I have access to my server : Through SSH Are you in a special context or did you perform some particular tweaking on your YunoHost instance ? : no
Description of my issue
After upgrading to Yunohost v4, Collabora online (3.7.19) for Nextcloud (18.0.4) stopped working. The Collabora server is on the same host, run with a docker container (collabora/code:6.4.8.1).
When trying to open an open format document (odt, ods,…) on Nextcloud, it fails with the following pop up : Fail to read document from storage
I looked at Collabora docker logs and found the following :
wsd-00008-00008 2021-04-24 12:41:01.236480 [ loolwsd ] INF WSD initialization complete: setting log-level to [warning] as configured.| wsd/LOOLWSD.cpp:4058
Ready to accept connections on port 9980.
wsd-00008-00056 2021-04-24 12:43:16.140715 [ websrv_poll ] ERR Socket #23 SSL BIO error: closed unexpectedly (-1). (0: Success)| ./net/SslSocket.hpp:276
wsd-00008-00056 2021-04-24 12:43:16.141107 [ websrv_poll ] ERR Error while handling poll for socket #23 in websrv_poll: SSL Socket closed unexpectedly.| net/Socket.cpp:314
wsd-00008-00056 2021-04-24 12:43:16.280416 [ websrv_poll ] ERR Socket #23 SSL BIO error: closed unexpectedly (-1). (0: Success)| ./net/SslSocket.hpp:276
wsd-00008-00056 2021-04-24 12:43:16.280603 [ websrv_poll ] ERR Error while handling poll for socket #23 in websrv_poll: SSL Socket closed unexpectedly.| net/Socket.cpp:314
wsd-00008-00056 2021-04-24 12:43:16.286858 [ websrv_poll ] ERR Socket #23 SSL BIO error: closed unexpectedly (-1). (0: Success)| ./net/SslSocket.hpp:276
wsd-00008-00056 2021-04-24 12:43:16.287044 [ websrv_poll ] ERR Error while handling poll for socket #23 in websrv_poll: SSL Socket closed unexpectedly.| net/Socket.cpp:314
wsd-00008-00056 2021-04-24 12:43:16.399120 [ websrv_poll ] ERR Socket #26 SSL BIO error: closed unexpectedly (-1). (0: Success)| ./net/SslSocket.hpp:276
wsd-00008-00056 2021-04-24 12:43:16.399292 [ websrv_poll ] ERR Error while handling poll for socket #26 in websrv_poll: SSL Socket closed unexpectedly.| net/Socket.cpp:314
wsd-00008-00056 2021-04-24 12:43:16.418850 [ websrv_poll ] ERR Socket #27 SSL BIO error: closed unexpectedly (-1). (0: Success)| ./net/SslSocket.hpp:276
wsd-00008-00056 2021-04-24 12:43:16.419003 [ websrv_poll ] ERR Error while handling poll for socket #27 in websrv_poll: SSL Socket closed unexpectedly.| net/Socket.cpp:314
wsd-00008-00056 2021-04-24 12:43:16.444592 [ websrv_poll ] ERR Socket #27 SSL BIO error: closed unexpectedly (-1). (0: Success)| ./net/SslSocket.hpp:276
wsd-00008-00056 2021-04-24 12:43:16.444748 [ websrv_poll ] ERR Error while handling poll for socket #27 in websrv_poll: SSL Socket closed unexpectedly.| net/Socket.cpp:314
wsd-00008-00058 2021-04-24 12:43:36.432939 [ docbroker_001 ] ERR Cannot get file info from WOPI storage uri [https://my.server/index.php/apps/richdocuments/wopi/files/11218_ocuchk93xkxx?access_token=[redacted]&access_token_ttl=0&reuse_cookies=WSDWelcomeVersion%3D4.2.4]. Error: DNS error: Temporary DNS error while resolving: my.server| wsd/Storage.cpp:647
wsd-00008-00058 2021-04-24 12:43:36.433335 [ docbroker_001 ] ERR loading document exception: DNS error| wsd/DocumentBroker.cpp:1445
wsd-00008-00058 2021-04-24 12:43:36.433435 [ docbroker_001 ] ERR Failed to add session to [/index.php/apps/richdocuments/wopi/files/11218_ocuchk93xkxx] with URI [https://my.server/index.php/apps/richdocuments/wopi/files/11218_ocuchk93xkxx?access_token=[redacted]&access_token_ttl=0&reuse_cookies=WSDWelcomeVersion%3D4.2.4]: DNS error| wsd/DocumentBroker.cpp:1407
wsd-00008-00058 2021-04-24 12:43:36.433525 [ docbroker_001 ] ERR Error while loading : DNS error| wsd/LOOLWSD.cpp:3465
wsd-00008-00058 2021-04-24 12:43:36.433771 [ docbroker_001 ] ERR No DocBroker found, or DocBroker marked to be destroyed. Terminating session ToClient-006| wsd/ClientSession.cpp:332
wsd-00008-00058 2021-04-24 12:43:36.434385 [ docbroker_001 ] ERR No DocBroker found, or DocBroker marked to be destroyed. Terminating session ToClient-006| wsd/ClientSession.cpp:332
wsd-00008-00058 2021-04-24 12:43:36.500245 [ docbroker_001 ] ERR Invalid or unknown session [006] to remove.| wsd/DocumentBroker.cpp:1484
wsd-00008-00041 2021-04-24 12:43:38.434241 [ prisoner_poll ] WRN Prisoner connection disconnected but without valid socket.| wsd/LOOLWSD.cpp:2130
From this log I found Error: DNS error: Temporary DNS error while resolving: my.server and suspected a DNS resolution problem in docker containers.
Upon testing with $ docker run --rm -it alpine ping -c 1 8.8.8.8 with no success, I tried to ping host from container and it worked.
I thus suspect some firewall getting in the way of docker, and preventing it to access the Internet, but I fail to diagnose precisely where.
Thanks a lot for any input on this issue, and thanks to the Yunohost team for the good work
Probably related to the migration of iptables rules to nftables rules, maybe restarting the docker daemon would work … You can investigate by checking out the output of “iptables-save”, but that’s pretty technical …
Given that I could ping the host server and that the nextcloud server is on this very host, I tried to add the nextcloud domain with this IP in the hosts file of the container, as follow :