The webpage does not work: Your connection is not private - SSL Error

[Hawksama]

Describe the bug
Your connection is not private - on an already working project from Docker Desktop. I deleted all the containers/volumes and images in connection with that project and I tried the basic getting started.

To Reproduce
Steps to reproduce the behaviour:

1. Run the docker run -it -p 80:80 docker/getting-started
2. Go to https://localhost/

Expected behavior
The page should be working.

Screenshots

Logs
/docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration
/docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/
/docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf
10-listen-on-ipv6-by-default.sh: info: Enabled listen on IPv6 in /etc/nginx/conf.d/default.conf
/docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh
/docker-entrypoint.sh: Configuration complete; ready for start up
2023/06/14 21:08:39 [notice] 1#1: using the "epoll" event method
2023/06/14 21:08:39 [notice] 1#1: nginx/1.23.3
2023/06/14 21:08:39 [notice] 1#1: built by gcc 12.2.1 20220924 (Alpine 12.2.1_git20220924-r4)
2023/06/14 21:08:39 [notice] 1#1: OS: Linux 6.3.6-orbstack-00155-g0884b5092004
2023/06/14 21:08:39 [notice] 1#1: getrlimit(RLIMIT_NOFILE): 1048576:1048576
2023/06/14 21:08:39 [notice] 1#1: start worker processes
2023/06/14 21:08:39 [notice] 1#1: start worker process 30
2023/06/14 21:08:39 [notice] 1#1: start worker process 31
2023/06/14 21:08:39 [notice] 1#1: start worker process 32
2023/06/14 21:08:39 [notice] 1#1: start worker process 33
2023/06/14 21:08:39 [notice] 1#1: start worker process 34
2023/06/14 21:08:39 [notice] 1#1: start worker process 35
2023/06/14 21:08:39 [notice] 1#1: start worker process 36
2023/06/14 21:08:39 [notice] 1#1: start worker process 37
2023/06/14 21:08:39 [notice] 1#1: start worker process 38
2023/06/14 21:08:39 [notice] 1#1: start worker process 39

Info report

OrbStack info:
  Version: 0.11.3 (110300)
  Commit: f953c63b1cbfe3c2988c97e0b42680600cf0e060 (v0.11.3)

System info:
  macOS: 14.0 (23A5257q)
  CPU: arm64, 10 cores
  CPU model: Apple M1 Max

[kdrag0n]

That's because you have this setting enabled in Chrome:

You have to use http://localhost and click "Continue" when asked because you've only forwarded port 80. https://localhost is not going to work if your server isn't listening on port 443.

[Hawksama]

Hmm, thanks @kdrag0n, that worked. But what throws me off is that the certificate for a project that is working correctly on the docker desktop, on OrbStack I get that the certificate is invalid.

[kdrag0n]

Click "Advanced" on the error page to see why it's invalid. At a glance it looks odd that your certificate is missing a Common Name, unless catering24.local is one of the Alternate Names.

Anyway, differences in the certificate will be caused by differences in the Docker environment when you migrated to OrbStack (such as building new images, creating new volumes, or mounting different paths), not because of OrbStack itself. Closing, but happy to keep helping.

[Hawksama]

Thanks for helping me. This is what "advanced" tells me about this situation

`www.catering24.local normally uses encryption to protect your information. When Chrome tried to connect to www.catering24.local this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be www.catering24.local or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Chrome stopped the connection before any data was exchanged.

You cannot visit www.catering24.local right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.`

[Hawksama]

@kdrag0n
What's weird is that the nginx container listens for port 443:

Port 80 is fine, 443 is broken.

[kdrag0n]

Can you share full log files from the Help menu?

You might actually be running into a bug, #326. Workaround: orb shutdown && orb

[Hawksama]

I've tried the workaround but it didn't work.

Here is my logs.

🌲 vmgr | time="06-16 11:26:57" level=info msg="configuring VM"
🌲 vmgr | time="06-16 11:26:57" level=info msg="forwarding SSH agent" sock=/private/tmp/com.apple.launchd.x3DycI8eh8/Listeners
🌲 vmgr | time="06-16 11:26:57" level=info msg="starting VM"
🌲 vmgr | time="06-16 11:26:57" level=info msg="using proxy: none"
2023-06-16 11:26:57.832 OrbStack Helper (VM)[60157:14992347] [VZF] start: begin ffi
2023-06-16 11:26:57.833 OrbStack Helper (VM)[60157:14992356] [VZF] start: begin task
2023-06-16 11:26:57.833 OrbStack Helper (VM)[60157:14992356] [VZF] start: begin dispatch call
2023-06-16 11:26:57.940 OrbStack Helper (VM)[60157:14992355] [VZF] start: completed success()
🌲 vmgr | time="06-16 11:26:57" level=info msg="starting host services"
🌲 vmgr | time="06-16 11:26:57" level=info msg="waiting for VM to start"
🌲 vmgr | time="06-16 11:26:57" level=info msg="[VM] starting"
🌲 vmgr | time="06-16 11:26:57" level=info msg="[VM] started"
👾 kernel | [    0.228620] random: crng init done
👾 kernel | [    0.228703] cacheinfo: Unable to detect cache hierarchy for CPU 0
👾 kernel | [    0.228894] loop: module loaded
👾 kernel | [    0.229930] virtio_blk virtio2: 1/0/0 default/read/poll queues
👾 kernel | [    0.230247] virtio_blk virtio2: [vda] 233592 512-byte logical blocks (120 MB/114 MiB)
👾 kernel | [    0.230702] virtio_blk virtio3: 1/0/0 default/read/poll queues
👾 kernel | [    0.231014] virtio_blk virtio3: [vdb] 17179869184 512-byte logical blocks (8.80 TB/8.00 TiB)
👾 kernel | [    0.232264]  vdb: vdb1
👾 kernel | [    0.232480] virtio_blk virtio4: 1/0/0 default/read/poll queues
👾 kernel | [    0.232790] virtio_blk virtio4: [vdc] 14680064 512-byte logical blocks (7.52 GB/7.00 GiB)
👾 kernel | [    0.233506]  vdc: vdc1 vdc2
👾 kernel | [    0.233762] zram: Added device: zram0
👾 kernel | [    0.233846] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information.
👾 kernel | [    0.233908] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
👾 kernel | [    0.234066] tun: Universal TUN/TAP device driver, 1.6
👾 kernel | [    0.234607] PPP generic driver version 2.4.2
👾 kernel | [    0.234688] PPP Deflate Compression module registered
👾 kernel | [    0.234769] PPP MPPE Compression module registered
👾 kernel | [    0.234829] usbcore: registered new interface driver rtl8187
👾 kernel | [    0.234904] usbcore: registered new interface driver rtl8192cu
👾 kernel | [    0.235003] usbcore: registered new interface driver rtl8150
👾 kernel | [    0.235068] usbcore: registered new device driver r8152-cfgselector
👾 kernel | [    0.235157] usbcore: registered new interface driver r8152
👾 kernel | [    0.235249] usbcore: registered new interface driver asix
👾 kernel | [    0.235304] usbcore: registered new interface driver ax88179_178a
👾 kernel | [    0.235415] usbcore: registered new interface driver cdc_ether
👾 kernel | [    0.235496] usbcore: registered new interface driver cdc_ncm
👾 kernel | [    0.235579] usbcore: registered new interface driver r8153_ecm
👾 kernel | [    0.235720] usbcore: registered new interface driver uas
👾 kernel | [    0.235772] usbcore: registered new interface driver usb-storage
👾 kernel | [    0.235923] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller
👾 kernel | [    0.235997] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 1
👾 kernel | [    0.236116] vhci_hcd: created sysfs vhci_hcd.0
👾 kernel | [    0.236189] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.03
👾 kernel | [    0.236283] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
👾 kernel | [    0.236366] usb usb1: Product: USB/IP Virtual Host Controller
👾 kernel | [    0.236431] usb usb1: Manufacturer: Linux 6.3.6-orbstack-00155-g0884b5092004 vhci_hcd
👾 kernel | [    0.236503] usb usb1: SerialNumber: vhci_hcd.0
👾 kernel | [    0.236625] hub 1-0:1.0: USB hub found
👾 kernel | [    0.236677] hub 1-0:1.0: 8 ports detected
👾 kernel | [    0.236758] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller
👾 kernel | [    0.236815] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 2
👾 kernel | [    0.236962] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
👾 kernel | [    0.237092] usb usb2: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 6.03
👾 kernel | [    0.237182] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
👾 kernel | [    0.237283] usb usb2: Product: USB/IP Virtual Host Controller
👾 kernel | [    0.237365] usb usb2: Manufacturer: Linux 6.3.6-orbstack-00155-g0884b5092004 vhci_hcd
👾 kernel | [    0.237442] usb usb2: SerialNumber: vhci_hcd.0
👾 kernel | [    0.237529] hub 2-0:1.0: USB hub found
👾 kernel | [    0.237564] hub 2-0:1.0: 8 ports detected
👾 kernel | [    0.237737] rtc-pl031 20050000.pl031: registered as rtc0
👾 kernel | [    0.237792] rtc-pl031 20050000.pl031: setting system clock to 2023-06-16T08:26:58 UTC (1686904018)
👾 kernel | [    0.238486] SoftiWARP attached
👾 kernel | [    0.238543] hid: raw HID events driver (C) Jiri Kosina
👾 kernel | [    0.238598] usbcore: registered new interface driver usbhid
👾 kernel | [    0.238636] usbhid: USB HID core driver
👾 kernel | [    0.238800] GACT probability NOT on
👾 kernel | [    0.238836] Mirror/redirect action on
👾 kernel | [    0.238889] netem: version 1.3
👾 kernel | [    0.238931] u32 classifier
👾 kernel | [    0.238964]     Performance counters on
👾 kernel | [    0.239014]     input device check on
👾 kernel | [    0.239051]     Actions configured
👾 kernel | [    0.246948] xt_time: kernel timezone is -0000
👾 kernel | [    0.247011] IPVS: Registered protocols (TCP, UDP)
👾 kernel | [    0.247069] IPVS: Connection hash table configured (size=4096, memory=32Kbytes)
👾 kernel | [    0.247182] IPVS: ipvs loaded.
👾 kernel | [    0.247219] IPVS: [rr] scheduler registered.
👾 kernel | [    0.247247] IPVS: [wrr] scheduler registered.
👾 kernel | [    0.247292] IPVS: [sh] scheduler registered.
👾 kernel | [    0.247400] Initializing XFRM netlink socket
👾 kernel | [    0.247442] NET: Registered PF_INET6 protocol family
👾 kernel | [    0.247839] Segment Routing with IPv6
👾 kernel | [    0.247882] In-situ OAM (IOAM) with IPv6
👾 kernel | [    0.247944] NET: Registered PF_PACKET protocol family
👾 kernel | [    0.248001] Bridge firewalling registered
👾 kernel | [    0.248047] l2tp_core: L2TP core driver, V2.0
👾 kernel | [    0.248102] 8021q: 802.1Q VLAN Support v1.8
👾 kernel | [    0.248127] 9pnet: Installing 9P2000 support
👾 kernel | [    0.248204] Key type dns_resolver registered
👾 kernel | [    0.248331] NET: Registered PF_VSOCK protocol family
👾 kernel | [    0.249586] registered taskstats version 1
👾 kernel | [    0.249705] Loading compiled-in X.509 certificates
👾 kernel | [    0.250533] Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no
👾 kernel | [    0.250767] rdma_rxe: loaded
👾 kernel | [    0.250860] cfg80211: Loading compiled-in X.509 certificates for regulatory database
👾 kernel | [    0.251456] Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
👾 kernel | [    0.251548] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
👾 kernel | [    0.251641] cfg80211: failed to load regulatory.db
👾 kernel | [    0.251854] erofs: (device vda): mounted with root inode @ nid 36.
👾 kernel | [    0.251925] VFS: Mounted root (erofs filesystem) readonly on device 254:0.
👾 kernel | [    0.252054] devtmpfs: mounted
👾 kernel | [    0.252573] Freeing unused kernel memory: 4928K
👾 kernel | [    0.252656] Run /opt/orb/preinit as init process
👾 kernel | [BEGIN] preinit
👾 kernel | [END] preinit
🐧 system | 
🐧 system |    OpenRC 0.47.1 is starting up Linux 6.3.6-orbstack-00155-g0884b5092004 (aarch64)
🐧 system | 
🐧 system |  * Mounting /proc ... [ ok ]
🐧 system |  * Mounting /run ... [ ok ]
🐧 system |  * /run/openrc: creating directory
🐧 system |  * /run/lock: creating directory
🐧 system |  * /run/lock: correcting owner
🐧 system | /lib/rc/sh/gendepends.sh: 12: [: unexpected operator
🐧 system |  * Caching service dependencies ... [ ok ]
🐧 system |  * Mounting /sys ... * Mounting devtmpfs on /dev ... [ ok ]
🐧 system |  [ ok ]
🐧 system |  * Mounting security filesystem ... [ ok ]
🐧 system |  * Mounting /dev/mqueue ... * Mounting debug filesystem ... [ ok ]
🐧 system |  [ ok ]
🐧 system |  * Mounting fuse control filesystem ... * Mounting /dev/pts ... [ ok ]
🐧 system |  [ ok ]
🐧 system |  * Mounting /dev/shm ... [ ok ]
👾 kernel | [BEGIN] vinit-early
🐧 system | Cannot find device "eth1"
🐧 system | Cannot find device "eth1"
🐧 system | �[2m2023-06-16T08:26:58.689033Z�[0m �[32m INFO�[0m �[2mvcontrol�[0m�[2m:�[0m starting
👾 kernel | [    0.526294] virtio-fs: tag <rosetta> not found
🐧 system | mount: /mnt/rosetta: wrong fs type, bad option, bad superblock on rosetta, missing codepage or helper program, or other error.
🐧 system |        dmesg(1) may have more information after failed mount system call.
👾 kernel | [END] vinit-early
🐧 system | hostname         | * Setting hostname ... [ ok ]
🐧 system | udev             | * Starting udev ... [ ok ]
👾 kernel | [    0.664060] udevd[502]: starting version 3.2.11
👾 kernel | [    0.666498] udevd[502]: starting eudev-3.2.11
🌲 vmgr | time="06-16 11:26:58" level=error msg="host-tcp forward: dial failed" addr="{1 198.19.248.2 8000}" error="connect tcp 198.19.248.2:8000: connection was refused"
🐧 system | udev-settle      | * Waiting for uevents to be processed ...fsck             | * Checking local filesystems  ... [ ok ]
🌲 vmgr | time="06-16 11:26:59" level=error msg="host-unix forward: dial failed" addr="{1 198.19.248.2 8000}" error="connect tcp 198.19.248.2:8000: connection was refused"
🐧 system | root             | * Remounting filesystems ... [ ok ]
🌲 vmgr | time="06-16 11:26:59" level=error msg="host-unix forward: dial failed" addr="{1 198.19.248.2 2375}" error="connect tcp 198.19.248.2:2375: connection was refused"
🌲 vmgr | time="06-16 11:26:59" level=error msg="host-unix forward: dial failed" addr="{1 198.19.248.2 2375}" error="connect tcp 198.19.248.2:2375: connection was refused"
🐧 system |  [ ok ]
🐧 system | localmount       | * Mounting [    0.822798] BlTRFS: device laboel user-data-fs cdevid 1 transid a6313 /dev/vdb1 slcanned by mount  (626)
🐧 system | filesystems ...[    0.824031] BTRFS info (device vdb1): using crc32c (crc32c-generic) checksum algorithm
👾 kernel | [    0.825329] BTRFS info (device vdb1): turning on async discard
👾 kernel | [    0.825630] BTRFS info (device vdb1): enabling ssd optimizations
👾 kernel | [    0.825901] BTRFS info (device vdb1): setting nodatacow, compression disabled
👾 kernel | [    0.826022] BTRFS info (device vdb1): using free space tree
🌲 vmgr | time="06-16 11:26:59" level=error msg="host-unix forward: dial failed" addr="{1 198.19.248.2 2375}" error="connect tcp 198.19.248.2:2375: connection was refused"
🌲 vmgr | time="06-16 11:26:59" level=error msg="host-unix forward: dial failed" addr="{1 198.19.248.2 2375}" error="connect tcp 198.19.248.2:2375: connection was refused"
🐧 system |  [ ok ]
🐧 system | networking       | * Starting networking ... *   lo .../etc/network/if-up.d/dad: 11: arithmetic expression: expecting primary: " counter-- "
🐧 system | networking       |run-parts: /etc/network/if-up.d/dad: exit status 2
🐧 system | networking       | [ ok ]
🌲 vmgr | time="06-16 11:26:59" level=error msg="host-tcp forward: dial failed" addr="{1 198.19.248.2 8000}" error="connect tcp 198.19.248.2:8000: connection was refused"
🌲 vmgr | time="06-16 11:26:59" level=error msg="host-unix forward: dial failed" addr="{1 198.19.248.2 8000}" error="connect tcp 198.19.248.2:8000: connection was refused"
🌲 vmgr | time="06-16 11:26:59" level=error msg="host-tcp forward: dial failed" addr="{1 198.19.248.2 8000}" error="connect tcp 198.19.248.2:8000: connection was refused"
🌲 vmgr | time="06-16 11:26:59" level=error msg="host-unix forward: dial failed" addr="{1 198.19.248.2 8000}" error="connect tcp 198.19.248.2:8000: connection was refused"
🐧 system | chronyd          | * Starting chronyd ... [ ok ]
👾 kernel | [BEGIN] vinit-late
👾 kernel | [    1.000770] zram: setup backing device /dev/vdc1
👾 kernel | [    1.006307] zram0: detected capacity change from 0 to 16257024
👾 kernel | [END] vinit-late
🐧 system | Setting up swapspace version 1, size = 7.8 GiB (8323592192 bytes)
🐧 system | no label, UUID=86f8ac49-1676-497f-8e7e-650652fabc81
👾 kernel | [    1.038984] Adding 8128508k swap on /dev/zram0.  Priority:32767 extents:1 across:8128508k SSDsc
👾 kernel | [    1.042755] Adding 2097148k swap on /dev/vdc2.  Priority:1 extents:1 across:2097148k Dsc
🐧 system | Resize device id 1 (/dev/vdb1) from 926.35GiB to max
🌲 vmgr | time="06-16 11:26:59" level=info msg="Data FS ready"
🌲 vmgr | time="06-16 11:26:59" level=error msg="host-tcp forward: dial failed" addr="{1 198.19.248.2 8000}" error="connect tcp 198.19.248.2:8000: connection was refused"
🌲 vmgr | time="06-16 11:26:59" level=error msg="host-unix forward: dial failed" addr="{1 198.19.248.2 8000}" error="connect tcp 198.19.248.2:8000: connection was refused"
📦 scon | �[36mINFO�[0m[06-16 08:26:59] started                                      
📦 scon | �[36mINFO�[0m[06-16 08:26:59] starting container                            �[36mcontainer�[0m=docker
👾 kernel | [    1.206130] conbr0: port 1(vethk7g3ws) entered blocking state
👾 kernel | [    1.211770] conbr0: port 1(vethk7g3ws) entered disabled state
👾 kernel | [    1.213862] vethk7g3ws: entered allmulticast mode
👾 kernel | [    1.214051] vethk7g3ws: entered promiscuous mode
👾 kernel | [    1.214285] conbr0: port 1(vethk7g3ws) entered blocking state
👾 kernel | [    1.214818] conbr0: port 1(vethk7g3ws) entered forwarding state
👾 kernel | [    1.215222] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=787 'scon'
👾 kernel | [    1.215567] eth0: renamed from vethXG3ZE0
👾 kernel | [    1.250894] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
👾 kernel | [    1.252326] conbr0: port 1(vethk7g3ws) entered disabled state
👾 kernel | [    1.253351] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
👾 kernel | [    1.253731] IPv6: ADDRCONF(NETDEV_CHANGE): vethk7g3ws: link becomes ready
👾 kernel | [    1.255833] conbr0: port 1(vethk7g3ws) entered blocking state
👾 kernel | [    1.258785] conbr0: port 1(vethk7g3ws) entered forwarding state
📦 scon | �[36mINFO�[0m[06-16 08:26:59] container started                             �[36mcontainer�[0m=docker
👾 kernel | [    2.259971] NFSD: Using /var/lib/nfs/v4recovery as the NFSv4 state recovery directory
👾 kernel | [    2.260435] NFSD: Using legacy client tracking operations.
👾 kernel | [    2.260627] NFSD: starting 1-second grace period (net f0000000)
🌲 vmgr | time="06-16 11:27:00" level=info msg="Mounting NFS..."
🌲 vmgr | time="06-16 11:27:00" level=info msg="NFS mounted"
🌲 vmgr | time="06-16 11:27:07" level=info msg="Setup not done in time, running setup..."
🌲 vmgr | time="06-16 11:27:08" level=info msg="CLI setup complete"
👾 kernel | [   61.166943] br-bcb01a1d142d: port 1(veth9cd3684) entered blocking state
👾 kernel | [   61.167088] br-bcb01a1d142d: port 1(veth9cd3684) entered disabled state
👾 kernel | [   61.167190] veth9cd3684: entered allmulticast mode
👾 kernel | [   61.167272] veth9cd3684: entered promiscuous mode
👾 kernel | [   61.174040] br-bcb01a1d142d: port 2(veth950ae8b) entered blocking state
👾 kernel | [   61.174132] br-bcb01a1d142d: port 2(veth950ae8b) entered disabled state
👾 kernel | [   61.174172] veth950ae8b: entered allmulticast mode
👾 kernel | [   61.174295] veth950ae8b: entered promiscuous mode
👾 kernel | [   61.174365] br-bcb01a1d142d: port 2(veth950ae8b) entered blocking state
👾 kernel | [   61.174443] br-bcb01a1d142d: port 2(veth950ae8b) entered forwarding state
👾 kernel | [   61.174746] br-bcb01a1d142d: port 2(veth950ae8b) entered disabled state
👾 kernel | [   61.231644] br-bcb01a1d142d: port 3(vethec52989) entered blocking state
👾 kernel | [   61.231726] br-bcb01a1d142d: port 3(vethec52989) entered disabled state
👾 kernel | [   61.231833] vethec52989: entered allmulticast mode
👾 kernel | [   61.231907] vethec52989: entered promiscuous mode
👾 kernel | [   61.232025] br-bcb01a1d142d: port 3(vethec52989) entered blocking state
👾 kernel | [   61.232138] br-bcb01a1d142d: port 3(vethec52989) entered forwarding state
👾 kernel | [   61.232214] IPv6: ADDRCONF(NETDEV_CHANGE): br-bcb01a1d142d: link becomes ready
👾 kernel | [   61.232515] br-bcb01a1d142d: port 3(vethec52989) entered disabled state
👾 kernel | [   61.345855] br-bcb01a1d142d: port 4(veth20f6c62) entered blocking state
👾 kernel | [   61.345940] br-bcb01a1d142d: port 4(veth20f6c62) entered disabled state
👾 kernel | [   61.346148] veth20f6c62: entered allmulticast mode
👾 kernel | [   61.346349] veth20f6c62: entered promiscuous mode
👾 kernel | [   61.346614] br-bcb01a1d142d: port 4(veth20f6c62) entered blocking state
👾 kernel | [   61.346716] br-bcb01a1d142d: port 4(veth20f6c62) entered forwarding state
👾 kernel | [   61.404539] br-bcb01a1d142d: port 5(veth1c736c8) entered blocking state
👾 kernel | [   61.404873] br-bcb01a1d142d: port 5(veth1c736c8) entered disabled state
👾 kernel | [   61.405237] veth1c736c8: entered allmulticast mode
👾 kernel | [   61.405668] veth1c736c8: entered promiscuous mode
👾 kernel | [   61.405883] br-bcb01a1d142d: port 5(veth1c736c8) entered blocking state
👾 kernel | [   61.405955] br-bcb01a1d142d: port 5(veth1c736c8) entered forwarding state
👾 kernel | [   61.512499] br-bcb01a1d142d: port 6(veth529b608) entered blocking state
👾 kernel | [   61.512868] br-bcb01a1d142d: port 6(veth529b608) entered disabled state
👾 kernel | [   61.513216] veth529b608: entered allmulticast mode
👾 kernel | [   61.513364] veth529b608: entered promiscuous mode
👾 kernel | [   61.513568] br-bcb01a1d142d: port 6(veth529b608) entered blocking state
👾 kernel | [   61.513670] br-bcb01a1d142d: port 6(veth529b608) entered forwarding state
👾 kernel | [   61.740777] eth0: renamed from vethdc5c2d9
👾 kernel | [   61.879661] eth0: renamed from veth30d2302
👾 kernel | [   61.928863] eth0: renamed from vethd0e4b70
👾 kernel | [   62.013364] br-bcb01a1d142d: port 4(veth20f6c62) entered disabled state
👾 kernel | [   62.013610] br-bcb01a1d142d: port 5(veth1c736c8) entered disabled state
👾 kernel | [   62.013847] br-bcb01a1d142d: port 6(veth529b608) entered disabled state
👾 kernel | [   62.014049] IPv6: ADDRCONF(NETDEV_CHANGE): vethec52989: link becomes ready
👾 kernel | [   62.014136] br-bcb01a1d142d: port 3(vethec52989) entered blocking state
👾 kernel | [   62.014206] br-bcb01a1d142d: port 3(vethec52989) entered forwarding state
👾 kernel | [   62.014320] IPv6: ADDRCONF(NETDEV_CHANGE): veth9cd3684: link becomes ready
👾 kernel | [   62.014430] br-bcb01a1d142d: port 1(veth9cd3684) entered blocking state
👾 kernel | [   62.014501] br-bcb01a1d142d: port 1(veth9cd3684) entered forwarding state
👾 kernel | [   62.014728] eth0: renamed from veth4f6232c
👾 kernel | [   62.049278] IPv6: ADDRCONF(NETDEV_CHANGE): veth950ae8b: link becomes ready
👾 kernel | [   62.049445] br-bcb01a1d142d: port 2(veth950ae8b) entered blocking state
👾 kernel | [   62.049546] br-bcb01a1d142d: port 2(veth950ae8b) entered forwarding state
👾 kernel | [   62.049833] IPv6: ADDRCONF(NETDEV_CHANGE): veth20f6c62: link becomes ready
👾 kernel | [   62.049884] br-bcb01a1d142d: port 4(veth20f6c62) entered blocking state
👾 kernel | [   62.049971] br-bcb01a1d142d: port 4(veth20f6c62) entered forwarding state
👾 kernel | [   62.050531] br-bcb01a1d142d: port 7(veth5be3afe) entered blocking state
👾 kernel | [   62.050663] br-bcb01a1d142d: port 7(veth5be3afe) entered disabled state
👾 kernel | [   62.050733] veth5be3afe: entered allmulticast mode
👾 kernel | [   62.050805] veth5be3afe: entered promiscuous mode
👾 kernel | [   62.050892] br-bcb01a1d142d: port 7(veth5be3afe) entered blocking state
👾 kernel | [   62.050929] br-bcb01a1d142d: port 7(veth5be3afe) entered forwarding state
👾 kernel | [   62.179617] br-bcb01a1d142d: port 7(veth5be3afe) entered disabled state
👾 kernel | [   62.179761] eth0: renamed from vethd0ee496
👾 kernel | [   62.218606] eth0: renamed from vethb06742e
👾 kernel | [   62.283691] IPv6: ADDRCONF(NETDEV_CHANGE): veth529b608: link becomes ready
👾 kernel | [   62.284037] br-bcb01a1d142d: port 6(veth529b608) entered blocking state
👾 kernel | [   62.284518] br-bcb01a1d142d: port 6(veth529b608) entered forwarding state
👾 kernel | [   62.284833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1c736c8: link becomes ready
👾 kernel | [   62.285044] br-bcb01a1d142d: port 5(veth1c736c8) entered blocking state
👾 kernel | [   62.285143] br-bcb01a1d142d: port 5(veth1c736c8) entered forwarding state
👾 kernel | [   62.525129] eth0: renamed from vethc276736
👾 kernel | [   62.609786] IPv6: ADDRCONF(NETDEV_CHANGE): veth5be3afe: link becomes ready
👾 kernel | [   62.609883] br-bcb01a1d142d: port 7(veth5be3afe) entered blocking state
👾 kernel | [   62.609987] br-bcb01a1d142d: port 7(veth5be3afe) entered forwarding state
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{0.0.0.0 15672 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{0.0.0.0 3306 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{0.0.0.0 8080 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{0.0.0.0 2222 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{0.0.0.0 6379 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{0.0.0.0 1080 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{0.0.0.0 9300 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{0.0.0.0 5672 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{0.0.0.0 9200 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{:: 15672 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{:: 3306 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{:: 8080 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{:: 2222 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{:: 6379 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{:: 1080 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{:: 9300 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{:: 5672 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:01] add forward                                   �[36mspec�[0m="{:: 9200 tcp}"
👾 kernel | [   77.867275] br-bcb01a1d142d: port 8(vetha8501d7) entered blocking state
👾 kernel | [   77.883026] br-bcb01a1d142d: port 8(vetha8501d7) entered disabled state
👾 kernel | [   77.883106] vetha8501d7: entered allmulticast mode
👾 kernel | [   77.883199] vetha8501d7: entered promiscuous mode
👾 kernel | [   78.151487] eth0: renamed from vethf060594
👾 kernel | [   78.192540] IPv6: ADDRCONF(NETDEV_CHANGE): vetha8501d7: link becomes ready
👾 kernel | [   78.192641] br-bcb01a1d142d: port 8(vetha8501d7) entered blocking state
👾 kernel | [   78.192708] br-bcb01a1d142d: port 8(vetha8501d7) entered forwarding state
👾 kernel | [   78.216033] br-bcb01a1d142d: port 9(vethf051bb0) entered blocking state
👾 kernel | [   78.216110] br-bcb01a1d142d: port 9(vethf051bb0) entered disabled state
👾 kernel | [   78.216189] vethf051bb0: entered allmulticast mode
👾 kernel | [   78.216267] vethf051bb0: entered promiscuous mode
👾 kernel | [   78.216352] br-bcb01a1d142d: port 9(vethf051bb0) entered blocking state
👾 kernel | [   78.216403] br-bcb01a1d142d: port 9(vethf051bb0) entered forwarding state
👾 kernel | [   78.540398] eth0: renamed from veth5da7491
👾 kernel | [   78.560979] IPv6: ADDRCONF(NETDEV_CHANGE): vethf051bb0: link becomes ready
📦 scon | �[36mINFO�[0m[06-16 08:28:17] add forward                                   �[36mspec�[0m="{0.0.0.0 443 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:17] add forward                                   �[36mspec�[0m="{0.0.0.0 80 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:17] add forward                                   �[36mspec�[0m="{:: 443 tcp}"
📦 scon | �[36mINFO�[0m[06-16 08:28:17] add forward                                   �[36mspec�[0m="{:: 80 tcp}"

[kdrag0n]

Looks like port 443 was forwarded successfully. Are you sure catering24.local resolves to 127.0.0.1 or ::1? What's the full error page?

[Hawksama]

The domain catering24.local is configured to resolve to the IP address 127.0.0.1, which indicates that it is set to point to the localhost IP address on my system. This configuration is reflected in the /etc/hosts file with the entry 127.0.0.1 ::1 www.catering24.local.

Below are the nginx logs for your reference:

2023/06/16 13:18:24 [info] 30#30: *590 client 127.0.0.1 closed keepalive connection
2023/06/16 13:18:28 [error] 30#30: *582 directory index of "/var/www/html/pub/" is forbidden, client: 172.18.0.1, server: , request: "GET / HTTP/2.0", host: "www.catering24.local"
172.18.0.1 - - [16/Jun/2023:13:18:28 +0000] "GET / HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" "-"
172.18.0.1 - - [16/Jun/2023:13:18:39 +0000] "GET /tutorial/ HTTP/1.1" 301 169 "http://localhost/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" "-"
2023/06/16 13:18:39 [info] 30#30: *592 SSL_do_handshake() failed (SSL: error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown:SSL alert number 46) while SSL handshaking, client: 172.18.0.1, server: 0.0.0.0:8443

[kdrag0n]

This looks like an issue with your SSL settings or certificates, and not something related to the container engine. I'm afraid I can't help beyond that as these issues are usually specific to your project, so I'd recommend checking where/how you generate and store the certificate. If it's different between Docker Desktop and OrbStack, then it's most likely saved in a persistent volume, or perhaps in an old cached image build.