[BUG] Rancher 2.7.0 Single Node Using Docker is Very Broken

[sarg3nt]

Rancher Server Setup

• Rancher version: 2.7.0
• Installation option Docker Install on Unraid
• Proxy/Cert Details:
  • Tried Self Signed by Rancher
  • Tried LetsEncrypt by Rancher
  • Tried using wildcard certs from LetsEncrypt that are valid

Describe the bug
A brand new install of Rancher seems to have many bugs out of the gate causing large parts of Rancher to be broken.

• With self signed certs behind a reverse proxy creating a custom cluster does not work, the interface does not display
• As far as I can tell due to other startup bugs it will never get to requesting a certificate from letsencrypt so that doesn't work at all
• With valid certs passed it does eventually start and I can get to the cluster creation screen but enabling the extension operator seems broken, probably due to other install bugs listed below
• Many many errors in log output that continue to loop and never succeed
  • [ERROR] Unknown error: Operation cannot be fulfilled on preferences.management.cattle.io "last-visited": the object has been modified; please apply your changes to the latest version and try again
  • [ERROR] failed to parse constraint version >= 2.7.0.0 < 2.8.0-0: improper constraint: >= 2.7.0.0 < 2.8.0-0
  • [ERROR] Failed to install system chart fleet: pod cattle-system/helm-operation-x8zjs failed, watch closed
  • [ERROR] Failed to install system chart fleet-crd: pod cattle-system/helm-operation-thhbw failed, watch closed
  • Above three repeat for eternity

To Reproduce
Install 2.7 fresh standalone via docker. I am on Unraid so I don't know if it will work in a standalone system.

Environment variables:
"Env": [
"TZ=America/Los_Angeles",
"HOST_OS=Unraid",
"HOST_HOSTNAME=Thor",
"HOST_CONTAINERNAME=rancher",
"TCP_PORT_80=80",
"TCP_PORT_443=443",
"CATTLE_BOOTSTRAP_PASSWORD=",
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"CATTLE_SYSTEM_CHART_DEFAULT_BRANCH=release-v2.7",
"CATTLE_CHART_DEFAULT_BRANCH=release-v2.7",
"CATTLE_PARTNER_CHART_DEFAULT_BRANCH=main",
"CATTLE_RKE2_CHART_DEFAULT_BRANCH=main",
"CATTLE_HELM_VERSION=v2.16.8-rancher2",
"CATTLE_MACHINE_VERSION=v0.15.0-rancher95",
"CATTLE_K3S_VERSION=v1.24.4+k3s1",
"CATTLE_MACHINE_PROVISION_IMAGE=rancher/machine:v0.15.0-rancher95",
"CATTLE_ETCD_VERSION=v3.5.1",
"LOGLEVEL_VERSION=v0.1.5",
"TINI_VERSION=v0.18.0",
"TELEMETRY_VERSION=v0.5.20",
"DOCKER_MACHINE_LINODE_VERSION=v0.1.8",
"LINODE_UI_DRIVER_VERSION=v0.4.0",
"DOCKER_MACHINE_HARVESTER_VERSION=v0.5.0",
"CATTLE_KDM_BRANCH=release-v2.7",
"HELM_VERSION=v3.9.0",
"KUSTOMIZE_VERSION=v4.5.5",
"CATTLE_WINS_AGENT_VERSION=v0.4.11",
"CATTLE_WINS_AGENT_INSTALL_SCRIPT=https://raw.githubusercontent.com/rancher/wins/v0.4.11/install.ps1",
"CATTLE_WINS_AGENT_UNINSTALL_SCRIPT=https://raw.githubusercontent.com/rancher/wins/v0.4.11/uninstall.ps1",
"CATTLE_WINS_AGENT_UPGRADE_IMAGE=rancher/wins:v0.4.11",
"CATTLE_CSI_PROXY_AGENT_VERSION=v1.1.1",
"CATTLE_SYSTEM_AGENT_VERSION=v0.2.13",
"CATTLE_SYSTEM_AGENT_INSTALL_SCRIPT=https://raw.githubusercontent.com/rancher/system-agent/v0.2.13/install.sh",
"CATTLE_SYSTEM_AGENT_UNINSTALL_SCRIPT=https://raw.githubusercontent.com/rancher/system-agent/v0.2.13/system-agent-uninstall.sh",
"CATTLE_SYSTEM_AGENT_UPGRADE_IMAGE=rancher/system-agent:v0.2.13-suc",
"CATTLE_SYSTEM_UPGRADE_CONTROLLER_CHART_VERSION=101.0.0+up0.3.3",
"CATTLE_FLEET_MIN_VERSION=101.0.0+up0.5.0",
"CATTLE_RANCHER_WEBHOOK_MIN_VERSION=2.0.0+up0.3.0",
"CATTLE_CSP_ADAPTER_MIN_VERSION=2.0.0",
"TINI_URL_amd64=https://github.com/krallin/tini/releases/download/v0.18.0/tini",
"TINI_URL_arm64=https://github.com/krallin/tini/releases/download/v0.18.0/tini-arm64",
"TINI_URL_s390x=https://github.com/krallin/tini/releases/download/v0.18.0/tini-s390x",
"TINI_URL=TINI_URL_amd64",
"HELM_URL_V2_amd64=https://github.com/rancher/helm/releases/download/v2.16.8-rancher2/rancher-helm",
"HELM_URL_V2_arm64=https://github.com/rancher/helm/releases/download/v2.16.8-rancher2/rancher-helm-arm64",
"HELM_URL_V2_s390x=https://github.com/rancher/helm/releases/download/v2.16.8-rancher2/rancher-helm-s390x",
"HELM_URL_V2=HELM_URL_V2_amd64",
"HELM_URL_V3=https://get.helm.sh/helm-v3.9.0-linux-amd64.tar.gz",
"TILLER_URL_amd64=https://github.com/rancher/helm/releases/download/v2.16.8-rancher2/rancher-tiller",
"TILLER_URL_arm64=https://github.com/rancher/helm/releases/download/v2.16.8-rancher2/rancher-tiller-arm64",
"TILLER_URL_s390x=https://github.com/rancher/helm/releases/download/v2.16.8-rancher2/rancher-tiller-s390x",
"TILLER_URL=TILLER_URL_amd64",
"ETCD_URL=https://github.com/etcd-io/etcd/releases/download/v3.5.1/etcd-v3.5.1-linux-amd64.tar.gz",
"KUSTOMIZE_URL=https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/v4.5.5/kustomize_v4.5.5_linux_amd64.tar.gz",
"CATTLE_UI_VERSION=2.7.0",
"CATTLE_DASHBOARD_UI_VERSION=v2.7.0",
"CATTLE_CLI_VERSION=v2.7.0",
"CATTLE_BASE_UI_BRAND=",
"CATTLE_API_UI_VERSION=1.1.9",
"AUDIT_LOG_PATH=/var/log/auditlog/rancher-api-audit.log",
"AUDIT_LOG_MAXAGE=10",
"AUDIT_LOG_MAXBACKUP=10",
"AUDIT_LOG_MAXSIZE=100",
"AUDIT_LEVEL=0",
"CATTLE_CLI_URL_DARWIN=https://releases.rancher.com/cli2/v2.7.0/rancher-darwin-amd64-v2.7.0.tar.gz",
"CATTLE_CLI_URL_LINUX=https://releases.rancher.com/cli2/v2.7.0/rancher-linux-amd64-v2.7.0.tar.gz",
"CATTLE_CLI_URL_WINDOWS=https://releases.rancher.com/cli2/v2.7.0/rancher-windows-386-v2.7.0.zip",
"CATTLE_SERVER_VERSION=v2.7.0",
"CATTLE_AGENT_IMAGE=rancher/rancher-agent:v2.7.0",
"CATTLE_SERVER_IMAGE=rancher/rancher",
"ETCDCTL_API=3",
"SSL_CERT_DIR=/etc/rancher/ssl"

Ran with the --no-cacerts flag

Result
Many errors in logs, many things do not work, very broken state.

Expected Result
Rancher works.

[sarg3nt]

I've investigated this some more and there appears to be something about hosting this in Docker on Unraid that is keeping Rancher from installing Fleet.
I have no outgoing proxy and no other outgoing firewall rules that I can think of.
This same error happens with 2.6 latest.
If I run 2.7 from WSL2 on Windows it seems to install fleet fine.
What is it about Unraid that could be causing the issue?

[sarg3nt]

Closing as I don't care any longer and this will never get looked at.