rugk
commented
3 years ago Ah okay, apparently it was indeed the capabilties thing that was missing:
cap_add:
- MKNODBut why do you need that? Given that it can be insecure…
Open rugk opened 3 years ago
rugk
commented
3 years ago Ah okay, apparently it was indeed the capabilties thing that was missing:
cap_add:
- MKNODBut why do you need that? Given that it can be insecure…
jakubgs
commented
3 years ago According to Collabora docs:
Note: for the faster jail creation via bind mount, you need to use docker run command with the
--privilegedflag.
https://sdk.collaboraonline.com/docs/installation/CODE_Docker_image.html
Obviously using --privileged is very insecure and a horrible idea, but it is still recommended. In my current setup where I'm using Docker user remapping it is even impossible to use --privileged since it just returns:
ERROR: for docs Cannot create container for service docs:
privileged mode is incompatible with user namespaces.
You must run the container in the host namespace when running privileged modeBut the sentence in the doc states that "for faster jail creation", which means it can work without these permissions? I'm not sure, it's confusing.
rugk
commented
3 years ago But the sentence in the doc states that "for faster jail creation", which means it can work without these permissions?
Indeed, I read that too, and I I don't care much about startup performance, at least, I also did not mind that… I'm also puzzled what jails are actually meant – I mean this is not FreeBSD and already sandboxed inside Docker, so I have no idea what they mean.
Also, as I explained, you do not actually need to use --privileged… MKNOD is enough.
For reference, the podman command is this (I just added a healthcheck here):
$ podman create --name=collabora_collabora_1 --pod=collabora --label io.podman.compose.config-hash=123 --label io.podman.compose.project=collabora --label io.podman.compose.version=0.0.1 --label com.docker.compose.container-number=1 --label com.docker.compose.service=collabora --cap-add MKNOD -e username=admin -e password=***************** -e domain=**MY_DOMAIN** -e DONT_GEN_SSL_CERT=YES -e dictionaries=de_DE en_GB en_US es_ES fr_FR -e extra_params=--o:ssl.enable=false --o:ssl.termination=true -v /etc/localtime:/etc/localtime:ro --add-host collabora:127.0.0.1 --add-host collabora_collabora_1:127.0.0.1 --tty --restart unless-stopped --healthcheck-command /bin/sh -c curl' '-f' 'http://localhost/ --healthcheck-interval 1m30s --healthcheck-timeout 10s --healthcheck-start-period 40s --healthcheck-retries 3 collabora/code
vmiklos
commented
3 years ago I'm also puzzled what jails are actually meant
Technically this is chroot, see here:
jakubgs
commented
3 years ago Also, as I explained, you do not actually need to use
--privileged…MKNODis enough.
Well, I'm running with --add-cap MKNOD and some other ones and I'm still seeing errors like:
[ kit_spare_002 ] ERR mknod(/opt/lool/child-roots/yOwohX5H9tkK9WIw//tmp/dev/random) failed. Mount must not use nodev flag. (EPERM: Operation not permitted)| common/JailUtil.cpp:247
[ kit_spare_002 ] ERR mknod(/opt/lool/child-roots/yOwohX5H9tkK9WIw//tmp/dev/urandom) failed. Mount must not use nodev flag. (EPERM: Operation not permitted)| common/JailUtil.cpp:259When trying to open a document. As I explained in https://github.com/CollaboraOnline/online/issues/2801.
X-dark
commented
3 years ago Well, I'm running with
--add-cap MKNODand some other ones and I'm still seeing errors like:
I can confirm but if you run your container as root, adding the same capa it works fine. Running this in a secure way seems just impossible for now...
NanoSector
commented
2 years ago Unfortunately this seems a limitation of how mknod works; creating a device node can only be done by privileged processes.
From man 2 mknod:
EPERM mode requested creation of something other than a regular file, FIFO (named pipe), or UNIX domain socket, and the caller is not privileged (Linux: does not have the CAP_MKNOD capability); also returned if the filesystem containing pathname does not support the type of node requested.
From podman/rootless.md:
- Making device nodes within a container fails, even when running --privileged.
- The kernel does not allow non root user processes (processes without CAP_MKNOD) to create device nodes. If a container needs to create device nodes, it must be run as root.
The only fix I would see is not using mknod at all. The only alternative I can think of currently is bind mounting them instead, however (man 2 mount):
Appropriate privilege (Linux: the CAP_SYS_ADMIN capability) is required to mount filesystems.
CAP_SYS_ADMIN is practically root. So we're back at square one. This does not seem something Collabora Online can fix, unfortunately, without reimagining their jail system.
timur-g
commented
1 year ago Can someone confirm this with 23.05?
0b11stan
commented
10 months ago Hi, I can confirm the issue is somewhat different but still present for 23.05. (running with podman rootless too).
Command :
podman run --rm -p 9980:9980 -e "extra_params=--o:ssl.enable=false" collabora/codeI don't fail on the same binary execution, (not loolforkit but coolforkit). Here are the interesting logs (before that everything is the same as with docker).
wsd-00001-00020 2024-01-09 11:47:42.262577 +0000 [ prisoner_poll ] TRC #16: setupPollFds getPollEvents: 0x1| net/Socket.hpp:862
Failed to exec command '/usr/bin/coolforkit' (EPERM: Operation not permitted)
wsd-00001-00020 2024-01-09 11:47:42.262890 +0000 [ prisoner_poll ] FTL Failed to exec command '/usr/bin/coolforkit' (EPERM: Operation not permitted)| common/Util.cpp:293
Forced Exit with code: 42
wsd-00001-00020 2024-01-09 11:47:42.262934 +0000 [ prisoner_poll ] FTL Forced Exit with code: 42| common/Util.cpp:1208As rugk found out (thanks), the mknod capability is fixing the issue (but still I agree with the security caveat).
$ podman run --rm -it collabora/code /usr/bin/coolforkit
{"msg":"exec container process `/usr/bin/coolforkit`: Operation not permitted","level":"error","time":"2024-01-09T15:33:09.280891Z"}
$ podman run --rm -it --cap-add mknod collabora/code /usr/bin/coolforkit
frk-00001-00001 2024-01-09 15:33:23.481740 +0000 [ coolforkit ] INF Initializing frk. Local time: Tue 2024-01-09 15:33:23 +0000. Log level is [8]| common/Log.cpp:589
Usage: coolforkit [OPTION]...
Single-threaded process that spawns lok instances
Note: Running this standalone is not possible. It is spawned by coolwsd
and is controlled via a pipe.
Routhinator
commented
10 months ago Confiming here that I just spent a day mucking about with the helm chart and the most recent release (23.05.8.4.1) only to finally fall on this, enable privileged mode and finally get collabora started.
For me I kept getting [ loolwsd ] FTL Failed to fork child processes.| wsd/LOOLWSD.cpp:2703 FATAL: Failed to fork child processes.
In my case I am on a baremetal kubeadmin cluster and the nextcloud mount is on iSCSI block storage from Truenas using the democratic-csi, running with the cri-o daemon.
timur-g
commented
7 months ago The original issue "Failed to exec command" should be resolved in 24.04, at least for me. Docker 24.04.1.4 is available. Can you test please?
Routhinator
commented
7 months ago Not resolved. Same issue, as soon as i disabled privileged mode it could not fork childen.
wsd-00001-00025 2024-04-27 13:56:59.453532 +0000 [ prisoner_poll ] ERR Forkit waitpid failed (ECHILD: No child processes)| wsd/COOLWSD.cpp:3256
Shutdown requested while starting up. Exiting.
wsd-00001-00001 2024-04-27 13:57:19.453243 +0000 [ coolwsd ] TRC Have 0 new children.| wsd/COOLWSD.cpp:4234
No idea how this application is attempting to fork it's processes but I've run loads of different multi-threaded apps in Kube over the last 6 years and I've never encountered one that needs privileged mode for creating child threads.
I tested the latest 24.04 release: 24.04.1.4.1
Describe the bug I try to use the image with podman, but the startup fails due to spurious errors…
To Reproduce
docker-compose.ymlpart:This corresponds to this command:
Expected behavior No errors…
Actual behavior Errors:
Things like:
Full log below
Full log
``` Setting up watches. Watches established. Generating public/private rsa key pair. Your identification has been saved in /etc/loolwsd/proof_key. Your public key has been saved in /etc/loolwsd/proof_key.pub. The key fingerprint is: SHA256: ***************************** lool@ae66c101a88f The key's randomart image is: ***************************** ***************************** ***************************** wsd-00002-00002 2021-07-07 15:31:46.328678 [ loolwsd ] INF Initializing wsd. Local time: Wed 2021-07-07 17:31:46+0200. Log level is [8].| common/Log.cpp:347 wsd-00002-00002 2021-07-07 15:31:46.328746 [ loolwsd ] INF Setting log-level to [trace] and delaying setting to configured [warning] until after WSD initialization.| wsd/LOOLWSD.cpp:1135 wsd-00002-00002 2021-07-07 15:31:46.328753 [ loolwsd ] INF Initializing loolwsd server [].| wsd/LOOLWSD.cpp:1165 wsd-00002-00002 2021-07-07 15:31:46.328756 [ loolwsd ] INF Anonymization of user-data is configurable.| wsd/LOOLWSD.cpp:1172 wsd-00002-00002 2021-07-07 15:31:46.328760 [ loolwsd ] WRN NOTE: both logging.anonymize.usernames and logging.anonymize.filenames are deprecated and superseded by logging.anonymize.anonymize_user_data. Please remove username and filename entries from the config and use only anonymize_user_data.| wsd/LOOLWSD.cpp:1183 wsd-00002-00002 2021-07-07 15:31:46.328763 [ loolwsd ] WRN Since logging.anonymize.anonymize_user_data is provided (false) in the config, it will be used.| wsd/LOOLWSD.cpp:1186 wsd-00002-00002 2021-07-07 15:31:46.328766 [ loolwsd ] INF Anonymization of user-data is disabled.| wsd/LOOLWSD.cpp:1220 wsd-00002-00002 2021-07-07 15:31:46.329071 [ loolwsd ] WRN SSL support: SSL is disabled.| wsd/LOOLWSD.cpp:1269 wsd-00002-00002 2021-07-07 15:31:46.329086 [ loolwsd ] DBG Setting envar PDFIMPORT_RESOLUTION_DPI=96 per config per_document.pdf_resolution_dpi| wsd/LOOLWSD.cpp:1297 wsd-00002-00002 2021-07-07 15:31:46.329092 [ loolwsd ] INF Creating childroot: /opt/lool/child-roots/| wsd/LOOLWSD.cpp:1334 wsd-00002-00002 2021-07-07 15:31:46.329417 [ loolwsd ] INF Cleaning up childroot directory [/opt/lool/child-roots/].| common/JailUtil.cpp:144 wsd-00002-00002 2021-07-07 15:31:46.329538 [ loolwsd ] TRC Directory [/opt/lool/child-roots/] is not a jail, recursing.| common/JailUtil.cpp:162 wsd-00002-00002 2021-07-07 15:31:46.329652 [ loolwsd ] DBG Unmounting [/opt/lool/child-roots/].| common/JailUtil.cpp:63 wsd-00002-00002 2021-07-07 15:31:46.329667 [ loolwsd ] TRC Executing loolmount command: /usr/bin/loolmount -u /opt/lool/child-roots| common/JailUtil.cpp:35 sh: 1: /usr/bin/loolmount: Operation not permitted wsd-00002-00002 2021-07-07 15:31:46.330676 [ loolwsd ] ERR Failed to unmount [/opt/lool/child-roots/].| common/JailUtil.cpp:68 wsd-00002-00002 2021-07-07 15:31:46.330709 [ loolwsd ] DBG Removing [/opt/lool/child-roots/] only.| common/FileUtil.cpp:216 wsd-00002-00002 2021-07-07 15:31:46.331204 [ loolwsd ] TRC Executing loolmount command: /usr/bin/loolmount -b /opt/lool/systemplate /opt/lool/child-roots/lool_test_mount| common/JailUtil.cpp:35 sh: 1: /usr/bin/loolmount: Operation not permitted wsd-00002-00002 2021-07-07 15:31:46.331962 [ loolwsd ] ERR Failed to bind-mount [/opt/lool/systemplate] -> [/opt/lool/child-roots/lool_test_mount].| common/JailUtil.cpp:46 wsd-00002-00002 2021-07-07 15:31:46.331974 [ loolwsd ] ERR Bind-Mounting fails and will be disabled for this run. To disable permanently set mount_jail_tree config entry in loolwsd.xml to false.| common/JailUtil.cpp:207 wsd-00002-00002 2021-07-07 15:31:46.331981 [ loolwsd ] DBG FileServerRoot before config: | wsd/LOOLWSD.cpp:1370 wsd-00002-00002 2021-07-07 15:31:46.331990 [ loolwsd ] DBG FileServerRoot after config: /usr/share/loolwsd| wsd/LOOLWSD.cpp:1372 wsd-00002-00002 2021-07-07 15:31:46.332049 [ loolwsd ] INF NumPreSpawnedChildren set to 1.| wsd/LOOLWSD.cpp:1384 wsd-00002-00002 2021-07-07 15:31:46.332062 [ loolwsd ] INF Registering filesystem for space checks: [/opt/lool/child-roots/.]| common/FileUtil.cpp:414 wsd-00002-00002 2021-07-07 15:31:46.332085 [ loolwsd ] INF MAX_CONCURRENCY set to 4.| wsd/LOOLWSD.cpp:1393 wsd-00002-00002 2021-07-07 15:31:46.332131 [ loolwsd ] INF DISABLE_REDLINE set| wsd/LOOLWSD.cpp:1400 wsd-00002-00002 2021-07-07 15:31:46.332139 [ loolwsd ] INF Maximum file descriptor supported by the system: 524287| wsd/LOOLWSD.cpp:1469 wsd-00002-00002 2021-07-07 15:31:46.332142 [ loolwsd ] INF Maximum number of open documents supported by the system: 131064| wsd/LOOLWSD.cpp:1472 wsd-00002-00002 2021-07-07 15:31:46.332145 [ loolwsd ] INF Maximum concurrent open Documents limit: 1000000| wsd/LOOLWSD.cpp:1474 wsd-00002-00002 2021-07-07 15:31:46.332147 [ loolwsd ] INF Maximum concurrent client Connections limit: 1000000| wsd/LOOLWSD.cpp:1475 wsd-00002-00002 2021-07-07 15:31:46.411827 [ loolwsd ] TRC Pre-read 13 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/images/jquery-ui-lightness: ui-bg_highlight-soft_75_ffe45c_1x100.png ui-icons_ffd27a_256x240.png ui-icons_ffffff_256x240.png ui-bg_glass_100_f6f6f6_1x400.png ui-icons_228ef1_256x240.png ui-bg_diagonals-thick_18_b81900_40x40.png ui-icons_ef8c08_256x240.png ui-bg_highlight-soft_100_eeeeee_1x100.png ui-bg_glass_100_fdf5ce_1x400.png ui-bg_glass_65_ffffff_1x400.png ui-bg_gloss-wave_35_f6a828_500x100.png ui-icons_222222_256x240.png ui-bg_diagonals-thick_20_666666_40x40.png | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.417265 [ loolwsd ] TRC Pre-read 2 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/images/cursors: fill.cur fill.png | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.441056 [ loolwsd ] TRC Pre-read 28 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/images/help/es: manage-changes-filter.png thesaurus.png area-dialog.png cell-comment.png page-style.png chart.png comment.png auto-filter.png red-wavy-underline.png information-bar.png formula-bar.png outlining.png special-character.png track-changes-comment.png format-cells.png repair-document.png manage-changes.png insert-table.png inactive-document.png conditional-formatting.png slide-layouts.png status-bar.png chart-wizard.png selection-list.png word-count.png paragraph-dialog.png data-validation.png text-import.png | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.462787 [ loolwsd ] TRC Pre-read 28 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/images/help/it: manage-changes-filter.png thesaurus.png area-dialog.png cell-comment.png page-style.png chart.png comment.png auto-filter.png red-wavy-underline.png information-bar.png formula-bar.png outlining.png special-character.png format-cells.png repair-document.png manage-changes.png insert-table.png inactive-document.png conditional-formatting.png track-changes.png slide-layouts.png status-bar.png chart-wizard.png selection-list.png word-count.png paragraph-dialog.png data-validation.png text-import.png | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.481704 [ loolwsd ] TRC Pre-read 25 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/images/help/pt-BR: manage-changes-filter.png area-dialog.png cell-comment.png page-style.png chart.png comment.png auto-filter.png red-wavy-underline.png formula-bar.png outlining.png special-character.png track-changes-comment.png format-cells.png repair-document.png manage-changes.png inactive-document.png conditional-formatting.png slide-layouts.png status-bar.png chart-wizard.png selection-list.png word-count.png paragraph-dialog.png data-validation.png text-import.png | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.501283 [ loolwsd ] TRC Pre-read 28 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/images/help/fr: manage-changes-filter.png thesaurus.png area-dialog.png cell-comment.png page-style.png chart.png comment.png auto-filter.png red-wavy-underline.png information-bar.png formula-bar.png outlining.png special-character.png track-changes-comment.png format-cells.png repair-document.png manage-changes.png insert-table.png inactive-document.png conditional-formatting.png slide-layouts.png status-bar.png chart-wizard.png selection-list.png word-count.png paragraph-dialog.png data-validation.png text-import.png | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.520352 [ loolwsd ] TRC Pre-read 28 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/images/help/en: manage-changes-filter.png thesaurus.png area-dialog.png cell-comment.png page-style.png chart.png comment.png red-wavy-underline.png information-bar.png formula-bar.png outlining.png special-character.png track-changes-comment.png format-cells.png autofilter.png repair-document.png manage-changes.png insert-table.png inactive-document.png conditional-formatting.png slide-layouts.png status-bar.png chart-wizard.png selection-list.png word-count.png paragraph-dialog.png data-validation.png text-import.png | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.528132 [ loolwsd ] TRC Pre-read 1043 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/images: table-row-resize-marker-hover.svg layout_head02b.svg lc_symbolshapes.quad-bevel.svg donut_52x60.svg icon-set-circles1-yellow.svg lc_closedocmobile_branding.svg layout_head03.svg lc_selectionlanugagedefault.svg icon-set-colorarrows-down.svg table-column-resize-marker-hover_branding.svg lc_linespacing.svg lc_previoustrackedchange.svg lc_ellipse.svg spritesheet.png lc_fromrow.svg lc_calloutshapes.line-callout-3.svg regpoly.svg lc_spelldialog.svg lc_insertzwnbsp.svg lc_drawchart_branding.svg lc_basicshapes.trapezoid.svg lc_selectionlanugagenone.svg lc_paste.svg lc_symbolshapes.puzzle.svg lc_styleapply3fstyle3astring3dheading20426familyname3astring3dparagraphstyles.svg lc_updateall.svg lc_formatbulletsmenu.svg lc_showdetail.svg checkbox-on-disabled.svg typenet_16.svg tabstop-right.svg lc_arrowshapes.svg lc_definename.svg lc_fontworkshapetype.fontwork-stop.svg columnstackline_52x60.svg lc_alignright.svg lc_hyperlinkdialog.svg lc_about.svg lc_spellonline.svg lc_showannotations.svg lc_updatecurindex.svg table-column-resize-marker_branding.svg lc_setdefault.svg lc_numberformatpercent_branding.svg errordown_30.svg lc_decimalplaces.svg lc_strikeout.svg lc_starshapes.concave-star6.svg lc_square_rounded_unfilled.svg lc_edithyperlink.svg lc_insertdatefield.svg icon-set-trafficlights-yellow.svg lc_arrowshapes.left-arrow.svg netstackfill_52x60.svg sc_wrapideal.svg stackdirectboth_52x60.svg donut3dexploded_52x60.svg lc_uppage_branding.svg icon-set-pies-full.svg lc_basicshapes.octagon.svg lc_connector.svg lc_numberformatpropertypanel.svg lc_datafilterstandardfilter.svg lc_columnwidth.svg table-column-resize-marker-hover.svg netstack_52x60.svg lc_symbolshapes.lightning.svg lc_starshapes.star12.svg lc_copy.svg lc_spacing.svg lc_accepttrackedchanges.svg lc_styleupdatebyexample.svg icon-set-bars-three-quarters.svg lc_resetattributes_branding.svg lc_connectortoolbox.svg lc_basicshapes.round-rectangle.svg lc_deletecolumns.svg netpointstack_52x60.svg lc_fontworkshapetype.fontwork-arch-up-curve.svg areaspiled_52x60.svg sidebar-template-large-checked_impress_branding.svg lc_tabledeletemenu.svg lc_print.svg lc_connectorlinesarrowend.svg marker-icon.png lc_drawchart.svg ui-bg_glass_100_f6f6f6_1x400.png layout_head04.svg lc_inserttimefield.svg lc_savemodified_branding.svg lc_masterslidespanel.svg lc_arrowshapes.up-right-arrow.svg stackdirectpoints_52x60.svg bar3ddeep_52x60.svg lc_leftindent.svg lc_wrapleft.svg lc_animationobjects.svg lc_flowchartshapes.flowchart-direct-access-storage.svg pyramindhoristack_52x60.svg lc_starshapes.star24.svg icon-set-squares-one-quarter.svg conehoristack_52x60.svg columns_52x60.svg lc_flowchartshapes.flowchart-manual-input.svg lc_insertcaptiondialog.svg errorbothverti_30.svg lc_inserttitlefield.svg sidebar-modify-page-large-checked_calc_branding.svg lc_deletetable.svg lc_diagramtype.svg icon-set-triangles-down.svg lc_connectorlinearrowend.svg lc_formatpaintbrush_branding.svg lc_compressgraphic.svg lc_fontworkshapetype.fontwork-open-circle-pour.svg lc_leftpara.svg lc_basicshapes.ring.svg lc_symbolshapes.brace-pair.svg lc_protect.svg lc_color-picker-selected.svg lc_moveup.svg sidebar-template-large.png indentation_marker_up.svg lc_formatlegend.svg lc_rejecttrackedchange.svg lc_possizepropertypanel.svg ui-icons_777620_256x240.png lc_inserttable_col_mono.svg lc_insertfilefield.svg lc_firstrecord.svg lc_fontworkshapetype.fontwork-fade-up.svg lc_save_notebookbar.svg lc_ok.svg lc_basicshapes.hexagon.svg stackstepped3d_52x60.svg icon-set-circles1-red.svg lc_connectorcurvearrowend.svg lc_insertpagenumberfield.svg lc_flowchartshapes.flowchart-document.svg net_52x60.svg lc_paraspacedecrease.svg lc_rect_unfilled.svg lc_insertendnote.svg lc_sidebar.svg cell-autofill-marker.svg lc_parapropertypanel.svg lc_setparagraphlanguagemenu.svg sidebar-property-large.png lc_alignvcenter.svg lc_wrapthroughtransparencytoggle.svg lc_nexttrackedchange.svg lc_downloadas-xlsx.svg lc_datafilterautofilter.svg lc_showtrackedchanges.svg lc_rotateright.svg lc_sheetmenu.svg lc_graphicpropertypanel.svg lc_pageheight.svg lc_spellingandgrammardialog.svg lc_inserttimefieldvar.svg lc_arrowshapes.notched-right-arrow.svg minus_branding.svg lc_tabledialog.svg lc_deleteallannotation.svg lc_nextrecord.svg lc_openhyperlinkoncursor.svg icon-set-pies-half.svg lc_deleterowbreak.svg lc_pie.svg lc_selectbackground.svg stock_52x60.svg sidebar-modify-page-large-checked_branding.svg lc_flowchartshapes.flowchart-predefined-process.svg lc_insertrlm.svg lc_fontworkshapetype.fontwork-fade-up-and-right.svg lc_justifypara.svg columnline_52x60.svg lc_togglemergecells_branding.svg lc_areapropertypanel.svg lc_hyphenation.svg conehorideep_52x60.svg lc_fontcolor.svg lc_footnotedialog.svg checkbox-off.svg lc_resetattributes.svg lc_tableeditpanel.svg lc_styleapply3fstyle3astring3dheading20126familyname3astring3dparagraphstyles.svg lc_distributecolumns.svg lc_connectorarrows.svg reglin.svg lc_formatmeanvalue.svg icon-set-squares-three-quarters.svg ui-icons_777777_256x240.png lc_splittable.svg lc_goalseekdialog.svg valueaxisstepped3d_52x60.svg lc_deleteallnotes.svg lc_connectorlines.svg cylinderhoriprocent_52x60.svg lc_insertreferencefield.svg lc_setbrightness.svg bar_52x60.svg lc_settransparency.svg lc_duplicatepage_branding.svg lc_insertobjectchart.svg fit-cell_branding.svg lc_toggleorientation.svg lc_alignup.svg lc_symbolshapes.diamond-bevel.svg lc_fontworkshapetype.fontwork-curve-down.svg user.svg lc_beforetextindent.svg savemodified_large.svg lc_fontworkshapetype.fontwork-circle-pour.svg lc_italic_branding.svg ui-bg_gloss-wave_35_f6a828_500x100.png lc_anchormenu.svg lc_wraptext_branding.svg lc_alignblock_branding.svg lc_spacepara15_branding.svg submenu.svg lc_selecttable.svg lc_numberformatdecimal.svg lc_group.svg lc_entergroup.svg lc_starshapes.svg lc_slidemasterpage.svg sidebar-modify-page-large_branding.svg nostacksmoothboth_52x60.svg stacksteppedboth_52x60.svg sidebar-animation-large.png lc_orientation.svg icon-set-positive-yellow-smilie.svg lc_decrementlevel.svg lc_insertcomment.svg lc_setanchortopage.svg lc_fontworkshapetype.fontwork-triangle-down.svg lc_insertpagecountfield.svg icon-set-symbols1-cross.svg icon-set-colorarrows-slightly-up.svg sc_wrapmenu.svg lc_flowchartshapes.flowchart-multidocument.svg lc_undo_branding.svg lc_cellverttop.svg layout_head06.svg icon-set-colorarrows-same.svg edit_branding.svg stackdirect3d_52x60.svg lc_pagesetup.svg lc_formproperties.svg lc_setanchortocell.svg lc_dismantle.svg sidebar-transition-large-checked_branding.svg lc_starshapes.star4.svg lc_paperheight.svg lc_flowchartshapes.flowchart-display.svg lc_symbolshapes.forbidden.svg lc_substract.svg indentation_marker_down.svg lc_formatline.svg lc_color_branding.svg lc_numberformatincdecimals_branding.svg lc_fontworkshapetype.fontwork-arch-down-pour.svg pyramindhoripercent_52x60.svg cylinder_52x60.svg ui-bg_glass_100_fdf5ce_1x400.png pyramindhorideep_52x60.svg sc_alignbottom.svg lc_field_transparency.svg lc_cut.svg sc_wrapoff.svg lc_flowchartshapes.flowchart-internal-storage.svg lc_outlineright.svg valueaxissmoothboth_52x60.svg donutexploded_52x60.svg lc_aboveparaspacing.svg fr01.svg lc_wrapthrough.svg lc_downloadas-ppt.svg columnpercent_52x60.svg netfill_52x60.svg lc_selectall.svg lc_view100.svg lc_masterslide.svg lc_arrowshapes.striped-right-arrow.svg sidebar-transition-large-checked_impress_branding.svg lc_fullscreen.svg lc_toolprotectiondocument.svg lc_basicshapes.paper.svg lc_deletepivottable.svg icon-set-squares-full.svg lc_fontworkshapetype.fontwork-triangle-up.svg lc_insertzwsp.svg lc_xlinecolor.svg lc_symbolshapes.svg lc_basicshapes.block-arc.svg lc_formattedfield_branding.svg lc_insertbreak.svg lc_belowparaspacing.svg icon-set-colorarrows-slightly-down.svg lc_insertbreakmenu.svg lc_conditionalformatdialog.svg cylinderdeep_52x60.svg lc_fliphorizontal.svg radio-off.svg icon-set-bars-full.svg typebar_16.svg lc_conditionalformatdialog_branding.svg lc_flipvertical.svg lc_repair.svg radio-on-disabled.svg lc_insertfootnote.svg lc_thesaurusdialog.svg lc_accepttrackedchange.svg lc_rev-history.svg lc_underline_branding.svg lc_flowchartshapes.flowchart-preparation.svg typexy_16.svg lc_ellipse_branding.svg lc_validation.svg lc_mergecells.svg lc_styleapply3fstyle3astring3dstandard26familyname3astring3dparagraphstyles.svg lc_rotateleft.svg sidebar-template-large_branding.svg lc_tracechangemode.svg layout_empty.svg pieexploded_52x60.svg lc_showresolvedannotations.svg icon-set-circles2-light-gray.svg lc_starshapes.star5.svg lc_downloadas-odp.svg lc_inserttopicfield.svg icon-set-triangles-up.svg icon-set-triangles-same.svg lc_arrowshapes.down-arrow.svg pyramindstack_52x60.svg lc_setobjecttoforeground.svg cylinderhorideep_52x60.svg lc_strikeout_branding.svg lc_arrowshapes.up-down-arrow-callout.svg fr010.svg fr02.svg lc_insertpage.svg icon-set-shapes-circle.svg lc_setblue.svg lc_downloadas-epub.svg lc_numberformatdecdecimals.svg lc_insertrowsafter.svg typearea_16.svg barstack_52x60.svg stacksmoothlines_52x60.svg lc_denominatorplaces.svg lc_tablesort.svg lc_inserttable_row_mono.svg lc_formataxis.svg lc_basicshapes.parallelogram.svg indentation_marker_up_branding.svg lc_grow.svg lc_insertcolumnsmenu.svg cylinderhori_52x60.svg areasfull_52x60.svg lc_decrementindent.svg lc_aligndown.svg icon-set-symbols1-exclamation-mark.svg stockcolumnsattach_52x60.svg nostackdirectlines_52x60.svg lc_insertrowsmenu.svg lc_editstyle.svg ui-icons_cc0000_256x240.png icon-set-squares-half.svg valueaxisdirect3d_52x60.svg lc_spellcheckignoreall.svg lc_deletedatalabel.svg netlinepointstack_52x60.svg lc_fontdialog.svg lc_hidedetail.svg pie3d_52x60.svg table-row-or-column-select-marker.svg lc_starshapes.horizontal-scroll.svg sc_aligntop.svg fold.svg lc_horizontalpos.svg icon-set-negative-yellow-smilie.svg lc_formatcolumns.svg lc_closedocmobile.svg icon-set-trafficlights-red.svg lc_text_branding.svg lc_starshapes.star6.svg lc_connectorarrowend.svg lc_presentation.svg lc_symbolshapes.bracket-pair.svg typepie_16.svg lc_tableautofitmenu.svg lc_editheaderandfooter.svg lc_dia.svg icon-set-bars-half.svg lc_flowchartshapes.flowchart-sort.svg lc_recalcpivottable.svg lc_removehyperlink.svg lc_insertmajorgrid.svg sidebar-transition-large.svg lc_insertauthorfield.svg lc_shownote.svg layers-2x.png icon-set-pies-one-quarter.svg lc_hyphenate.svg note.svg lc_flowchartshapes.flowchart-collate.svg ui-bg_highlight-soft_75_ffe45c_1x100.png lc_incrementindent.svg lc_styleapply3fstyle3astring3dheading20326familyname3astring3dparagraphstyles.svg lc_setgamma.svg lc_fontworkshapetype.fontwork-circle-curve.svg lc_inserttextbox.svg vereign.png stacksmooth3d_52x60.svg lc_slidemenu.svg lc_setred.svg lc_formatchartarea.svg sc_calloutshapes.line-callout-1.svg fr011.svg lc_backcolor_branding.svg fr03.svg lc_defaultbullet.svg lc_insertion_mobile_wizard.svg lc_tablenumberformatdialog.svg lc_duplicatepage.svg lc_runmacro.svg lc_arrowshapes.split-arrow.svg lc_insertrowsbefore.svg lc_selectwidth.svg lc_insertmeanvalue.svg lc_basicshapes.pentagon.svg cylinderhoristack_52x60.svg lc_setanchortochar.svg lc_ok_white.svg lc_insertsymbol_branding.svg lc_tabledesign.svg typecolumnline_16.svg sidebar-animation-large-checked_impress_branding.svg lc_connectorcurvearrows.svg lc_pageformatdialog.svg lc_delete.svg lc_optimizetable.svg tabstop-left.svg lc_checkbox.svg typestock_16.svg lc_editregion.svg lc_symbolshapes.moon.svg lc_framelinecolor.svg lc_symbolshapes.right-brace.svg lc_editannotation.svg lc_arrangemenu.svg lc_bold.svg lc_alignblock.svg lc_fontworkshapetype.fontwork-arch-left-curve.svg lc_upsearch.svg lc_insertdatefieldvar.svg lc_alignhorizontalcenter_branding.svg lc_datasort.svg lc_redo_branding.svg lc_insertshape.svg lc_fontworkshapetype.fontwork-plain-text.svg lc_save_branding.svg lc_insertsofthyphen.svg lc_rect.svg lc_basicshapes.diamond.svg lc_fontworkshapetype.fontwork-arch-left-pour.svg lc_aftertextindent.svg lc_charmapcontrol.svg lc_searchdialog.svg refinp1.svg lc_autosum.svg lc_line.svg lc_distributerows.svg lc_fontworkshapetype.fontwork-arch-right-curve.svg lc_setgraphtransparency.svg lc_inserttable_mono.svg bar3d_52x60.svg lc_flowchartshapes.svg lc_backgroundcolor_branding.svg lc_basicshapes.frame.svg lc_downloadas-csv.svg lc_formatcelldialog.svg contacts-dark.svg icon-set-symbols1-check.svg table-column-resize-marker.svg lc_prevrecord.svg pie3dexploded_52x60.svg icon-set-stars-empty.svg lc_numberformatdecdecimals_branding.svg icon-set-grayarrows-down.svg lc_insertcurrenttime.svg table-row-resize-marker-hover_branding.svg lc_symbolshapes.left-bracket.svg lc_numberformatpercent.svg lc_autoformat.svg lc_flowchartshapes.flowchart-off-page-connector.svg lc_starshapes.bang.svg lc_hangingindent.svg lc_basicshapes.can.svg lc_objectalignleft.svg lc_wrapoff.svg lc_calculate.svg lc_formatmenu.svg lc_styleapply.svg lc_shareas.svg lc_selectheight.svg lc_insertheaderfooter.svg sidebar-template-large-checked_branding.svg fr012.svg sc_calloutshapes.line-callout-2.svg fr04.svg valueaxissmoothlines_52x60.svg lc_insertannotation.svg donut3d_52x60.svg lc_defaultnumbering.svg areaspiled3d_52x60.svg lc_fontworkshapetype.fontwork-chevron-down.svg lc_sdtabledesignpanel.svg lc_wrapright.svg lc_formatmajorgrid.svg lc_downsearch.svg lc_alignright_branding.svg lc_shadowpropertypanel.svg icon-set-circles2-dark-red.svg lc_editdoc.svg lc_showannotations_branding.svg lc_cellvertbottom.svg nostackstepped3d_52x60.svg lc_cellvertcenter.svg lc_insertslidefield.svg lc_setselectionlanguagemenu.svg lc_fontworkshapetype.fontwork-arch-right-pour.svg lc_wrappropertypanel.svg lc_dia_branding.svg lc_downloadas-png.svg lc_forward.svg lc_basicshapes.rectangle.svg lc_basicshapes.quadrat.svg columnpercent3d_52x60.svg lc_datefield.svg lc_undo.svg lc_deleterows.svg stockcolumns_52x60.svg lc_arrowshapes.up-right-arrow-callout.svg lc_cancel.svg lc_rejectalltrackedchanges.svg sc26049.png lc_insertauthoritiesentry.svg lc_pagewidth.svg lc_defaultbullet_branding.svg lc_basicshapes.cube.svg lc_wrapon.svg lc_print_branding.svg lc_clearoutline.svg pyraminddeep_52x60.svg icon-set-grayarrows-up.svg lc_addname.svg barstack3d_52x60.svg lc_fontworkshapetype.fontwork-open-circle-curve.svg lc_color.svg lc_square.svg baseline-edit-24px.svg sc_wrapthrough.svg lc_deleteannotation.svg conestack_52x60.svg lc_fontworkshapetype.fontwork-fade-up-and-left.svg lc_grow_notebookbar.svg lc_stylenewbyexample.svg netpoint_52x60.svg lc_distributeselection.svg lc_firstrecord_branding.svg icon-set-stars-full.svg lc_autosum_branding.svg lc_outlinedown.svg areasfull3d_52x60.svg refinp2.svg lc_styleapply3fstyle3astring3demphasis26familyname3astring3dcharacterstyles.svg lc_calloutshapes.cloud-callout.svg lc_changesmenu.svg sidebar-animation-large_branding.svg lc_symbolshapes.sun.svg lc_rowheight.svg lc_mobile_wizard.svg valueaxissmooth3d_52x60.svg ui-icons_228ef1_256x240.png lc_circle.svg spritesheet-2x.png lc_starshapes.star8.svg lc_downloadas-ods.svg lc_beforeobject.svg lc_defaultnumbering_branding.svg lc_reportissue.svg lc_arrowshapes.left-right-arrow-callout.svg lc_insertpagebreak.svg errorup_30.svg lc_formattingmark.svg lc_scrollbar_mobile.svg lc_rect_rounded.svg lc_wordcountdialog.svg lc_fontworkshapetype.fontwork-slant-down.svg lc_spacepara2.svg lc_sortascending.svg lc_shrink_notebookbar.svg lc_fontworkshapetype.fontwork-fade-down.svg lc_sortdescending.svg lc_inserttable.svg lc_shrink.svg sc_calloutshapes.line-callout-3.svg lc_symbolshapes.cloud.svg fr05.svg lc_downloadas-pptx.svg lc_linenumberingdialog.svg pyramind_52x60.svg lc_headerandfooter.svg lc_downloadas.svg lc_latestupdates.svg lc_pararighttoleft.svg lc_centerpara.svg lc_spellcheckignore.svg lc_arrowshapes.right-arrow.svg lc_acceptalltrackedchanges.svg icon-set-squares-empty.svg scroll-double-dark.svg lc_inserttable_branding.svg lc_alignmentpropertypanel.svg lc_fullscreen-presentation.svg tabstop-center.svg pyramindhori_52x60.svg lc_helpindex.svg icon-set-shapes-diamond.svg lc_formatpaintbrush.svg lc_insertindexesentry.svg radio-off-disabled.svg lc_flowchartshapes.flowchart-or.svg indentation_marker_down_branding.svg lc_flowchartshapes.flowchart-card.svg lc_linepropertypanel.svg lc_listspropertypanel.svg loading.gif lc_outlineup.svg lc_paperformat.svg lc_graphicdialog.svg lc_fillcolor.svg errorbothhori_30.svg lc_charfontname.svg regpow.svg lc_deletelegend.svg stacksmoothboth_52x60.svg lc_splitcell.svg lc_fullscreen_branding.svg lc_flowchartshapes.flowchart-data.svg lc_groupoutlinemenu.svg lc_arrowshapes.right-arrow-callout.svg lc_flowchartshapes.flowchart-sequential-access.svg lc_watermark.svg lc_downloadas-doc.svg nostackdirect3d_52x60.svg regexp.svg lc_downloadas-odg.svg lc_controlcodes.svg lc_firstlineindent.svg lc_downloadas-odt.svg hamburger.svg lc_extrusiontoggle.svg lc_sidebartextpanel.svg lc_movedown.svg lc_wrapideal.svg lc_aligncenter.svg lc_trackchanges.svg lc_arrowshapes.split-round-arrow.svg icon-set-stars-half.svg lc_basicshapes.isosceles-triangle.svg lc_fontworkshapetype.fontwork-fade-right.svg lc_setminimalcolumnwidth.svg icon-set-circles1-gray.svg lc_styleapply3fstyle3astring3dneutral26familyname3astring3dcellstyles.svg plus_branding.svg lc_symbolshapes.right-bracket.svg lc_gallery_branding.svg close-widget.svg fr06.svg lc_datafilterhideautofilter.svg ui-icons_ef8c08_256x240.png lc_downloadas-xls.svg lc_arrowshapes.pentagon-right.svg lc_insertpage_branding.svg lc_arrowshapes.chevron.svg ios_handle_end.svg lc_setoptimalcolumnwidth.svg lc_alignmiddle.svg sc_wrapleft.svg icon-set-flags-green.svg lc_downloadas-docx.svg lc_bringtofront.svg lc_insertpageheader.svg lc_slidechangewindow.svg lc_alignleft.svg nostackdirectboth_52x60.svg netlinepoint_52x60.svg lc_hidenote.svg lc_rotateflipmenu.svg lc_charbackcolor.svg lc_wrapmenu.svg lc_downloadas-pdf.svg cylinderstack_52x60.svg lc_rightpara.svg icon-set-flags-red.svg icon-set-pies-three-quarters.svg lc_deletepage_branding.svg lc_tableinsertmenu.svg icon-set-grayarrows-slightly-down.svg lc_merge.svg typebubble_16.svg lc_gallery.svg typecolumn_16.svg cell-resize-marker.svg lc_fontworksameletterheights.svg valueaxissteppedlines_52x60.svg lc_incrementindent_branding.svg lc_inserttimefieldfix.svg table-row-resize-marker_branding.svg lc_leavegroup.svg lc_pagedialog.svg lc_insertmultiindex.svg ui-icons_222222_256x240.png lc_menu_zoomreset_branding.svg lc_functiondialog.svg lc_insertnonbreakingspace.svg lc_transformdialog.svg lc_insertlrm.svg lc_insertfield.svg minus.svg regavg.svg lc_basicshapes.cross.svg icon-set-negative-red-smilie.svg lc_paragraphdialog.svg valueaxisdirectboth_52x60.svg lc_fontworkshapetype.fontwork-arch-up-pour.svg lc_symbolshapes.flower.svg lc_datafilterremovefilter.svg lc_bold_branding.svg icon-set-grayarrows-same.svg radio-on.svg lc_setanchortocellresize.svg icon-set-bars-empty.svg text-path_branding.svg lc_subscript.svg lc_basicshapes.circle-pie.svg lc_arrowshapes.down-arrow-callout.svg checkbox-off-disabled.svg icon-set-circles2-light-red.svg bubble_52x60.svg areas_52x60.svg lc_menu_fullscreen_branding.svg drop-down-button.svg sc_alignverticalcenter.svg lc_backward.svg valueaxissteppedboth_52x60.svg lc_symbolshapes.heart.svg handle_end.svg x-office-presentation.svg lc_arrowshapes.up-right-down-arrow.svg lc_togglemergecells.svg lc_lastrecord.svg close-widget-hover.svg stockblock_52x60.svg fr07.svg lc_conditionalformatmenu.svg lc_flowchartshapes.flowchart-terminator.svg lc_fontworkshapetype.fontwork-arch-down-curve.svg lc_formatarea.svg lc_styleapply3fstyle3astring3dbad26familyname3astring3dcellstyles.svg lc_saveas.svg lc_deletepage.svg lc_resetdatapoint.svg stackdirectlines_52x60.svg lc_insertslidesfield.svg lc_styleapply3fstyle3astring3dstrong20emphasis26familyname3astring3dcharacterstyles.svg lc26049.svg lc_paperwidth.svg x-office-spreadsheet.svg lc_arrowshapes.quad-arrow-callout.svg baseline-edit.svg toolbar-bg.svg lc_insertsection.svg lc_combine.svg table-row-resize-marker.svg lc_tablemenu.svg preview_placeholder.png lc_up.svg lc_setanchoratchar.svg lc_file.svg cursor-handler.svg lc_flowchartshapes.flowchart-stored-data.svg lc_menubar.svg lc_basicshapes.round-quadrat.svg lc_acceptchanges.svg lc_insertcolumnsbefore.svg popup_unselect_current.svg lc_deletecolumnbreak.svg lc_insertcolumnbreak.svg icon-set-circles2-dark-gray.svg lc_calloutshapes.round-callout.svg lc_viewcomment.svg lc_arrowshapes.up-down-arrow.svg lc_insertrowbreak.svg lc_insertcurrentdate.svg lc_basicshapes.ellipse.svg table-move-marker.svg pyramindpercent_52x60.svg lc_arrowshapes.s-sharped-arrow.svg lc_formattingmarkmenu.svg icon-set-flags-yellow.svg lc_styleapply3fstyle3astring3dheading20226familyname3astring3dcellstyles.svg lc_freezepanes.svg lc_fontworkgalleryfloater.svg icon-set-trafficlights-green.svg lc_italic.svg lc_arrowshapes.up-arrow.svg lc_flowchartshapes.flowchart-decision.svg closedoc.svg lc_wraptext.svg lc_ungroup.svg columnstack3d_52x60.svg lc_styleapply3fstyle3astring3dheading20226familyname3astring3dparagraphstyles.svg lc_objectalignright.svg lc_spacepara15.svg lc_freeemiumlock.svg lc_numberformatcurrency.svg lc_setgreen.svg lc_arrowshapes.quad-arrow.svg layers.png lc_setminimalrowheight.svg nostacksmooth3d_52x60.svg lc_menu20statistic.svg layout_head03a.svg fr08.svg icon-set-bars-one-quarter.svg ui-icons_ffffff_256x240.png lc_outlinebullet.svg lc_alignleft_branding.svg ios_handle_start.svg lc_paralefttoright.svg lc_arrowshapes.circular-arrow.svg lc_datafilterspecialfilter.svg lc_symbolshapes.left-brace.svg lc_titlepagedialog.svg lc_downpage_branding.svg lc_basicshapes.circle.svg lc_replycomment.svg checkbox-on.svg lc_aligntop.svg cylinderpercent_52x60.svg columnstack_52x60.svg lc_styleapply3fstyle3astring3dheading20126familyname3astring3dcellstyles.svg lc_insertpagefooter.svg lc_inserthardhyphen.svg sidebar-property-large_branding.svg lc_gradangle.svg lc_radiobutton.svg lc_text.svg lc_outlineleft.svg lc_decrementindent_branding.svg lc_freezepanesrow.svg x-office-document.svg lc_deletenote.svg lc_down.svg lc_insertbookmark.svg marker-icon-2x.png ui-bg_diagonals-thick_18_b81900_40x40.png lc_fontheight.svg marker-shadow.png lc_insertdatalabel.svg stacksteppedlines_52x60.svg table-row-or-column-select-marker-selected.svg lc_intersect.svg ui-bg_highlight-soft_100_eeeeee_1x100.png layout_head01.svg nostacksteppedboth_52x60.svg lc_borderdialog.svg sidebar-transition-large_branding.svg nostackdirectpoints_52x60.svg ui-icons_ffd27a_256x240.png columns3d_52x60.svg lc_fontworkshapetype.fontwork-fade-left.svg lc_calloutshapes.line-callout-1.svg conepercent_52x60.svg icon-set-positive-green-smilie.svg lc_drawtext.svg lc_datamenu.svg lc_currencyfield.svg lc_basicshapes.svg lc_setoptimalrowheight.svg errorleft_30.svg lc_insertgraphic.svg lc_insertgraphicremote.svg sc_recsearch.svg lc_shadowed.svg lc_backcolor.svg lc_behindobject.svg lc_calloutshapes.rectangular-callout.svg areas3d_52x60.svg layout_head03b.svg fr09.svg lc_numberformatincdecimals.svg lc_verticaltext.svg lc_copyhyperlinklocation.svg lc_starshapes.signet.svg cone_52x60.svg ui-icons_444444_256x240.png valueaxisdirectlines_52x60.svg lc_setcontrast.svg icon-set-colorarrows-up.svg icon-set-circles1-green.svg lc_fontworkpropertypanel.svg lc_view.svg lc_numberformatdate.svg layout_textonly.svg lc_connectorlinearrows.svg lc_linetransparency.svg lc_entirerow.svg reglog.svg lc_objectforwardone.svg icon-set-grayarrows-slightly-up.svg barpercent3d_52x60.svg lc_insertsymbol.svg handle_start.svg toolbar-bg-logo.svg icon-set-shapes-triangle.svg layout_vertical01.svg lc_datadatapilotrun.svg lc_connectorline.svg x-office-drawing.svg close_toolbar.svg lc_charttypepanel.svg lc_insertslidetitlefield.svg icon-set-pies-empty.svg sidebar-modify-page-large-checked_impress_branding.svg lc_linestyle.svg sc_wrapright.svg lc_decrementlevel_branding.svg lc_fontworkshapetype.fontwork-slant-up.svg lc_flowchartshapes.flowchart-delay.svg valueaxisdirectpoints_52x60.svg layout_head02a.svg lc_downloadas-rtf.svg lc_showruler.svg lc_keyboardshortcuts.svg lc_objectbackone.svg layout_head02.svg conedeep_52x60.svg lc_sendtoback.svg lc_deletemajorgrid.svg lc_fontworkshapetype.fontwork-chevron-up.svg lc_styleapply3fstyle3astring3ddefault26familyname3astring3dcellstyles.svg lc_calloutshapes.line-callout-2.svg lc_insertminorgrid.svg lc_warn-copy-paste.svg lc_freezepanescolumn.svg lc_view100_branding.svg lc_formatdatalabel.svg lc_listitem-selected.svg lc_menu_downloadas_pdf_branding.svg lc_menu_chevron.svg popup_select_current.svg lc_customanimation.svg lc_alignhorizontalcenter.svg lc_fontworkshapetype.fontwork-curve-up.svg lc_redo.svg pie_52x60.svg lc_save.svg lc_linewidth.svg lc_formatgroup.svg tabstop-decimal.svg lc_verticalpos.svg lc_entirecell.svg lc_helpindex_secondary.svg columns3ddeep_52x60.svg lc_signature.svg layout_head03c.svg lc_arrangeframemenu.svg lc_onlinehelp.svg lc_leadingzeroes.svg nostacksteppedlines_52x60.svg freemium-illustration.svg conehoripercent_52x60.svg lc_inserthyperlink_branding.svg lc_calloutshapes.svg lc_inserthyperlink.svg lc_connectorcurve.svg lc_paraspaceincrease.svg lc_superscript.svg lc_chartelementspanel.svg scroll-double-white.svg lc_fillstyle.svg typepointline_16.svg lc_fontworkshapetype.fontwork-inflate.svg lc_styleapply3fstyle3astring3dgood26familyname3astring3dcellstyles.svg lc_delbreakmenu.svg lc_symbolshapes.octagon-bevel.svg lc_starshapes.vertical-scroll.svg lc_cellappearancepropertypanel.svg lc_setborderstyle_branding.svg lc_wrapcontour.svg lc_editmenu.svg nostacksmoothlines_52x60.svg lc_deleteaxis.svg lc_starshapes.doorplate.svg lc_alignbottom.svg lc_insertaxistitle.svg lc_backgroundcolor.svg lc_flowchartshapes.flowchart-summing-junction.svg lc_arrowshapes.left-arrow-callout.svg lc_fontworkshapetype.fontwork-wave.svg lc_cube.svg lc_setobjecttobackground.svg ui-icons_555555_256x240.png sidebar-modify-page-large-checked_writer_branding.svg plus.svg lc_insertdatefieldfix.svg lc_insertfieldctrl.svg layout_vertical02.svg ui-bg_glass_65_ffffff_1x400.png lc_insertcolumnsafter.svg ui-bg_diagonals-thick_20_666666_40x40.png lc_rotation.svg lc_entirecolumn.svg lc_arrowshapes.corner-right-arrow.svg lc_setborderstyle.svg lc_modifypage.svg lc_wrapanchoronly.svg lc_arrowshapes.up-arrow-callout.svg lc_fullscreen-presentation-toolbar-mobile.svg lc_basicshapes.right-triangle.svg errorright_30.svg unfold.svg barpercent_52x60.svg sidebar-animation-large-checked_branding.svg lc_underline.svg icon-set-neutral-yellow-smilie.svg conehori_52x60.svg | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.545429 [ loolwsd ] TRC Pre-read 1 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/src/layer/vector: CanvasOverlay.js | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.551130 [ loolwsd ] TRC Pre-read 6 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/src/layer/tile: CommentSection.js CanvasSectionContainer.js AutoFillMarkerSection.js CommentListSection.js ScrollSection.js TilesSection.js | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.555565 [ loolwsd ] TRC Pre-read 1 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/admin/css: bulma.min.css | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.566224 [ loolwsd ] TRC Pre-read 2 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/admin/font: Montserrat-Regular.ttf OFL.txt | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.566415 [ loolwsd ] TRC Pre-read 6 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/admin: admin.html adminAnalytics.html admintemplate.html adminLog.html adminSettings.html adminHistory.html | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.695905 [ loolwsd ] TRC Pre-read 127 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/l10n/uno: eu.json sv.json gd.json jv.json sk.json kok.json zh-CN.json pt-BR.json mr.json brx.json fa.json km.json is.json uz.json et.json lo.json he.json sa-IN.json kl.json ta.json ka.json es.json st.json cy.json si.json en-ZA.json ve.json kk.json de.json sat.json es-override.json pl.json nr.json gl.json ss.json ga.json lb.json as.json sr-Latn.json dz.json fi.json nso.json ca-valencia.json sah.json ast.json sr.json ar.json xh.json ca.json my.json tt.json mn.json ti.json ro.json gu.json id.json lv.json uk.json pa-IN.json ne.json sq.json or.json sid.json af.json ts.json fr.json ks.json vec.json th.json szl.json mni.json bs.json pt.json eo.json bn-IN.json tr.json ml.json tg.json sw-TZ.json br.json da.json bg.json gug.json nn.json lt.json zu.json mai.json az.json sd.json hu.json mk.json rw.json nb.json cs.json kab.json an.json hi.json te.json de-override.json kmr-Latn.json be.json ur.json nl.json ug.json el.json dsb.json am.json fy.json vi.json ab.json oc.json ru.json ko.json bo.json hsb.json sl.json en-GB.json hr.json ja.json om.json zh-TW.json ky.json tn.json kn.json it.json bn.json dgo.json | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.844843 [ loolwsd ] TRC Pre-read 126 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/l10n/locore: eu.json sv.json gd.json jv.json sk.json kok.json zh-CN.json pt-BR.json mr.json brx.json fa.json km.json is.json uz.json et.json lo.json he.json sa-IN.json kl.json ta.json hu-Hung.json ka.json es.json st.json cy.json si.json en-ZA.json ve.json kk.json de.json sat.json pl.json nr.json gl.json ss.json ga.json lb.json as.json sr-Latn.json dz.json fi.json nso.json ca-valencia.json sah.json ast.json sr.json ar.json xh.json ca.json my.json tt.json mn.json ti.json ro.json gu.json id.json lv.json uk.json pa-IN.json ne.json sq.json or.json sid.json af.json ts.json fr.json ks.json vec.json th.json szl.json mni.json bs.json pt.json eo.json bn-IN.json tr.json ml.json tg.json sw-TZ.json br.json da.json bg.json gug.json nn.json lt.json zu.json mai.json az.json sd.json hu.json mk.json rw.json nb.json cs.json kab.json an.json hi.json te.json kmr-Latn.json be.json ur.json nl.json ug.json el.json dsb.json am.json fy.json vi.json ab.json oc.json ru.json ko.json bo.json hsb.json sl.json en-GB.json hr.json ja.json om.json zh-TW.json ky.json tn.json kn.json it.json bn.json dgo.json | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.868342 [ loolwsd ] TRC Pre-read 175 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/l10n: descriptions-ru.json ui-en_GB.json ui-am.json ui-vi.json help-kk.json ui-zh_TW.json ui-oc.json ui-ab.json help-de.json ui-ru.json help-pl.json ui-ko.json help-gl.json help-ga.json descriptions-hr.json help-ast.json ui-sl.json uno-localizations-override.json ui-hr.json ui-zh_CN.json help-fi.json ui-pt_BR.json ui-ja.json ui-it.json ui-bn.json ui-ast.json ui-eu.json ui-sv.json ui-gd.json help-ar.json ui-sk.json ui-jv.json help-ca.json help-en_AU.json help-mn.json uno-localizations.json help-ro.json help-vec.json help-id.json ui-is.json help-lv.json ui-uz.json help-uk.json help-ne.json help-sq.json help-en_GB.json ui-et.json descriptions-en_AU.json ui-lo.json help-zh_TW.json help-af.json help-fr.json ui-en_ZA.json ui-vec.json ui-he.json help-bs.json help-pt.json descriptions-es.json ui-ta.json descriptions-en_GB.json help-eo.json help-gug.json help-zh_CN.json ui-es.json ui-en_NZ.json locore-localizations.json help-pt_BR.json ui-cy.json ui-si.json help-tr.json help-ml.json descriptions-de.json help-tg.json descriptions-pl.json help-br.json help-ca-valencia.json localizations.json help-da.json help-bg.json ui-kk.json help-nn.json ui-gug.json ui-de.json help-lt.json ui-pl.json ui-gl.json help-hu.json ui-ga.json help-kab.json ui-fi.json help-nb.json help-cs.json ui-pa_IN.json ui-kab.json help-en_ZA.json help-dsb.json help-hi.json ui-ar.json ui-ca.json descriptions-uk.json ui-ro.json help-be.json ui-ca-valencia.json help-en_NZ.json help-nl.json help-ug.json help-el.json ui-id.json ui-lv.json ui-uk.json descriptions-en_ZA.json ui-sq.json ui-ne.json ui-dsb.json descriptions-fr.json help-hsb.json help-am.json ui-bar.json help-fy.json help-vi.json help-ab.json help-oc.json admin-localizations.json help-ru.json help-ko.json ui-fr.json ui-af.json descriptions-en_NZ.json ui-th.json ui-bs.json ui-pt.json help-sl.json ui-hsb.json ui-eo.json descriptions-tr.json help-hr.json help-ja.json help-kn.json ui-tr.json help-it.json ui-ml.json help-bn.json help-brx.json help-localizations.json help-pa_IN.json help-eu.json ui-da.json help-sv.json help-gd.json ui-bg.json descriptions-hu.json ui-nn.json help-sk.json help-jv.json ui-lt.json ui-hu.json help-is.json help-uz.json descriptions-cs.json help-et.json ui-nb.json ui-cs.json help-he.json ui-an.json ui-hi.json help-ta.json ui-en_AU.json descriptions-nl.json help-es.json help-cy.json ui-be.json help-si.json ui-nl.json ui-ug.json ui-el.json | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.941984 [ loolwsd ] TRC Pre-read 36 file(s) from directory: /usr/share/loolwsd/loleaflet/dist/welcome: welcome-sl.html welcome-hr.html welcome-ja.html welcome-it.html welcome-bn.html welcome-eu.html welcome-sk.html welcome-is.html welcome-he.html welcome-es.html welcome-si.html welcome-de.html welcome-pl.html welcome-fi.html welcome-ca.html welcome.html welcome-id.html welcome-uk.html welcome-sq.html welcome-pt-BR.html welcome-fr.html welcome-th.html welcome-pt.html welcome-eo.html welcome-tr.html welcome-ml.html welcome-nn.html welcome-hu.html welcome-nb.html welcome-cs.html welcome-hsb.html welcome-nl.html welcome-el.html welcome-fy.html welcome-vi.html welcome-ru.html | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.942407 [ loolwsd ] TRC Pre-read 17 file(s) from directory: /usr/share/loolwsd/loleaflet/dist: signing-identities.html loleaflet-help.html branding.js branding-tablet.css global.js device-mobile.css bundle.css framed.doc.html branding-desktop.css admin-bundle.js device-tablet.css loleaflet.html device-desktop.css branding.css bundle.js branding-mobile.css framed.html | wsd/FileServer.cpp:599 wsd-00002-00002 2021-07-07 15:31:46.942561 [ loolwsd ] INF Adding trusted WOPI host: [**MY_DOMAIN**].| wsd/Storage.cpp:110 wsd-00002-00002 2021-07-07 15:31:46.942573 [ loolwsd ] INF Adding trusted WOPI host: [10\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}].| wsd/Storage.cpp:110 wsd-00002-00002 2021-07-07 15:31:46.942579 [ loolwsd ] INF Adding trusted WOPI host: [172\.1[6789]\.[0-9]{1,3}\.[0-9]{1,3}].| wsd/Storage.cpp:110 wsd-00002-00002 2021-07-07 15:31:46.942584 [ loolwsd ] INF Adding trusted WOPI host: [172\.2[0-9]\.[0-9]{1,3}\.[0-9]{1,3}].| wsd/Storage.cpp:110 wsd-00002-00002 2021-07-07 15:31:46.942589 [ loolwsd ] INF Adding trusted WOPI host: [172\.3[01]\.[0-9]{1,3}\.[0-9]{1,3}].| wsd/Storage.cpp:110 wsd-00002-00002 2021-07-07 15:31:46.942593 [ loolwsd ] INF Adding trusted WOPI host: [192\.168\.[0-9]{1,3}\.[0-9]{1,3}].| wsd/Storage.cpp:110 wsd-00002-00002 2021-07-07 15:31:46.942598 [ loolwsd ] INF Adding blocked WOPI host: [192\.168\.1\.1].| wsd/Storage.cpp:115 wsd-00002-00002 2021-07-07 15:31:46.943251 [ loolwsd ] INF Initialized Client SSL.| wsd/Storage.cpp:182 wsd-00002-00002 2021-07-07 15:31:46.943318 [ loolwsd ] INF AdminModel ctor.| wsd/AdminModel.hpp:310 wsd-00002-00002 2021-07-07 15:31:46.943327 [ loolwsd ] INF Admin ctor.| wsd/Admin.cpp:394 wsd-00002-00002 2021-07-07 15:31:46.943367 [ loolwsd ] TRC Total system memory: 65730312 KB.| wsd/Admin.cpp:397 wsd-00002-00002 2021-07-07 15:31:46.943560 [ loolwsd ] TRC Total available memory: 52584249 KB (memproportion: 80%).| wsd/Admin.cpp:404 wsd-00002-00002 2021-07-07 15:31:46.944297 [ loolwsd ] TRC Total memory used: 38537 KB.| wsd/Admin.cpp:407 wsd-00002-00002 2021-07-07 15:31:46.944328 [ loolwsd ] INF Loolwsd version details: 6.4.10 - 2c4ce99 - id b6361120 - on "Ubuntu 18.04.5 LTS"| wsd/LOOLWSD.cpp:4078 wsd-00002-00002 2021-07-07 15:31:46.945270 [ loolwsd ] INF Locale is set to C.UTF-8| wsd/LOOLWSD.cpp:4099 wsd-00002-00002 2021-07-07 15:31:46.945285 [ loolwsd ] DBG FileServerRoot: /usr/share/loolwsd| wsd/LOOLWSD.cpp:4118 wsd-00002-00002 2021-07-07 15:31:46.950368 [ loolwsd ] DBG #18 Created socket. Thread affinity set to 0x7f53364f6e00| ./net/Socket.hpp:351 wsd-00002-00002 2021-07-07 15:31:46.950407 [ loolwsd ] TRC #18 bind to: IPv6 port: 9980| net/Socket.cpp:686 wsd-00002-00002 2021-07-07 15:31:46.950414 [ loolwsd ] TRC #18 Listening| ./net/ServerSocket.hpp:72 wsd-00002-00002 2021-07-07 15:31:46.950418 [ loolwsd ] INF Listening to client connections on port 9980| wsd/LOOLWSD.cpp:4043 wsd-00002-00002 2021-07-07 15:31:46.950425 [ loolwsd ] TRC Creating thread for poll prisoner_poll| net/Socket.cpp:171 wsd-00002-00002 2021-07-07 15:31:46.950485 [ loolwsd ] DBG #19 Created socket. Thread affinity set to 0x7f53364f6e00| ./net/Socket.hpp:351 wsd-00002-00020 2021-07-07 15:31:46.950496 [ prisoner_poll ] INF Thread 20 (7f53341d4700) of process 2 formerly unnamed is now called [prisoner_poll].| common/Util.cpp:596 wsd-00002-00020 2021-07-07 15:31:46.950635 [ prisoner_poll ] INF Starting polling thread [prisoner_poll] with thread affinity set to 0x7f53341d4700.| net/Socket.cpp:217 wsd-00002-00020 2021-07-07 15:31:46.950643 [ prisoner_poll ] TRC ppoll start, timeoutMicroS: 5000000 size 0| net/Socket.cpp:259 wsd-00002-00002 2021-07-07 15:31:46.950633 [ loolwsd ] ERR #19 Bind to location loolwsd-h0WUZiJP result - 0 (EOPNOTSUPP: Operation not supported)| net/Socket.cpp:842 wsd-00002-00002 2021-07-07 15:31:46.950774 [ loolwsd ] TRC #19 Listening| ./net/ServerSocket.hpp:72 wsd-00002-00002 2021-07-07 15:31:46.950779 [ loolwsd ] INF Listening to prisoner connections on loolwsd-h0WUZiJP| wsd/LOOLWSD.cpp:3991 wsd-00002-00002 2021-07-07 15:31:46.950783 [ loolwsd ] DBG Inserting socket #19 into prisoner_poll| ./net/Socket.hpp:688 wsd-00002-00002 2021-07-07 15:31:46.950787 [ loolwsd ] DBG #19 Thread affinity set to 0 (was 0x7f53364f6e00).| ./net/Socket.hpp:310 wsd-00002-00002 2021-07-07 15:31:46.950796 [ loolwsd ] TRC Waiting for a new child for a max of 1000000ms| wsd/LOOLWSD.cpp:4149 wsd-00002-00020 2021-07-07 15:31:46.950806 [ prisoner_poll ] TRC Poll completed with 1 live polls max (5000000us)| net/Socket.cpp:278 wsd-00002-00020 2021-07-07 15:31:46.950812 [ prisoner_poll ] DBG #19 Thread affinity set to 0x7f53341d4700 (was 0).| ./net/Socket.hpp:310 wsd-00002-00020 2021-07-07 15:31:46.950817 [ prisoner_poll ] TRC PrisonerPoll - wakes up with 0 new children and 0 brokers and 0 kits forking| wsd/LOOLWSD.cpp:1958 wsd-00002-00020 2021-07-07 15:31:46.950834 [ prisoner_poll ] INF Creating new forkit process.| wsd/LOOLWSD.cpp:2002 wsd-00002-00020 2021-07-07 15:31:46.950850 [ prisoner_poll ] INF Launching forkit process: /usr/bin/loolforkit --losubpath=lo --systemplate=/opt/lool/systemplate --lotemplate=/opt/collaboraoffice6.4 --childroot=/opt/lool/child-roots/ --clientport=9980 --masterport=loolwsd-h0WUZiJP --rlimits=limit_virt_mem_mb:0;limit_stack_mem_kb:8000;limit_file_size_mb:0;limit_num_open_files:0 --version --ui=notebookbar| wsd/LOOLWSD.cpp:2075 wsd-00002-00020 2021-07-07 15:31:46.951475 [ prisoner_poll ] INF Forkit process launched: 21| wsd/LOOLWSD.cpp:2081 wsd-00002-00020 2021-07-07 15:31:46.951558 [ prisoner_poll ] TRC rebalance children to 1| wsd/LOOLWSD.cpp:464 wsd-00002-00020 2021-07-07 15:31:46.951609 [ prisoner_poll ] TRC ppoll start, timeoutMicroS: 5000000 size 1| net/Socket.cpp:259 wsd-00002-00020 2021-07-07 15:31:46.951838 [ prisoner_poll ] FTL Failed to exec command '/usr/bin/loolforkit' (EPERM: Operation not permitted)| common/Util.cpp:301 wsd-00002-00020 2021-07-07 15:31:51.956840 [ prisoner_poll ] TRC Poll completed with 0 live polls max (5000000us)(timedout)| net/Socket.cpp:278 wsd-00002-00020 2021-07-07 15:31:51.957001 [ prisoner_poll ] TRC ppoll start, timeoutMicroS: 5000000 size 1| net/Socket.cpp:259 wsd-00002-00020 2021-07-07 15:31:56.962229 [ prisoner_poll ] TRC Poll completed with 0 live polls max (5000000us)(timedout)| net/Socket.cpp:278 wsd-00002-00020 2021-07-07 15:31:56.962322 [ prisoner_poll ] TRC ppoll start, timeoutMicroS: 5000000 size 1| net/Socket.cpp:259 wsd-00002-00020 2021-07-07 15:32:01.962542 [ prisoner_poll ] TRC Poll completed with 0 live polls max (5000000us)(timedout)| net/Socket.cpp:278 wsd-00002-00020 2021-07-07 15:32:01.962587 [ prisoner_poll ] TRC ppoll start, timeoutMicroS: 5000000 size 1| net/Socket.cpp:259 wsd-00002-00020 2021-07-07 15:32:06.967510 [ prisoner_poll ] TRC Poll completed with 0 live polls max (5000000us)(timedout)| net/Socket.cpp:278 wsd-00002-00020 2021-07-07 15:32:06.967596 [ prisoner_poll ] TRC ppoll start, timeoutMicroS: 5000000 size 1| net/Socket.cpp:259 wsd-00002-00020 2021-07-07 15:32:11.972814 [ prisoner_poll ] TRC Poll completed with 0 live polls max (5000000us)(timedout)| net/Socket.cpp:278 wsd-00002-00020 2021-07-07 15:32:11.972910 [ prisoner_poll ] TRC ppoll start, timeoutMicroS: 5000000 size 1| net/Socket.cpp:259 wsd-00002-00020 2021-07-07 15:32:16.977437 [ prisoner_poll ] TRC Poll completed with 0 live polls max (5000000us)(timedout)| net/Socket.cpp:27 ```Desktop (please complete the following information) N/A
Smartphone (please complete the following information) N/A
Additional context
System:
podman version 3.2.0
So this seems to be this image: https://hub.docker.com/layers/collabora/code/latest/images/sha256-e36848aaac93dde580a4849432212e8ce088ac6d61e7da2093ee2c58341422d1?context=explore i.e. v6.4.10.3