-
-
Notifications
You must be signed in to change notification settings - Fork 404
Description
Current Behavior
docker ps shows my firefox and 2firefox each having a port tcp:5900. I also tried VNC_LISTENING_PORT=-1
the logs below show vnc listening port on 5908 as instructed
docker run -d --name=2firefox -p 5808:5808 --device /dev/snd -e PULSE_SERVER=tcp:myipv4:5808 -e SECURE_CONNECTION=1 -e WEB_AUTHENTICATION=1 -e WEB_AUTHENTICATION_USERNAME=notmassively -e WEB_AUTHENTICATION_PASSWORD=multiplayer -e SECURE_CONNECTION_VNC_METHOD=TLS -e VNC_LISTENING_PORT=5909 -v /docker/appdata/2firefox:/config:rw jlesage/firefox
i used vnc tls hoping to break it since I cannot disable it
Expected Behavior
VNC port ought be 5908
Steps To Reproduce
command above
Environment
host VPS
- OS: ubuntu
- OS version: 22.04 lts server
- CPU: 2 Core @ 3.0 GHz (Xeon Gold)
- Docker version: 28.1.1+1, build 068a01e
- Device model: 2core 4gb ram
- did not setup reverse proxy
client
Windows10 i5 laptop
- Browser/OS: Chromium Version 133.0.6943.146 (Official Build, ungoogled-chromium) (64-bit)
Container creation
docker run -d --name=2firefox -p 5808:5808 --device /dev/snd -e PULSE_SERVER=tcp:myipv4:5808 -e SECURE_CONNECTION=1 -e WEB_AUTHENTICATION=1 -e WEB_AUTHENTICATION_USERNAME=notmassively -e WEB_AUTHENTICATION_PASSWORD=multiplayer -e SECURE_CONNECTION_VNC_METHOD=TLS -e VNC_LISTENING_PORT=5909 -v /docker/appdata/2firefox:/config:rw jlesage/firefox
Container log
[init ] container is starting...
[cont-env ] loading container environment variables...
[cont-env ] APP_NAME: loading...
[cont-env ] APP_VERSION: loading...
[cont-env ] DISPLAY: executing...
[cont-env ] DISPLAY: terminated successfully.
[cont-env ] DISPLAY: loading...
[cont-env ] DOCKER_IMAGE_PLATFORM: loading...
[cont-env ] DOCKER_IMAGE_VERSION: loading...
[cont-env ] EGL_LOG_LEVEL: executing...
[cont-env ] EGL_LOG_LEVEL: terminated successfully.
[cont-env ] EGL_LOG_LEVEL: loading...
[cont-env ] GSK_RENDERER: executing...
[cont-env ] GSK_RENDERER: terminated successfully.
[cont-env ] GSK_RENDERER: loading...
[cont-env ] GTK2_RC_FILES: executing...
[cont-env ] GTK2_RC_FILES: terminated successfully.
[cont-env ] GTK2_RC_FILES: not setting variable.
[cont-env ] GTK_THEME: executing...
[cont-env ] GTK_THEME: terminated successfully.
[cont-env ] GTK_THEME: not setting variable.
[cont-env ] HOME: loading...
[cont-env ] PULSE_CONFIG_PATH: executing...
[cont-env ] PULSE_CONFIG_PATH: terminated successfully.
[cont-env ] PULSE_CONFIG_PATH: not setting variable.
[cont-env ] PULSE_COOKIE: executing...
[cont-env ] PULSE_COOKIE: terminated successfully.
[cont-env ] PULSE_COOKIE: not setting variable.
[cont-env ] PULSE_SERVER: executing...
[cont-env ] PULSE_SERVER: terminated successfully.
[cont-env ] PULSE_SERVER: not setting variable.
[cont-env ] QT_STYLE_OVERRIDE: executing...
[cont-env ] QT_STYLE_OVERRIDE: terminated successfully.
[cont-env ] QT_STYLE_OVERRIDE: not setting variable.
[cont-env ] TAKE_CONFIG_OWNERSHIP: loading...
[cont-env ] XDG_CACHE_HOME: loading...
[cont-env ] XDG_CONFIG_HOME: loading...
[cont-env ] XDG_DATA_HOME: loading...
[cont-env ] XDG_RUNTIME_DIR: loading...
[cont-env ] XDG_STATE_HOME: loading...
[cont-env ] container environment variables initialized.
[cont-secrets] loading container secrets...
[cont-secrets] container secrets loaded.
[cont-init ] executing container initialization scripts...
[cont-init ] 05-container-instance-uuid.sh: executing...
[cont-init ] 05-container-instance-uuid.sh: creating container instance uuid...
[cont-init ] 05-container-instance-uuid.sh: terminated successfully.
[cont-init ] 10-certs.sh: executing...
[cont-init ] 10-certs.sh: generating DH parameters (2048 bits), this is going to take a long time...
[cont-init ] 10-certs.sh: generating self-signed certificate for WEB server...
[cont-init ] 10-certs.sh: generating self-signed certificate for VNC server...
[cont-init ] 10-certs.sh: terminated successfully.
[cont-init ] 10-check-app-niceness.sh: executing...
[cont-init ] 10-check-app-niceness.sh: terminated successfully.
[cont-init ] 10-clean-logmonitor-states.sh: executing...
[cont-init ] 10-clean-logmonitor-states.sh: terminated successfully.
[cont-init ] 10-clean-tmp-dir.sh: executing...
[cont-init ] 10-clean-tmp-dir.sh: terminated successfully.
[cont-init ] 10-fontconfig-cache-dir.sh: executing...
[cont-init ] 10-fontconfig-cache-dir.sh: terminated successfully.
[cont-init ] 10-init-users.sh: executing...
[cont-init ] 10-init-users.sh: terminated successfully.
[cont-init ] 10-nginx.sh: executing...
[cont-init ] 10-nginx.sh: terminated successfully.
[cont-init ] 10-openbox.sh: executing...
[cont-init ] 10-openbox.sh: terminated successfully.
[cont-init ] 10-pkgs-mirror.sh: executing...
[cont-init ] 10-pkgs-mirror.sh: terminated successfully.
[cont-init ] 10-pulse.sh: executing...
[cont-init ] 10-pulse.sh: terminated successfully.
[cont-init ] 10-set-tmp-dir-perms.sh: executing...
[cont-init ] 10-set-tmp-dir-perms.sh: terminated successfully.
[cont-init ] 10-vnc-password.sh: executing...
[cont-init ] 10-vnc-password.sh: terminated successfully.
[cont-init ] 10-web-data.sh: executing...
[cont-init ] 10-web-data.sh: terminated successfully.
[cont-init ] 10-webauth.sh: executing...
[cont-init ] 10-webauth.sh: Adding password for user salty
[cont-init ] 10-webauth.sh: terminated successfully.
[cont-init ] 10-x11-unix.sh: executing...
[cont-init ] 10-x11-unix.sh: terminated successfully.
[cont-init ] 10-xdg-runtime-dir.sh: executing...
[cont-init ] 10-xdg-runtime-dir.sh: terminated successfully.
[cont-init ] 15-cjk-font.sh: executing...
[cont-init ] 15-cjk-font.sh: terminated successfully.
[cont-init ] 15-install-pkgs.sh: executing...
[cont-init ] 15-install-pkgs.sh: terminated successfully.
[cont-init ] 55-check-snd.sh: executing...
[cont-init ] 55-check-snd.sh: sound device group 29.
[cont-init ] 55-check-snd.sh: terminated successfully.
[cont-init ] 55-firefox.sh: executing...
[cont-init ] 55-firefox.sh: generating machine-id...
[cont-init ] 55-firefox.sh: terminated successfully.
[cont-init ] 56-firefox-set-prefs-from-env.sh: executing...
[cont-init ] 56-firefox-set-prefs-from-env.sh: terminated successfully.
[cont-init ] 85-take-config-ownership.sh: executing...
[cont-init ] 85-take-config-ownership.sh: terminated successfully.
[cont-init ] 89-info.sh: executing...
╭――――――――――――――――――――――――――――――――――――――――――――――――――――――――――――――――――――――╮
│ │
│ Application: Firefox │
│ Application Version: 140.0.4-r1 │
│ Docker Image Version: 25.07.2 │
│ Docker Image Platform: linux/amd64 │
│ │
╰――――――――――――――――――――――――――――――――――――――――――――――――――――――――――――――――――――――╯
[cont-init ] 89-info.sh: terminated successfully.
[cont-init ] all container initialization scripts executed.
[init ] giving control to process supervisor.
[supervisor ] loading services...
[supervisor ] loading service 'default'...
[supervisor ] loading service 'app'...
[supervisor ] loading service 'gui'...
[supervisor ] loading service 'audiorecorder'...
[supervisor ] service 'audiorecorder' is disabled.
[supervisor ] loading service 'pulseaudio'...
[supervisor ] service 'pulseaudio' is disabled.
[supervisor ] loading service 'certsmonitor'...
[supervisor ] loading service 'xrdb'...
[supervisor ] loading service 'xvnc'...
[supervisor ] loading service 'webservices'...
[supervisor ] service 'webservices' is disabled.
[supervisor ] loading service 'nginx'...
[supervisor ] loading service 'webauth'...
[supervisor ] loading service 'openbox'...
[supervisor ] loading service 'xcompmgr'...
[supervisor ] loading service 'logrotate'...
[supervisor ] loading service 'logmonitor'...
[supervisor ] service 'logmonitor' is disabled.
[supervisor ] all services loaded.
[supervisor ] starting services...
[supervisor ] starting service 'xvnc'...
[xvnc ] Xvnc TigerVNC 1.14.1 - built Jul 17 2025 02:53:21
[xvnc ] Copyright (C) 1999-2024 TigerVNC Team and many others (see README.rst)
[xvnc ] See https://www.tigervnc.org for information on TigerVNC.
[xvnc ] Underlying X server release 12014000
[xvnc ] Sat Aug 30 22:08:59 2025
[xvnc ] vncext: VNC extension running!
[xvnc ] vncext: Listening for VNC connections on /tmp/vnc.sock (mode 0660)
[xvnc ] vncext: Listening for VNC connections on all interface(s), port 5908
[xvnc ] vncext: created VNC server for screen 0
[supervisor ] starting service 'xrdb'...
[supervisor ] starting service 'webauth'...
[supervisor ] starting service 'nginx'...
[nginx ] Listening for HTTPs connections on port 5800.
[supervisor ] starting service 'openbox'...
[supervisor ] starting service 'xcompmgr'...
[supervisor ] starting service 'app'...
[supervisor ] all services started.
[supervisor ] service 'xrdb' exited (with status 0).
[app ] [940] Sandbox: CanCreateUserNamespace() clone() failure: EPERM
[app ] Mozilla Firefox 140.0.4
Container inspect
[
{
"Id": "444a2483bea6d3f4444adacd5c37c9bd7ba712444",
"Created": "2025-08-30T22:08:34.797527074Z",
"Path": "/init",
"Args": [],
"State": {
"Status": "running",
"Running": true,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 91586,
"ExitCode": 0,
"Error": "",
"StartedAt": "2025-08-30T22:08:34.858161196Z",
"FinishedAt": "0001-01-01T00:00:00Z"
},
"Image": "sha256:7b838302650663d8438fd981137f851ee43f1485c99649fe526ed9be798210e1",
"ResolvConfPath": "/var/snap/docker/common/var-lib-docker/containers/5595c2285ea2483bea6d3f7ad4b2e344cbd43adacd5c37c9bd7ba7124c07350f/resolv.conf",
"HostnamePath": "/var/snap/docker/common/var-lib-docker/containers/5595c2285ea2483bea6d3f7ad4b2e344cbd43adacd5c37c9bd7ba7124c07350f/hostname",
"HostsPath": "/var/snap/docker/common/var-lib-docker/containers/5595c2285ea2483bea6d3f7ad4b2e344cbd43adacd5c37c9bd7ba7124c07350f/hosts",
"LogPath": "/var/snap/docker/common/var-lib-docker/containers/5595c2285ea2483bea6d3f7ad4b2e344cbd43adacd5c37c9bd7ba7124c07350f/5595c2285ea2483bea6d3f7ad4b2e344cbd43adacd5c37c9bd7ba7124c07350f-json.log",
"Name": "/2firefox",
"RestartCount": 0,
"Driver": "overlay2",
"Platform": "linux",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "docker-default",
"ExecIDs": null,
"HostConfig": {
"Binds": [
"/docker/appdata/2firefox:/2config:rw"
],
"ContainerIDFile": "",
"LogConfig": {
"Type": "json-file",
"Config": {}
},
"NetworkMode": "bridge",
"PortBindings": {
"5808/tcp": [
{
"HostIp": "",
"HostPort": "5808"
}
]
},
"RestartPolicy": {
"Name": "no",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": null,
"ConsoleSize": [
25,
80
],
"CapAdd": null,
"CapDrop": null,
"CgroupnsMode": "private",
"Dns": [],
"DnsOptions": [],
"DnsSearch": [],
"ExtraHosts": null,
"GroupAdd": null,
"IpcMode": "private",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "runc",
"Isolation": "",
"CpuShares": 0,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": [],
"BlkioDeviceReadBps": [],
"BlkioDeviceWriteBps": [],
"BlkioDeviceReadIOps": [],
"BlkioDeviceWriteIOps": [],
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": [
{
"PathOnHost": "/dev/snd",
"PathInContainer": "/dev/snd",
"CgroupPermissions": "rwm"
}
],
"DeviceCgroupRules": null,
"DeviceRequests": null,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"OomKillDisable": null,
"PidsLimit": null,
"Ulimits": [],
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0,
"MaskedPaths": [
"/proc/asound",
"/proc/acpi",
"/proc/interrupts",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware",
"/sys/devices/virtual/powercap"
],
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
]
},
"GraphDriver": {
"Data": {
"ID": "5595c2285ea2483bea6d3f7ad4b2e344cbd43adacd5c37c9bd7ba7124c07350f",
"LowerDir": "/var/snap/docker/common/var-lib-docker/overlay2/74b531e17396a95b538468eadcc0b4afbe08e234d75ba670b11da48e3e697360-init/diff:/var/snap/docker/common/var-lib-docker/overlay2/2c32b9b8633afb0f6abeb2cacf7bbc44cb528fda3d72547e27d224cba990ac16/diff:/var/snap/docker/common/var-lib-docker/overlay2/8f96c168b2d2c5a9f1e3150f0294bbfb687e2f391ed0e7a380383e5c58997e5e/diff:/var/snap/docker/common/var-lib-docker/overlay2/a6bbda7f57df34e9ffe2dd64475a0b55c697e987ecfef3cd3844644bb48fcc6c/diff:/var/snap/docker/common/var-lib-docker/overlay2/25e853e384981996864f21e2198a7ccd2a0cc16ef42dcabf5ab9ff3f8a4abac1/diff:/var/snap/docker/common/var-lib-docker/overlay2/e6ff86ad1c962f0defad2057b78da46bc5584390a0d2bcb4cc281d8bc9074e2f/diff:/var/snap/docker/common/var-lib-docker/overlay2/ffdd129dbf30a3c9362625ebbaf9bfa736301ebc3c22aac3722dd07f4d3a353b/diff:/var/snap/docker/common/var-lib-docker/overlay2/d44adbb43cabd57b8182f5ba0b8c4074cd49f9be110e9d64f50469afc85a1191/diff:/var/snap/docker/common/var-lib-docker/overlay2/505ea9b41d7f8fd6c775bb7f3731b114d79bce7160fd2a5ab013da85f6079ce9/diff:/var/snap/docker/common/var-lib-docker/overlay2/af2bbf8ad5bfa8cff1a42272b818081bebffb6c3cdad00528f48209dadb15cd6/diff:/var/snap/docker/common/var-lib-docker/overlay2/2e54b01ec189183b104a15419cd0fd49605d01fb1c12e9a6089598c3b6c9057b/diff:/var/snap/docker/common/var-lib-docker/overlay2/3052430c4c48758fc642c904b7bfa5ccc89194fd4766411bf37f8ada44071956/diff:/var/snap/docker/common/var-lib-docker/overlay2/35bb114c67f15d00b8f091c88a08892e3ed3f11f4c803f5eefb281fcd00d595f/diff:/var/snap/docker/common/var-lib-docker/overlay2/d8a2bd996d9cfebd4c092e4b672a52ce138011afe21239cba9a50711912cd2f0/diff:/var/snap/docker/common/var-lib-docker/overlay2/1928ec3780af9ed86379300ce7d4b53f33b5399d3d5b7739129fa029a2cd234e/diff:/var/snap/docker/common/var-lib-docker/overlay2/28c161412d12a8249e86f51dc0369e396abdbba834ec558ea929b17bda2d4dd2/diff:/var/snap/docker/common/var-lib-docker/overlay2/35a13d57d141c52287a9f929136d0777fb2fce5db58625b7a6aff81cfca35917/diff:/var/snap/docker/common/var-lib-docker/overlay2/4775702bb7f3d0fbc7deaa4d177638f1734412df057e316f90b38f9a853285b5/diff:/var/snap/docker/common/var-lib-docker/overlay2/f66abd3b818656874121e00f77d83d1f989a141f7deb613a67dc87271267f895/diff",
"MergedDir": "/var/snap/docker/common/var-lib-docker/overlay2/74b531e17396a95b538468eadcc0b4afbe08e234d75ba670b11da48e3e697360/merged",
"UpperDir": "/var/snap/docker/common/var-lib-docker/overlay2/74b531e17396a95b538468eadcc0b4afbe08e234d75ba670b11da48e3e697360/diff",
"WorkDir": "/var/snap/docker/common/var-lib-docker/overlay2/74b531e17396a95b538468eadcc0b4afbe08e234d75ba670b11da48e3e697360/work"
},
"Name": "overlay2"
},
"Mounts": [
{
"Type": "bind",
"Source": "/docker/appdata/2firefox",
"Destination": "/2config",
"Mode": "rw",
"RW": true,
"Propagation": "rprivate"
},
{
"Type": "volume",
"Name": "840d7e26ee2b9609eba04a74c90f33951c6967eecb9512e8571706d5b30abd8b",
"Source": "/var/snap/docker/common/var-lib-docker/volumes/840d7e26ee2b9609eba04a74c90f33951c6967eecb9512e8571706d5b30abd8b/_data",
"Destination": "/config",
"Driver": "local",
"Mode": "",
"RW": true,
"Propagation": ""
}
],
"Config": {
"Hostname": "5595c2285ea2",
"Domainname": "",
"User": "",
"AttachStdin": false,
"AttachStdout": false,
"AttachStderr": false,
"ExposedPorts": {
"5800/tcp": {},
"5808/tcp": {},
"5900/tcp": {}
},
"Tty": false,
"OpenStdin": false,
"StdinOnce": false,
"Env": [
"WEB_AUTHENTICATION_USERNAME=notthisone",
"WEB_AUTHENTICATION_PASSWORD=reallygoodone",
"SECURE_CONNECTION_VNC_METHOD=TLS",
"VNC_LISTENING_PORT=5908",
"PULSE_SERVER=tcp:8.8.8.8:5808",
"SECURE_CONNECTION=1",
"WEB_AUTHENTICATION=1",
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/base/sbin:/opt/base/bin",
"ENV=/root/.docker_rc",
"USER_ID=1000",
"GROUP_ID=1000",
"SUP_GROUP_IDS=",
"UMASK=0022",
"LANG=en_US.UTF-8",
"TZ=Etc/UTC",
"KEEP_APP_RUNNING=0",
"APP_NICENESS=0",
"INSTALL_PACKAGES=",
"PACKAGES_MIRROR=",
"CONTAINER_DEBUG=0",
"DISPLAY_WIDTH=1920",
"DISPLAY_HEIGHT=1080",
"DARK_MODE=0",
"SECURE_CONNECTION_CERTS_CHECK_INTERVAL=60",
"WEB_LISTENING_PORT=5800",
"VNC_PASSWORD=",
"ENABLE_CJK_FONT=0",
"WEB_AUDIO=0",
"WEB_AUTHENTICATION_TOKEN_VALIDITY_TIME=24",
"WEB_FILE_MANAGER=0",
"WEB_FILE_MANAGER_ALLOWED_PATHS=AUTO",
"WEB_FILE_MANAGER_DENIED_PATHS=",
"FF_OPEN_URL=",
"FF_KIOSK=0",
"FF_CUSTOM_ARGS="
],
"Cmd": [
"/init"
],
"Image": "jlesage/firefox",
"Volumes": {
"/config": {}
},
"WorkingDir": "/tmp",
"Entrypoint": null,
"OnBuild": null,
"Labels": {
"org.label-schema.description": "Docker container for Firefox",
"org.label-schema.name": "firefox",
"org.label-schema.schema-version": "1.0",
"org.label-schema.vcs-url": "https://github.com/jlesage/docker-firefox",
"org.label-schema.version": "25.07.2"
}
},
"NetworkSettings": {
"Bridge": "",
"SandboxID": "aad02670b84fa2cbfeda2f5b60587d1d41864663461b5ec3cbf1ca86a13f0209",
"SandboxKey": "/run/snap.docker/netns/aad02670b84f",
"Ports": {
"5800/tcp": null,
"5808/tcp": [
{
"HostIp": "0.0.0.0",
"HostPort": "5808"
},
{
"HostIp": "::",
"HostPort": "5808"
}
],
"5900/tcp": null
},
"HairpinMode": false,
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null,
"EndpointID": "444aab77a1a7466835cc3fd4dbea94bf6ff118bf33dd948494444",
"Gateway": "172.17.0.1",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAddress": "172.17.0.3",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"MacAddress": "ff:ff:ff:dd:dd:20",
"Networks": {
"bridge": {
"IPAMConfig": null,
"Links": null,
"Aliases": null,
"MacAddress": "ff:ff:ff:dd:dd:20",
"DriverOpts": null,
"GwPriority": 0,
"NetworkID": "230be73bbd51b01f56e664a504a952c6f83b41e66da76acf9b8733de86205f00",
"EndpointID": "44447aab77a1a7466835cc3fd4dbea94bf6ff118bf33dd94849103a74444",
"Gateway": "172.17.0.1",
"IPAddress": "172.17.0.3",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"DNSNames": null
}
}
}
}
]
Anything else?
a 2nd firefox is not responding to web port 5808 either. the logs show 5800 in some places and 5808 in others. this is another issue?