[SOLVED] Authentik OCI container does not start

crazywolf13

Member
Oct 15, 2023
78
9
13
Hi,

I wanted to test out the OCI function, I pulled the image: ghcr.io/goauthentik/server:2025.10.3 which seemed to go through without issues:
Code:
Getting image source signatures
Copying blob sha256:38513bd7256313495cdd83b3b0915a633cfa475dc2a07072ab2c8d191020ca5d
Copying blob sha256:4bb833447b0b141d2be7145964ed676a8c04204038a0803cb2bed2d9bffd8691
Copying blob sha256:1fff4441d4f0174b028fab10000c779206c3946372e1029800630dd9cc505105
Copying blob sha256:5d66c85a52ceaf6f892c6976291a0c63c321506dee80571b5334f54f7067c22a
Copying blob sha256:b184421577ede0107bb32dee6fc0274e2a284e38a659b59ffbb9d281e997ff94
Copying blob sha256:e6993d459eb68193a8dbd2be9893df384db214be35a1e6c8efb4783cb4e15bc5
Copying blob sha256:3a23fc9f7e5a18b48ff31d8b269dd386cf97390c7776abfdbe04a57fba037153
Copying blob sha256:1e80e78da19dad7dd069e80857a00096501aa204132a0eb036ff0c7721770239
Copying blob sha256:66f3af957b7831f230e407f404823cf8d8b20009a460f215a6960d452bc8cdee
Copying blob sha256:aab0fc3d67ae68be2c73d62731e7c4000296a7f2cd5256aa6d2f463206fdaf7d
Copying blob sha256:9344d00b9501acfd60f99d92c4590d3e2916b6c0a752136abb772d1558830ce2
Copying blob sha256:399bf92687b17a91d9cf2ce9c9585344d94af09bd4d5efd5b36d4d4437ecfb34
Copying blob sha256:1864be41fc002e454fd342365287e657571d314e4867f3dddbab78bdb2c35737
Copying blob sha256:e070845c6ca32452893d7961540751bc680d7bb69fc36b90ba9cb333d44b8d8c
Copying blob sha256:991b07171d2764666ab24ebc4fd173a72c483125be3f13d6bda280017b80f5c6
Copying blob sha256:cf3a7659b3c248012a9d6699cfb5fcd98396f53d5f7b7ab2888b71e68d18e90b
Copying blob sha256:5170b4315e170aaa8ee9ece76846339e06fdd3d5c76fe282ba99d4c66f35b2d8
Copying blob sha256:8ee88c6e5760a576c8849a297b0616c660e01eb3687cee2f1e2d5c730b08626d
Copying blob sha256:a75343ced80013c4ffed535e554d129aa69b69618e37f7468f3e6d3f0d038a04
Copying blob sha256:acd6b58904d7e50582fb5a419d145c24acedcca663bfa4f058c26ce27cc9718b
Copying blob sha256:5abc7848d5737c44159f6bd79b5b688a23d36c13b9550e3024ddfbcd5298904c
Copying blob sha256:738ed5579c9387a7dcfc431c8b6ccfec33773c3dd86e0fbdec2559e578f61d64
Copying blob sha256:220172304e5c0ba02e3a7b3709bbca3317c2278aa39f952c15f5527091230fd1
Copying blob sha256:ecc35da34104517d3e622804ee863fa6da407ba6479d0d2ac6c81ef181ab59f6
Copying blob sha256:6e51e00fe4685ede646ff40075368d55b913001fe90333822c145524ff2daaab
Copying blob sha256:e9ad6fbf7c4b0628edf42532559ea3be690861d5b84e51816246144f4bd5273c
Copying config sha256:9bb052cd46b55fe96eea5dcb1cdd81364f607b847b05f301d109d53e2c71a599
Writing manifest to image destination
TASK OK

After that I created a container using this template:
Code:
  Logical volume "vm-159-disk-0" created.
  Logical volume pve/vm-159-disk-0 changed.
Creating filesystem with 2097152 4k blocks and 524288 inodes
Filesystem UUID: d76d300c-ee0e-468b-9f11-38f8978e83ae
Superblock backups stored on blocks:
    32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632
Detected OCI archive
Auto-Enabling host-managed network for network device net0.
Detected container architecture: amd64
TASK OK

PCT Config:
Code:
arch: amd64
cores: 2
entrypoint: dumb-init -- ak
features: nesting=1
hostname: authentik-test
memory: 4096
nameserver: 10.10.20.1
net0: name=eth0,bridge=vmbr0,gw=10.10.20.1,host-managed=1,hwaddr=BC:24:11:03:A8:BD,ip=10.10.20.60/24,tag=20,type=veth
ostype: debian
rootfs: local-lvm:vm-159-disk-0,size=8G
searchdomain: home
swap: 1024
unprivileged: 1
lxc.environment.runtime: PATH=/lifecycle:/ak-root/.venv/bin:/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
lxc.environment.runtime: GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305
lxc.environment.runtime: VENV_PATH=/ak-root/.venv
lxc.environment.runtime: UV_COMPILE_BYTECODE=1
lxc.environment.runtime: UV_LINK_MODE=copy
lxc.environment.runtime: UV_NATIVE_TLS=1
lxc.environment.runtime: UV_PYTHON_DOWNLOADS=0
lxc.environment.runtime: GIT_BUILD_HASH=
lxc.environment.runtime: TMPDIR=/dev/shm/
lxc.environment.runtime: PYTHONDONTWRITEBYTECODE=1
lxc.environment.runtime: PYTHONUNBUFFERED=1
lxc.environment.runtime: GOFIPS=1
lxc.init.cwd: /
lxc.signal.halt: SIGTERM

However the container just doesn't do anything when I start it. Weirdly it also doesn't show an error, I can just press start as many times as I want, but nothing happens.

Here the output with debug, posting to pastebin, as my ost is otherwise too long.
https://pastebin.com/9EM0t5SL

Any ideas what I'm missing?

I tried changing the entrypoint in the options, which is currently set to `dumb-init -- ak` by default.
Looking at the docker compose of authentik: https://docs.goauthentik.io/docker-compose.yml there is no entrypoint specified, only a command of either server or worker, depending on how the container should serve.