Permission denied: AH00072: make_sock: could not bind to address 0.0.0.0:80

[rahilarious]

Latest docker image is faulty it seems. To be specific sha256:2b298302ab50184cf99294ef3ae6a3c49c13081162e9a1d067a872e9c75b3e55
docker run -p 8080:80 -p 8443:443 linkstackorg/linkstack:latest

• ------------------------------------------------------------------ +
  | LINKSTACK v4.8.4 |
• ------------------------------------------------------------------ +
  | Updating Configuration: Apache Base (/etc/apache2/httpd.conf) |
  | Updating Configuration: Apache SSL (/etc/apache2/conf.d/ssl.conf) |
  | Updating Configuration: PHP (/etc/php83/40-custom.ini) |
  | Setting PHP Configuration: |
  | upload_max_filesize = 8M |
  | memory_limit = 256M |
  | date.timezone = UTC |
  | Updating Configuration: Complete |
  | ------------------------------------------------------------------ |
  | Running Apache |
• ------------------------------------------------------------------ +

(13)Permission denied: AH00072: make_sock: could not bind to address [::]:80
(13)Permission denied: AH00072: make_sock: could not bind to address 0.0.0.0:80
no listening sockets available, shutting down
AH00015: Unable to open logs

whereas old image works
docker run -p 8080:80 -p 8443:443 linkstackorg/linkstack@sha256:3b50576886035436fdfef627d1cc3200cfd2ad23a098ab2554afc3b40e1c5d8f

[lastsamurai26]

docker run -p 8080:80 -p 8443:443 linkstackorg/linkstack:latest

i don't know why ? but i can't reproduce it

did you run this via sudo ?

[rahilarious]

i don't know why ? but i can't reproduce it

I was able to reproduce this on Fedora 43 (permissive selinux) and Gentoo (no selinux/apparmor) with Podman 5.7.0. Adding --privileged wasn't of help either.

did you run this via sudo ?

yes

EDIT:
Ok found the real problem.
See

linkstack-docker/Dockerfile

Line 59 in 0e6b851

USER apache:apache

&

linkstack-docker/configs/apache2/httpd.conf

Line 62 in 0e6b851

Listen 80

both are conflicting.
User apache can't run httpd daemon with privileged ports (<1024) which is 80 in this case.

So solution is to either remove USER apache:apache line or change default port to 8080 (>1024) in httpd.conf & 8443 in ssl.conf. I prefer former as we're only echo-ing stuff in docker-entrypoint.sh so it is fine, also that is the standard way for docker images.

Temporary workarounds:
Add --user root. So final command docker run -p 8080:80 -p 8443:443 --user root linkstackorg/linkstack:latest (I did this)
or
Build new image FROM linkstackorg/linkstack:latest & edit /etc/apache2/httpd.conf /etc/apache2/conf.d/ssl.conf to edit default port to 8080 & 8443.

[lastsamurai26]

That's strange, why can't I understand that?

[rahilarious]

That's strange, why can't I understand that?

I tried my best to be clear & pointed out possible solutions as well. Feel free to elaborate on what you don't understand.