[BUG] Kasm 1.18.0-ls104 does not start - Docker Client version issue?

[krahl]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

lscr.io/linuxserver/kasm:latest (currently 1.18.0-ls104) does not start properly

Expected Behavior

Using lscr.io/linuxserver/kasm:latest should provide a working environment

Steps To Reproduce

Install lscr.io/linuxserver/kasm:1.18.0-ls104 and try to open Web UI

Environment

- OS: Debian 13.1 Trixie
- How docker service was installed: According to Docker Debian manuals (Docker version 28.5.1, build e180ab8)

CPU architecture

x86-64

Docker creation

---
services:
  kasm:
    image: lscr.io/linuxserver/kasm:1.18.0-ls103 # latest
    container_name: kasm
    privileged: true
    security_opt:
      - apparmor:rootlesskit #optional
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/dri/card0:/dev/dri/card0
      - /dev/dri/renderD128:/dev/dri/renderD128
      - /dev/net/tun
    environment:
      - KASM_PORT=443
      #- DOCKER_HUB_USERNAME=USER #optional
      #- DOCKER_HUB_PASSWORD=PASS #optional
      #- DOCKER_MTU=1500 #optional
    volumes:
      - /opt/kasm/data:/opt
      - /opt/kasm/profiles:/profiles #optional
      - /dev/input:/dev/input #optional
      - /run/udev/data:/run/udev/data #optional
    ports:
      #- 3003:3000 # installation wizard
      - 8101:443
    restart: unless-stopped

Container logs

[migrations] started
[migrations] no migrations found
usermod: no changes
───────────────────────────────────────
      ██╗     ███████╗██╗ ██████╗
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝
   Brought to you by linuxserver.io
───────────────────────────────────────
To support LSIO projects visit:
https://www.linuxserver.io/donate/
───────────────────────────────────────
GID/UID
───────────────────────────────────────
User UID:    911
User GID:    911
───────────────────────────────────────
Linuxserver.io version: 1.18.0-ls104
Build-date: 2025-11-11T21:46:25+00:00
───────────────────────────────────────
    
[custom-init] No custom files found, skipping...
[ls.io-init] done.
time="2025-11-12T09:20:41.991911956Z" level=error msg="error migrating propagated mount storage" dir=propagated-mount error="rename /mnt propagated-mount: invalid cross-device link"
time="2025-11-12T09:20:42Z" level=info msg=" * Serving Flask app 'plugin'" plugin=09c874686891a5c055cf19666b644de14fe94fa7833270c4d4b3646e3ba55139
time="2025-11-12T09:20:42Z" level=info msg=" * Debug mode: on" plugin=09c874686891a5c055cf19666b644de14fe94fa7833270c4d4b3646e3ba55139
time="2025-11-12T09:20:43.734270025Z" level=error msg="copy shim log" error="read /proc/self/fd/16: file already closed" namespace=moby
time="2025-11-12T09:20:43.735174263Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stdout
time="2025-11-12T09:20:43.735298450Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stderr
time="2025-11-12T09:20:43.745247087Z" level=error msg="copy shim log" error="read /proc/self/fd/19: file already closed" namespace=moby
time="2025-11-12T09:20:43.745797410Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stdout
time="2025-11-12T09:20:43.745828282Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stderr
time="2025-11-12T09:20:43.778511300Z" level=error msg="copy shim log" error="read /proc/self/fd/22: file already closed" namespace=moby
time="2025-11-12T09:20:43.779256147Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stdout
time="2025-11-12T09:20:43.779272841Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stderr
time="2025-11-12T09:20:43.821207563Z" level=error msg="copy shim log" error="read /proc/self/fd/16: file already closed" namespace=moby
time="2025-11-12T09:20:43.821226212Z" level=error msg="copy shim log" error="read /proc/self/fd/21: file already closed" namespace=moby
time="2025-11-12T09:20:43.821749295Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stdout
time="2025-11-12T09:20:43.821771297Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stdout
time="2025-11-12T09:20:43.821787432Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stderr
time="2025-11-12T09:20:43.821794766Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stderr
time="2025-11-12T09:20:43.831311748Z" level=error msg="failed to start container" container=9301a18ba0283975ac85d48c24cfa8388fd83d351b3be243ae1b3b48ac162bb5 error="failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied"
time="2025-11-12T09:20:43.843719413Z" level=error msg="copy shim log" error="read /proc/self/fd/19: file already closed" namespace=moby
time="2025-11-12T09:20:43.844440931Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stderr
time="2025-11-12T09:20:43.844623720Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stdout
time="2025-11-12T09:20:43.846305493Z" level=error msg="failed to start container" container=ce3c4210aaedb91b5f24a51d3ad6c5729300887ed799d1544c4873a1c6e350cf error="failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied"
time="2025-11-12T09:20:43.850616720Z" level=error msg="copy shim log" error="read /proc/self/fd/29: file already closed" namespace=moby
time="2025-11-12T09:20:43.851384895Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stdout
time="2025-11-12T09:20:43.851474858Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stderr
time="2025-11-12T09:20:43.859745494Z" level=error msg="89a956ff14902bbe12bb1b9f520d9b857650bdfd33b0de04d1faab3e42acc4de cleanup: failed to delete container from containerd: NotFound: container \"89a956ff14902bbe12bb1b9f520d9b857650bdfd33b0de04d1faab3e42acc4de\" in namespace \"moby\": not found"
time="2025-11-12T09:20:43.861819875Z" level=error msg="copy shim log" error="read /proc/self/fd/32: file already closed" namespace=moby
time="2025-11-12T09:20:43.862452967Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stdout
time="2025-11-12T09:20:43.862465260Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stderr
time="2025-11-12T09:20:43.865564505Z" level=error msg="copy shim log" error="read /proc/self/fd/22: file already closed" namespace=moby
time="2025-11-12T09:20:43.866125864Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stdout
time="2025-11-12T09:20:43.866143465Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stderr
time="2025-11-12T09:20:43.868865956Z" level=error msg="failed to start container" container=6218b8972c6f7d8225c3ffaa68f866ea500ccabda142c150fb6e0f4b80296d73 error="failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied"
time="2025-11-12T09:20:43.880189458Z" level=error msg="copy shim log" error="read /proc/self/fd/30: file already closed" namespace=moby
time="2025-11-12T09:20:43.880773657Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stdout
time="2025-11-12T09:20:43.880804669Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stderr
time="2025-11-12T09:20:43.883131547Z" level=error msg="failed to start container" container=eb3e43f58c635a31cf839388531d9e86f9a723de8e37a85fe6373b18207bc393 error="failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied"
time="2025-11-12T09:20:43.884420500Z" level=error msg="cbc99812225d9ab25cdb438c2916d138b039dda443f05c8aa3f9fedce3acf562 cleanup: failed to delete container from containerd: NotFound: container \"cbc99812225d9ab25cdb438c2916d138b039dda443f05c8aa3f9fedce3acf562\" in namespace \"moby\": not found"
time="2025-11-12T09:20:43.890338484Z" level=error msg="failed to start container" container=89a956ff14902bbe12bb1b9f520d9b857650bdfd33b0de04d1faab3e42acc4de error="failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied"
time="2025-11-12T09:20:43.890413011Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" namespace=moby
time="2025-11-12T09:20:43.890920239Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stdout
time="2025-11-12T09:20:43.890937701Z" level=error msg="copy stream failed" error="reading from a closed fifo" stream=stderr
time="2025-11-12T09:20:43.906632637Z" level=error msg="failed to start container" container=b88b8b477860a9d1021d005ac7a65f12028ebb6665f98ee04934a165758aa256 error="failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ping_group_range file: reopen fd 8: permission denied"
time="2025-11-12T09:20:43.918014252Z" level=error msg="failed to start container" container=24c657e0c4525c5ecfbc1332b33f11b9631aed1ceab91b250003d7362d72608a error="failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied"
time="2025-11-12T09:20:43.918320181Z" level=error msg="failed to start container" container=cbc99812225d9ab25cdb438c2916d138b039dda443f05c8aa3f9fedce3acf562 error="failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied"
time="2025-11-12T09:20:43.918887198Z" level=error msg="c2dbbc592870e03341b726b8bd2590e2084272598e8e165cfd2ade8d19835e8b cleanup: failed to delete container from containerd: NotFound: container \"c2dbbc592870e03341b726b8bd2590e2084272598e8e165cfd2ade8d19835e8b\" in namespace \"moby\": not found"
time="2025-11-12T09:20:43.919407277Z" level=error msg="d7d0e75400a1caf9d5ed3ca470593adfad40e862017c13b731a2a1d5f660962e cleanup: failed to delete container from containerd: NotFound: container \"d7d0e75400a1caf9d5ed3ca470593adfad40e862017c13b731a2a1d5f660962e\" in namespace \"moby\": not found"
time="2025-11-12T09:20:43.924297884Z" level=error msg="failed to start container" container=0ec81e5465430f1fbaa505d50bb7e992a557420ac28bd00a5c087da8a72fd442 error="failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied"
time="2025-11-12T09:20:43.937247071Z" level=error msg="failed to start container" container=c2dbbc592870e03341b726b8bd2590e2084272598e8e165cfd2ade8d19835e8b error="failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied"
time="2025-11-12T09:20:43.938238617Z" level=error msg="failed to start container" container=d7d0e75400a1caf9d5ed3ca470593adfad40e862017c13b731a2a1d5f660962e error="failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied"

[github-actions]

Thanks for opening your first issue here! Be sure to follow the relevant issue templates, or risk having this issue marked as invalid.

[krahl]

Latest commit 7c9a0ae included in 1.18.0-ls104 tag also updated Docker to v29 which enforces Docker Clients API to >= v1.44. Maybe Kasm uses an older Docker Client?

< docker-ce                                                                     5:28.5.1-1~ubuntu.24.04~noble           deb
< docker-ce-cli                                                                 5:28.5.1-1~ubuntu.24.04~noble           deb
---
> docker-ce                                                                     5:29.0.0-1~ubuntu.24.04~noble           deb
> docker-ce-cli                                                                 5:29.0.0-1~ubuntu.24.04~noble           deb

[thespad]

I can't replicate this with a clean install, is this an upgrade from a previous (pre-1.18.0) version?

[krahl]

Thanks for your tests!
Yes, my installation is an existing installation which I initially installed ~12 months ago. I also upgraded the internals to Kasm 17 a few months ago. And Watchtower updates the Container every night. My env still works with 1.18.0-ls103 tag.

I will try to reproduce the issue with a fresh installation when I have some time.

[JReming85]

Same for me, upgrade from 16 to 17 went fine, but upgrading from 17 to 18 failed.

It also never created the /opt/kasm/1.18.0 folder

[thespad]

Can you provide the output of docker exec kasm docker compose version ?

All the 1.18.0 images should have an up to date version of compose and it's not kept in persistent storage so I'm not clear why you're getting the errors.

I'm wondering if it's related to the docker libs in https://github.com/kasmtech/kasm-install-wizard but if it was that should also impact clear installs and it doesn't seem to be.

[thespad]

OK, not a client API issue, but this opencontainers/runc#4968 and not a problem with the container per se.

Still, going to pin docker to v28 in the image for a little while to keep things stable.