Ubuntu 23.04 LTS, XFCE: docker-desktop fails to start

[thomas-maeder]

Description

Any attempt to start docker-deskop results in the following lines to be written:
[14:13:14.009777147Z][main.statehandler ] sending to Dashboard: starting
[14:13:14.009797868Z][main.virtiofs ] waiting for filesharing sockets to be created
[14:13:14.009958375Z][main.virtiofs ] closing virtiofsd stdin pipe: close |1: file already closed
[14:13:14.010276398Z][main.virtiofs ][W] virtiofsd error occurred while waiting for sockets: %!(EXTRA *errordef.dockerDesktopError=starting virtiofsd for /home: starting namespace for virtiofsd: fork/exec /bin/bash: permission denied)
[14:13:14.010322691Z][main.engines ] stopping engine

Before that, the output looks ok.

Reproduce

Run /opt/docker-desktop/bin/com.docker.backend

Expected behavior

docker-desktop starts

docker version

Client: Docker Engine - Community
 Version:           27.1.1
 API version:       1.46
 Go version:        go1.21.12
 Git commit:        6312585
 Built:             Tue Jul 23 19:57:14 2024
 OS/Arch:           linux/amd64
 Context:           desktop-linux

docker info

Client: Docker Engine - Community
 Version:    27.1.1
 Context:    desktop-linux
 Debug Mode: false
 Plugins:
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.15.1-desktop.1
    Path:     /usr/lib/docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v2.28.1-desktop.1
    Path:     /usr/lib/docker/cli-plugins/docker-compose
  debug: Get a shell into any image or container (Docker Inc.)
    Version:  0.0.32
    Path:     /usr/lib/docker/cli-plugins/docker-debug
  desktop: Docker Desktop commands (Alpha) (Docker Inc.)
    Version:  v0.0.14
    Path:     /usr/lib/docker/cli-plugins/docker-desktop
  dev: Docker Dev Environments (Docker Inc.)
    Version:  v0.1.2
    Path:     /usr/lib/docker/cli-plugins/docker-dev
  extension: Manages Docker extensions (Docker Inc.)
    Version:  v0.2.25
    Path:     /usr/lib/docker/cli-plugins/docker-extension
  feedback: Provide feedback, right in your terminal! (Docker Inc.)
    Version:  v1.0.5
    Path:     /usr/lib/docker/cli-plugins/docker-feedback
  init: Creates Docker-related starter files for your project (Docker Inc.)
    Version:  v1.3.0
    Path:     /usr/lib/docker/cli-plugins/docker-init
  sbom: View the packaged-based Software Bill Of Materials (SBOM) for an image (Anchore Inc.)
    Version:  0.6.0
    Path:     /usr/lib/docker/cli-plugins/docker-sbom
  scout: Docker Scout (Docker Inc.)
    Version:  v1.10.0
    Path:     /usr/lib/docker/cli-plugins/docker-scout

Server:
ERROR: Cannot connect to the Docker daemon at unix:///home/thomas/.docker/desktop/docker.sock. Is the docker daemon running?
errors pretty printing info

Diagnostics ID

F12ED343-30EB-44B5-9C9A-6F9FD7725BA9/20240808143600

Additional Info

$ whoami
thomas

$ cat /etc/subuid
thomas:100000:65536

$ cat /etc/subgid
thomas:100000:65536

[thomas-maeder]

Turns out, that the installation package and the docs are broken.

• docker-desktop does some user namespace stuff
• but the package fails to install a suitable apparmor profile
• also the docs don't mention this with a syllable

[thomas-maeder]

Cf. #209
The fix provided there looks like extreme overkill, though, because it disable some aspect of apparmor for all applications.

Cf. #211
This workaround #211 (comment) provides a more local fix that only affects docker-desktop; you want to replace "chrome" with something more suitable on the last line, though.