[Bug] "mknod: Operation not permitted" in build newer than 1.4-r5-ls51

[chr0nzz]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

The container fails to start when using the latest tag (or any tag newer than 1.4-r5-ls51). The container exits immediately after throwing multiple mknod: Operation not permitted errors during the initialization phase, specifically when attempting to create virtual device files for input devices.

Expected Behavior

The container should start successfully, load the GUI desktop environment (Selkies/KasmVNC), and run the Inkscape application, allowing access via the web browser on port 3000/3001.

Workaround Found:
The container starts and runs correctly when the image tag is explicitly set to the previous version: lscr.io/linuxserver/inkscape:1.4-r5-ls51.

Steps To Reproduce

Use the docker-compose.yml snippet provided below in the "Docker creation" section.

Change the image tag to the latest version: image: lscr.io/linuxserver/inkscape:latest (or 1.4-r5-ls53).

Run the command: docker compose up -d.

Check the logs with docker logs inkscape and observe the repeated mknod: Operation not permitted errors.

Environment

Ubuntu 22.04.5 LTS
official convenience script

CPU architecture

x86-64

Docker creation

services:
  inkscape:
    image: lscr.io/linuxserver/inkscape:latest  # <--- Note: This is the tag that fails
    container_name: inkscape
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/Toronto
    volumes:
      - ./config:/config
      - /data/documents:/data
    # The container requires these privileged settings but still fails on latest build:
    privileged: true
    cap_add:
      - MKNOD
    restart: unless-stopped
    networks:
      - web
    # redacted traefik labels 

networks:
  web:
    external: true

Container logs

# Output of "docker logs inkscape" when using the broken 'latest' tag:

inkscape  | [migrations] started
inkscape  | [migrations] no migrations found
inkscape  | ───────────────────────────────────────
inkscape  | 
inkscape  |       ██╗     ███████╗██╗ ██████╗
... (LSIO banner)
inkscape  | 
inkscape  | ───────────────────────────────────────
inkscape  | GID/UID
inkscape  | ───────────────────────────────────────
inkscape  | 
inkscape  | User UID:    1000
inkscape  | User GID:    1000
inkscape  | ───────────────────────────────────────
inkscape  | [ls.io-init] Creating initial backup of system rc.xml
inkscape  | mknod: /dev/input/js0: Operation not permitted
inkscape  | mknod: /dev/input/js1: Operation not permitted
inkscape  | mknod: /dev/input/js2: Operation not permitted
inkscape  | mknod: /dev/input/js3: Operation not permitted
inkscape  | mknod: /dev/input/event1000: Operation not permitted
inkscape  | mknod: /dev/input/event1001: Operation not permitted
inkscape  | mknod: /dev/input/event1002: Operation not permitted
inkscape  | mknod: /dev/input/event1003: Operation not permitted
inkscape  | chmod: cannot access '/dev/input/js*': No such file or directory
inkscape  | chmod: cannot access '/dev/input/event*': No such file or directory
inkscape  | s6-rc: warning: unable to start service init-selkies-config: command exited 1

[github-actions]

Thanks for opening your first issue here! Be sure to follow the relevant issue templates, or risk having this issue marked as invalid.

[aptalca]

Baseimage is already fixed, it will waterfall to downstream images over the next few days. You can switch to an older tag in the meantime.

[LinuxServer-CI]

This issue has been automatically marked as stale because it has not had recent activity. This might be due to missing feedback from OP. It will be closed if no further activity occurs. Thank you for your contributions.