Installation on docker/CentOS

Hello… Help Please…!!!

My problems is whits this error and I’ve been trying to load the docker
with collaboraoffice for 4 days and I can not get it, I saw the docker’s
log and I get that error someone tells me how I can fix it please …

[root@server-cloudp www.172.16.1.30.com]# docker logs c3187
Generating RSA private key, 2048 bit long modulus
…+++
…+++
e is 65537 (0x10001)
Generating RSA private key, 2048 bit long modulus
…
…+++
e is 65537 (0x10001)
Signature ok
subject=/C=DE/ST=BW/L=Stuttgart/O=Dummy Authority/CN=localhost
Getting CA Private Key
frk-00027-00027 23:21:21.695031 [ forkit ] ERR Ignored setting RLIMIT_FSIZE
to 18446744073tes. (errno: Success)| common/Seccomp.cpp:284
frk-00027-00027 23:21:21.695083 [ forkit ] ERR Ignored setting
RLIMIT_NOFILE to 1844674407iles. (errno: Success)| common/Seccomp.cpp:306
loolforkit version details: 2.1.4 - b4b777d
wsd-00025-00025 23:22:11.906900 [ loolwsd ] FTL Failed to fork child
processes.| wsd/LOOLW
FATAL: Failed to fork child processes.
wsd-00025-00025 23:22:11.979891 [ loolwsd ] FTL Failed to fork child
processes.| wsd/LOOLW
Failed to fork child processes.
wsd-00025-00025 23:22:11.980141 [ loolwsd ] WRN Waking up dead poll thread
[admin], startenished: false| ./net/Socket.hpp:507
wsd-00025-00025 23:22:11.980183 [ loolwsd ] WRN Waking up dead poll thread
[admin], startenished: false| ./net/Socket.hpp:507
-00025 23:22:11.980556 [ loolwsd ] WRN Waking up dead poll thread
[accept_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:22:11.980578 [ loolwsd ] WRN Waking up dead poll thread
[accept_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:22:11.980625 [ loolwsd ] WRN Waking up dead poll thread
[websrv_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:22:11.980639 [ loolwsd ] WRN Waking up dead poll thread
[websrv_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:22:11.980652 [ loolwsd ] WRN Waking up dead poll thread
[accept_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:22:11.980662 [ loolwsd ] WRN Waking up dead poll thread
[accept_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:22:11.981000 [ loolwsd ] WRN Waking up dead poll thread
[websrv_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:22:11.981024 [ loolwsd ] WRN Waking up dead poll thread
[websrv_poll],lse, finished: false| ./net/Socket.hpp:507
frk-00027-00027 23:22:12.104061 [ forkit ] FTL Pipe closed.|
common/IoUtil.cpp:309
Generating RSA private key, 2048 bit long modulus
…+++
…+++
e is 65537 (0x10001)
Generating RSA private key, 2048 bit long modulus
…+++
…+++
e is 65537 (0x10001)
Signature ok
subject=/C=DE/ST=BW/L=Stuttgart/O=Dummy Authority/CN=localhost
Getting CA Private Key
frk-00027-00027 23:22:16.177632 [ forkit ] ERR Ignored setting RLIMIT_FSIZE
to 18446744073tes. (errno: Success)| common/Seccomp.cpp:284
frk-00027-00027 23:22:16.177685 [ forkit ] ERR Ignored setting
RLIMIT_NOFILE to 1844674407iles. (errno: Success)| common/Seccomp.cpp:306
loolforkit version details: 2.1.4 - b4b777d
wsd-00025-00025 23:23:06.148879 [ loolwsd ] FTL Failed to fork child
processes.| wsd/LOOLW
FATAL: Failed to fork child processes.
wsd-00025-00025 23:23:06.174868 [ loolwsd ] FTL Failed to fork child
processes.| wsd/LOOLW
Failed to fork child processes.
wsd-00025-00025 23:23:06.254008 [ loolwsd ] WRN Waking up dead poll thread
[admin], startenished: false| ./net/Socket.hpp:507
wsd-00025-00025 23:23:06.254068 [ loolwsd ] WRN Waking up dead poll thread
[admin], startenished: false| ./net/Socket.hpp:507
-00025 23:23:06.280266 [ loolwsd ] WRN Waking up dead poll thread
[accept_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:23:06.280309 [ loolwsd ] WRN Waking up dead poll thread
[accept_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:23:06.280320 [ loolwsd ] WRN Waking up dead poll thread
[websrv_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:23:06.280336 [ loolwsd ] WRN Waking up dead poll thread
[websrv_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:23:06.280360 [ loolwsd ] WRN Waking up dead poll thread
[accept_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:23:06.280370 [ loolwsd ] WRN Waking up dead poll thread
[accept_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:23:06.280788 [ loolwsd ] WRN Waking up dead poll thread
[websrv_poll],lse, finished: false| ./net/Socket.hpp:507
-00025 23:23:06.280823 [ loolwsd ] WRN Waking up dead poll thread
[websrv_poll],lse, finished: false| ./net/Socket.hpp:507
frk-00027-00027 23:23:06.442316 [ forkit ] FTL Pipe closed.|
common/IoUtil.cpp:309

Hi, you probably posted on the wrong topic, since this problem has nothing to do with the title.
But I saw your problem when I tried to configure collabora in openshift.
I can say it has to do with permission, collabora docker image is not really a “state of the art docker image”

I can say it is possible to run the docker image (did 2 weeks ago)

This is how I did run it on a recent centos7

yum install docker
systemctl enable docker
systemctl restart docker

docker pull collabora/code
docker run -t -d -p 127.0.0.1:9980:9980 --restart always --cap-add MKNOD collabora/code

Can you please provide more infos about your deployment?

  • which opeating system do you use?
  • which docker image did you pull?
  • which capabilities did you grant to the docker image (mknod?)
  • which use is running it?
  • please post step by step how you produce this error.

PS: if you run centos7, I wrote ansible role to install collabora and nextcloud fully automated
https://galaxy.ansible.com/joe-speedboat/
cu chris

hello thank you for the prompt answer these steps are what you use for installation of the docker image.

If there is any way that you can help me as I give permission to the docker image or half use to get the true image of docker that does not generate those errors, please I have days without being able to install the dcoker with collabora and they already ask me for results in the company. help me please doctor.


Docker installation

sudo yum install docker

docker pull collaborate / code

docker run -t -d -p 127.0.0.1:9980:9980 --restart always --cap-add MKNOD collaborate / code


operating system version:

[root @ lpcob08 ~] # uname -r
3.10.0-693.5.2.el7.x86_64
[root @ lpcob08 ~] # cat / etc / redhat-release
CentOS Linux release 7.4.1708 (Core)


Docker Version

[root @ lpcob08 ~] # docker version
Client:
Version: 1.12.6
API version: 1.24
Package version: docker-1.12.6-61.git85d7426.el7.centos.x86_64
Go version: go1.8.3
Git commit: 85d7426 / 1.12.6
Built: Tue Oct 24 15:40:21 2017
OS / Arch: linux / amd64

Server:
Version: 1.12.6
API version: 1.24
Package version: docker-1.12.6-61.git85d7426.el7.centos.x86_64
Go version: go1.8.3
Git commit: 85d7426 / 1.12.6
Built: Tue Oct 24 15:40:21 2017
OS / Arch: linux / amd64


Used image

[root @ lpcob08 ~] # docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
docker.io/collabora/code latest 0e6e649ddcae 4 days ago 2.061 GB


Which capabilities did you grant to the docker image (mknod?)

do not assign any capacity, it’s my first time working with docker and the manul used to try to configure collabora is:

https://nextcloud.com/collaboraonline/


which use is running it?

Use for company workers where I work for online file management, all this in an internal network.


please post step by step how do you produce this error.

first I install docker and then download the image collabora / code; then I try to run the docker and I get such an error, it is worth mentioning that I am using a recently configured server.

these are the steps taken after the installation:

docker run -it docker.io/collabora/code

Hmmm, this is exactly the way I did run it.
What about selinux, is it activeated?

but for you I guess, it is the best to get it out of docker and run as a service:
yum -y install ansible
ansible-galaxy install joe-speedboat.collabora
cd /etc/ansible/roles/joe-speedboat.collabora/test

vi playbook.yml
----------------------------------------------------------------------------------
- name: Install and configure Collabora CODE
  hosts: localhost
  roles:
    - role: joe-speedboat.collabora
      collabora_admin_user: admin
      collabora_admin_password: 'change-me!'
      collabora_nginx_ssl_cert_host: collabora.valid-cert-domain.org
...
----------------------------------------------------------------------------------
ansible-playbook playbook.yml

for sure, you need a valid cert that is acceptet by browsers (ca trusted, not just make exception)
but you can replace nginx certs after installation manually.

keep in mind, that nextcloud needs to know about the ca if it is not a public one…

cheers
chris

hola buenos días el estado de selinux está apagado, un favor que tiene el
manual correcto para implementar la colaboraciĂłn en centos, estoy tratando
de llorar por no tener Ă©xito ayuda por favor.

Hi, It is working, I tested in LAB with fresh VM.
I attached the logs below.
If this is not working for you, you can hire our services. we can do a webex or teamviewer to investigate hour or two.

Just ask at:
CRuettimann@uniqconsulting.ch

cheers
chris

[root@vm09 ~]# date
Mon Nov 20 14:02:34 CET 2017

[root@vm09 ~]# cat /etc/centos-release
CentOS Linux release 7.4.1708 (Core) 

[root@vm09 ~]# uname -r
3.10.0-693.5.2.el7.x86_64

[root@vm09 ~]# free
              total        used        free      shared  buff/cache   available
Mem:        1016140      102664      725780        6752      187696      748216
Swap:       2097148           0     2097148

[root@vm09 ~]# cat /proc/cpuinfo | grep core
core id		: 0
cpu cores	: 1

[root@vm09 ~]# df -hPT
Filesystem     Type      Size  Used Avail Use% Mounted on
/dev/vda1      xfs        38G  1.8G   37G   5% /
devtmpfs       devtmpfs  487M     0  487M   0% /dev
tmpfs          tmpfs     497M     0  497M   0% /dev/shm
tmpfs          tmpfs     497M  6.6M  490M   2% /run
tmpfs          tmpfs     497M     0  497M   0% /sys/fs/cgroup
tmpfs          tmpfs     100M     0  100M   0% /run/user/0

[root@vm09 ~]# yum -y upgrade
...
No packages marked for update

[root@vm09 ~]# getenforce 
Permissive

[root@vm09 ~]# yum -y install docker && systemctl enable docker && systemctl restart docker && docker info
...
Installed:
  docker.x86_64 2:1.12.6-61.git85d7426.el7.centos                                                                                                                                                                  

Dependency Installed:
  audit-libs-python.x86_64 0:2.7.6-3.el7                                 checkpolicy.x86_64 0:2.5-4.el7                                       container-selinux.noarch 2:2.28-1.git85ce147.el7                    
  container-storage-setup.noarch 0:0.7.0-1.git4ca59c5.el7                device-mapper-event.x86_64 7:1.02.140-8.el7                          device-mapper-event-libs.x86_64 7:1.02.140-8.el7                    
  device-mapper-persistent-data.x86_64 0:0.7.0-0.1.rc6.el7               docker-client.x86_64 2:1.12.6-61.git85d7426.el7.centos               docker-common.x86_64 2:1.12.6-61.git85d7426.el7.centos              
  libaio.x86_64 0:0.3.109-13.el7                                         libcgroup.x86_64 0:0.41-13.el7                                       libsemanage-python.x86_64 0:2.5-8.el7                               
  lvm2.x86_64 7:2.02.171-8.el7                                           lvm2-libs.x86_64 7:2.02.171-8.el7                                    oci-register-machine.x86_64 1:0-3.13.gitcd1e331.el7                 
  oci-systemd-hook.x86_64 1:0.1.14-1.git1ba44c6.el7                      oci-umount.x86_64 2:2.0.0-1.git299e781.el7                           policycoreutils-python.x86_64 0:2.5-17.1.el7                        
  python-IPy.noarch 0:0.75-6.el7                                         setools-libs.x86_64 0:3.3.8-1.1.el7                                  skopeo-containers.x86_64 1:0.1.24-1.dev.git28d4e08.el7              
  yajl.x86_64 0:2.0.4-4.el7                                             

Complete!
Created symlink from /etc/systemd/system/multi-user.target.wants/docker.service to /usr/lib/systemd/system/docker.service.
Containers: 0
 Running: 0
 Paused: 0
 Stopped: 0
Images: 0
Server Version: 1.12.6
Storage Driver: devicemapper
 Pool Name: docker-253:1-201391897-pool
 Pool Blocksize: 65.54 kB
 Base Device Size: 10.74 GB
 Backing Filesystem: xfs
 Data file: /dev/loop0
 Metadata file: /dev/loop1
 Data Space Used: 11.8 MB
 Data Space Total: 107.4 GB
 Data Space Available: 38.84 GB
 Metadata Space Used: 581.6 kB
 Metadata Space Total: 2.147 GB
 Metadata Space Available: 2.147 GB
 Thin Pool Minimum Free Space: 10.74 GB
 Udev Sync Supported: true
 Deferred Removal Enabled: true
 Deferred Deletion Enabled: true
 Deferred Deleted Device Count: 0
 Data loop file: /var/lib/docker/devicemapper/devicemapper/data
 WARNING: Usage of loopback devices is strongly discouraged for production use. Use `--storage-opt dm.thinpooldev` to specify a custom block storage device.
 Metadata loop file: /var/lib/docker/devicemapper/devicemapper/metadata
 Library Version: 1.02.140-RHEL7 (2017-05-03)
Logging Driver: journald
Cgroup Driver: systemd
Plugins:
 Volume: local
 Network: overlay bridge null host
Swarm: inactive
Runtimes: docker-runc runc
Default Runtime: docker-runc
Security Options: seccomp selinux
Kernel Version: 3.10.0-693.5.2.el7.x86_64
Operating System: CentOS Linux 7 (Core)
OSType: linux
Architecture: x86_64
Number of Docker Hooks: 3
CPUs: 1
Total Memory: 992.3 MiB
Name: vm09
ID: JGLJ:HQXT:VDPT:AX4L:JRLO:TSGH:TXIK:IYAT:PE6I:HTHL:RJFM:ES4N
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
Insecure Registries:
 127.0.0.0/8
Registries: docker.io (secure)

[root@vm09 ~]# docker pull collabora/code
Using default tag: latest
Trying to pull repository docker.io/collabora/code ... 
latest: Pulling from docker.io/collabora/code
bd97b43c27e3: Pull complete 
6960dc1aba18: Pull complete 
2b61829b0db5: Pull complete 
1f88dc826b14: Pull complete 
73b3859b1e43: Pull complete 
0f0e2d01915e: Pull complete 
2458b914d686: Pull complete 
a3e2abb56fa4: Pull complete 
Digest: sha256:4cb4a501880a7a9ac139ff288d776a6cf95243129a8e7d95e866e1da8e280ec1

[root@vm09 ~]# docker run -t -d -p 127.0.0.1:9980:9980 -e "domain=vm09\\.office\\.bitbull\\.ch" -e "username=admin" -e "password=changeME." --restart always --cap-add MKNOD collabora/code
b52d1cd139767e2d265b4a67cabe3d0d81e6c68c372d1617ba60082bfbcb8e02

[root@vm09 ~]# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                      NAMES
b52d1cd13976        collabora/code      "/bin/sh -c 'bash sta"   7 seconds ago       Up 3 seconds        127.0.0.1:9980->9980/tcp   peaceful_northcutt

[root@vm09 ~]# docker logs b52d1cd13976
Generating RSA private key, 2048 bit long modulus
................................+++
.+++
e is 65537 (0x10001)
Generating RSA private key, 2048 bit long modulus
....+++
............................................+++
e is 65537 (0x10001)
Signature ok
subject=/C=DE/ST=BW/L=Stuttgart/O=Dummy Authority/CN=localhost
Getting CA Private Key
frk-00027-00027 13:16:40.456844 [ forkit ] ERR  Ignored setting RLIMIT_FSIZE to 18446744073709551615 bytes. (errno: Success)| common/Seccomp.cpp:284
frk-00027-00027 13:16:40.456945 [ forkit ] ERR  Ignored setting RLIMIT_NOFILE to 18446744073709551615 files. (errno: Success)| common/Seccomp.cpp:306
loolforkit version details: 2.1.5 - c9a8aed
office version details: { "ProductName": "Collabora Office", "ProductVersion": "5.3", "ProductExtension": ".10.30", "BuildId": "2342ab86aa31a9e7795742ba4b72ad06ad312b9e" }
wsd-00025-00026 13:16:46.306460 [ prisoner_poll ] WRN  ForKit not responsive for 5874 ms forking 1 children. Resetting.| wsd/LOOLWSD.cpp:339

[root@vm09 ~]# docker exec -it b52d1cd13976 /bin/bash
root@b52d1cd13976:/# ps fax
  PID TTY      STAT   TIME COMMAND
   49 ?        Ss     0:00 /bin/bash
   57 ?        R+     0:00  \_ ps fax
    1 ?        Ss+    0:00 /bin/sh -c bash start-libreoffice.sh
    5 ?        S+     0:00 bash start-libreoffice.sh
   24 ?        S+     0:00  \_ su -c /usr/bin/loolwsd --version --o:sys_template_path=/opt/lool/systemplate --o:lo_template_path=/opt/collaboraoffice5.3 --o:child_root_path=/opt/lool/child-roots --o:file_server_
   25 ?        Ssl    0:00      \_ /usr/bin/loolwsd --version --o:sys_template_path=/opt/lool/systemplate --o:lo_template_path=/opt/collaboraoffice5.3 --o:child_root_path=/opt/lool/child-roots --o:file_server_ro
   27 ?        Sl     0:02          \_ /usr/bin/loolforkit --losubpath=lo --systemplate=/opt/lool/systemplate --lotemplate=/opt/collaboraoffice5.3 --childroot=/opt/lool/child-roots/ --clientport=9980 --masterpor
   29 ?        Sl     0:00              \_ /usr/bin/loolforkit --losubpath=lo --systemplate=/opt/lool/systemplate --lotemplate=/opt/collaboraoffice5.3 --childroot=/opt/lool/child-roots/ --clientport=9980 --maste
   31 ?        Z      0:00              |   \_ [lo_startmain] <defunct>
   32 ?        Sl     0:00              \_ /usr/bin/loolforkit --losubpath=lo --systemplate=/opt/lool/systemplate --lotemplate=/opt/collaboraoffice5.3 --childroot=/opt/lool/child-roots/ --clientport=9980 --maste
   37 ?        Z      0:00                  \_ [lo_startmain] <defunct>

[root@vm09 ~]# lsof -i -P -n | grep LISTEN
sshd       805   root    3u  IPv4  16895      0t0  TCP *:22 (LISTEN)
sshd       805   root    4u  IPv6  16905      0t0  TCP *:22 (LISTEN)
master     903   root   13u  IPv4  17493      0t0  TCP 127.0.0.1:25 (LISTEN)
master     903   root   14u  IPv6  17494      0t0  TCP [::1]:25 (LISTEN)
docker-pr 1562   root    4u  IPv4  30017      0t0  TCP 127.0.0.1:9980 (LISTEN)

[root@vm09 ~]# curl -k -vv https://localhost:9980/hosting/discovery 
* About to connect() to localhost port 9980 (#0)
*   Trying ::1...
* Connection refused
*   Trying 127.0.0.1...
* Connected to localhost (127.0.0.1) port 9980 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* skipping SSL peer certificate verification
* SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
* Server certificate:
* 	subject: CN=localhost,O=Dummy Authority,L=Stuttgart,ST=BW,C=DE
* 	start date: Nov 20 13:16:40 2017 GMT
* 	expire date: Nov 20 13:16:40 2042 GMT
* 	common name: localhost
* 	issuer: CN=Dummy Authority,O=Dummy Authority,L=Stuttgart,ST=BW,C=DE
> GET /hosting/discovery HTTP/1.1
> User-Agent: curl/7.29.0
> Host: localhost:9980
> Accept: */*
> 
< HTTP/1.1 200 OK
< Last-Modified: Mon, 20 Nov 2017 13:25:00 GMT
< User-Agent: LOOLWSD WOPI Agent 2.1.5
< Content-Length: 18025
< Content-Type: text/xml
< X-Content-Type-Options: nosniff
< 
<wopi-discovery>
    <net-zone name="external-http">
        <app name="application/vnd.lotus-wordpro">
            <action ext="lwp" name="view" urlsrc="https://localhost:9980/loleaflet/c9a8aed/loleaflet.html?"/>
         ...
        <app name="image/jpg">
            <action ext="jpg" name="view" urlsrc="https://localhost:9980/loleaflet/c9a8aed/loleaflet.html?"/>
        </app>
        <app name="image/jpeg">
            <action ext="jpeg" name="view" urlsrc="https://localhost:9980/loleaflet/c9a8aed/loleaflet.html?"/>
        </app>
        <app name="application/pdf">
            <action ext="pdf" name="view" urlsrc="https://localhost:9980/loleaflet/c9a8aed/loleaflet.html?"/>
        </app>
    </net-zone>
* Connection #0 to host localhost left intact

hello I made it as it is in your configuration and I keep presenting the
same error, please I would appreciate if you take me out of doubts; When
performing the whole process in a clean VM, I get the following error when
validating the version of the Docker (WARNING: bridge-nf-call-iptables is
disabled) that this error is due and if that prevents loading the docker ?,
the other doubt that I would like you to help me solve is in the next
instance (docker run -t -d -p 127.0.0.1:9980:9980 -e “domain = vm09 \.
office \. bitbull \. ch “-e” username = admin “-e” password = changeME.
”–restart always --cap-add MKNOD) domain = vm09 is the name of your
computer and office the domain of your corporation or is the domain with
which your docker will welcome? the “username = admin” -e “password =
changeME.” Do they belong to the password of your computer or the docker?

Finally, can you tell me how much the cost of the consultancy would be and
if it can be today?

I tell you that I do it to learn and I want to get rid of the doubt of why
I have those errors and in what I fail.

thanks for all doctor.

------------------------------------the steps
executed---------------------------------

[root@lpcob08 ~]# history
1 ip add
2 init 0
3 date
4 cat /etc/centos-release
5 uname -r
6 free
7 cat /proc/cpuinfo | grep core
8 df -hPT
9 ip add
10 ip add eth0 172.16.1.30
11 ip add 172.16.1.30 eth0
12 ip addr 172.16.1.30 eth0
13 history
14 vi /etc/sysconfig/network-scripts/ifcfg-eth0
15 systemctl restart network
16 ping 8.8.8.8
17 init 0
18 ip add
19 yum -y upgrade
20 cat /etc/centos-release
21 uname -r
22 getenforce
23 setenforce 0
24 getenforce
25 yum -y install docker && systemctl enable docker && systemctl
restart docker && docker info
26 docker pull collabora/code
27 docker run -t -d -p 127.0.0.1:9980:9980 -e
"domain=lpcob08\.office\.bitbull\.ch" -e “username=admin” -e
"password=changeME." --restart always --cap-add MKNOD collabora/code
28 docker ps
29 docker logs b52d1cd13976
30 docker logs d63c
31 history