
        "preview_imaginary_url": "***REMOVED SENSITIVE VALUE***",
        "preview_imaginary_key": "***REMOVED SENSITIVE VALUE***",
        "default_phone_region": "ES",
        "mail_smtpauth": 1,
        "mail_sendmailmode": "smtp",
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "465",
        "twofactor_enforced": "true",
        "twofactor_enforced_groups": [],
        "twofactor_enforced_excluded_groups": [],
        "updatechecker": false,
        "user_oidc": {
            "auto_provision": true,
            "soft_auto_provision": true,
            "disable_account_creation": true
        },
        "app_install_overwrite": [
            "files_markdown"
        ],
        "DOMAIN": "nextcloud.mydomain.com"
    }
}

Apps

nextcloud-aio-nextcloud:/var/www/html# php occ app:list
Enabled:
  - activity: 4.0.0
  - admin_audit: 1.21.0
  - app_api: 5.0.2
  - bruteforcesettings: 4.0.0
  - calendar: 5.5.3
  - circles: 31.0.0
  - cloud_federation_api: 1.14.0
  - comments: 1.21.0
  - contacts: 7.3.0
  - contactsinteraction: 1.12.0
  - dashboard: 7.11.0
  - dav: 1.33.0
  - deck: 1.15.2
  - drawio: 3.1.0
  - federatedfilesharing: 1.21.0
  - federation: 1.21.0
  - files: 2.3.1
  - files_antivirus: 6.0.4
  - files_downloadlimit: 4.0.0
  - files_fulltextsearch: 31.0.0
  - files_pdfviewer: 4.0.0
  - files_reminders: 1.4.0
  - files_sharing: 1.23.1
  - files_trashbin: 1.21.0
  - files_versions: 1.24.0
  - firstrunwizard: 4.0.0
  - fulltextsearch: 31.0.0
  - fulltextsearch_elasticsearch: 31.0.0
  - logreader: 4.0.0
  - lookup_server_connector: 1.19.0
  - nextcloud-aio: 0.8.0
  - nextcloud_announcements: 3.0.0
  - notes: 4.12.3
  - notifications: 4.0.0
  - notify_push: 1.2.0
  - oauth2: 1.19.1
  - password_policy: 3.0.0
  - photos: 4.0.0
  - privacy: 3.0.0
  - profile: 1.0.0
  - provisioning_api: 1.21.0
  - recommendations: 4.0.0
  - related_resources: 2.0.0
  - richdocuments: 8.7.4
  - serverinfo: 3.0.0
  - settings: 1.14.0
  - sharebymail: 1.21.0
  - spreed: 21.1.4
  - support: 3.0.0
  - survey_client: 3.0.0
  - systemtags: 1.21.1
  - tasks: 0.16.1
  - text: 5.0.0
  - theming: 2.6.1
  - theming_customcss: 1.18.0
  - twofactor_backupcodes: 1.20.0
  - twofactor_totp: 13.0.0-dev.0
  - updatenotification: 1.21.0
  - user_oidc: 7.4.0
  - user_status: 1.11.0
  - viewer: 4.0.0
  - weather_status: 1.11.0
  - webhook_listeners: 1.2.0
  - whiteboard: 1.2.0
  - workflowengine: 2.13.0
Disabled:
  - encryption: 2.19.0
  - files_external: 1.23.0
  - files_markdown: 2.4.1 (installed 2.4.1)
  - groupfolders: 19.1.3 (installed 19.1.3)
  - suspicious_login: 9.0.1
  - twofactor_nextcloud_notification: 5.0.0
  - user_ldap: 1.22.0

Thank you in advance.

2

Is that the full curl output? It appears to connect but there is no response body.

Based on the cool Collabora container output it sort of looks like you’re running rootless perhaps? If so that could be the culprit maybe: all-in-one/docker-rootless.md at 4efaddb0ada249d3f0a23eb24948c81e69a3970a · nextcloud/all-in-one · GitHub

3

It was the full curl output. Well, the command never ends and repeats for ever the last lines:

...
23:36:06.988179 [0-0] == Info: [HTTP/2] [1] cf_recv(len=102400) -> -1 81, window=0/65536, connection 1048576000/1048576000
23:36:07.989090 [0-0] == Info: [SSL] ossl_bio_cf_in_read(len=5) -> -1, err=81
23:36:07.989582 [0-0] == Info: [SSL] cf_recv(len=16384) -> -1, 81
23:36:07.990170 [0-0] == Info: [HTTP/2] [0] progress ingress: done
...

I don’t use rootless for Nextcloud, but I see my nextcloud-aio-collabora is running with user 1001, but I suppose that this is expected.

root@zero:~# docker inspect nextcloud-aio-mastercontainer | grep User
            "UsernsMode": "",
            "User": "root",
root@zero:~# docker inspect nextcloud-aio-collabora | grep User
            "UsernsMode": "",
            "User": "1001",

# ps axu | grep collabora
1001       51033  0.0  0.0   1056   268 ?        Ss   00:11   0:00 /sbin/docker-init -- /start-collabora-online.sh

Last week I was working with my ZFS filesystem in order to encrypt some pools in my server, and /var/lib/docker now is in an encrypted pool. I’m not sure if this can impact with this.

The collabora logs said “Please make sure that the current partition was not mounted with the ‘nosuid’ option.”, but I don’t see nosuid flag:

root@zero:~# mount | grep /var/lib/docker
rpool/EN/docker on /var/lib/docker type zfs (rw,nodev,relatime,xattr,posixacl,casesensitive)
4

Hi, please check GitHub - nextcloud/all-in-one: 📦 The official Nextcloud installation method. Provides easy deployment and maintenance with most features included in this one Nextcloud instance.

5

Now it works. I’m convinced I had done those steps before without managing to solve it.

Besides this, I also stopped and removed the nextcloud-aio-mastercontainer and all the images for all the containers related with.

Those are the steps I’ve done:

  1. Stop all the containers from the AIO Interface.
  2. In terminal:
    1. docker stop nextcloud-aio-mastercontainer
    2. docker system prune -a
    3. run my docker run… command as usually
    4. Restart the containers from the AIO Interface.

I’m not sure where the problem was but now everything is working.

Thank you very much for your time.

1 Like
6

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.