Iām on Ubuntu 14.04, and even running this way (with apparmor off) I get the same error above:
docker run --security-opt seccomp:unconfined --privileged -t -p 127.0.0.1:9980:9980 -e "cloud\.[foo]\.com" --cap-add MKNOD collabora/code
@koehn I see two differences to mine:
The first one is probably irrelevant: I do have an equal sign between --security-opt and seccomp:unconfined but I guess this should work either way.
The second one is maybe the issue: you have -e "cloud\.[foo]\.com" which should be -e "domain=cloud\.[foo]\.com" - just lost that during copy & paste or is that missing on your command line too?
Hi, I have also an error with Collabora. I used the following configs:
docker compose (i used jwilder/nginx-proxy in front):
`nextcloud:
build: .
links:
- db_nextcloud:db_nextcloud
- office:office
environment:
- UID=1000
- GID=1000
volumes:
- ./data:/data
- ./config:/nextcloud/config
- ./apps:/apps2
environment:
- VIRTUAL_HOST=cloud.domain.com
db_nextcloud:
image: mariadb:10
volumes:
- ./db:/var/lib/mysql
environment:
- MYSQL_ROOT_PASSWORD=fancypass
- MYSQL_DATABASE=nextcloud
- MYSQL_USER=nextcloud
- MYSQL_PASSWORD=fancypass
office:
image: collabora/code
ports:
- ā9980ā
environment:
- VIRTUAL_HOST=office.domain.com
- domain=cloud\.domain\.com // in container the env shows āoffice\\.domain\\.comā
- VIRTUAL_PROTO=https
cap_add:
- MKNOD
`
Dockerfile
FROM wonderfall/nextcloud RUN apk -U add libsmbclient samba-client
log during the the connection
wsd-00020-02 00:06:02.455110 [ client_req_hdl ] Request from 172.17.0.3:38258: POST /loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / Content-Length: 45 / Cache-Control: max-age=0 / Origin: null / Upgrade-Insecure-Requests: 1 / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Content-Type: application/x-www-form-urlencoded / Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8 / Accept-Encoding: gzip, deflate, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 wsd-00020-02 00:06:02.462308 [ client_req_hdl ] Preprocessing file: /usr/share/loolwsd//loleaflet/dist/loleaflet.html wsd-00020-03 00:06:02.553588 [ client_req_hdl ] Request from 172.17.0.3:38259: GET /loleaflet/1.7.2/toolbar.css HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept: text/css,*/*;q=0.1 / Referer: https://office.domain.com/loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / If-Modified-Since: Mon, 18 Jul 2016 14:47:43 GMT wsd-00020-02 00:06:02.598695 [ client_req_hdl ] Request from 172.17.0.3:38260: GET /loleaflet/1.7.2/leaflet-src.js HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept: */* / Referer: https://office.domain.com/loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / If-Modified-Since: Tue, 19 Jul 2016 10:06:45 GMT wsd-00020-03 00:06:02.629714 [ client_req_hdl ] Request from 172.17.0.3:38261: GET /loleaflet/1.7.2/toolbar/toolbar.js HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept: */* / Referer: https://office.domain.com/loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / If-Modified-Since: Mon, 18 Jul 2016 14:47:43 GMT wsd-00020-04 00:06:02.687675 [ client_req_hdl ] Request from 172.17.0.3:38262: GET /loleaflet/dist/l10n/help-de.json HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept: */* / Referer: https://office.domain.com/loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / If-Modified-Since: Tue, 19 Jul 2016 10:06:59 GMT wsd-00020-02 00:06:02.724413 [ client_req_hdl ] Request from 172.17.0.3:38263: GET /loleaflet/dist/l10n/styles/de.json HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept: */* / Referer: https://office.domain.com/loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / If-Modified-Since: Tue, 19 Jul 2016 10:07:03 GMT wsd-00020-03 00:06:02.743158 [ client_req_hdl ] Request from 172.17.0.3:38264: GET /loleaflet/dist/l10n/ui-de.json HTTP/1.1 / Host: office.domain.com / Connection: close / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept: */* / Referer: https://office.domain.com/loleaflet/1.7.2/loleaflet.html?WOPISrc=https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8&title=Example.odt&lang=de-de&closebutton=1&revisionhistory=1 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / If-Modified-Since: Tue, 19 Jul 2016 10:07:01 GMT wsd-00020-02 00:06:02.994064 [ client_req_hdl ] Request from 172.17.0.3:38265: GET /lool/ws/https%3A%2F%2Fcloud.domain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F8?access_token=wjvvwDEIlDvqOz7NK61CjeERJO8uzdk6 HTTP/1.1 / Host: office.domain.com / Upgrade: websocket / Connection: upgrade / X-Real-IP: 10.0.0.5 / X-Forwarded-For: 10.0.0.5 / X-Forwarded-Proto: https / Pragma: no-cache / Cache-Control: no-cache / Origin: https://office.domain.com / Sec-WebSocket-Version: 13 / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 / Sec-WebSocket-Key: cO+KCM4ShL86zzJ+UvTaeQ== / Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits wsd-00020-02 00:06:02.994348 [ client_ws_0004 ] Thread started. wsd-00020-02 00:06:03.004079 [ client_ws_0004 ] Starting GET request handler for session [0004]. wsd-00020-02 00:06:03.004230 [ client_ws_0004 ] Sending to Client [statusindicator: find]. wsd-00020-02 00:06:03.004496 [ client_ws_0004 ] getNewChild: No available child. Sending spawn request to forkit and failing. wsd-00020-02 00:06:03.004615 [ client_ws_0004 ] getNewChild: Have 0 children, forking 1 wsd-00020-02 00:06:03.004706 [ client_ws_0004 ] MasterToForKit: spawn 1 wsd-00020-02 00:06:03.004793 [ client_ws_0004 ] Writing to pipe. Data: [spawn 1]. frk-00029-00 00:06:02.775742 [ loolforkit ] readFIFO for pipe: wsd_pipe_rd returned: 8 frk-00029-00 00:06:02.775880 [ loolforkit ] Read line from pipe: wsd_pipe_rd, line: [spawn 1], data: []. frk-00029-00 00:06:02.775988 [ loolforkit ] ForKit command: [spawn 1]. frk-00029-00 00:06:02.776085 [ loolforkit ] Spawning 1 child per request. frk-00029-00 00:06:02.776175 [ loolforkit ] Creating 1 new child. frk-00029-00 00:06:02.776261 [ loolforkit ] Forking a loolkit process. frk-00029-00 00:06:02.778897 [ loolforkit ] Forked kit [386]. kit-00386-00 00:06:02.779581 [ loolforkit ] Initializing kit kit-00386-00 00:06:02.779744 [ loolforkit ] Log level is [8].
on client I get this error:
EDIT: This error spams the log
frk-00029-00 00:18:45.540531 [ loolforkit ] Child 1120 has exited, removing its jail '/opt/lool/child-roots/1120' wsd-00020-00 00:18:50.795908 [ loolwsd ] MasterToForKit: spawn 1 wsd-00020-00 00:18:50.796000 [ loolwsd ] Writing to pipe. Data: [spawn 1]. frk-00029-00 00:18:50.535571 [ loolforkit ] readFIFO for pipe: wsd_pipe_rd returned: 8 frk-00029-00 00:18:50.535613 [ loolforkit ] Read line from pipe: wsd_pipe_rd, line: [spawn 1], data: []. frk-00029-00 00:18:50.535626 [ loolforkit ] ForKit command: [spawn 1]. frk-00029-00 00:18:50.535647 [ loolforkit ] Spawning 1 child per request. frk-00029-00 00:18:50.535661 [ loolforkit ] Creating 1 new child. frk-00029-00 00:18:50.535670 [ loolforkit ] Forking a loolkit process. frk-00029-00 00:18:50.538523 [ loolforkit ] Forked kit [1125]. kit-01125-00 00:18:50.539904 [ loolforkit ] Initializing kit kit-01125-00 00:18:50.540693 [ loolforkit ] Log level is [8]. kit-01125-00 00:18:50.541505 [ loolkit ] Process started. kit-01125-00 00:18:50.542359 [ loolkit ] Jail path: /opt/lool/child-roots/1125/ kit-01125-00 00:18:50.543504 [ loolkit ] symlink("../lo","/opt/lool/child-roots/1125/opt/collaboraoffice5.1") kit-01125-00 00:18:50.589487 [ loolkit ] link **("/opt/collaboraoffice5.1/CREDITS.fodt","/opt/lool/child-roots/1125/lo/CREDITS.fodt") failed. Exiting. (errno: Operation not permitted)**
With Debian 8.5:
-
Looks like the Debian (backports) version of Docker (1.6) doesnāt support
--security-opt=seccomp:unconfined
time=ā2016-07-22T10:31:45+02:00ā level=fatal msg=āError response from daemon: Invalid --security-opt: āseccomp:unconfinedāā -
I tried Docker 1.11 from the Docker project repo, but
docker run -t -p 127.0.0.1:9980:9980 -e "domain=fnp\.tubul\.net" --security-opt=seccomp:unconfined --privileged --cap-add MKNOD collabora/code
still gives
kit-00038-00 00:00:05.962280 [ loolkit ] link("/opt/collaboraoffice5.1/readmes/README_en-US","/opt/lool/child-roots/38/lo/readmes/README_en-US") failed. Exiting. (errno: Operation not permitted))
From reading different docker log outputs it seems that the āoperation not permittedā is with different files. It would look to me that it is a Collabora docker issue, but canāt confirm of course at this point. Also wondering how many people have it actually working.
@jurgenhaas Thanks. I made the changes and ran the following:
docker run --security-opt=seccomp:unconfined --privileged -t -p 127.0.0.1:9980:9980 -e "domain=cloud\.[foo]\.com" --cap-add MKNOD collabora/code
And still get this output (Ubuntu 14.04, 3.13.0-92-generic #139-Ubuntu SMP, Docker version 1.11.2, build b9f10c9):
frk-00031-00 00:00:02.916321 [ loolforkit ] Child 35 has exited, removing its jail '/opt/lool/child-roots/35'
wsd-00022-00 00:00:04.118696 [ loolwsd ] MasterToForKit: spawn 1
wsd-00022-00 00:00:04.118839 [ loolwsd ] Writing to pipe. Data: [spawn 1].
frk-00031-00 00:00:04.002663 [ loolforkit ] readFIFO for pipe: wsd_pipe_rd returned: 8
frk-00031-00 00:00:04.002795 [ loolforkit ] Read line from pipe: wsd_pipe_rd, line: [spawn 1], data: [].
frk-00031-00 00:00:04.002835 [ loolforkit ] ForKit command: [spawn 1].
frk-00031-00 00:00:04.002922 [ loolforkit ] Spawning 1 child per request.
frk-00031-00 00:00:04.002960 [ loolforkit ] Creating 1 new child.
frk-00031-00 00:00:04.002986 [ loolforkit ] Forking a loolkit process.
frk-00031-00 00:00:04.009967 [ loolforkit ] Forked kit [36].
kit-00036-00 00:00:04.010329 [ loolforkit ] Initializing kit
kit-00036-00 00:00:04.010420 [ loolforkit ] Log level is [8].
kit-00036-00 00:00:04.010487 [ loolkit ] Process started.
kit-00036-00 00:00:04.010639 [ loolkit ] Jail path: /opt/lool/child-roots/36/
kit-00036-00 00:00:04.011012 [ loolkit ] symlink("../lo","/opt/lool/child-roots/36/opt/collaboraoffice5.1")
kit-00036-00 00:00:04.045270 [ loolkit ] link("/opt/collaboraoffice5.1/readmes/README_en-US","/opt/lool/child-roots/36/lo/readmes/README_en-US") failed. Exiting. (errno: Operation not permitted)
Just wondering, are you starting docker with sudo?
I had also the connection error. Now its solved.
I have tried to made it with a new sub.domain with its own certificate from letsencrypt. No luck with this.
I found an red error in the log about my normal domain although lool was configured to other sub domain.
So I tried to change the settings to my normal sub domain (DynDNS).
Now I combined the Apache settings in the default-ssl.conf with all the other settings for my dyndns domain like nextcloud and others.
And ā¦ tata ā¦ it works.
Daniel from ThĆ¼ringen
I have solved one error in the docker as could be seen in /var/log/syslog:
docker[22800]: time="2016-07-22T17:15:20+01:00" level=error msg="containerd: notify OOM events" error="open memory.oom_control: no such file or directory"
By adding the following to /etc/default/grub:
GRUB_CMDLINE_LINUX="cgroup_enable=memory"
But when starting the docker I still get the following errors from the docker output itself:
kit-00039-00 00:00:11.270019 [ loolkit ] link("/opt/collaboraoffice5.1/CREDITS.fodt","/opt/lool/child-roots/39/lo/CREDITS.fodt") failed. Exiting. (errno: Operation not permitted)
kit-00038-00 00:00:11.313616 [ loolkit ] link("/opt/collaboraoffice5.1/CREDITS.fodt","/opt/lool/child-roots/38/lo/CREDITS.fodt") failed. Exiting. (errno: Operation not permitted)
kit-00037-00 00:00:11.332961 [ loolkit ] link("/opt/collaboraoffice5.1/CREDITS.fodt","/opt/lool/child-roots/37/lo/CREDITS.fodt") failed. Exiting. (errno: Operation not permitted)
frk-00029-00 00:00:12.325073 [ loolforkit ] Child 37 has exited, removing its jail '/opt/lool/child-roots/37'
frk-00029-00 00:00:12.542260 [ loolforkit ] Child 38 has exited, removing its jail '/opt/lool/child-roots/38'
frk-00029-00 00:00:12.686059 [ loolforkit ] Child 39 has exited, removing its jail '/opt/lool/child-roots/39'
This error keeps popping up including the exit. When trying to open a document I get:
wsd-00020-03 00:00:51.998613 [ client_req_hdl ] Request from 192.168.7.241:52277: GET /lool/ws/https://cloud.<domain>/apps/richdocuments/wopi/fil
es/539952?access_token=Zbjpd9YbMVKTt7XNUOguQBzaoIcxUfvu HTTP/1.1 / Host: office.<domain> / Pragma: no-cache / Cache-Control: no-cache / Origin: h
ttps://office.<domain> / Sec-WebSocket-Version: 13 / DNT: 1 / User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Ge
cko) Chrome/51.0.2704.103 Safari/537.36 / Accept-Encoding: gzip, deflate, sdch, br / Accept-Language: en-GB,en-US;q=0.8,en;q=0.6,nl;q=0.4 / Sec-WebSo
cket-Key: T2FU+ljR4J8BT7T8ZqRuFA== / Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits / X-Forwarded-For: 192.168.7.1 / X-Forwarde
d-Host: office.wijman.me.uk / X-Forwarded-Server: office.<domain> / Upgrade: WebSocket / Connection: Upgrade
wsd-00020-03 00:00:52.012305 [ client_ws_0001 ] Thread started.
wsd-00020-03 00:00:52.017999 [ client_ws_0001 ] Starting GET request handler for session [0001].
wsd-00020-03 00:00:52.021916 [ client_ws_0001 ] Sending to Client [statusindicator: find].
wsd-00020-03 00:00:52.027225 [ client_ws_0001 ] getNewChild: No available child. Sending spawn request to forkit and failing.
wsd-00020-03 00:00:52.031579 [ client_ws_0001 ] getNewChild: Have 0 children, forking 1
wsd-00020-03 00:00:52.034723 [ client_ws_0001 ] MasterToForKit: spawn 1
wsd-00020-03 00:00:52.039320 [ client_ws_0001 ] Writing to pipe. Data: [spawn 1].
frk-00029-00 00:00:49.841115 [ loolforkit ] readFIFO for pipe: wsd_pipe_rd returned: 8
frk-00029-00 00:00:49.842636 [ loolforkit ] Read line from pipe: wsd_pipe_rd, line: [spawn 1], data: [].
frk-00029-00 00:00:49.844773 [ loolforkit ] ForKit command: [spawn 1].
frk-00029-00 00:00:49.848522 [ loolforkit ] Spawning 1 child per request.
frk-00029-00 00:00:49.852312 [ loolforkit ] Creating 1 new child.
frk-00029-00 00:00:49.856471 [ loolforkit ] Forking a loolkit process.
frk-00029-00 00:00:49.868595 [ loolforkit ] Forked kit [79].
kit-00079-00 00:00:49.877390 [ loolforkit ] Initializing kit
kit-00079-00 00:00:49.886394 [ loolforkit ] Log level is [8].
kit-00079-00 00:00:49.890521 [ loolkit ] Process started.
kit-00079-00 00:00:49.895058 [ loolkit ] Jail path: /opt/lool/child-roots/79/
kit-00079-00 00:00:49.901287 [ loolkit ] symlink("../lo","/opt/lool/child-roots/79/opt/collaboraoffice5.1")
kit-00079-00 00:00:50.068707 [ loolkit ] link("/opt/collaboraoffice5.1/CREDITS.fodt","/opt/lool/child-roots/79/lo/CREDITS.fodt") failed. Exiting. (e$
rno: Operation not permitted)
frk-00029-00 00:00:50.878230 [ loolforkit ] Child 79 has exited, removing its jail '/opt/lool/child-roots/79'
wsd-00020-03 00:00:56.067237 [ client_ws_0001 ] getNewChild: No live child, forking more.
wsd-00020-03 00:00:56.067418 [ client_ws_0001 ] getNewChild: No available child. Sending spawn request to forkit and failing.
wsd-00020-03 00:00:56.067481 [ client_ws_0001 ] getNewChild: Have 0 children, forking 1
wsd-00020-03 00:00:56.067530 [ client_ws_0001 ] MasterToForKit: spawn 1
wsd-00020-03 00:00:56.067579 [ client_ws_0001 ] Writing to pipe. Data: [spawn 1].
So one small step closer but still so far away from the solution 
1 Like
@koehn
You use Ubuntu 14.04?
Known problems:
This docker image does not work on Ubuntu 14.04 LTS, because Ubuntu 14.04 LTS has missing kernel compile option CONFIG_AUFS_XATTR=y, which is leading to setcap not working on dockerās aufs storage. Upstream bug: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1557776
So after messing around with AppArmor, SecComp and iptables for days, this hint also helped me with Ubuntu 16.04 Xenial, since Kernels before Ubuntu-4.4.0-22.38 on Xenial were also affected by the AUFS problem. Iām using Ksplice Uptrack to avoid reboots and was still running 4.4.0-21ā¦
So for people running Xenial: make sure to have a current Kernel! Afterwards, I did not need to turn off AppArmor or do anything else besides what is described in the official guide.
1 Like
Thanks for that tip @accolon. I was running Debian 8.5 and couldnāt get it to work. I then created a new VM running Ubuntu 16.04 Xenial (running kernel 4.4.0-31-generic). Done the same installation steps as I did before and now Collabora is working.
Guess sometimes you do have to get the correct OS to get something working.
There is one thing that isnāt working normally, the menu top left is not showing when clicking on āOfficeā, only when clicking on the logo it goes to the main page. I will open a new topic for it
I also had the issue about symlinking etc, i resolved it updating to kernel 4.6 (debian jessie).
Now I have an other problem:
kit-02288-04 00:46:00.612950 [ kit_queue_0011 ] Failed to load: file:///user/docs/2288/Nuovo%20foglio_elettronico.ods, error: loadComponentFromURL returned an empty reference
kit-02288-04 00:46:00.613279 [ kit_queue_0011 ] Failed to get LoKitDocument instance.
1 Like
Upgrading my kernel (from 3.16 to 4.6) also fixed it for me (Debian 8.5)
1 Like
I found that libreoffice online asks wopi urls adding ā?encoding=textā to the url.
This ofcourse invalidate the token (the original url is https://cloudā¦etc/etc/etc?access_token=), so I manually fixed richdocuments app code using a $token = str_replace("?encoding=text", āā, $token);ā¦ Now it works 
I moved my temp VM (which was working with Collabora) to my main domain, but now it fails again. From the docker output I get the following error:
wsd-00020-05 00:02:46.762424 [ client_ws_0002 ] WOPI::CheckFileInfo header for URI [https://cloud.<domain>.uk/apps/richdocuments/wopi/files/32?access_token=SHFfuiR1rzJw9HjDKP3FrIDkforxQTbb]:
Date: Sun, 24 Jul 2016 20:47:02 GMT / Server: Apache/2.4.18 (Ubuntu) / Strict-Transport-Security: max-age=15768000; includeSubDomains; preload / Expires: Thu, 19 Nov 1981 08:52:00 GMT / Cache-Control: no-cache, must-revalidate / Pragma: no-cache / Content-Security-Policy: default-src 'none';script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self';connect-src 'self';media-src 'self' / Content-Length: 32 / X-Content-Type-Options: nosniff / X-XSS-Protection: 1; mode=block / X-Robots-Tag: none / X-Frame-Options: SAMEORIGIN / X-Download-Options: noopen / X-Permitted-Cross-Domain-Policies: none / Content-Type: applica
tion/json; charset=utf-8 / Set-Cookie: nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict / Set-Cookie: nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax / Set-Cookie: oc_sessionPassphrase=qa3q2rujbYasXeyd7Xtz%2FE3ZFkjw4VRwMU00mJUWf%2FRfwP4HdjUPbtvflJvIcGXaimUj1dWZ5VbXGaJU7ghId1j3dvgvQRklJ7%2BqDsfvvLnkOwut6aw0YGBSu1kCH0iq; p
ath=/; secure; httponly / Set-Cookie: occ3bgzu13dp=b89bi7h3djt60hpbe5pvdqhn24; path=/; HttpOnly / Connection: close /
wsd-00020-05 00:02:46.762637 [ client_ws_0002 ] WOPI::CheckFileInfo returned: {"message":"App is not enabled"}
wsd-00020-05 00:02:46.783261 [ client_ws_0002 ] ~DocumentBroker [https://cloud.<domain>.uk/apps/richdocuments/wopi/files/32?access_token=SHFfuiR1rzJ
w9HjDKP3FrIDkforxQTbb] destroyed with 0 sessions left.
wsd-00020-05 00:02:46.787713 [ client_ws_0002 ] ~ChildProcess dtor [184].
kit-00184-00 00:02:45.275424 [ loolkit ] Connection closed.
Now I am unclear why this is happening, since I only changed the domains used in Apache (separate VM) towards NC and Collabora. And changed the details in NC config to reflect the main domain.
Hi,
How do you do to upgrade to kernel 4.16? I try this but the kernel I installed doesnāt work with docker 
May be I donāt foudn the good kernel
Iām running the docker image on ubuntu 16.04 with the latest kernel. Iām getting the same error and my logs shows the following before the connection is refused
wsd-00020-05 00:00:28.352565 [ client_ws_0002 ] WOPI host is not on the same host as the WOPI client: ā52.205.196.197ā. Connection is not allowed.