# Issue installing Collabora following official guide

**URL:** <https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746>\
**Category:** ℹ️ Support\
**Created:** [July 20, 2016, 9:52am UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746 "2016-07-20T09:52:59Z")\
**Posts on this page:** 20\
**Page:** 2

<div class="post-metadata">

**Author:** ![koehn](https://help.nextcloud.com/user_avatar/help.nextcloud.com/koehn/32/593_2.png) [@koehn](https://help.nextcloud.com/u/koehn)\
**Post date:** [July 21, 2016, 6:32pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/22 "2016-07-21T18:32:12Z")

</div>

I’m on Ubuntu 14.04, and even running this way (with apparmor off) I get the same error above:

```auto
docker run --security-opt seccomp:unconfined --privileged -t -p 127.0.0.1:9980:9980 -e "cloud\.[foo]\.com" --cap-add MKNOD collabora/code

```

---

<div class="post-metadata">

**Author:** ![jurgenhaas](https://help.nextcloud.com/user_avatar/help.nextcloud.com/jurgenhaas/32/559_2.png) [@jurgenhaas](https://help.nextcloud.com/u/jurgenhaas)\
**Post date:** [July 22, 2016, 7:09am UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/23 "2016-07-22T07:09:22Z")

</div>

@koehn I see two differences to mine:

The first one is probably irrelevant: I do have an equal sign between `--security-opt` and `seccomp:unconfined` but I guess this should work either way.

The second one is maybe the issue: you have `-e "cloud\.[foo]\.com"` which should be `-e "domain=cloud\.[foo]\.com"` - just lost that during copy & paste or is that missing on your command line too?

---

<div class="post-metadata">

**Author:** ![nick81](https://help.nextcloud.com/letter_avatar/nick81/32/6_22734026db12803ebb3e059622ac3534.png) [@nick81](https://help.nextcloud.com/u/nick81)\
**Post date:** [July 22, 2016, 8:20am UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/24 "2016-07-22T08:20:53Z")

</div>

Hi, I have also an error with Collabora. I used the following configs:

**docker compose** (i used jwilder/nginx-proxy in front):  
`nextcloud:  
build: .  
links:  
- db\_nextcloud:db\_nextcloud  
- office:office  
environment:  
- UID=1000  
- GID=1000  
volumes:  
- ./data:/data  
- ./config:/nextcloud/config  
- ./apps:/apps2  
environment:  
- VIRTUAL\_HOST=[cloud.domain.com](http://cloud.domain.com)

db\_nextcloud:  
image: mariadb:10  
volumes:  
- ./db:/var/lib/mysql  
environment:  
- MYSQL\_ROOT\_PASSWORD=fancypass  
- MYSQL\_DATABASE=nextcloud  
- MYSQL\_USER=nextcloud  
- MYSQL\_PASSWORD=fancypass

office:  
image: collabora/code  
ports:  
- “9980”  
environment:  
- VIRTUAL\_HOST=[office.domain.com](http://office.domain.com)  
- domain=cloud\.domain\.com **// in container the env shows “office\\.domain\\.com”**  
- VIRTUAL\_PROTO=https  
cap\_add:  
- MKNOD  
`

**Dockerfile**  
`FROM wonderfall/nextcloud RUN apk -U add libsmbclient samba-client`

**log during the the connection**  
`wsd-00020-02 00:06:02.455110 [client_req_hdl] Request from 172.17.0.3:38258: POST /loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / Content-Length: 45 / Cache-Control: max-age=0 / Origin: null / Upgrade-Insecure-Requests: 1 / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Content-Type: application/x-www-form-urlencoded / Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8 / Accept-Encoding: gzip, deflate, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 wsd-00020-02 00:06:02.462308 [client_req_hdl] Preprocessing file: /usr/share/loolwsd//loleaflet/dist/loleaflet.html wsd-00020-03 00:06:02.553588 [client_req_hdl] Request from 172.17.0.3:38259: GET /loleaflet/1.7.2/toolbar.css HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept: text/css,*/*;q=0.1 / Referer: https://office.domain.com/loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / If-Modified-Since: Mon, 18 Jul 2016 14:47:43 GMT wsd-00020-02 00:06:02.598695 [client_req_hdl] Request from 172.17.0.3:38260: GET /loleaflet/1.7.2/leaflet-src.js HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept: */* / Referer: https://office.domain.com/loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / If-Modified-Since: Tue, 19 Jul 2016 10:06:45 GMT wsd-00020-03 00:06:02.629714 [client_req_hdl] Request from 172.17.0.3:38261: GET /loleaflet/1.7.2/toolbar/toolbar.js HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept: */* / Referer: https://office.domain.com/loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / If-Modified-Since: Mon, 18 Jul 2016 14:47:43 GMT wsd-00020-04 00:06:02.687675 [client_req_hdl] Request from 172.17.0.3:38262: GET /loleaflet/dist/l10n/help-de.json HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept: */* / Referer: https://office.domain.com/loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / If-Modified-Since: Tue, 19 Jul 2016 10:06:59 GMT wsd-00020-02 00:06:02.724413 [client_req_hdl] Request from 172.17.0.3:38263: GET /loleaflet/dist/l10n/styles/de.json HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept: */* / Referer: https://office.domain.com/loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / If-Modified-Since: Tue, 19 Jul 2016 10:07:03 GMT wsd-00020-03 00:06:02.743158 [client_req_hdl] Request from 172.17.0.3:38264: GET /loleaflet/dist/l10n/ui-de.json HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept: */* / Referer: https://office.domain.com/loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / If-Modified-Since: Tue, 19 Jul 2016 10:07:01 GMT wsd-00020-02 00:06:02.994064 [client_req_hdl] Request from 172.17.0.3:38265: GET /lool/ws/https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8?access_token=wjvvwDEIlDvqOz7NK61CjeERJO8uzdk6 HTTP/1.1 / Host: office.domain.com / Upgrade: websocket / Connection: upgrade / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / Pragma: no-cache / Cache-Control: no-cache / Origin: https://office.domain.com / Sec-WebSocket-Version: 13 / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / Sec-WebSocket-Key: cO+KCM4ShL86zzJ+UvTaeQ== / Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits wsd-00020-02 00:06:02.994348 [client_ws_0004] Thread started. wsd-00020-02 00:06:03.004079 [client_ws_0004] Starting GET request handler for session [0004]. wsd-00020-02 00:06:03.004230 [client_ws_0004] Sending to Client [statusindicator: find]. wsd-00020-02 00:06:03.004496 [client_ws_0004] getNewChild: No available child. Sending spawn request to forkit and failing. wsd-00020-02 00:06:03.004615 [client_ws_0004] getNewChild: Have 0 children, forking 1 wsd-00020-02 00:06:03.004706 [client_ws_0004] MasterToForKit: spawn 1 wsd-00020-02 00:06:03.004793 [client_ws_0004] Writing to pipe. Data: [spawn 1]. frk-00029-00 00:06:02.775742 [loolforkit] readFIFO for pipe: wsd_pipe_rd returned: 8 frk-00029-00 00:06:02.775880 [loolforkit] Read line from pipe: wsd_pipe_rd, line: [spawn 1], data: []. frk-00029-00 00:06:02.775988 [loolforkit] ForKit command: [spawn 1]. frk-00029-00 00:06:02.776085 [loolforkit] Spawning 1 child per request. frk-00029-00 00:06:02.776175 [loolforkit] Creating 1 new child. frk-00029-00 00:06:02.776261 [loolforkit] Forking a loolkit process. frk-00029-00 00:06:02.778897 [loolforkit] Forked kit [386]. kit-00386-00 00:06:02.779581 [loolforkit] Initializing kit kit-00386-00 00:06:02.779744 [loolforkit] Log level is [8].`

**on client I get this error:**  
 ![](https://help.nextcloud.com/uploads/default/original/1X/93453808fa46ba24bdbe0626166b10c1ac52eab2.jpg)

**EDIT:** This error spams the log

`frk-00029-00 00:18:45.540531 [loolforkit] Child 1120 has exited, removing its jail '/opt/lool/child-roots/1120' wsd-00020-00 00:18:50.795908 [loolwsd] MasterToForKit: spawn 1 wsd-00020-00 00:18:50.796000 [loolwsd] Writing to pipe. Data: [spawn 1]. frk-00029-00 00:18:50.535571 [loolforkit] readFIFO for pipe: wsd_pipe_rd returned: 8 frk-00029-00 00:18:50.535613 [loolforkit] Read line from pipe: wsd_pipe_rd, line: [spawn 1], data: []. frk-00029-00 00:18:50.535626 [loolforkit] ForKit command: [spawn 1]. frk-00029-00 00:18:50.535647 [loolforkit] Spawning 1 child per request. frk-00029-00 00:18:50.535661 [loolforkit] Creating 1 new child. frk-00029-00 00:18:50.535670 [loolforkit] Forking a loolkit process. frk-00029-00 00:18:50.538523 [loolforkit] Forked kit [1125]. kit-01125-00 00:18:50.539904 [loolforkit] Initializing kit kit-01125-00 00:18:50.540693 [loolforkit] Log level is [8]. kit-01125-00 00:18:50.541505 [loolkit] Process started. kit-01125-00 00:18:50.542359 [loolkit] Jail path: /opt/lool/child-roots/1125/ kit-01125-00 00:18:50.543504 [loolkit] symlink("../lo","/opt/lool/child-roots/1125/opt/collaboraoffice5.1") kit-01125-00 00:18:50.589487 [loolkit] link **("/opt/collaboraoffice5.1/CREDITS.fodt","/opt/lool/child-roots/1125/lo/CREDITS.fodt") failed. Exiting. (errno: Operation not permitted)** `

---

<div class="post-metadata">

**Author:** ![rigrig](https://help.nextcloud.com/user_avatar/help.nextcloud.com/rigrig/32/529_2.png) [@rigrig](https://help.nextcloud.com/u/rigrig)\
**Post date:** [July 22, 2016, 8:38am UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/25 "2016-07-22T08:38:05Z")

</div>

With Debian 8.5:

- Looks like the Debian (backports) version of Docker (1.6) doesn’t support `--security-opt=seccomp:unconfined`  
_time=“2016-07-22T10:31:45+02:00” level=fatal msg=“Error response from daemon: Invalid --security-opt: “seccomp:unconfined””_

- I tried Docker 1.11 from the Docker project repo, but  
`docker run -t -p 127.0.0.1:9980:9980 -e "domain=fnp\.tubul\.net" --security-opt=seccomp:unconfined --privileged --cap-add MKNOD collabora/code`  
still gives  
_kit-00038-00 00:00:05.962280 [loolkit] link("/opt/collaboraoffice5.1/readmes/README\_en-US","/opt/lool/child-roots/38/lo/readmes/README\_en-US") failed. Exiting. (errno: Operation not permitted)_)

---

<div class="post-metadata">

**Author:** ![X4LD1M0](https://help.nextcloud.com/user_avatar/help.nextcloud.com/x4ld1m0/32/44898_2.png) [@X4LD1M0](https://help.nextcloud.com/u/X4LD1M0)\
**Post date:** [July 22, 2016, 8:43am UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/26 "2016-07-22T08:43:09Z")

</div>

From reading different docker log outputs it seems that the “operation not permitted” is with different files. It would look to me that it is a Collabora docker issue, but can’t confirm of course at this point. Also wondering how many people have it actually working.

---

<div class="post-metadata">

**Author:** ![koehn](https://help.nextcloud.com/user_avatar/help.nextcloud.com/koehn/32/593_2.png) [@koehn](https://help.nextcloud.com/u/koehn)\
**Post date:** [July 22, 2016, 1:44pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/27 "2016-07-22T13:44:01Z")

</div>

@jurgenhaas Thanks. I made the changes and ran the following:

```auto
docker run --security-opt=seccomp:unconfined --privileged -t -p 127.0.0.1:9980:9980 -e "domain=cloud\.[foo]\.com" --cap-add MKNOD collabora/code

```

And still get this output (Ubuntu 14.04, `3.13.0-92-generic #139-Ubuntu SMP, Docker version 1.11.2, build b9f10c9`):

```auto
frk-00031-00 00:00:02.916321 [loolforkit] Child 35 has exited, removing its jail '/opt/lool/child-roots/35'
wsd-00022-00 00:00:04.118696 [loolwsd] MasterToForKit: spawn 1
wsd-00022-00 00:00:04.118839 [loolwsd] Writing to pipe. Data: [spawn 1].
frk-00031-00 00:00:04.002663 [loolforkit] readFIFO for pipe: wsd_pipe_rd returned: 8
frk-00031-00 00:00:04.002795 [loolforkit] Read line from pipe: wsd_pipe_rd, line: [spawn 1], data: [].
frk-00031-00 00:00:04.002835 [loolforkit] ForKit command: [spawn 1].
frk-00031-00 00:00:04.002922 [loolforkit] Spawning 1 child per request.
frk-00031-00 00:00:04.002960 [loolforkit] Creating 1 new child.
frk-00031-00 00:00:04.002986 [loolforkit] Forking a loolkit process.
frk-00031-00 00:00:04.009967 [loolforkit] Forked kit [36].
kit-00036-00 00:00:04.010329 [loolforkit] Initializing kit
kit-00036-00 00:00:04.010420 [loolforkit] Log level is [8].
kit-00036-00 00:00:04.010487 [loolkit] Process started.
kit-00036-00 00:00:04.010639 [loolkit] Jail path: /opt/lool/child-roots/36/
kit-00036-00 00:00:04.011012 [loolkit] symlink("../lo","/opt/lool/child-roots/36/opt/collaboraoffice5.1")
kit-00036-00 00:00:04.045270 [loolkit] link("/opt/collaboraoffice5.1/readmes/README_en-US","/opt/lool/child-roots/36/lo/readmes/README_en-US") failed. Exiting. (errno: Operation not permitted)

```

---

<div class="post-metadata">

**Author:** ![jurgenhaas](https://help.nextcloud.com/user_avatar/help.nextcloud.com/jurgenhaas/32/559_2.png) [@jurgenhaas](https://help.nextcloud.com/u/jurgenhaas)\
**Post date:** [July 22, 2016, 3:08pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/28 "2016-07-22T15:08:26Z")

</div>

Just wondering, are you starting docker with sudo?

---

<div class="post-metadata">

**Author:** ![koehn](https://help.nextcloud.com/user_avatar/help.nextcloud.com/koehn/32/593_2.png) [@koehn](https://help.nextcloud.com/u/koehn)\
**Post date:** [July 22, 2016, 3:38pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/29 "2016-07-22T15:38:37Z")

</div>

@jurgenhaas Nope. Just starting `docker` as a normal user. Should I be running it as root?

---

<div class="post-metadata">

**Author:** ![X4LD1M0](https://help.nextcloud.com/user_avatar/help.nextcloud.com/x4ld1m0/32/44898_2.png) [@X4LD1M0](https://help.nextcloud.com/u/X4LD1M0)\
**Post date:** [July 22, 2016, 3:53pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/30 "2016-07-22T15:53:52Z")

</div>

@jurgenhaas I did everything as root user but still same issue.

---

<div class="post-metadata">

**Author:** ![davodego](https://help.nextcloud.com/user_avatar/help.nextcloud.com/davodego/32/561_2.png) [@davodego](https://help.nextcloud.com/u/davodego)\
**Post date:** [July 22, 2016, 7:11pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/31 "2016-07-22T19:11:14Z")

</div>

I had also the connection error. Now its solved.  
I have tried to made it with a new sub.domain with its own certificate from letsencrypt. No luck with this.  
I found an red error in the log about my normal domain although lool was configured to other sub domain.  
So I tried to change the settings to my normal sub domain (DynDNS).  
Now I combined the Apache settings in the default-ssl.conf with all the other settings for my dyndns domain like nextcloud and others.  
And … tata … it works.

Daniel from Thüringen

---

<div class="post-metadata">

**Author:** ![X4LD1M0](https://help.nextcloud.com/user_avatar/help.nextcloud.com/x4ld1m0/32/44898_2.png) [@X4LD1M0](https://help.nextcloud.com/u/X4LD1M0)\
**Post date:** [July 22, 2016, 7:32pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/32 "2016-07-22T19:32:18Z")

</div>

I have solved one error in the docker as could be seen in /var/log/syslog:

`docker[22800]: time="2016-07-22T17:15:20+01:00" level=error msg="containerd: notify OOM events" error="open memory.oom_control: no such file or directory"`

By adding the following to /etc/default/grub:  
`GRUB_CMDLINE_LINUX="cgroup_enable=memory"`

But when starting the docker I still get the following errors from the docker output itself:

```
kit-00039-00 00:00:11.270019 [loolkit] link("/opt/collaboraoffice5.1/CREDITS.fodt","/opt/lool/child-roots/39/lo/CREDITS.fodt") failed. Exiting. (errno: Operation not permitted)                                                                                                                        
kit-00038-00 00:00:11.313616 [loolkit] link("/opt/collaboraoffice5.1/CREDITS.fodt","/opt/lool/child-roots/38/lo/CREDITS.fodt") failed. Exiting. (errno: Operation not permitted)                                                                                                                        
kit-00037-00 00:00:11.332961 [loolkit] link("/opt/collaboraoffice5.1/CREDITS.fodt","/opt/lool/child-roots/37/lo/CREDITS.fodt") failed. Exiting. (errno: Operation not permitted)                                                                                                                        
frk-00029-00 00:00:12.325073 [loolforkit] Child 37 has exited, removing its jail '/opt/lool/child-roots/37'                                        
frk-00029-00 00:00:12.542260 [loolforkit] Child 38 has exited, removing its jail '/opt/lool/child-roots/38'                                        
frk-00029-00 00:00:12.686059 [loolforkit] Child 39 has exited, removing its jail '/opt/lool/child-roots/39'

```

This error keeps popping up including the exit. When trying to open a document I get:

```
wsd-00020-03 00:00:51.998613 [client_req_hdl] Request from 192.168.7.241:52277: GET /lool/ws/https://cloud.<domain>/apps/richdocuments/wopi/fil
es/539952?access_token=Zbjpd9YbMVKTt7XNUOguQBzaoIcxUfvu HTTP/1.1 / Host: office.<domain> / Pragma: no-cache / Cache-Control: no-cache / Origin: h
ttps://office.<domain> / Sec-WebSocket-Version: 13 / DNT: 1 / User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Ge
cko) Chrome/51.0.2704.103 Safari/537.36 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: en-GB,en-US;q=0.8,en;q=0.6,nl;q=0.4 / Sec-WebSo
cket-Key: T2FU+ljR4J8BT7T8ZqRuFA== / Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits / X-Forwarded-For: 192.168.7.1 / X-Forwarde
d-Host: office.wijman.me.uk / X-Forwarded-Server: office.<domain> / Upgrade: WebSocket / Connection: Upgrade                                     
wsd-00020-03 00:00:52.012305 [client_ws_0001] Thread started.                                                                                      
wsd-00020-03 00:00:52.017999 [client_ws_0001] Starting GET request handler for session [0001].                                                     
wsd-00020-03 00:00:52.021916 [client_ws_0001] Sending to Client [statusindicator: find].                                                           
wsd-00020-03 00:00:52.027225 [client_ws_0001] getNewChild: No available child. Sending spawn request to forkit and failing.                        
wsd-00020-03 00:00:52.031579 [client_ws_0001] getNewChild: Have 0 children, forking 1
wsd-00020-03 00:00:52.034723 [client_ws_0001] MasterToForKit: spawn 1                                                                              
wsd-00020-03 00:00:52.039320 [client_ws_0001] Writing to pipe. Data: [spawn 1].                                                                    
frk-00029-00 00:00:49.841115 [loolforkit] readFIFO for pipe: wsd_pipe_rd returned: 8                                                               
frk-00029-00 00:00:49.842636 [loolforkit] Read line from pipe: wsd_pipe_rd, line: [spawn 1], data: [].                                             
frk-00029-00 00:00:49.844773 [loolforkit] ForKit command: [spawn 1].                                                                               
frk-00029-00 00:00:49.848522 [loolforkit] Spawning 1 child per request.                                                                            
frk-00029-00 00:00:49.852312 [loolforkit] Creating 1 new child.                                                                                    
frk-00029-00 00:00:49.856471 [loolforkit] Forking a loolkit process.                                                                               
frk-00029-00 00:00:49.868595 [loolforkit] Forked kit [79].                                                                                         
kit-00079-00 00:00:49.877390 [loolforkit] Initializing kit                                                                                         
kit-00079-00 00:00:49.886394 [loolforkit] Log level is [8].                                                                                        
kit-00079-00 00:00:49.890521 [loolkit] Process started.                                                                                            
kit-00079-00 00:00:49.895058 [loolkit] Jail path: /opt/lool/child-roots/79/                                                                        
kit-00079-00 00:00:49.901287 [loolkit] symlink("../lo","/opt/lool/child-roots/79/opt/collaboraoffice5.1")                                          
kit-00079-00 00:00:50.068707 [loolkit] link("/opt/collaboraoffice5.1/CREDITS.fodt","/opt/lool/child-roots/79/lo/CREDITS.fodt") failed. Exiting. (e$
rno: Operation not permitted)                                                                                                                        
frk-00029-00 00:00:50.878230 [loolforkit] Child 79 has exited, removing its jail '/opt/lool/child-roots/79'                                        
wsd-00020-03 00:00:56.067237 [client_ws_0001] getNewChild: No live child, forking more.                                                            
wsd-00020-03 00:00:56.067418 [client_ws_0001] getNewChild: No available child. Sending spawn request to forkit and failing.                        
wsd-00020-03 00:00:56.067481 [client_ws_0001] getNewChild: Have 0 children, forking 1                                                              
wsd-00020-03 00:00:56.067530 [client_ws_0001] MasterToForKit: spawn 1                                                                              
wsd-00020-03 00:00:56.067579 [client_ws_0001] Writing to pipe. Data: [spawn 1].

```

So one small step closer but still so far away from the solution 😞

---

<div class="post-metadata">

**Author:** ![nick81](https://help.nextcloud.com/letter_avatar/nick81/32/6_22734026db12803ebb3e059622ac3534.png) [@nick81](https://help.nextcloud.com/u/nick81)\
**Post date:** [July 23, 2016, 6:08pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/33 "2016-07-23T18:08:44Z")

</div>

@koehn  
You use Ubuntu 14.04?

> Known problems:  
> This docker image does not work on Ubuntu 14.04 LTS, because Ubuntu 14.04 LTS has missing kernel compile option CONFIG\_AUFS\_XATTR=y, which is leading to setcap not working on docker’s aufs storage. Upstream bug: [https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1557776](https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1557776)

> **[Collabora Online Development Edition (CODE) - Collabora Office and Collabora...](https://www.collaboraoffice.com/code/)**
>
> What is CODE, how to install and get involved, in the online version of LibreOffice for home and small groups. Reclaim your office!

---

<div class="post-metadata">

**Author:** ![accolon](https://help.nextcloud.com/user_avatar/help.nextcloud.com/accolon/32/657_2.png) [@accolon](https://help.nextcloud.com/u/accolon)\
**Post date:** [July 23, 2016, 7:05pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/34 "2016-07-23T19:05:07Z")

</div>

So after messing around with AppArmor, SecComp and iptables for days, this hint also helped me with **Ubuntu 16.04 Xenial** , since Kernels before Ubuntu-4.4.0-22.38 on Xenial were also affected by the AUFS problem. I’m using Ksplice Uptrack to avoid reboots and was still running 4.4.0-21…

So for people running Xenial: make sure to have a current Kernel! Afterwards, I did **not** need to turn off AppArmor or do anything else besides what is described in the official guide.

---

<div class="post-metadata">

**Author:** ![X4LD1M0](https://help.nextcloud.com/user_avatar/help.nextcloud.com/x4ld1m0/32/44898_2.png) [@X4LD1M0](https://help.nextcloud.com/u/X4LD1M0)\
**Post date:** [July 24, 2016, 10:45am UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/35 "2016-07-24T10:45:39Z")

</div>

Thanks for that tip @accolon. I was running Debian 8.5 and couldn’t get it to work. I then created a new VM running Ubuntu 16.04 Xenial (running kernel 4.4.0-31-generic). Done the same installation steps as I did before and now Collabora is working.

Guess sometimes you do have to get the correct OS to get something working.

There is one thing that isn’t working normally, the menu top left is not showing when clicking on ‘Office’, only when clicking on the logo it goes to the main page. I will open a new topic for it

---

<div class="post-metadata">

**Author:** ![pupaxxo](https://help.nextcloud.com/user_avatar/help.nextcloud.com/pupaxxo/32/710_2.png) [@pupaxxo](https://help.nextcloud.com/u/pupaxxo)\
**Post date:** [July 24, 2016, 2:16pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/36 "2016-07-24T14:16:58Z")

</div>

I also had the issue about symlinking etc, i resolved it updating to kernel 4.6 (debian jessie).  
Now I have an other problem:  
kit-02288-04 00:46:00.612950 [kit\_queue\_0011] Failed to load: file:///user/docs/2288/Nuovo%20foglio\_elettronico.ods, error: loadComponentFromURL returned an empty reference  
kit-02288-04 00:46:00.613279 [kit\_queue\_0011] Failed to get LoKitDocument instance.

---

<div class="post-metadata">

**Author:** ![rigrig](https://help.nextcloud.com/user_avatar/help.nextcloud.com/rigrig/32/529_2.png) [@rigrig](https://help.nextcloud.com/u/rigrig)\
**Post date:** [July 24, 2016, 4:21pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/37 "2016-07-24T16:21:53Z")

</div>

Upgrading my kernel (from 3.16 to 4.6) also fixed it for me (Debian 8.5)

---

<div class="post-metadata">

**Author:** ![pupaxxo](https://help.nextcloud.com/user_avatar/help.nextcloud.com/pupaxxo/32/710_2.png) [@pupaxxo](https://help.nextcloud.com/u/pupaxxo)\
**Post date:** [July 24, 2016, 8:54pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/38 "2016-07-24T20:54:38Z")

</div>

I found that libreoffice online asks wopi urls adding “?encoding=text” to the url.  
This ofcourse invalidate the token (the original url is [https://cloud](https://cloud)…etc/etc/etc?access\_token=), so I manually fixed richdocuments app code using a $token = str\_replace("?encoding=text", “”, $token);… Now it works 😃

---

<div class="post-metadata">

**Author:** ![X4LD1M0](https://help.nextcloud.com/user_avatar/help.nextcloud.com/x4ld1m0/32/44898_2.png) [@X4LD1M0](https://help.nextcloud.com/u/X4LD1M0)\
**Post date:** [July 24, 2016, 9:03pm UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/39 "2016-07-24T21:03:39Z")

</div>

I moved my temp VM (which was working with Collabora) to my main domain, but now it fails again. From the docker output I get the following error:

```
wsd-00020-05 00:02:46.762424 [client_ws_0002] WOPI::CheckFileInfo header for URI [https://cloud.<domain>.uk/apps/richdocuments/wopi/files/32?access_token=SHFfuiR1rzJw9HjDKP3FrIDkforxQTbb]:
        Date: Sun, 24 Jul 2016 20:47:02 GMT / Server: Apache/2.4.18 (Ubuntu) / Strict-Transport-Security: max-age=15768000; includeSubDomains; preload / Expires: Thu, 19 Nov 1981 08:52:00 GMT / Cache-Control: no-cache, must-revalidate / Pragma: no-cache / Content-Security-Policy: default-src 'none';script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self';connect-src 'self';media-src 'self' / Content-Length: 32 / X-Content-Type-Options: nosniff / X-XSS-Protection: 1; mode=block / X-Robots-Tag: none / X-Frame-Options: SAMEORIGIN / X-Download-Options: noopen / X-Permitted-Cross-Domain-Policies: none / Content-Type: applica
tion/json; charset=utf-8 / Set-Cookie: nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict / Set-Cookie: nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax / Set-Cookie: oc_sessionPassphrase=qa3q2rujbYasXeyd7Xtz%2FE3ZFkjw4VRwMU00mJUWf%2FRfwP4HdjUPbtvflJvIcGXaimUj1dWZ5VbXGaJU7ghId1j3dvgvQRklJ7%2BqDsfvvLnkOwut6aw0YGBSu1kCH0iq; p
ath=/; secure; httponly / Set-Cookie: occ3bgzu13dp=b89bi7h3djt60hpbe5pvdqhn24; path=/; HttpOnly / Connection: close /
wsd-00020-05 00:02:46.762637 [client_ws_0002] WOPI::CheckFileInfo returned: {"message":"App is not enabled"}
wsd-00020-05 00:02:46.783261 [client_ws_0002] ~DocumentBroker [https://cloud.<domain>.uk/apps/richdocuments/wopi/files/32?access_token=SHFfuiR1rzJ
w9HjDKP3FrIDkforxQTbb] destroyed with 0 sessions left.
wsd-00020-05 00:02:46.787713 [client_ws_0002] ~ChildProcess dtor [184].
kit-00184-00 00:02:45.275424 [loolkit] Connection closed.

```

Now I am unclear why this is happening, since I only changed the domains used in Apache (separate VM) towards NC and Collabora. And changed the details in NC config to reflect the main domain.

---

<div class="post-metadata">

**Author:** ![Floreal\_C](https://help.nextcloud.com/user_avatar/help.nextcloud.com/floreal_c/32/713_2.png) [@Floreal\_C](https://help.nextcloud.com/u/Floreal_C)\
**Post date:** [July 25, 2016, 12:30am UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/40 "2016-07-25T00:30:59Z")

</div>

Hi,

How do you do to upgrade to kernel 4.16? I try this but the kernel I installed doesn’t work with docker ☹ May be I don’t foudn the good kernel

---

<div class="post-metadata">

**Author:** ![taziz23](https://help.nextcloud.com/letter_avatar/taziz23/32/6_22734026db12803ebb3e059622ac3534.png) [@taziz23](https://help.nextcloud.com/u/taziz23)\
**Post date:** [July 25, 2016, 3:45am UTC](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746/41 "2016-07-25T03:45:45Z")

</div>

I’m running the docker image on ubuntu 16.04 with the latest kernel. I’m getting the same error and my logs shows the following before the connection is refused

wsd-00020-05 00:00:28.352565 [client\_ws\_0002] WOPI host is not on the same host as the WOPI client: “52.205.196.197”. Connection is not allowed.

[Previous page](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746.md?page=1)

[Next page](https://help.nextcloud.com/t/issue-installing-collabora-following-official-guide/1746.md?page=3)
