Adds: - `*)` case + valid-values warning on both `COWORK_VM_BACKEND` switches in `scripts/doctor.sh`, factored through a shared `_warn_unknown_backend` helper. Switch A explicitly matches the empty and `bwrap` cases as no-ops alongside `kvm|host` so only truly-unknown values trigger the warn. Switch B (user-facing summary) reports cowork_backend as `auto-detect (invalid override '...' — see warning above)` so the doctor is honest about what the daemon actually does (#442 tracks the daemon-side fix). - `COWORK_VM_BACKEND` env var row + new Cowork Backend section in `docs/CONFIGURATION.md`, placed before Cowork Sandbox Mounts. - VM connection timeout / virtiofsd PATH / Fedora tmpfs (EXDEV) sections in `docs/TROUBLESHOOTING.md`. - README acknowledgment for @CyPack. Closes #293 Co-Authored-By: aaddrick <aaddrick@gmail.com> Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
8.2 KiB
Troubleshooting
Built-in Diagnostics
Run the --doctor flag to check your system for common issues:
# Deb install
claude-desktop --doctor
# AppImage
./claude-desktop-*.AppImage --doctor
This runs 10 checks and prints pass/fail results with suggested fixes:
| Check | What it verifies |
|---|---|
| Installed version | Package version via dpkg |
| Display server | Wayland/X11 detection and mode |
| Electron binary | Existence and version |
| Chrome sandbox | Correct permissions (4755/root) |
| SingletonLock | Stale lock file detection |
| MCP config | JSON validity and server count |
| Node.js | Version (v20+ recommended for MCP) |
| Desktop entry | .desktop file presence |
| Disk space | Free space on config partition |
| Log file | Log file size |
Example output:
Claude Desktop Diagnostics
================================
[PASS] Installed version: 1.1.4498-1.3.15
[PASS] Display server: Wayland (WAYLAND_DISPLAY=wayland-0)
[PASS] Electron: found at /usr/lib/claude-desktop/node_modules/electron/dist/electron
[PASS] Chrome sandbox: permissions OK
[PASS] SingletonLock: no lock file (OK)
[PASS] MCP config: valid JSON
[PASS] Node.js: v22.14.0
[PASS] Desktop entry: /usr/share/applications/claude-desktop.desktop
[PASS] Disk space: 632284MB free
[PASS] Log file: 1352KB
All checks passed.
When opening an issue, include the output of --doctor to help with diagnosis.
Application Logs
Runtime logs are available at:
~/.cache/claude-desktop-debian/launcher.log
Common Issues
Window Scaling Issues
If the window doesn't scale correctly on first launch:
- Right-click the Claude Desktop tray icon
- Select "Quit" (do not force quit)
- Restart the application
This allows the application to save display settings properly.
Global Hotkey Not Working (Wayland)
If the global hotkey (Ctrl+Alt+Space) doesn't work, ensure you're not running in native Wayland mode:
- Check your logs at
~/.cache/claude-desktop-debian/launcher.log - Look for "Using X11 backend via XWayland" - this means hotkeys should work
- If you see "Using native Wayland backend", unset
CLAUDE_USE_WAYLANDor ensure it's not set to1
Note: Native Wayland mode doesn't support global hotkeys due to Electron/Chromium limitations with XDG GlobalShortcuts Portal.
See CONFIGURATION.md for more details on the CLAUDE_USE_WAYLAND environment variable.
AppImage Sandbox Warning
AppImages run with --no-sandbox due to electron's chrome-sandbox requiring root privileges for unprivileged namespace creation. This is a known limitation of AppImage format with Electron applications.
For enhanced security, consider:
- Using the .deb package instead
- Running the AppImage within a separate sandbox (e.g., bubblewrap)
- Using Gear Lever's integrated AppImage management for better isolation
Cowork on Ubuntu 24.04+ (AppArmor Blocks User Namespaces)
Ubuntu 24.04 ships with apparmor_restrict_unprivileged_userns=1
by default, which blocks the unprivileged user namespaces that
Cowork's bubblewrap sandbox relies on. Symptoms:
claude-desktop --doctorreportsbubblewrap: sandbox probe failedwithOperation not permittedin stderr.~/.config/Claude/logs/cowork_vm_daemon.logcontainsbwrap is installed but cannot create a user namespace.- Cowork sessions hang at "Starting VM..." or loop on reconnect.
Permit user namespaces for bwrap via an AppArmor profile (one-time
setup, requires sudo):
sudo tee /etc/apparmor.d/bwrap <<'EOF'
abi <abi/4.0>,
include <tunables/global>
profile bwrap /usr/bin/bwrap flags=(unconfined) {
userns,
include if exists <local/bwrap>
}
EOF
sudo apparmor_parser -r /etc/apparmor.d/bwrap
After applying the profile, run claude-desktop --doctor — the
bubblewrap probe should pass, and Cowork should start without
falling back to host-direct.
Security note: this grants /usr/bin/bwrap the unconfined
profile plus the userns capability. It matches the behavior
bwrap had on Ubuntu 22.04 and earlier, and on most other distros,
but is a system-wide change that affects every program invoking
/usr/bin/bwrap (not just Claude Desktop). Review the profile
against your threat model before applying.
Credit: this workaround was contributed by @hfyeh in #351.
Cowork: "VM connection timeout after 60 seconds"
If Cowork fails with a VM timeout, the KVM backend is selected but the guest VM cannot connect back to the host via vsock within the timeout window. Common causes:
- First-boot initialization — the guest VM may take longer than 60 seconds on first launch
- vsock driver issues — the host may be missing the
vhost_vsockmodule (sudo modprobe vhost_vsock), or the guest initrd may lackvmw_vsock_virtio_transport
Fix: Force the bubblewrap backend, which provides namespace-level isolation without a VM:
COWORK_VM_BACKEND=bwrap claude-desktop
See CONFIGURATION.md for how to make this permanent.
Cowork: virtiofsd not found (Fedora/RHEL)
On Fedora and RHEL, virtiofsd installs to /usr/libexec/virtiofsd which is
outside $PATH. The --doctor check detects it there automatically and will
show [PASS], but the KVM backend spawns virtiofsd by name at runtime and
resolves it through $PATH only.
Fix: Create a symlink so the KVM backend can find it at runtime:
sudo ln -s /usr/libexec/virtiofsd /usr/local/bin/virtiofsd
On Debian/Ubuntu, the same issue can occur with /usr/lib/qemu/virtiofsd.
Cowork: cross-device link error on Fedora tmpfs /tmp
On Fedora, /tmp is a tmpfs by default. VM bundle downloads may fail with EXDEV: cross-device link not permitted when moving files from /tmp to ~/.config/Claude/.
Fix: Set TMPDIR to a directory on the same filesystem:
mkdir -p ~/.config/Claude/tmp
TMPDIR=~/.config/Claude/tmp claude-desktop
Or add TMPDIR=%h/.config/Claude/tmp to the Exec= line in your .desktop file.
Authentication Errors (401)
If you encounter recurring "API Error: 401" messages after periods of inactivity, the cached OAuth token may need to be cleared. This is an upstream application issue reported in #156.
To fix manually (credit: MrEdwards007):
- Close Claude Desktop completely
- Edit
~/.config/Claude/config.json - Remove the line containing
"oauth:tokenCache"(and any trailing comma if needed) - Save the file and restart Claude Desktop
- Log in again when prompted
A scripted solution is also available at the bottom of this comment.
Uninstallation
For APT repository installations (Debian/Ubuntu)
# Remove package
sudo apt remove claude-desktop
# Remove the repository and GPG key
sudo rm /etc/apt/sources.list.d/claude-desktop.list
sudo rm /usr/share/keyrings/claude-desktop.gpg
For DNF repository installations (Fedora/RHEL)
# Remove package
sudo dnf remove claude-desktop
# Remove the repository
sudo rm /etc/yum.repos.d/claude-desktop.repo
For AUR installations (Arch Linux)
# Using yay
yay -R claude-desktop-appimage
# Or using paru
paru -R claude-desktop-appimage
# Or using pacman directly
sudo pacman -R claude-desktop-appimage
For .deb packages (manual install)
# Remove package
sudo apt remove claude-desktop
# Or: sudo dpkg -r claude-desktop
# Remove package and configuration
sudo dpkg -P claude-desktop
For .rpm packages
# Remove package
sudo dnf remove claude-desktop
# Or: sudo rpm -e claude-desktop
For AppImages
- Delete the
.AppImagefile - Remove the
.desktopfile from~/.local/share/applications/ - If using Gear Lever, use its uninstall option
Remove user configuration (all formats)
rm -rf ~/.config/Claude