No way to do healthchecks in newer Docker image 25.04 due to curl being removed

[savely-krasovsky]

Is your feature request related to a problem?

After CODE 25.04 release docker image hasn't curl inside image. After that change there is no way to check CODE status and write healthcheck.

Describe the solution you'd like

Bring curl inside image back.

Describe alternatives you've considered

Create custom command to check that CODE is ready to serve requests

[jazevedo-coll]

I can confirm this issue with: collabora/code:25.04.1.1.1

[savely-krasovsky]

Temporary patch for podman healthcheck:

["/bin/bash", "-c", "exec 3<>/dev/tcp/127.0.0.1/9980 && echo -e 'GET /hosting/discovery HTTP/1.1\\r\\nHost: localhost:9980\\r\\n\\r\\n' >&3 && head -n 1 <&3 | grep '200 OK'"]

I wouldn't call it a solution since it's too obscure.

[timar]

@savely-krasovsky can please elaborate a bit this use case. How do you use curl inside the docker container for health checks? We do not want to break useful features, on the other hand there is a demand to keep the image minimal (not the size, rather the complexity).

[savely-krasovsky]

@timar OpenCloud uses healthchecks to make sure their WOPI server starts after Collabora, because they check that Collabora is alive and ready to handle requests. They implemented a simple healthcheck which makes curl -f http://localhost:9980/hosting/discovery and if it succeeds--container is alive and ready, after that using depends_on option in docker-compose.yml they start their collaboration server.

depends_on:
  opencloud:
    condition: service_started
  collabora:
    condition: service_healthy

After introducing 25.04 curl was removed from the image and that mechanism broke. They already applied my suggestion based on pure bash: https://github.com/opencloud-eu/opencloud/pull/793/files

But still I think you can just add command like /usr/bin/coolwsd --healthcheck which just checks if Collabora is ready. Or just put my bash script into dedicated file like /collabora-healthcheck.sh and document it somewhere.

[mritzmann]

can please elaborate a bit this use case.

My use case: Since the image has no health check, I created one.

my composer.yml with a healthcheck

services:
  collabora:
    image: collabora/code:25.04.2.1.1
    restart: always
    ports:
      - "127.0.0.1:9980:9980"
    healthcheck:
      test: "curl --max-time 10 --insecure https://127.0.0.1:9980 | grep OK"

However, this is no longer possible for v25:

• There is no curl or wget, or something else that can do https
• It is not possible to install curl manually, because of #12021

[savely-krasovsky]

@mritzmann it's possible to do bash voodoo magic, though it would be preferable to reintroduce curl:

test: ["CMD", "bash", "-c", "exec 3<>/dev/tcp/127.0.0.1/9980 && echo -e 'GET /hosting/discovery HTTP/1.1\r\nHost: localhost:9980\r\n\r\n' >&3 && head -n 1 <&3 | grep '200 OK'"]

[jazevedo-coll]

A second workaround would be to revert this commit locally and build the docker image: 8583b3e

We are still investigating this issue.