Docker-ce 5:29.0.0-1~debian.13~trixie breaks harp

[Ruben3211]

How to use GitHub

• Please use the 👍 reaction to show that you are affected by the same issue.
• Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
• Subscribe to receive notifications on status change and new comments.

---

Last week we installed a separate vm to run the docker HaRP
After some time we finally got it to work and we thought now we just have to wait on some apps to deploy.
Today i wanted to show someone else this new feautre in nextcloud. When i looked in the nextcloud dashboard i saw an AppAPI error. HaRP could not connect anymore to the docker socket of debain.

I basicly tried to set it up from scratch again but nothing seemed to work. We weekly run automatic updates on all servers and i had seen in our Zabbix that docker was upgraded to version 29.0.0-1. So i thought let me downgrade docker.

sudo apt purge docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
sudo apt install docker-ce=5:28.5.2-1~debian.13~trixie docker-ce-cli=5:28.5.2-1~debian.13~trixie containerd.io=1.7.29-1~debian.13~trixie docker-buildx-plugin docker-compose-plugin

As soon as i did this everything worked again.

Steps to reproduce

1. Run HaRP on dokcer-ce version: docker-ce=5:28.5.2-1debian.13trixie
2. In nextcloud AppAPI click cerify connection for the deploy deamon you want to test.
   This should work when setup correctly
3. Upgrade docker-ce: apt install docker-ce
4. Repeat setup 2. You should now get the error messages: Connection to Daemon failed. Check your logs
   Sorry had to translate this from Dutch. Original messages: (Verbinden met Daemon niet gelukt. Controleer de logs)

Output of nextcloud.log when running version: 5:29.0.0-1debian.13trixie:

{"reqId":"ymWQOjvpnz5OhFkzlZNO","level":3,"time":"2025-11-13T09:17:19+00:00","remoteAddr":"2a00::::::1f","user":"0cfb02ef-b4de-4df2-ab7b-056d68d5ee09","app":"app_api","method":"POST","url":"/index.php/apps/app_api/daemons/Test/check","message":"Could not connect to Docker daemon via http://ip-washere:8780/exapps/app_api/v1.41/_ping","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0","version":"32.0.1.2","exception":{"Exception":"GuzzleHttp\Exception\ClientException","Message":"Client error: GET http://ip-washere:8780/exapps/app_api/v1.41/_ping resulted in a 400 Bad Request response:\n{"message":"client version 1.41 is too old. Minimum supported API version is 1.44, please upgrade your client to a newer (truncated...)\n","Code":400,"Trace":[{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Middleware.php","line":72,"function":"create","class":"GuzzleHttp\Exception\RequestException","type":"::","args":["*** sensitive parameters replaced "]},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":209,"function":"{closure:{closure:{closure:GuzzleHttp\Middleware::httpErrors():60}:61}:67}","class":"GuzzleHttp\Middleware","type":"::","args":[" sensitive parameters replaced "]},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":158,"function":"callHandler","class":"GuzzleHttp\Promise\Promise","type":"::"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/TaskQueue.php","line":52,"function":"{closure:GuzzleHttp\Promise\Promise::settle():156}","class":"GuzzleHttp\Promise\Promise","type":"::","args":[" sensitive parameters replaced ***"]},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":251,"function":"run","class":"GuzzleHttp\Promise\TaskQueue","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":227,"function":"invokeWaitFn","class":"GuzzleHttp\Promise\Promise","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":272,"function":"waitIfPending","class":"GuzzleHttp\Promise\Promise","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":229,"function":"invokeWaitList","class":"GuzzleHttp\Promise\Promise","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":69,"function":"waitIfPending","class":"GuzzleHttp\Promise\Promise","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php","line":189,"function":"wait","class":"GuzzleHttp\Promise\Promise","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/ClientTrait.php","line":44,"function":"request","class":"GuzzleHttp\Client","type":"->"},{"file":"/var/www/nextcloud/apps/app_api/lib/DeployActions/DockerActions.php","line":849,"function":"get","class":"GuzzleHttp\Client","type":"->"},{"file":"/var/www/nextcloud/apps/app_api/lib/Controller/DaemonConfigController.php","line":125,"function":"ping","class":"OCA\AppAPI\DeployActions\DockerActions","type":"->"},{"file":"/var/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php","line":204,"function":"verifyDaemonConnection","class":"OCA\AppAPI\Controller\DaemonConfigController","type":"->"},{"file":"/var/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php","line":118,"function":"executeController","class":"OC\AppFramework\Http\Dispatcher","type":"->"},{"file":"/var/www/nextcloud/lib/private/AppFramework/App.php","line":153,"function":"dispatch","class":"OC\AppFramework\Http\Dispatcher","type":"->"},{"file":"/var/www/nextcloud/lib/private/Route/Router.php","line":321,"function":"main","class":"OC\AppFramework\App","type":"::"},{"file":"/var/www/nextcloud/lib/base.php","line":1061,"function":"match","class":"OC\Route\Router","type":"->"},{"file":"/var/www/nextcloud/index.php","line":25,"function":"handleRequest","class":"OC","type":"::"}],"File":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Exception/RequestException.php","Line":111,"message":"Could not connect to Docker daemon via {url}","exception":{},"CustomMessage":"Could not connect to Docker daemon via http://ip=washere:8780/exapps/app_api/v1.41/_ping"}}

Maybe one thing to add. I run HaRP with docker-compose:

version: '3.8'
services:
  appapi-harp:
    image: ghcr.io/nextcloud/nextcloud-appapi-harp:release
    container_name: appapi-harp
    hostname: appapi-harp
    restart: unless-stopped
    environment:
      - HP_SHARED_KEY=
      - NC_INSTANCE_URL=
      - HP_BLACKLIST_COUNT=300
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./certs:/certs
    ports:
      - "8780:8780"
      - "8782:8782"

I don't think this should matter but maybe it does.

[RainerEmrich]

Same for ubuntu: docker-ce 5:29.0.0-1ubuntu.24.04noble

[gordon0001]

Same here on Debian Trxie. It worked fine some time with AppAPI, but not anymore. I updated the docker container.

{"reqId":"KKbfpzbMMYqlZmN9vXG1","level":3,"time":"2025-11-15T04:36:55+01:00","remoteAddr":"<censored>","user":"Gordon","app":"app_api","method":"POST","url":"/apps/app_api/daemons/verify_connection","message":"Could not connect to Docker daemon via http://localhost:8780/exapps/app_api/v1.41/_ping","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0","version":"32.0.1.2","exception":{"Exception":"GuzzleHttp\\Exception\\ClientException","Message":"Clien/ error: `GET http://localhost:8780/exapps/app_api/v1.41/_ping` resulted in a `400 Bad Request` response:\n{\"message\":\"client version 1.41 is too old. Minimum supported API version is 1.44, please upgrade your client to a newer (truncated...)\n","Code":400,"Trace":[{"file":"/var/www/<censored>/cloud/3rdparty/guzzlehttp/guzzle/src/Middleware.php","line":72,"function":"create","class":"GuzzleHttp\\Exception\\RequestException","type":"::","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/<censored>/cloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":209,"function":"{closure:{closure:{closure:GuzzleHttp\\Middleware::httpErrors():60}:61}:67}","class":"GuzzleHttp\\Middleware","type":"::","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/<censored>/cloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":158,"function":"callHandler","class":"GuzzleHttp\\Promise\\Promise","type":"::"},{"file":"/var/www/<censored>/cloud/3rdparty/guzzlehttp/promises/src/TaskQueue.php","line":52,"function":"{closure:GuzzleHttp\\Promise\\Promise::settle():156}","class":"GuzzleHttp\\Promise\\Promise","type":"::","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/<censored>/cloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":251,"function":"run","class":"GuzzleHttp\\Promise\\TaskQueue","type":"->"},{"file":"/var/www/<censored>/cloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":227,"function":"invokeWaitFn","class":"GuzzleHttp\\Promise\\Promise","type":"->"},{"file":"/var/www/<censored>/cloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":272,"function":"waitIfPending","class":"GuzzleHttp\\Promise\\Promise","type":"->"},{"file":"/var/www/<censored>/cloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":229,"function":"invokeWaitList","class":"GuzzleHttp\\Promise\\Promise","type":"->"},{"file":"/var/www/<censored>/cloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":69,"function":"waitIfPending","class":"GuzzleHttp\\Promise\\Promise","type":"->"},{"file":"/var/www/<censored>/cloud/3rdparty/guzzlehttp/guzzle/src/Client.php","line":189,"function":"wait","class":"GuzzleHttp\\Promise\\Promise","type":"->"},{"file":"/var/www/<censored>/cloud/3rdparty/guzzlehttp/guzzle/src/ClientTrait.php","line":44,"function":"request","class":"GuzzleHttp\\Client","type":"->"},{"file":"/var/www/<censored>/cloud/apps/app_api/lib/DeployActions/DockerActions.php","line":849,"function":"get","class":"GuzzleHttp\\Client","type":"->"},{"file":"/var/www/<censored>/cloud/apps/app_api/lib/Controller/DaemonConfigController.php","line":164,"function":"ping","class":"OCA\\AppAPI\\DeployActions\\DockerActions","type":"->"},{"file":"/var/www/<censored>/cloud/lib/private/AppFramework/Http/Dispatcher.php","line":204,"function":"checkDaemonConnection","class":"OCA\\AppAPI\\Controller\\DaemonConfigController","type":"->"},{"file":"/var/www/<censored>/cloud/lib/private/AppFramework/Http/Dispatcher.php","line":118,"function":"executeController","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->"},{"file":"/var/www/<censored>/cloud/lib/private/AppFramework/App.php","line":153,"function":"dispatch","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->"},{"file":"/var/www/<censored>/cloud/lib/private/Route/Router.php","line":321,"function":"main","class":"OC\\AppFramework\\App","type":"::"},{"file":"/var/www/<censored>/cloud/lib/base.php","line":1061,"function":"match","class":"OC\\Route\\Router","type":"->"},{"file":"/var/www/<censored>/cloud/index.php","line":25,"function":"handleRequest","class":"OC","type":"::"}],"File":"/var/www/<censored>/cloud/3rdparty/guzzlehttp/guzzle/src/Exception/RequestException.php","Line":111,"message":"Could not connect to Docker daemon via {url}","exception":[],"CustomMessage":"Could not connect to Docker daemon via http://localhost:8780/exapps/app_api/v1.41/_ping"},"id":"6917f563b0189"}

With error, that the API version is too old, Nextcloud tries to speak to the HARP instance and harp does not accept what it is sending because it uses an too old API?!

"GET http://localhost:8780/exapps/app_api/v1.41/_ping resulted in a `400 Bad Request` response:\n{"message":"client version 1.41 is too old. Minimum supported API version is 1.44, please upgrade your client to a newer (truncated..."

docker-compose.yml:

services:
    nextcloud-appapi-harp:
        environment:
            - HP_SHARED_KEY=<secret>
            - NC_INSTANCE_URL=https://<secret>
            - HP_EXAPPS_ADDRESS=127.0.0.1:8780
        volumes:
            - /var/run/docker.sock:/var/run/docker.sock
            - ./certs:/certs
        container_name: appapi-harp
        hostname: appapi-harp
        restart: unless-stopped
        network_mode: host
        image: ghcr.io/nextcloud/nextcloud-appapi-harp:main

switching between release and main tag does not change anything
Nextcloud is up2date
HARP docker container is up2date
Docker version 29.0.1 (docker -v: 29.0.1-1debian.13trixie)
and only thing that really made it break was the docker update recently. before it was working fine.

[mshahr1]

I have exactly the same issue.

[limmike]

Regarding this error message

message":"client version 1.41 is too old. Minimum supported API version is 1.44

Docker 29 increased Minimum API version to 1.44. We need a newer HaRP release

For temp fix, modify docker daemon

sudo systemctl edit docker.service

Add the following

[Service]
Environment=
Environment=DOCKER_MIN_API_VERSION=1.41

Save and exit.
Restart Docker

sudo systemctl restart docker

Refer to Docker blog for details and other fix options.

[gordon0001]

Thank you, that temporary workaround works perfectly well.

[davodego]

Add the following

[Service]
Environment=
Environment=DOCKER_MIN_API_VERSION=1.41

Save and exit. Restart Docker

sudo systemctl restart docker

Refer to Docker blog for details and other fix options.

The fix didn't solve the problem for me. Since the Docker update, the appapi-harp container can no longer start and is stuck in a loop.
Maybe it's a different error?
Here is an excerpt from the container's Docker log.

INFO: Starting HAProxy... 2025-11-18 15:50:57.564 [I] [sub/root.go:142] start frpc service for config file [/frpc-docker.toml] 2025-11-18 15:50:57.564 [I] [client/service.go:295] try to connect to server... [NOTICE] (1) : Initializing new worker (32) 2025-11-18 15:50:57.574 [I] [client/service.go:287] [a81df569e18680c9] login to server success, get run id [a81df569e18680c9] 2025-11-18 15:50:57.575 [I] [proxy/proxy_manager.go:173] [a81df569e18680c9] proxy added: [bundled-deploy-daemon] 2025-11-18 15:50:57.576 [I] [client/control.go:168] [a81df569e18680c9] [bundled-deploy-daemon] start proxy success [NOTICE] (32) : haproxy version is 3.1.2-cda631a [ALERT] (32) : [haproxy.main()] Cannot raise FD limit to 16425, limit is 16384. [NOTICE] (1) : haproxy version is 3.1.2-cda631a [WARNING] (1) : Failed to load worker! INFO: /haproxy.cfg already present. Skipping config generation...

[oleksandr-nc]

This will be fixed in the next minor version of Nextcloud.

For Nextcloud 32, you can temporarily apply a patch to fix this. It's available here: https://patch-diff.githubusercontent.com/raw/nextcloud/app_api/pull/700.patch

For Nextcloud 31, the patch is available here: https://patch-diff.githubusercontent.com/raw/nextcloud/app_api/pull/701.patch

[Tail870]

You can temporary min API to daemon.json as I mentined here: nextcloud/app_api#712 (comment)