Issue pulling custom app from registry on the same cloudron

[mathieuepitech]

Hello, I got an issue after making a reboot to apply security issue, since that, I cannot update a custom app that I store on a custom registry on the same cloudron server.

I got this error when updating the application with the latest image

2026-04-19T20:26:55.074Z tasks: startTask: 23918 completed. error: {
  message: 'Unable to pull image xxx.xxx.fr/continuous/custom-app:0.0.0-0d7377d9a6a5080ab755d664031a5791fbe98733. registry error: {"reason":"server error","statusCode":500,"json":null}',
  reason: 'Docker Error'
}

But I can pull the image locally without any issue.

I run the support command to find the issue and it's says that the domain dahsboard isn't reachable, but I can access it on my computer.

Here the result of cloudron-support --troubleshoot

Vendor:  Product:
Linux: 6.8.0-110-generic
Ubuntu: noble 24.04
Execution environment: none
none
Processor: Intel(R) Core(TM) i3-2130 CPU @ 3.40GHz
BIOS Intel(R) Core(TM) i3-2130 CPU @ 3.40GHz         To Be Filled By O.E.M. CPU @ 3.4GHz x 4
RAM: 8017040KB
Disk: /dev/sda2        21G
[OK]    node version is correct
[OK]    IPv6 is enabled and public IPv6 address is working
[OK]    docker is running
[OK]    docker version is correct
[OK]    MySQL is running
[WARN]  netplan configuration is empty. this might be OK depending on your networking setup
[OK]    DNS is resolving via systemd-resolved
[OK]    unbound is running
[OK]    nginx is running
[OK]    dashboard cert is valid
[OK]    dashboard is reachable via loopback
[OK]    No pending database migrations
[OK]    Service 'mysql' is running and healthy
[OK]    Service 'postgresql' is running and healthy
[WARN]  Service 'mongodb' is not running (may be lazy-stopped)
[OK]    Service 'mail' is running and healthy
[OK]    Service 'graphite' is running and healthy
[OK]    Service 'sftp' is running and healthy
[OK]    box v9.1.6 is running
[FAIL]  Could not load dashboard domain.
Hairpin NAT is not working. Please check if your router supports it

If you have any idea how I can fix it, I'm all ears.

[robi]

There are a couple of other people that ran into this, so check those posts.

I believe they updated Ubuntu to resolve.

[james]

Hello @mathieuepitech

What provider are you using to host your server?

[mathieuepitech]

@james I’m on Kimsufi dedicated server.
I don’t know if it’s relevant, but my cloudron server is old, I started it on ubuntu 16 and upgrade it to 24 a few years ago.

[mathieuepitech]

@robi I’m already on the latest LTS Ubuntu version.
Do you have some links of other issues, I didn’t find them with the search.

[james]

Hello @mathieuepitech
No, I think your issue is linked to https://forum.cloudron.io/topic/15408/openid-configuration-url-timeout and https://forum.cloudron.io/topic/15265/unusable-application

we have to figure out what is going on.

[james]

Hello @mathieuepitech
Can you give me the output of the following command on your system?

uname -nar

We found systems with kernel version <110 are not effected.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1130336

[mathieuepitech]

@james said:

uname -nar

Yes I have kernel 110.

 6.8.0-110-generic #110-Ubuntu SMP PREEMPT_DYNAMIC Thu Mar 19 15:09:20 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux

But I tried the fixed from here, but I still got the issue.
Should I contact the support ?

[james]

Hello @mathieuepitech
Can you also try to apply this patch https://git.cloudron.io/platform/box/-/commit/bffc97ab2fedb06100bc507abd0f8b42d343ea6e
and restart the cloudron-firewall service with:

systemctl restart cloudron-firewall.service

[vk182]

@james thanks for the speed! This one has worked just fine for us!

[james]

Hello @vk182
Great to read!

[mathieuepitech]

@james Unfortunately on my side it didn't works.
Now the command cloudron-support --troubleshoot get everything ok.
But I still cannot update my custom app from an image that is stored in a custom registry on the same cloudron server.

I even try to reboot my server and that didn't change anything.

[james]

Hello @mathieuepitech

Can you please run the following commands:

# first one
curl 127.0.0.1
# second one
curl 127.0.0.1

If the second curl fails there is still a networking issue.

[mathieuepitech]

@james I get an HTML page with Cloudron - Not Found error on both curl

[james]

Hello @mathieuepitech

Okay, so the network issue is resolved by the applied patch.
When you configure your docker registry in the Cloudron Dashboard, is there any error when saving?

[mathieuepitech]

@james said:

Hello @mathieuepitech

Okay, so the network issue is resolved by the applied patch.
When you configure your docker registry in the Cloudron Dashboard, is there any error when saving?

My bad, with the issue, I had remove the registry and couldn't add it back.
Now I have added back and it's working perfectly.

Thank you very much !

[james]

Hello @mathieuepitech
Glad to read that.
So it was indeed also the Ubuntu Kernel 110 issue.

[timconsidine]

FWIW. I have just run into the issue.
Broke connectivity to my cloudron-installed forgejo
Fixed using the patch after losing 4 hours to checking it was not something I did.

IMHO :

• EITHER 9.1.6.should be pulled
• OR 9.1.7 should be accelerated
• AND some kind of a clearer higher profile URGENT ADVISORY should be issued for people to check if uname shows 110

I may have missed such an announcement, but I assume this affects quite a number of Cloudron users, so it should be addressed.

Probably a stupid perception issue but backups on patched 9.1.6 seem slower. Working but much slower than before. Will keep an eye on it and try to get some metrics (to rule out user perception).
Seems that rysnc location (hetzner Storage Box) needed remounting. No idea why, but seeks ok now. Watching.

[james]

Hello @timconsidine

@timconsidine said:

OR 9.1.7 should be accelerated

Cloudron version 9.1.7 is already out and you should be able to update your system.
Is it not possible for you?

@timconsidine said:

EITHER 9.1.6.should be pulled

Why?
Since this is not a Cloudron issue in a general sense but a kernel issue, why 'revoke' Cloudron version 9.1.6?

[timconsidine]

@james good points, thank you.

Honestly … I didn’t check for 9.1.7, lost too much time getting stable operations again, didn’t want to risk further. I will get brave and do it when a process slot appears.

Revoke 9.1.6 : Yes, maybe knee-jerk overkill, but it’s undeniably broken (not Cloudron fault I accept) in a fairly fundamental way for a possibly/probably large number of users. However if 9.1.7 is out and reliable, then users have a path forward. If they know about it.

That’s where the Urgent Advisory Notice is relevant : please check if you’re on kernel xxxx, we have detected incompatibility of 9.1.6 with that, you can fix by 9.1.7 which is available now.

I didn’t choose to deploy 9.1.6, it happened on a reboot and I was left with a broken system. An Advisory would have shortened restoration of full functionality.