freedomofpress/dangerzone

Unknown Error Code '125'

Closed this issue · 32 comments

Hi all, I apologize I am not a developer, but I'm having an issue with the software ... lately, any time I try to convert any document, right away I receive the message "Unknown Error Code '125' ... is there anyone who can help me with this? I am using Macintosh OS with silicon chip.

Hi @andersonesque, thanks a lot for the bug report. We'll figure this out together. Can you tells us some more info about your environment?

  1. What is your macOS version (Sonoma, Ventura, etc.)?

  2. What is your Dangerzone version?

  3. Did conversions work before, and if yes, with what Dangerzone version?

  4. Have you started Docker Desktop before starting Dangerzone? Is its status green?

  5. Can you open a terminal, run the following command in it, and share the result?

    docker run hello-world
    
  6. When does this error get reported exactly? For instance, at what percent does the conversion reach at the time of this error?

Hi @apyrgio, thanks for your fast response.

  1. I'm running Sonoma 14.6.1
  2. I have Dangerzone 0.7.0
  3. yes, the conversions have always worked until recently. I'm trying to recall when this problem began, but I know that everything was fine before I upgraded. Not sure if this issue began right after the upgrade, but it has been ongoing for about a month. Sorry I can't be more helpful there. I tried uninstalling and reinstalling Dangerzone but that did not change anything.
  4. Yes, Docker Desktop is running and the status is green.
  5. See the attached screenshot. Hopefully I did this correctly, let me know if not.
  6. The error happens right away, before the conversion process begins.

Thank you!
Screenshot 2024-09-12 at 12 28 35 PM

Awesome, thanks for the info, and the screenshot looks great. You can copy-paste text as well if you want, and add it here between ``` tags.

The fact that Dangerzone stopped working after the upgrade is possible, since we've made an important change in 0.7.0 that has affected some users (in a different way than you though). Let's see if this is the case. From your terminal, can you run the following commands and paste the result here?

List all Docker images:

docker images

Attempt to convert a dummy file from the terminal:

touch dummy.pdf
/Applications/Dangerzone.app/Contents/MacOS/dangerzone-cli dummy.pdf

Attempt to run the Dangerzone container, with debug logs:

docker run --security-opt=no-new-privileges:true --cap-drop all --cap-add SYS_CHROOT --network=none -u dangerzone -e SC_DEBUG=1 --rm -i dangerzone.rocks/dangerzone /usr/bin/python3 -m dangerzone.conversion.doc_to_pixels

Great, thanks so much and see below:

 % docker images
REPOSITORY    TAG       IMAGE ID       CREATED         SIZE
hello-world   latest    91fb4b041da2   16 months ago   21kB
kaitlina@Kaitlins-MacBook-Air-2 ~ % touch dummy.pdf
/Applications/Dangerzone.app/Contents/MacOS/dangerzone-cli dummy.pdf
╭──────────────────────────╮
│           ▄██▄           │
│          ██████          │
│         ███▀▀▀██         │
│        ███   ████        │
│       ███   ██████       │
│      ███   ▀▀▀▀████      │
│     ███████  ▄██████     │
│    ███████ ▄█████████    │
│   ████████████████████   │
│    ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀    │
│                          │
│    Dangerzone v0.7.0     │
│ https://dangerzone.rocks │
╰──────────────────────────╯
Assigning ID 'svJ6-T' to doc '/Users/kaitlina/dummy.pdf'
Installing Dangerzone container image...
Loaded image: dangerzone.rocks/dangerzone:latest
Deleting old dangerzone container image
ERROR Failed to install the container image

Converting document to safe PDF
> /usr/local/bin/docker run --security-opt=no-new-privileges:true --cap-drop all --cap-add SYS_CHROOT --network=none -u dangerzone --rm -i --name dangerzone-doc-to-pixels-svJ6-T dangerzone.rocks/dangerzone /usr/bin/python3 -m dangerzone.conversion.doc_to_pixels
ERROR [doc svJ6-T] 0% Unknown error code '125'

Failed to convert document(s)
/Users/kaitlina/dummy.pdf
kaitlina@Kaitlins-MacBook-Air-2 ~ % docker run --security-opt=no-new-privileges:true --cap-drop all --cap-add SYS_CHROOT --network=none -u dangerzone -e SC_DEBUG=1 --rm -i dangerzone.rocks/dangerzone /usr/bin/python3 -m dangerzone.conversion.doc_to_pixels
Unable to find image 'dangerzone.rocks/dangerzone:latest' locally
docker: Error response from daemon: failed to resolve reference "dangerzone.rocks/dangerzone:latest": dangerzone.rocks/dangerzone:latest: not found.
See 'docker run --help'.

I'm experiencing the same error as OP above btw (identical OS + dangerzone versions).
Will share if I find a way to make it work on my machine =/

almet commented

Thanks for the information. For a reason I have yet to understand, Dangerzone fails to install the container image.

Can you please report what the following command outputs on your machine(s)?

gunzip -c /Applications/Dangerzone.app/Contents/Resources/share/container.tar.gz | docker load

And then listing again the images with :

docker images

Note

Because we are able to detect that the container image installation wasn't successful, we should display it to you in the interface. This is tracked by #193 (and hopefully will be solved soon).


Loaded image: dangerzone.rocks/dangerzone:latest
kaitlina@Kaitlins-MacBook-Air-2 ~ % docker images

REPOSITORY                    TAG       IMAGE ID       CREATED         SIZE
dangerzone.rocks/dangerzone   latest    d7ef23d41278   2 months ago    2.9GB
hello-world                   latest    91fb4b041da2   16 months ago   21kB
kaitlina@Kaitlins-MacBook-Air-2 ~ % 
almet commented

Thanks for trying it out. Can you try converting a document with Dangerzone now? (My understanding is that it should work)

If that's the case, it might be that the code we're using to gunzip the container image doesn't seem to work well on your machine.

Could you please give us a bit more details about your machine? (e.g. what's the specific model and cpu architecture), you can find this in "apple / about"

username@Laptop-S ~ % gunzip -c /Applications/Dangerzone.app/Contents/Resources/share/container.tar.gz | docker load
Loaded image: dangerzone.rocks/dangerzone:latest
username@Laptop-S ~ % docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
dangerzone.rocks/dangerzone latest d7ef23d41278 2 months ago 2.9GB

After I did this above^, I was able to process a PDF into a safe copy.
Will just need to save that command for now!

Machine: MacBook Air (Apple M3), Memory 16 GB, Sonoma 14.6.1

Dang, tried again and encountered the same error. Maybe I'm doing something incorrectly because the commenter above had a different experience.

% gunzip -c /Applications/Dangerzone.app/Contents/Resources/share/container.tar.gz | docker load
Loaded image: dangerzone.rocks/dangerzone:latest
kaitlina@Kaitlins-MacBook-Air-2 ~ % docker images
REPOSITORY    TAG       IMAGE ID       CREATED         SIZE
hello-world   latest    91fb4b041da2   16 months ago   21kB

My computer:

Model Name: MacBook Air
Model Identifier: MacBookAir10,1
Chip: Apple M1
Total Number of Cores: 8 (4 performance and 4 efficiency)
Memory: 8 GB

almet commented

@andersonesque thanks for trying this out, and sorry to hear that it didn't solve your problem.
Clearly, something weird is going on, probably with your Docker Desktop installation.

Could you please give us what the following command returns? (in backquotes as well):

docker info -f 'json'

If I was in your case, I would also try uninstalling and re-installing Docker Desktop, to see if the problem goes away.

Hey, thanks so much ... here's the code. i'll try your suggestion re: Docker and let you know. Thank you for helping me!

Editing to add that I purged all data in Docker and completely uninstalled/reinstalled, still having the issue. Thanks
KA

Last login: Sat Sep 14 16:20:35 on ttys000
kaitlina@Kaitlins-MacBook-Air-2 ~ % docker info -f 'json'
{"ID":"17f194b7-c289-4a28-a786-e0c8d3f54488","Containers":2,"ContainersRunning":0,"ContainersPaused":0,"ContainersStopped":2,"Images":1,"Driver":"overlayfs","DriverStatus":[["driver-type","io.containerd.snapshotter.v1"]],"Plugins":{"Volume":["local"],"Network":["bridge","host","ipvlan","macvlan","null","overlay"],"Authorization":null,"Log":["awslogs","fluentd","gcplogs","gelf","journald","json-file","local","splunk","syslog"]},"MemoryLimit":true,"SwapLimit":true,"CpuCfsPeriod":true,"CpuCfsQuota":true,"CPUShares":true,"CPUSet":true,"PidsLimit":true,"IPv4Forwarding":true,"BridgeNfIptables":true,"BridgeNfIp6tables":true,"Debug":false,"NFd":51,"OomKillDisable":false,"NGoroutines":78,"SystemTime":"2024-09-16T15:22:36.420511097Z","LoggingDriver":"json-file","CgroupDriver":"cgroupfs","CgroupVersion":"2","NEventsListener":11,"KernelVersion":"6.10.4-linuxkit","OperatingSystem":"Docker Desktop","OSVersion":"","OSType":"linux","Architecture":"aarch64","IndexServerAddress":"https://index.docker.io/v1/","RegistryConfig":{"AllowNondistributableArtifactsCIDRs":null,"AllowNondistributableArtifactsHostnames":null,"InsecureRegistryCIDRs":["127.0.0.0/8"],"IndexConfigs":{"docker.io":{"Name":"docker.io","Mirrors":[],"Secure":true,"Official":true},"hubproxy.docker.internal:5555":{"Name":"hubproxy.docker.internal:5555","Mirrors":[],"Secure":false,"Official":false}},"Mirrors":null},"NCPU":8,"MemTotal":4111306752,"GenericResources":null,"DockerRootDir":"/var/lib/docker","HttpProxy":"http.docker.internal:3128","HttpsProxy":"http.docker.internal:3128","NoProxy":"hubproxy.docker.internal","Name":"docker-desktop","Labels":["com.docker.desktop.address=unix:///Users/kaitlina/Library/Containers/com.docker.docker/Data/docker-cli.sock"],"ExperimentalBuild":false,"ServerVersion":"27.2.0","Runtimes":{"io.containerd.runc.v2":{"path":"runc"},"runc":{"path":"runc"}},"DefaultRuntime":"runc","Swarm":{"NodeID":"","NodeAddr":"","LocalNodeState":"inactive","ControlAvailable":false,"Error":"","RemoteManagers":null},"LiveRestoreEnabled":false,"Isolation":"","InitBinary":"docker-init","ContainerdCommit":{"ID":"8fc6bcff51318944179630522a095cc9dbf9f353","Expected":"8fc6bcff51318944179630522a095cc9dbf9f353"},"RuncCommit":{"ID":"v1.1.13-0-g58aa920","Expected":"v1.1.13-0-g58aa920"},"InitCommit":{"ID":"de40ad0","Expected":"de40ad0"},"SecurityOptions":["name=seccomp,profile=unconfined","name=cgroupns"],"CDISpecDirs":[],"Warnings":["WARNING: daemon is not using the default seccomp profile"],"ClientInfo":{"Debug":false,"Version":"27.2.0","GitCommit":"3ab4256","GoVersion":"go1.21.13","Os":"darwin","Arch":"arm64","BuildTime":"Tue Aug 27 14:14:45 2024","Context":"desktop-linux","Plugins":[{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v0.16.2-desktop.1","ShortDescription":"Docker Buildx","Name":"buildx","Path":"/Users/kaitlina/.docker/cli-plugins/docker-buildx"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v2.29.2-desktop.2","ShortDescription":"Docker Compose","Name":"compose","Path":"/Users/kaitlina/.docker/cli-plugins/docker-compose"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"0.0.34","ShortDescription":"Get a shell into any image or container","Name":"debug","Path":"/Users/kaitlina/.docker/cli-plugins/docker-debug"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v0.0.15","ShortDescription":"Docker Desktop commands (Alpha)","Name":"desktop","Path":"/Users/kaitlina/.docker/cli-plugins/docker-desktop"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v0.1.2","ShortDescription":"Docker Dev Environments","Name":"dev","Path":"/Users/kaitlina/.docker/cli-plugins/docker-dev"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v0.2.25","ShortDescription":"Manages Docker extensions","Name":"extension","Path":"/Users/kaitlina/.docker/cli-plugins/docker-extension"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v1.0.5","ShortDescription":"Provide feedback, right in your terminal!","Name":"feedback","Path":"/Users/kaitlina/.docker/cli-plugins/docker-feedback"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v1.3.0","ShortDescription":"Creates Docker-related starter files for your project","Name":"init","Path":"/Users/kaitlina/.docker/cli-plugins/docker-init"},{"SchemaVersion":"0.1.0","Vendor":"Anchore Inc.","Version":"0.6.0","ShortDescription":"View the packaged-based Software Bill Of Materials (SBOM) for an image","URL":"https://github.com/docker/sbom-cli-plugin","Name":"sbom","Path":"/Users/kaitlina/.docker/cli-plugins/docker-sbom"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v1.13.0","ShortDescription":"Docker Scout","Name":"scout","Path":"/Users/kaitlina/.docker/cli-plugins/docker-scout"}],"Warnings":null}}

Ok! It is now working! I tried uninstall/reinstall one last time and it seemed to do the trick. Thank you all so much for your help! Take care.

Thanks again from me too! So helpful!

almet commented

Glad it helped (even if I still wonder what caused this 👀 )

almet commented

@andersonesque just for the sake of trying to understand and prevent problems for others, could you let me know what the command now returns for you? (So I can compare the outputs before and after reinstallation)

docker info -f 'json'

Yes, a mystery but I'm happy it's now working. There was some integrity issue detected when I was troubleshooting in
Docker before reinstalling ... no clue whether relevant lol but took a screenshot in case it helps ... thanks!

% docker info -f 'json'
{"ID":"d83a1577-f7d5-4a86-8217-9f1f26a850df","Containers":0,"ContainersRunning":0,"ContainersPaused":0,"ContainersStopped":0,"Images":1,"Driver":"overlay2","DriverStatus":[["Backing Filesystem","extfs"],["Supports d_type","true"],["Using metacopy","false"],["Native Overlay Diff","true"],["userxattr","false"]],"Plugins":{"Volume":["local"],"Network":["bridge","host","ipvlan","macvlan","null","overlay"],"Authorization":null,"Log":["awslogs","fluentd","gcplogs","gelf","journald","json-file","local","splunk","syslog"]},"MemoryLimit":true,"SwapLimit":true,"CpuCfsPeriod":true,"CpuCfsQuota":true,"CPUShares":true,"CPUSet":true,"PidsLimit":true,"IPv4Forwarding":true,"BridgeNfIptables":true,"BridgeNfIp6tables":true,"Debug":false,"NFd":47,"OomKillDisable":false,"NGoroutines":68,"SystemTime":"2024-09-17T03:24:12.37935722Z","LoggingDriver":"json-file","CgroupDriver":"cgroupfs","CgroupVersion":"2","NEventsListener":8,"KernelVersion":"6.10.4-linuxkit","OperatingSystem":"Docker Desktop","OSVersion":"","OSType":"linux","Architecture":"aarch64","IndexServerAddress":"https://index.docker.io/v1/","RegistryConfig":{"AllowNondistributableArtifactsCIDRs":null,"AllowNondistributableArtifactsHostnames":null,"InsecureRegistryCIDRs":["127.0.0.0/8"],"IndexConfigs":{"docker.io":{"Name":"docker.io","Mirrors":[],"Secure":true,"Official":true},"hubproxy.docker.internal:5555":{"Name":"hubproxy.docker.internal:5555","Mirrors":[],"Secure":false,"Official":false}},"Mirrors":null},"NCPU":8,"MemTotal":4111306752,"GenericResources":null,"DockerRootDir":"/var/lib/docker","HttpProxy":"http.docker.internal:3128","HttpsProxy":"http.docker.internal:3128","NoProxy":"hubproxy.docker.internal","Name":"docker-desktop","Labels":["com.docker.desktop.address=unix:///Users/kaitlina/Library/Containers/com.docker.docker/Data/docker-cli.sock"],"ExperimentalBuild":false,"ServerVersion":"27.2.0","Runtimes":{"io.containerd.runc.v2":{"path":"runc"},"runc":{"path":"runc"}},"DefaultRuntime":"runc","Swarm":{"NodeID":"","NodeAddr":"","LocalNodeState":"inactive","ControlAvailable":false,"Error":"","RemoteManagers":null},"LiveRestoreEnabled":false,"Isolation":"","InitBinary":"docker-init","ContainerdCommit":{"ID":"8fc6bcff51318944179630522a095cc9dbf9f353","Expected":"8fc6bcff51318944179630522a095cc9dbf9f353"},"RuncCommit":{"ID":"v1.1.13-0-g58aa920","Expected":"v1.1.13-0-g58aa920"},"InitCommit":{"ID":"de40ad0","Expected":"de40ad0"},"SecurityOptions":["name=seccomp,profile=unconfined","name=cgroupns"],"CDISpecDirs":[],"Warnings":["WARNING: daemon is not using the default seccomp profile"],"ClientInfo":{"Debug":false,"Version":"27.2.0","GitCommit":"3ab4256","GoVersion":"go1.21.13","Os":"darwin","Arch":"arm64","BuildTime":"Tue Aug 27 14:14:45 2024","Context":"desktop-linux","Plugins":[{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v0.16.2-desktop.1","ShortDescription":"Docker Buildx","Name":"buildx","Path":"/Users/kaitlina/.docker/cli-plugins/docker-buildx"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v2.29.2-desktop.2","ShortDescription":"Docker Compose","Name":"compose","Path":"/Users/kaitlina/.docker/cli-plugins/docker-compose"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"0.0.34","ShortDescription":"Get a shell into any image or container","Name":"debug","Path":"/Users/kaitlina/.docker/cli-plugins/docker-debug"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v0.0.15","ShortDescription":"Docker Desktop commands (Alpha)","Name":"desktop","Path":"/Users/kaitlina/.docker/cli-plugins/docker-desktop"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v0.1.2","ShortDescription":"Docker Dev Environments","Name":"dev","Path":"/Users/kaitlina/.docker/cli-plugins/docker-dev"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v0.2.25","ShortDescription":"Manages Docker extensions","Name":"extension","Path":"/Users/kaitlina/.docker/cli-plugins/docker-extension"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v1.0.5","ShortDescription":"Provide feedback, right in your terminal!","Name":"feedback","Path":"/Users/kaitlina/.docker/cli-plugins/docker-feedback"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v1.3.0","ShortDescription":"Creates Docker-related starter files for your project","Name":"init","Path":"/Users/kaitlina/.docker/cli-plugins/docker-init"},{"SchemaVersion":"0.1.0","Vendor":"Anchore Inc.","Version":"0.6.0","ShortDescription":"View the packaged-based Software Bill Of Materials (SBOM) for an image","URL":"https://github.com/docker/sbom-cli-plugin","Name":"sbom","Path":"/Users/kaitlina/.docker/cli-plugins/docker-sbom"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v1.13.0","ShortDescription":"Docker Scout","Name":"scout","Path":"/Users/kaitlina/.docker/cli-plugins/docker-scout"}],"Warnings":null}}

Screenshot 2024-09-16 at 8 48 57 AM

almet commented

Thanks for sharing this. Here is a diff between the two outputs. Driver type was io.containerd.snapshotter.v1 which seem suspicious to me.

2,3c2,3
<...snip...>
<   "Driver": "overlayfs",
---
>   "Driver": "overlay2",
11,12c11,28
<       "driver-type",
<       "io.containerd.snapshotter.v1"
---
>       "Backing Filesystem",
>       "extfs"
>     ],
>     [
>       "Supports d_type",
>       "true"
>     ],
>     [
>       "Using metacopy",
>       "false"
>     ],
>     [
>       "Native Overlay Diff",
>       "true"
>     ],
>     [
>       "userxattr",
>       "false"
<...snip...>

I'll leave it here for now, thanks for following-up!

Thanks for sharing this. Here is a diff between the two outputs. Driver type was io.containerd.snapshotter.v1 which seem suspicious to me.

2,3c2,3
<...snip...>
<   "Driver": "overlayfs",
---
>   "Driver": "overlay2",
11,12c11,28
<       "driver-type",
<       "io.containerd.snapshotter.v1"
---
>       "Backing Filesystem",
>       "extfs"
>     ],
>     [
>       "Supports d_type",
>       "true"
>     ],
>     [
>       "Using metacopy",
>       "false"
>     ],
>     [
>       "Native Overlay Diff",
>       "true"
>     ],
>     [
>       "userxattr",
>       "false"
<...snip...>

I'll leave it here for now, thanks for following-up!

I'm having the same issue, also on MacOS Sonoma 14.6.1 and Dangerzone 0.7.0.

I've tried reinstalling Dangerzone from the website and using Homebrew.

Can I provide any more info to help you help me? Thanks!

HI @charginglabrador! Thanks a lot for chiming in. Let's see what's the case in your installation.

If you're comfortable with the CLI, can you please run these Docker commands, so that we can see its state?

docker version
docker info -f 'json'
docker images
docker run hello-world

Then try to convert a dummy file from the terminal:

touch dummy.pdf
/Applications/Dangerzone.app/Contents/MacOS/dangerzone-cli dummy.pdf

And finally, attempt to run the Dangerzone container, with debug logs:

docker run --security-opt=no-new-privileges:true --cap-drop all --cap-add SYS_CHROOT --network=none -u dangerzone -e SC_DEBUG=1 --rm -i dangerzone.rocks/dangerzone /usr/bin/python3 -m dangerzone.conversion.doc_to_pixels

Thanks a bunch!

Have the same issue macOS 14.7, latest docker desktop installed. Happy to run whatever you need to get more info to track this down. Let me know.

Hi @phillipmcmahon. It seems that lots of people have started to pile up on this issue, so let's reopen it.

Can you perhaps run the commands I mentioned to @charginglabrador above?

Hi @phillipmcmahon. It seems that lots of people have started to pile up on this issue, so let's reopen it.

Can you perhaps run the commands I mentioned to @charginglabrador above?

phillipmcmahon@mymacbook ~ % docker run hello-world
Unable to find image 'hello-world:latest' locally
latest: Pulling from library/hello-world
478afc919002: Download complete
Digest: sha256:91fb4b041da273d5a3273b6d587d62d518300a6ad268b28628f74997b93171b2
Status: Downloaded newer image for hello-world:latest

Hello from Docker!
This message shows that your installation appears to be working correctly.

To generate this message, Docker took the following steps:

  1. The Docker client contacted the Docker daemon.
  2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
    (arm64v8)
  3. The Docker daemon created a new container from that image which runs the
    executable that produces the output you are currently reading.
  4. The Docker daemon streamed that output to the Docker client, which sent it
    to your terminal.

To try something more ambitious, you can run an Ubuntu container with:
$ docker run -it ubuntu bash

Share images, automate workflows, and more with a free Docker ID:
https://hub.docker.com/

For more examples and ideas, visit:
https://docs.docker.com/get-started/

See attached files.

docker_images.txt
docker_info.txt
docker_version.txt

/Applications/Dangerzone.app/Contents/MacOS/dangerzone-cli dummy.pdf

phillipmcmahon@mymacbook ~ % docker images
REPOSITORY                             TAG       IMAGE ID       CREATED         SIZE
portainer/portainer-docker-extension   2.21.2    497c57827bee   47 hours ago    383MB
docker/logs-explorer-extension         0.2.6     417dd9a8f96d   7 months ago    17.9MB
hello-world                            latest    91fb4b041da2   17 months ago   21kB
phillipmcmahon@mymacbook ~ % touch dummy.pdf
phillipmcmahon@mymacbook ~ % /Applications/Dangerzone.app/Contents/MacOS/dangerzone-cli dummy.pdf
╭──────────────────────────╮
│           ▄██▄           │
│          ██████          │
│         ███▀▀▀██         │
│        ███   ████        │
│       ███   ██████       │
│      ███   ▀▀▀▀████      │
│     ███████  ▄██████     │
│    ███████ ▄█████████    │
│   ████████████████████   │
│    ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀    │
│                          │
│    Dangerzone v0.7.0     │
│ https://dangerzone.rocks │
╰──────────────────────────╯
Assigning ID '_yFS3q' to doc '/Users/phillipmcmahon/dummy.pdf'
Installing Dangerzone container image...
Loaded image: dangerzone.rocks/dangerzone:latest
Deleting old dangerzone container image
ERROR Failed to install the container image

Converting document to safe PDF
> /usr/local/bin/docker run --security-opt=no-new-privileges:true --cap-drop all --cap-add SYS_CHROOT --network=none -u dangerzone --rm -i --name dangerzone-doc-to-pixels-_yFS3q dangerzone.rocks/dangerzone /usr/bin/python3 -m dangerzone.conversion.doc_to_pixels
ERROR [doc _yFS3q] 0% Unknown error code '125'

Failed to convert document(s)
/Users/phillipmcmahon/dummy.pdf
phillipmcmahon@mymacbook ~ % 

I see. Your logs look indeed similar to the original poster. What happens if you run:

gunzip -c /Applications/Dangerzone.app/Contents/Resources/share/container.tar.gz | docker load

Also, what happens if you uninstall and reinstall Docker Deskop?

phillipmcmahon@mymacbook ~ % gunzip -c /Applications/Dangerzone.app/Contents/Resources/share/container.tar.gz | docker load
Loaded image: dangerzone.rocks/dangerzone:latest
phillipmcmahon@mymacbook ~ %

After uninstalling and reinstalling, the same error still persists.

It seems that this issue affects users who have installed from scratch Docker Desktop 4.30.0 or greater. Everyone who's affected, please read #933 for an explanation and a workaround.

HI @charginglabrador! Thanks a lot for chiming in. Let's see what's the case in your installation.

If you're comfortable with the CLI, can you please run these Docker commands, so that we can see its state?

docker version
docker info -f 'json'
docker images
docker run hello-world

Then try to convert a dummy file from the terminal:

touch dummy.pdf
/Applications/Dangerzone.app/Contents/MacOS/dangerzone-cli dummy.pdf

And finally, attempt to run the Dangerzone container, with debug logs:

docker run --security-opt=no-new-privileges:true --cap-drop all --cap-add SYS_CHROOT --network=none -u dangerzone -e SC_DEBUG=1 --rm -i dangerzone.rocks/dangerzone /usr/bin/python3 -m dangerzone.conversion.doc_to_pixels

Thanks a bunch!

Docker commands

docker version:

Client:
 Version:           27.2.0
 API version:       1.47
 Go version:        go1.21.13
 Git commit:        3ab4256
 Built:             Tue Aug 27 14:14:45 2024
 OS/Arch:           darwin/arm64
 Context:           desktop-linux

Server: Docker Desktop 4.34.2 (167172)
 Engine:
  Version:          27.2.0
  API version:      1.47 (minimum version 1.24)
  Go version:       go1.21.13
  Git commit:       3ab5c7d
  Built:            Tue Aug 27 14:15:41 2024
  OS/Arch:          linux/arm64
  Experimental:     false
 containerd:
  Version:          1.7.20
  GitCommit:        8fc6bcff51318944179630522a095cc9dbf9f353
 runc:
  Version:          1.1.13
  GitCommit:        v1.1.13-0-g58aa920
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

docker info -f 'json'

{"ID":"668f8c12-e9f6-47a2-8384-6a509a240f24","Containers":1,"ContainersRunning":0,"ContainersPaused":0,"ContainersStopped":1,"Images":1,"Driver":"vfs","DriverStatus":null,"Plugins":{"Volume":["local"],"Network":["bridge","host","ipvlan","macvlan","null","overlay"],"Authorization":null,"Log":["awslogs","fluentd","gcplogs","gelf","journald","json-file","local","splunk","syslog"]},"MemoryLimit":true,"SwapLimit":true,"CpuCfsPeriod":true,"CpuCfsQuota":true,"CPUShares":true,"CPUSet":true,"PidsLimit":true,"IPv4Forwarding":true,"BridgeNfIptables":true,"BridgeNfIp6tables":true,"Debug":false,"NFd":49,"OomKillDisable":false,"NGoroutines":70,"SystemTime":"2024-09-27T13:20:35.666036012Z","LoggingDriver":"json-file","CgroupDriver":"cgroupfs","CgroupVersion":"2","NEventsListener":10,"KernelVersion":"6.10.4-linuxkit","OperatingSystem":"Docker Desktop","OSVersion":"","OSType":"linux","Architecture":"aarch64","IndexServerAddress":"https://index.docker.io/v1/","RegistryConfig":{"AllowNondistributableArtifactsCIDRs":null,"AllowNondistributableArtifactsHostnames":null,"InsecureRegistryCIDRs":["127.0.0.0/8"],"IndexConfigs":{"docker.io":{"Name":"docker.io","Mirrors":[],"Secure":true,"Official":true},"hubproxy.docker.internal:5555":{"Name":"hubproxy.docker.internal:5555","Mirrors":[],"Secure":false,"Official":false}},"Mirrors":null},"NCPU":11,"MemTotal":8219394048,"GenericResources":null,"DockerRootDir":"/mnt/firefly","HttpProxy":"http.docker.internal:3128","HttpsProxy":"http.docker.internal:3128","NoProxy":"hubproxy.docker.internal","Name":"docker-desktop","Labels":["com.docker.desktop.address=unix:///Users/charginglabrador/Library/Containers/com.docker.docker/Data/docker-cli.sock"],"ExperimentalBuild":false,"ServerVersion":"27.2.0","Runtimes":{"io.containerd.runc.v2":{"path":"runc"},"runc":{"path":"runc"}},"DefaultRuntime":"runc","Swarm":{"NodeID":"","NodeAddr":"","LocalNodeState":"inactive","ControlAvailable":false,"Error":"","RemoteManagers":null},"LiveRestoreEnabled":false,"Isolation":"","InitBinary":"docker-init","ContainerdCommit":{"ID":"8fc6bcff51318944179630522a095cc9dbf9f353","Expected":"8fc6bcff51318944179630522a095cc9dbf9f353"},"RuncCommit":{"ID":"v1.1.13-0-g58aa920","Expected":"v1.1.13-0-g58aa920"},"InitCommit":{"ID":"de40ad0","Expected":"de40ad0"},"SecurityOptions":["name=seccomp,profile=unconfined","name=cgroupns"],"CDISpecDirs":[],"Warnings":["WARNING: daemon is not using the default seccomp profile"],"ClientInfo":{"Debug":false,"Version":"27.2.0","GitCommit":"3ab4256","GoVersion":"go1.21.13","Os":"darwin","Arch":"arm64","BuildTime":"Tue Aug 27 14:14:45 2024","Context":"desktop-linux","Plugins":[{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v0.16.2-desktop.1","ShortDescription":"Docker Buildx","Name":"buildx","Path":"/Users/charginglabrador/.docker/cli-plugins/docker-buildx","ShadowedPaths":["/usr/local/lib/docker/cli-plugins/docker-buildx"]},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v2.29.2-desktop.2","ShortDescription":"Docker Compose","Name":"compose","Path":"/Users/charginglabrador/.docker/cli-plugins/docker-compose","ShadowedPaths":["/usr/local/lib/docker/cli-plugins/docker-compose"]},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"0.0.34","ShortDescription":"Get a shell into any image or container","Name":"debug","Path":"/Users/charginglabrador/.docker/cli-plugins/docker-debug","ShadowedPaths":["/usr/local/lib/docker/cli-plugins/docker-debug"]},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v0.0.15","ShortDescription":"Docker Desktop commands (Alpha)","Name":"desktop","Path":"/Users/charginglabrador/.docker/cli-plugins/docker-desktop","ShadowedPaths":["/usr/local/lib/docker/cli-plugins/docker-desktop"]},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v0.1.2","ShortDescription":"Docker Dev Environments","Name":"dev","Path":"/Users/charginglabrador/.docker/cli-plugins/docker-dev","ShadowedPaths":["/usr/local/lib/docker/cli-plugins/docker-dev"]},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v0.2.25","ShortDescription":"Manages Docker extensions","Name":"extension","Path":"/Users/charginglabrador/.docker/cli-plugins/docker-extension","ShadowedPaths":["/usr/local/lib/docker/cli-plugins/docker-extension"]},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v1.0.5","ShortDescription":"Provide feedback, right in your terminal!","Name":"feedback","Path":"/Users/charginglabrador/.docker/cli-plugins/docker-feedback","ShadowedPaths":["/usr/local/lib/docker/cli-plugins/docker-feedback"]},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v1.3.0","ShortDescription":"Creates Docker-related starter files for your project","Name":"init","Path":"/Users/charginglabrador/.docker/cli-plugins/docker-init","ShadowedPaths":["/usr/local/lib/docker/cli-plugins/docker-init"]},{"SchemaVersion":"0.1.0","Vendor":"Anchore Inc.","Version":"0.6.0","ShortDescription":"View the packaged-based Software Bill Of Materials (SBOM) for an image","URL":"https://github.com/docker/sbom-cli-plugin","Name":"sbom","Path":"/Users/charginglabrador/.docker/cli-plugins/docker-sbom","ShadowedPaths":["/usr/local/lib/docker/cli-plugins/docker-sbom"]},{"Name":"scan","Path":"/Users/charginglabrador/.docker/cli-plugins/docker-scan","Err":"failed to fetch metadata: fork/exec /Users/charginglabrador/.docker/cli-plugins/docker-scan: no such file or directory"},{"SchemaVersion":"0.1.0","Vendor":"Docker Inc.","Version":"v1.13.0","ShortDescription":"Docker Scout","Name":"scout","Path":"/Users/charginglabrador/.docker/cli-plugins/docker-scout","ShadowedPaths":["/usr/local/lib/docker/cli-plugins/docker-scout"]}],"Warnings":null}}

docker images

REPOSITORY   TAG       IMAGE ID   CREATED   SIZE

docker run hello-world

Unable to find image 'hello-world:latest' locally
latest: Pulling from library/hello-world
478afc919002: Pull complete
Digest: sha256:91fb4b041da273d5a3273b6d587d62d518300a6ad268b28628f74997b93171b2
Status: Downloaded newer image for hello-world:latest

Hello from Docker!
This message shows that your installation appears to be working correctly.

To generate this message, Docker took the following steps:
 1. The Docker client contacted the Docker daemon.
 2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
    (arm64v8)
 3. The Docker daemon created a new container from that image which runs the
    executable that produces the output you are currently reading.
 4. The Docker daemon streamed that output to the Docker client, which sent it
    to your terminal.

To try something more ambitious, you can run an Ubuntu container with:
 $ docker run -it ubuntu bash

Share images, automate workflows, and more with a free Docker ID:
 https://hub.docker.com/

For more examples and ideas, visit:
 https://docs.docker.com/get-started/

Dummy file

charginglabrador-macbook:~ charginglabrador$ touch dummy.pdf
charginglabrador-macbook:~ charginglabrador$ /Applications/Dangerzone.app/Contents/MacOS/dangerzone-cli dummy.pdf
╭──────────────────────────╮
│           ▄██▄           │
│          ██████          │
│         ███▀▀▀██         │
│        ███   ████        │
│       ███   ██████       │
│      ███   ▀▀▀▀████      │
│     ███████  ▄██████     │
│    ███████ ▄█████████    │
│   ████████████████████   │
│    ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀    │
│                          │
│    Dangerzone v0.7.0     │
│ https://dangerzone.rocks │
╰──────────────────────────╯
Assigning ID '88EOkm' to doc '/Users/charginglabrador/dummy.pdf'
Installing Dangerzone container image...
518cfe2a9d3a: Loading layer  9.111MB/9.111MB
4052ab6601e8: Loading layer   51.9MB/51.9MB
5c751fdc35d4: Loading layer  62.65MB/62.65MB
7e2438e529d5: Loading layer  10.75kB/10.75kB
a1f9cfdb7ec6: Loading layer  3.072kB/3.072kB
11bf791db84d: Loading layer  1.314GB/1.314GB
write /home/dangerzone/dangerzone-image/rootfs/var/cache/fontconfig/12b26b760a24f8b4feb03ad48a333a72-le64.cache-9: no space left on device
ERROR Failed to install the container image

Converting document to safe PDF
> /usr/local/bin/docker run --security-opt=no-new-privileges:true --cap-drop all --cap-add SYS_CHROOT --network=none -u dangerzone --rm -i --name dangerzone-doc-to-pixels-88EOkm dangerzone.rocks/dangerzone /usr/bin/python3 -m dangerzone.conversion.doc_to_pixels
ERROR [doc 88EOkm] 0% Unknown error code '125'

Failed to convert document(s)
/Users/charginglabrador/dummy.pdf

Debug logs

charginglabrador-macbook:~ charginglabrador$ docker run --security-opt=no-new-privileges:true --cap-drop all --cap-add SYS_CHROOT --network=none -u dangerzone -e SC_DEBUG=1 --rm -i dangerzone.rocks/dangerzone /usr/bin/python3 -m dangerzone.conversion.doc_to_pixels
Unable to find image 'dangerzone.rocks/dangerzone:latest' locally
docker: Error response from daemon: unknown: <html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx/1.25.1</center>
</body>
</html>.
See 'docker run --help'.

Great, thanks for the command output. You're in the latest Docker Desktop version, so check #933 for a workaround.

@charginglabrador: I took a closer look at your debug logs, after your comment, and I spotted this line:

write /home/dangerzone/dangerzone-image/rootfs/var/cache/fontconfig/12b26b760a24f8b4feb03ad48a333a72-le64.cache-9: no space left on device

It looks as if you're low on disk space in your machine. Can you perhaps erase some unnecessary files, purge data from Docker Desktop (there's an option for that, if you right-click on the tray icon), and retry?

Closing this issue, since we released Dangerzone 0.7.1 which should fix it.

almet commented

It looks as if you're low on disk space in your machine. Can you perhaps erase some unnecessary files, purge data from Docker Desktop (there's an option for that, if you right-click on the tray icon), and retry?

Note that this specific error should be made obvious once #193 is done.