Env variable NEXTCLOUD_TRUSTED_CACERTS_DIR passed from docker-compose.yml with additional space at the end

[tall-r]

Steps to reproduce

1. Create docker-compose.yml to start nextcloud_aio_mastercontainer
2. Add environment variable NEXTCLOUD_TRUSTED_CACERTS_DIR=/srv/nextcloud/trusted_ca/
3. Run docker compose up and you will see the error

Expected behavior

nextcloud-aio-mastercontainer | You've set NEXTCLOUD_TRUSTED_CACERTS_DIR but not to an allowed value.
nextcloud-aio-mastercontainer | It should be an absolute path to a directory that starts with '/' but not end with '/'.
nextcloud-aio-mastercontainer | It is set to '/srv/nextcloud/trusted_ca/ '.
nextcloud-aio-mastercontainer exited with code 1 (restarting)

Actual behavior

Something add additional space at the end of variable and nextcloud didn't start.
As you can see in inspect section, the variable haven't additional space at the end.

Other information

Host OS

Output of sudo docker info

Client: Docker Engine - Community
 Version:    29.5.2
 Context:    default
 Debug Mode: false
 Plugins:
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.34.1
    Path:     /usr/libexec/docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v5.1.4
    Path:     /usr/libexec/docker/cli-plugins/docker-compose

Server:
 Containers: 12
  Running: 11
  Paused: 0
  Stopped: 1
 Images: 14
 Server Version: 29.5.2
 Storage Driver: overlayfs
  driver-type: io.containerd.snapshotter.v1
 Logging Driver: json-file
 Cgroup Driver: systemd
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 CDI spec directories:
  /etc/cdi
  /var/run/cdi
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 193637f7ee8ae5f5aa5248f49e7baa3e6164966e
 runc version: v1.3.5-0-g488fc13e
 init version: de40ad0
 Security Options:
  apparmor
  seccomp
   Profile: builtin
  cgroupns
 Kernel Version: 6.8.0-117-generic
 Operating System: Ubuntu 24.04.4 LTS
 OSType: linux
 Architecture: x86_64
 CPUs: 4
 Total Memory: 7.755GiB
 Name: *********
 ID: 66419e4e-afbb-4ed9-a54e-ed2d9c140519
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Experimental: false
 Insecure Registries:
  ::1/128
  127.0.0.0/8
 Live Restore Enabled: false
 Firewall Backend: iptables
  EnableUserlandProxy: true
  UserlandProxyPath: /usr/bin/docker-proxy

Docker run command or docker-compose file that you used

docker-compose.yml
services:
  nextcloud-aio-mastercontainer:
    container_name: nextcloud-aio-mastercontainer
    image: ghcr.io/nextcloud-releases/all-in-one:latest
    restart: always
    ports:
      - "8080:8080"

    volumes:
      - nextcloud_aio_mastercontainer:/mnt/docker-aio-config
      - /var/run/docker.sock:/var/run/docker.sock:ro

    environment:
      - APACHE_HOST=*******
      - APACHE_PORT=11000
      - SKIP_DOMAIN_VALIDATION=true
      - AIO_DISABLE_BACKUP_SECTION=true
      - "NEXTCLOUD_TRUSTED_CACERTS_DIR=/srv/nextcloud/trusted_ca/"
      - NEXTCLOUD_UPLOAD_LIMIT=16G


    depends_on:
      - caddy

  caddy:
    image: caddy:alpine
    restart: unless-stopped
    container_name: caddy
    volumes:
      - ./caddy/Caddyfile:/etc/caddy/Caddyfile
      - ./caddy/certs:/certs
      - ./caddy/config:/config
      - /srv/docker/caddy/data:/data
      - /srv/docker/caddy/sites:/srv
    network_mode: "host"

volumes:
  nextcloud_aio_mastercontainer:
    name: nextcloud_aio_mastercontainer
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/docker/nextcloud

Output of sudo docker logs nextcloud-aio-mastercontainer

nextcloud-aio-mastercontainer  | You've set NEXTCLOUD_TRUSTED_CACERTS_DIR but not to an allowed value.
nextcloud-aio-mastercontainer  | It should be an absolute path to a directory that starts with '/' but not end with '/'.
nextcloud-aio-mastercontainer  | It is set to '/srv/nextcloud/trusted_ca/ '.
nextcloud-aio-mastercontainer exited with code 1 (restarting)

Output of sudo docker inspect nextcloud-aio-mastercontainer

[
    {
        "Id": "9f83970c23e24b5e4b18e8c73ac4835e34e2aa03b53221a5bd9700598574d9b5",
        "Created": "2026-05-29T13:22:34.086355925Z",
        "Path": "/start.sh",
        "Args": [],
        "State": {
            "Status": "restarting",
            "Running": true,
            "Paused": false,
            "Restarting": true,
            "OOMKilled": false,
            "Dead": false,
            "Pid": 0,
            "ExitCode": 1,
            "Error": "",
            "StartedAt": "2026-05-29T13:26:22.228491534Z",
            "FinishedAt": "2026-05-29T13:26:22.644402994Z",
            "Health": {
                "Status": "unhealthy",
                "FailingStreak": 0,
                "Log": []
            }
        },
        "Image": "sha256:5d2d488a198b05875489510059f4e3115b9bda9c1b4feffd75cab387361e2292",
        "ResolvConfPath": "/var/lib/docker/containers/9f83970c23e24b5e4b18e8c73ac4835e34e2aa03b53221a5bd9700598574d9b5/resolv.conf",
        "HostnamePath": "/var/lib/docker/containers/9f83970c23e24b5e4b18e8c73ac4835e34e2aa03b53221a5bd9700598574d9b5/hostname",
        "HostsPath": "/var/lib/docker/containers/9f83970c23e24b5e4b18e8c73ac4835e34e2aa03b53221a5bd9700598574d9b5/hosts",
        "LogPath": "/var/lib/docker/containers/9f83970c23e24b5e4b18e8c73ac4835e34e2aa03b53221a5bd9700598574d9b5/9f83970c23e24b5e4b18e8c73ac4835e34e2aa03b53221a5bd9700598574d9b5-json.log",
        "Name": "/nextcloud-aio-mastercontainer",
        "RestartCount": 13,
        "Driver": "overlayfs",
        "Platform": "linux",
        "MountLabel": "",
        "ProcessLabel": "",
        "AppArmorProfile": "docker-default",
        "ExecIDs": null,
        "HostConfig": {
            "Binds": [
                "nextcloud_aio_mastercontainer:/mnt/docker-aio-config:rw",
                "/var/run/docker.sock:/var/run/docker.sock:ro"
            ],
            "ContainerIDFile": "",
            "LogConfig": {
                "Type": "json-file",
                "Config": {
                    "max-file": "3",
                    "max-size": "100m"
                }
            },
            "NetworkMode": "nextcloud_default",
            "PortBindings": {
                "8080/tcp": [
                    {
                        "HostIp": "",
                        "HostPort": "8080"
                    }
                ]
            },
            "RestartPolicy": {
                "Name": "always",
                "MaximumRetryCount": 0
            },
            "AutoRemove": false,
            "VolumeDriver": "",
            "VolumesFrom": null,
            "ConsoleSize": [
                0,
                0
            ],
            "CapAdd": null,
            "CapDrop": null,
            "CgroupnsMode": "private",
            "Dns": null,
            "DnsOptions": null,
            "DnsSearch": null,
            "ExtraHosts": [],
            "GroupAdd": null,
            "IpcMode": "private",
            "Cgroup": "",
            "Links": null,
            "OomScoreAdj": 0,
            "PidMode": "",
            "Privileged": false,
            "PublishAllPorts": false,
            "ReadonlyRootfs": false,
            "SecurityOpt": null,
            "UTSMode": "",
            "UsernsMode": "",
            "ShmSize": 67108864,
            "Runtime": "runc",
            "Isolation": "",
            "CpuShares": 0,
            "Memory": 0,
            "NanoCpus": 0,
            "CgroupParent": "",
            "BlkioWeight": 0,
            "BlkioWeightDevice": null,
            "BlkioDeviceReadBps": null,
            "BlkioDeviceWriteBps": null,
            "BlkioDeviceReadIOps": null,
            "BlkioDeviceWriteIOps": null,
            "CpuPeriod": 0,
            "CpuQuota": 0,
            "CpuRealtimePeriod": 0,
            "CpuRealtimeRuntime": 0,
            "CpusetCpus": "",
            "CpusetMems": "",
            "Devices": null,
            "DeviceCgroupRules": null,
            "DeviceRequests": null,
            "MemoryReservation": 0,
            "MemorySwap": 0,
            "MemorySwappiness": null,
            "OomKillDisable": null,
            "PidsLimit": null,
            "Ulimits": null,
            "CpuCount": 0,
            "CpuPercent": 0,
            "IOMaximumIOps": 0,
            "IOMaximumBandwidth": 0,
            "MaskedPaths": [
                "/proc/acpi",
                "/proc/asound",
                "/proc/interrupts",
                "/proc/kcore",
                "/proc/keys",
                "/proc/latency_stats",
                "/proc/sched_debug",
                "/proc/scsi",
                "/proc/timer_list",
                "/proc/timer_stats",
                "/sys/devices/virtual/powercap",
                "/sys/firmware"
            ],
            "ReadonlyPaths": [
                "/proc/bus",
                "/proc/fs",
                "/proc/irq",
                "/proc/sys",
                "/proc/sysrq-trigger"
            ]
        },
        "Storage": {
            "RootFS": {
                "Snapshot": {
                    "Name": "overlayfs"
                }
            }
        },
        "Mounts": [
            {
                "Type": "volume",
                "Name": "nextcloud_aio_mastercontainer",
                "Source": "/var/lib/docker/volumes/nextcloud_aio_mastercontainer/_data",
                "Destination": "/mnt/docker-aio-config",
                "Driver": "local",
                "Mode": "rw",
                "RW": true,
                "Propagation": ""
            },
            {
                "Type": "bind",
                "Source": "/var/run/docker.sock",
                "Destination": "/var/run/docker.sock",
                "Mode": "ro",
                "RW": false,
                "Propagation": "rprivate"
            }
        ],
        "Config": {
            "Hostname": "9f83970c23e2",
            "Domainname": "",
            "User": "root",
            "AttachStdin": false,
            "AttachStdout": true,
            "AttachStderr": true,
            "ExposedPorts": {
                "80/tcp": {},
                "8080/tcp": {},
                "8443/tcp": {},
                "9000/tcp": {}
            },
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "APACHE_HOST=************",
                "APACHE_PORT=11000",
                "SKIP_DOMAIN_VALIDATION=true",
                "AIO_DISABLE_BACKUP_SECTION=true",
                "NEXTCLOUD_TRUSTED_CACERTS_DIR=/srv/nextcloud/trusted_ca/",
                "NEXTCLOUD_UPLOAD_LIMIT=16G",
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                "PHPIZE_DEPS=autoconf \t\tdpkg-dev dpkg \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkgconf \t\tre2c",
                "PHP_INI_DIR=/usr/local/etc/php",
                "PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64",
                "PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64",
                "PHP_LDFLAGS=-Wl,-O1 -pie",
                "GPG_KEYS=1198C0117593497A5EC5C199286AF1F9897469DC 49D9AF6BC72A80D6691719C8AA23F5BE9C7097D4 D95C03BC702BE9515344AE3374E44BC9067701A5",
                "PHP_VERSION=8.5.6",
                "PHP_URL=https://www.php.net/distributions/php-8.5.6.tar.xz",
                "PHP_ASC_URL=https://www.php.net/distributions/php-8.5.6.tar.xz.asc",
                "PHP_SHA256=826c600b7c6f956bd335558ca3bdbcab23b22126c1cc8d9348be2280a2204bb7",
                "HOME=/var/www"
            ],
            "Cmd": null,
            "Healthcheck": {
                "Test": [
                    "CMD-SHELL",
                    "/healthcheck.sh"
                ]
            },
            "Image": "ghcr.io/nextcloud-releases/all-in-one:latest",
            "Volumes": null,
            "WorkingDir": "/var/www/docker-aio",
            "Entrypoint": [
                "/start.sh"
            ],
            "Labels": {
                "com.docker.compose.config-hash": "c18efdc796ea10ca86b42d792f6a97410eee9c8a098e712954003ce69775b4aa",
                "com.docker.compose.container-number": "1",
                "com.docker.compose.depends_on": "caddy:service_started:false",
                "com.docker.compose.image": "sha256:5d2d488a198b05875489510059f4e3115b9bda9c1b4feffd75cab387361e2292",
                "com.docker.compose.oneoff": "False",
                "com.docker.compose.project": "nextcloud",
                "com.docker.compose.project.config_files": "/srv/nextcloud/docker-compose.yml",
                "com.docker.compose.project.working_dir": "/srv/nextcloud",
                "com.docker.compose.replace": "nextcloud-aio-mastercontainer",
                "com.docker.compose.service": "nextcloud-aio-mastercontainer",
                "com.docker.compose.version": "5.1.4",
                "org.opencontainers.image.description": "Easy deployment and maintenance of a Nextcloud server with all dependencies and optional services",
                "org.opencontainers.image.documentation": "https://github.com/nextcloud/all-in-one/blob/main/readme.md",
                "org.opencontainers.image.source": "https://github.com/nextcloud/all-in-one",
                "org.opencontainers.image.title": "Nextcloud All-in-One Mastercontainer",
                "org.opencontainers.image.url": "https://github.com/nextcloud/all-in-one",
                "org.opencontainers.image.vendor": "Nextcloud",
                "wud.watch": "false"
            },
            "StopSignal": "SIGQUIT"
        },
        "NetworkSettings": {
            "SandboxID": "",
            "SandboxKey": "",
            "Ports": {},
            "Networks": {
                "nextcloud_default": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": [
                        "nextcloud-aio-mastercontainer",
                        "nextcloud-aio-mastercontainer"
                    ],
                    "DriverOpts": null,
                    "GwPriority": 0,
                    "NetworkID": "bc743ab1012012db4891e2b66f030f193a981a2216cd2d7badafc0cb316a1727",
                    "EndpointID": "",
                    "Gateway": "",
                    "IPAddress": "",
                    "MacAddress": "",
                    "IPPrefixLen": 0,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "DNSNames": [
                        "nextcloud-aio-mastercontainer",
                        "9f83970c23e2"
                    ]
                }
            }
        },
        "ImageManifestDescriptor": {
            "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
            "digest": "sha256:7aeedb5b3935ceed08b853ec822b9e85ff68e5db29a6d144ba2ac909af060dde",
            "size": 4500,
            "platform": {
                "architecture": "amd64",
                "os": "linux"
            }
        }
    }
]

Output of sudo docker ps -a

Other valuable info

[Zoey2936]

nextcloud-aio-mastercontainer | You've set NEXTCLOUD_TRUSTED_CACERTS_DIR but not to an allowed value.
nextcloud-aio-mastercontainer | It should be an absolute path to a directory that starts with '/' but not end with '/'.
nextcloud-aio-mastercontainer | It is set to '/srv/nextcloud/trusted_ca/ '.

I don't see an issue, the log says it should start with a / but not end with a /. But your env does end with a /

[tall-r]

Hi, take a look to environment variables in inspect section and you will see that there is no space after last slash, but in log (last row) you see additional space after last slash

[szaimen]

Hi,

environment:
...
- "NEXTCLOUD_TRUSTED_CACERTS_DIR=/srv/nextcloud/trusted_ca/"

"Env": [
...
"NEXTCLOUD_TRUSTED_CACERTS_DIR=/srv/nextcloud/trusted_ca/",

Based on thr above you should be able to make it work with NEXTCLOUD_TRUSTED_CACERTS_DIR=/srv/nextcloud/trusted_ca

[tall-r]

Yes it should but doesn’t work. Nextcloud wrote in log:
nextcloud-aio-mastercontainer | It is set to '/srv/nextcloud/trusted_ca/ '.
It “see” space after last slash

[szaimen]

Hi, have you tried to set the variabke to NEXTCLOUD_TRUSTED_CACERTS_DIR=/srv/nextcloud/trusted_ca as mentioend above?

[tall-r]

Hi, yes. I tried it today. It works at first look (no errors in log). Thank you.

Could you please explain one more - in documentation said that this path must be from host.
The value of the variables should be set to the absolute paths of the directory on the host, which contains one or more Certification Authorities certificates.

Does it mean that mastercontainer will bind it into containers?

[szaimen]

Does it mean that mastercontainer will bind it into containers?

Yes