search

mailcow / mailcow-dockerized

mailcow: dockerized - 🐮 + 🐋 = 💕
https://mailcow.email
GNU General Public License v3.0
8.65k stars 1.16k forks source link

Nextcloud - Mailcow - This version of nextcloud is not compatible with PHP>=8.2. You are currently running 8.2.4 #5163

Closed michaelortnersanube closed 1 year ago

michaelortnersanube commented 1 year ago

Contribution guidelines

I've found a bug and checked that ...

Description

Hello,

after upgrading to the latest version of mailcow, the nextcloud instance doesn't work anymore.

I get this message if i go to the site:

This version of Nextcloud is not compatible with PHP>=8.2.
You are currently running 8.2.4.

Logs:

ogo-ealarms-notify -p /etc/sogo/sieve.creds || exit 0"
mailcowdockerized-ofelia-mailcow-1     | 2023-04-03T15:49:47.32+02:00  common.go:125 ▶ NOTICE [Job "dovecot_repl_health" (285b234920e1)] Finished in "311.387286ms", failed: false, skipped: false, error: none
mailcowdockerized-ofelia-mailcow-1     | 2023-04-03T15:49:47.353+02:00  common.go:125 ▶ NOTICE [Job "dovecot_trim_logs" (a0c6f67312f3)] Finished in "341.948299ms", failed: false, skipped: false, error: none
mailcowdockerized-ofelia-mailcow-1     | 2023-04-03T15:49:47.38+02:00  common.go:125 ▶ NOTICE [Job "sogo_sessions" (866b9fe8fc45)] Finished in "369.207218ms", failed: false, skipped: false, error: none
mailcowdockerized-ofelia-mailcow-1     | 2023-04-03T15:49:47.444+02:00  common.go:125 ▶ NOTICE [Job "sogo_eautoreply" (17b66963df2a)] Finished in "432.451515ms", failed: false, skipped: false, error: none
mailcowdockerized-nginx-mailcow-1      | 172.22.1.10 - - [03/Apr/2023:15:46:47 +0200] "HEAD /forwardinghosts.php HTTP/1.1" 200 0 "-" "rspamd-3.5"
mailcowdockerized-ofelia-mailcow-1     | 2023-04-03T15:49:47.496+02:00  common.go:125 ▶ NOTICE [Job "dovecot_imapsync_runner" (9935689c4af3)] Finished in "482.956076ms", failed: false, skipped: false, error: none
mailcowdockerized-ofelia-mailcow-1     | 2023-04-03T15:49:47.548+02:00  common.go:125 ▶ NOTICE [Job "sogo_ealarms" (0da6043e64ba)] Finished in "532.996427ms", failed: false, skipped: false, error: none
mailcowdockerized-netfilter-mailcow-1  |   File "/usr/lib/python3.10/site-packages/redis/retry.py", line 46, in call_with_retry
mailcowdockerized-netfilter-mailcow-1  |     return do()
mailcowdockerized-netfilter-mailcow-1  |   File "/usr/lib/python3.10/site-packages/redis/connection.py", line 699, in <lambda>
mailcowdockerized-netfilter-mailcow-1  |     lambda: self._connect(), lambda error: self.disconnect(error)
mailcowdockerized-netfilter-mailcow-1  |   File "/usr/lib/python3.10/site-packages/redis/connection.py", line 987, in _connect
mailcowdockerized-netfilter-mailcow-1  |     raise err
mailcowdockerized-netfilter-mailcow-1  |   File "/usr/lib/python3.10/site-packages/redis/connection.py", line 975, in _connect
mailcowdockerized-netfilter-mailcow-1  |     log('info', message)
mailcowdockerized-netfilter-mailcow-1  |   File "/server.py", line 51, in log
mailcowdockerized-netfilter-mailcow-1  |     r.lpush('NETFILTER_LOG', json.dumps(tolog, ensure_ascii=False))
mailcowdockerized-netfilter-mailcow-1  |   File "/usr/lib/python3.10/site-packages/redis/commands/core.py", line 2695, in lpush
mailcowdockerized-netfilter-mailcow-1  |     return self.execute_command("LPUSH", name, *values)
mailcowdockerized-netfilter-mailcow-1  |   File "/usr/lib/python3.10/site-packages/redis/client.py", line 1258, in execute_command
mailcowdockerized-netfilter-mailcow-1  |     return conn.retry.call_with_retry(
mailcowdockerized-rspamd-mailcow-1     | 2023-04-03 15:43:10 #1(main) <b4if5y>; map; rspamd_map_add: added map /etc/rspamd/custom/bad_asn.map
mailcowdockerized-rspamd-mailcow-1     | 2023-04-03 15:43:10 #1(main) <sd3phz>; lua; multimap.lua:1249: added multimap rule: LOCAL_BL_ASN (asn)
mailcowdockerized-rspamd-mailcow-1     | 2023-04-03 15:43:10 #1(main) <sd3phz>; lua; lua_maps.lua:261: reuse url for https://maps.rspamd.com/freemail/disposable.txt.zst(hash)
mailcowdockerized-solr-mailcow-1       | 2023-04-03 13:44:51.266 INFO  (main) [   ] o.a.s.c.SolrXmlConfig MBean server found: com.sun.jmx.mbeanserver.JmxMBeanServer@1af2d44a, but no JMX reporters were configured - adding default JMX reporter.
mailcowdockerized-rspamd-mailcow-1     | 2023-04-03 15:43:10 #1(main) <sd3phz>; lua; multimap.lua:1249: added multimap rule: disposable_envrcpt (rcpt)
mailcowdockerized-solr-mailcow-1       | 2023-04-03 13:44:51.753 INFO  (main) [   ] o.a.s.c.SolrResourceLoader [null] Added 0 libs to classloader, from paths: []
mailcowdockerized-solr-mailcow-1       | 2023-04-03 13:44:52.111 INFO  (main) [   ] o.a.s.h.c.HttpShardHandlerFactory Host whitelist initialized: WhitelistHostChecker [whitelistHosts=null, whitelistHostCheckingEnabled=true]
mailcowdockerized-solr-mailcow-1       | 2023-04-03 13:44:53.041 INFO  (main) [   ] o.a.s.c.TransientSolrCoreCacheDefault Allocating transient cache for 2147483647 transient cores
mailcowdockerized-solr-mailcow-1       | 2023-04-03 13:44:53.046 INFO  (main) [   ] o.a.s.h.a.MetricsHistoryHandler No .system collection, keeping metrics history in memory.
mailcowdockerized-solr-mailcow-1       | 2023-04-03 13:44:53.168 INFO  (main) [   ] o.a.s.m.r.SolrJmxReporter JMX monitoring for 'solr.node' (registry 'solr.node') enabled at server: com.sun.jmx.mbeanserver.JmxMBeanServer@1af2d44a
mailcowdockerized-solr-mailcow-1       | 2023-04-03 13:44:53.169 INFO  (main) [   ] o.a.s.m.r.SolrJmxReporter JMX monitoring for 'solr.jvm' (registry 'solr.jvm') enabled at server: com.sun.jmx.mbeanserver.JmxMBeanServer@1af2d44a
mailcowdockerized-solr-mailcow-1       | 2023-04-03 13:44:53.178 INFO  (main) [   ] o.a.s.m.r.SolrJmxReporter JMX monitoring for 'solr.jetty' (registry 'solr.jetty') enabled at server: com.sun.jmx.mbeanserver.JmxMBeanServer@1af2d44a
mailcowdockerized-dovecot-mailcow-1    | Apr  3 15:48:55 2baa2b0f758f dovecot: lmtp(135): Disconnect from 172.22.1.8: Logged out (state=MAIL FROM)
mailcowdockerized-dovecot-mailcow-1    | Apr  3 15:48:55 2baa2b0f758f dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.8, lip=172.22.1.250, TLS, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
mailcowdockerized-dovecot-mailcow-1    | Apr  3 15:48:55 2baa2b0f758f dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.8, lip=172.22.1.250
mailcowdockerized-postfix-mailcow-1    | Apr  3 15:47:46 a6d0247e50c5 postfix/smtps/smtpd[350]: disconnect from unknown[141.98.10.159] ehlo=1 auth=0/1 rset=1 commands=2/3
mailcowdockerized-dovecot-mailcow-1    | Apr  3 15:48:55 2baa2b0f758f dovecot: managesieve-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=172.22.1.8, lip=172.22.1.250
mailcowdockerized-sogo-mailcow-1       | Apr  3 15:43:02 b7e65f522052 sogod [59]: <0x0x5582e5094bf0[WOHttpAdaptor]> notified the watchdog that we are ready
mailcowdockerized-sogo-mailcow-1       | Apr  3 15:43:02 b7e65f522052 sogod [67]: <0x0x5582e50868a0[WOHttpAdaptor]> notified the watchdog that we are ready
mailcowdockerized-sogo-mailcow-1       | Apr  3 15:43:02 b7e65f522052 sogod [58]: <0x0x5582e5096260[WOHttpAdaptor]> notified the watchdog that we are ready
mailcowdockerized-sogo-mailcow-1       | Apr  3 15:43:02 b7e65f522052 sogod [66]: <0x0x5582e5085840[WOHttpAdaptor]> notified the watchdog that we are ready
mailcowdockerized-postfix-mailcow-1    | Apr  3 15:47:48 a6d0247e50c5 postfix/smtps/smtpd[348]: warning: unknown[46.148.40.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
mailcowdockerized-postfix-mailcow-1    | Apr  3 15:47:48 a6d0247e50c5 postfix/smtps/smtpd[348]: lost connection after AUTH from unknown[46.148.40.82]
mailcowdockerized-postfix-mailcow-1    | Apr  3 15:47:48 a6d0247e50c5 postfix/smtps/smtpd[348]: disconnect from unknown[46.148.40.82] ehlo=1 auth=0/1 rset=1 commands=2/3
mailcowdockerized-postfix-mailcow-1    | Apr  3 15:47:50 a6d0247e50c5 postfix/smtps/smtpd[350]: warning: hostname srv-141-98-10-159.serveroffer.net does not resolve to address 141.98.10.159: Name or service not known
mailcowdockerized-postfix-mailcow-1    | Apr  3 15:47:50 a6d0247e50c5 postfix/smtps/smtpd[350]: connect from unknown[141.98.10.159]
mailcowdockerized-postfix-mailcow-1    | Apr  3 15:47:55 a6d0247e50c5 postfix/smtps/smtpd[350]: Anonymous TLS connection established from unknown[141.98.10.159]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
mailcowdockerized-sogo-mailcow-1       | Apr  3 15:43:02 b7e65f522052 sogod [62]: <0x0x5582e4efed00[WOHttpAdaptor]> notified the watchdog that we are ready
mailcowdockerized-sogo-mailcow-1       | Apr  3 15:43:02 b7e65f522052 sogod [65]: <0x0x5582e5084fc0[WOHttpAdaptor]> notified the watchdog that we are ready
mailcowdockerized-sogo-mailcow-1       | Apr  3 15:43:02 b7e65f522052 sogod [70]: <0x0x5582e50815b0[WOHttpAdaptor]> notified the watchdog that we are ready
mailcowdockerized-sogo-mailcow-1       | Apr  3 15:43:28 b7e65f522052 sogod [70]: <0x0x5582e4d2c450[SOGoCache]> Cache cleanup interval set every 900.000000 seconds
mailcowdockerized-sogo-mailcow-1       | Apr  3 15:43:28 b7e65f522052 sogod [70]: <0x0x5582e4d2c450[SOGoCache]> Using host(s) 'memcached' as server(s)
mailcowdockerized-solr-mailcow-1       | 2023-04-03 13:44:53.261 INFO  (main) [   ] o.a.s.c.CorePropertiesLocator Found 1 core definitions underneath /opt/solr/server/solr
mailcowdockerized-solr-mailcow-1       | 2023-04-03 13:44:53.263 INFO  (main) [   ] o.a.s.c.CorePropertiesLocator Cores are: [dovecot-fts]
mailcowdockerized-solr-mailcow-1       | 2023-04-03 13:44:53.379 INFO  (coreLoadExecutor-9-thread-1) [   x:dovecot-fts] o.a.s.c.SolrResourceLoader [dovecot-fts] Added 58 libs to classloader, from paths: [/opt/solr/contrib/clustering/lib, /opt/solr/contrib/extraction/lib, /opt/solr/contrib/langid/lib, /opt/solr/contrib/velocity/lib, /opt/solr/dist]
mailcowdockerized-solr-mailcow-1       | 2023-04-03 13:44:53.409 INFO  (main) [   ] o.e.j.s.h.ContextHandler Started o.e.j.w.WebAppContext@53142455{/solr,file:///opt/solr/server/solr-webapp/webapp/,AVAILABLE}{/opt/solr/server/solr-webapp/webapp}
mailcowdockerized-netfilter-mailcow-1  |   File "/usr/lib/python3.10/site-packages/redis/retry.py", line 49, in call_with_retry
mailcowdockerized-netfilter-mailcow-1  |     fail(error)
mailcowdockerized-netfilter-mailcow-1  |   File "/usr/lib/python3.10/site-packages/redis/client.py", line 1262, in <lambda>
mailcowdockerized-netfilter-mailcow-1  |     lambda error: self._disconnect_raise(conn, error),
mailcowdockerized-netfilter-mailcow-1  |   File "/usr/lib/python3.10/site-packages/redis/client.py", line 1248, in _disconnect_raise
mailcowdockerized-netfilter-mailcow-1  |     raise error

Steps to reproduce:

1. Update
2. Wait until the update
3. open the site of nextcloud

Which branch are you using?

master

Operating System:

Ubuntu 22.04.2 LTS x86_64

Server/VM specifications:

24GB RAM, 5 vCores, 100GB SSD

Is Apparmor, SELinux or similar active?

no

Virtualization technology:

KVM

Docker version:

23.0.1

docker-compose version or docker compose version:

v2.16.0

mailcow version:

2023-04

Reverse proxy:

Nginx

Logs of git diff:

diff --git a/docker-compose.yml b/docker-compose.yml
index a2d40cd8..e53db8d7 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -582,36 +582,6 @@ services:
           aliases:
             - ofelia

-    ipv6nat-mailcow:
-      depends_on:
-        - unbound-mailcow
-        - mysql-mailcow
-        - redis-mailcow
-        - clamd-mailcow
-        - rspamd-mailcow
-        - php-fpm-mailcow
-        - sogo-mailcow
-        - dovecot-mailcow
-        - postfix-mailcow
-        - memcached-mailcow
-        - nginx-mailcow
-        - acme-mailcow
-        - netfilter-mailcow
-        - watchdog-mailcow
-        - dockerapi-mailcow
-        - solr-mailcow
-      environment:
-        - TZ=${TZ}
-      image: robbertkl/ipv6nat
-      security_opt:
-        - label=disable
-      restart: always
-      privileged: true
-      network_mode: "host"
-      volumes:
-        - /var/run/docker.sock:/var/run/docker.sock:ro
-        - /lib/modules:/lib/modules:ro
-
 networks:
   mailcow-network:
     driver: bridge

Logs of iptables -L -vn:

# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
17157 4232K DOCKER-USER  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
17157 4232K DOCKER-ISOLATION-STAGE-1  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  docker0 docker0  0.0.0.0/0            0.0.0.0/0           
14099 3763K ACCEPT     all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
 1282 80895 DOCKER     all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
 1776  388K ACCEPT     all  --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           
 1249 78991 ACCEPT     all  --  br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.249         tcp dpt:6379
   10   540 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.7           tcp dpt:443
    2   104 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.7           tcp dpt:80
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.9           tcp dpt:8983
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.11          tcp dpt:3306
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:587
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:12345
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:4190
   20  1200 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:465
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:995
    1    60 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:25
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:993
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:143
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:110

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER-ISOLATION-STAGE-2  all  --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
 1776  388K DOCKER-ISOLATION-STAGE-2  all  --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           
17157 4232K RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-ISOLATION-STAGE-2 (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
 1776  388K RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
17157 4232K RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Logs of ip6tables -L -vn:

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 7902 4561K DOCKER-USER  all      *      *       ::/0                 ::/0                
 7902 4561K DOCKER-ISOLATION-STAGE-1  all      *      *       ::/0                 ::/0                
    0     0 ACCEPT     all      *      docker0  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
    0     0 DOCKER     all      *      docker0  ::/0                 ::/0                
    0     0 ACCEPT     all      docker0 !docker0  ::/0                 ::/0                
    0     0 ACCEPT     all      docker0 docker0  ::/0                 ::/0                
 3160 4226K ACCEPT     all      *      br-mailcow  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
 4400  302K DOCKER     all      *      br-mailcow  ::/0                 ::/0                
  342 32997 ACCEPT     all      br-mailcow !br-mailcow  ::/0                 ::/0                
 4399  302K ACCEPT     all      br-mailcow br-mailcow  ::/0                 ::/0                

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    72 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::9  tcp dpt:443
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::9  tcp dpt:80
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:587
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::10  tcp dpt:4190
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:465
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::10  tcp dpt:995
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:25
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::10  tcp dpt:993
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::10  tcp dpt:143
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::10  tcp dpt:110

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER-ISOLATION-STAGE-2  all      docker0 !docker0  ::/0                 ::/0                
  342 32997 DOCKER-ISOLATION-STAGE-2  all      br-mailcow !br-mailcow  ::/0                 ::/0                
 7902 4561K RETURN     all      *      *       ::/0                 ::/0                

Chain DOCKER-ISOLATION-STAGE-2 (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all      *      docker0  ::/0                 ::/0                
    0     0 DROP       all      *      br-mailcow  ::/0                 ::/0                
  342 32997 RETURN     all      *      *       ::/0                 ::/0                

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 7902 4561K RETURN     all      *      *       ::/0                 ::/0

Logs of iptables -L -vn -t nat:

# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  288 15600 DOCKER     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     all  --  *      *       0.0.0.0/0           !127.0.0.0/8          ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all  --  *      !docker0  172.17.0.0/16        0.0.0.0/0           
  771 56578 MASQUERADE  all  --  *      !br-mailcow  172.22.1.0/24        0.0.0.0/0           
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.249         172.22.1.249         tcp dpt:6379
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.7           172.22.1.7           tcp dpt:443
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.7           172.22.1.7           tcp dpt:80
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.9           172.22.1.9           tcp dpt:8983
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.11          172.22.1.11          tcp dpt:3306
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.253         172.22.1.253         tcp dpt:587
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:12345
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:4190
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.253         172.22.1.253         tcp dpt:465
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:995
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.253         172.22.1.253         tcp dpt:25
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:993
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:143
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:110

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  docker0 *       0.0.0.0/0            0.0.0.0/0           
    0     0 RETURN     all  --  br-mailcow *       0.0.0.0/0            0.0.0.0/0           
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:7654 to:172.22.1.249:6379
   10   540 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 to:172.22.1.7:443
    2   104 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 to:172.22.1.7:80
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:18983 to:172.22.1.9:8983
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:13306 to:172.22.1.11:3306
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:587 to:172.22.1.253:587
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:19991 to:172.22.1.250:12345
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:4190 to:172.22.1.250:4190
   45  2700 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:465 to:172.22.1.253:465
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:995 to:172.22.1.250:995
    1    60 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 to:172.22.1.253:25
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:993 to:172.22.1.250:993
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:143 to:172.22.1.250:143
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:110 to:172.22.1.250:110

Logs of ip6tables -L -vn -t nat:

# Warning: ip6tables-legacy tables present, use ip6tables-legacy to see them
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    5   392 DOCKER     all      *      *       ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     all      *      *       ::/0                !::1                  ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all      *      !docker0  fd00:dead:beef:c0::/80  ::/0                
  316 29022 MASQUERADE  all      *      !br-mailcow  fd4d:6169:6c63:6f77::/64  ::/0                
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::9  fd4d:6169:6c63:6f77::9  tcp dpt:443
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::9  fd4d:6169:6c63:6f77::9  tcp dpt:80
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:587
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::10  fd4d:6169:6c63:6f77::10  tcp dpt:4190
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:465
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::10  fd4d:6169:6c63:6f77::10  tcp dpt:995
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:25
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::10  fd4d:6169:6c63:6f77::10  tcp dpt:993
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::10  fd4d:6169:6c63:6f77::10  tcp dpt:143
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::10  fd4d:6169:6c63:6f77::10  tcp dpt:110

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all      docker0 *       ::/0                 ::/0                
    4   320 RETURN     all      br-mailcow *       ::/0                 ::/0                
    1    72 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:443 to:[fd4d:6169:6c63:6f77::9]:443
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:80 to:[fd4d:6169:6c63:6f77::9]:80
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:587 to:[fd4d:6169:6c63:6f77::f]:587
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:4190 to:[fd4d:6169:6c63:6f77::10]:4190
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:465 to:[fd4d:6169:6c63:6f77::f]:465
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:995 to:[fd4d:6169:6c63:6f77::10]:995
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:25 to:[fd4d:6169:6c63:6f77::f]:25
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:993 to:[fd4d:6169:6c63:6f77::10]:993
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:143 to:[fd4d:6169:6c63:6f77::10]:143
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:110 to:[fd4d:6169:6c63:6f77::10]:110

DNS check:

151.101.193.69
151.101.1.69
151.101.65.69
151.101.129.69
chriscroome commented 1 year ago

Nextcloud 25.x requires PHP 7.4-8.1 and Nextcloud 26.x requires PHP 8.0-8.2 so I guess that people should be advised to upgrade to Nextcloud 26 prior to applying Moopril Update 2023 - SOGo 5.8.2, Rspamd 3.5 and more?

You might still be able to update using the CLI?

master2die commented 1 year ago

Had same issue, could resolve it with this command: docker exec -it -u www-data $(docker ps -f name=php-fpm-mailcow -q) bash -c "php /web/nextcloud/updater/updater.phar"

michaelortnersanube commented 1 year ago

Hello,

thanks for help. The Command from you @master2die has not helped, because it says, that nextcloud has not be installed. I have restored a backup from my machine and update the nextcloud first until the 26.0.0 version. then i updated mailcow. Now its fine and working :)

anothergoodguy commented 1 year ago

I dont think it's completed. I still get the same error on our installation after mailcow upgrade...

With webupgrader it updates only till 22.2.10; during this upgrade, the nextcloud web upgrader is not running OCC with the following error :

f4a0fefebec4:/opt$ php /web/nextcloud/occ upgrade
This version of Nextcloud is not compatible with > PHP 8.0.<br/>You are currently running 8.2.4.f4a0fefebec4:/opt$