docker：来自守护程序的错误响应：OCI 运行时创建失败

Question

docker：来自守护程序的错误响应：OCI 运行时创建失败：container_linux.go:345：启动容器进程导致 "process_linux.go:430: container init caused \"写入 /proc/self/attr/keycreate：权限被拒绝\"" : 未知。 ERRO[0000] 等待容器时出错：在 Fedora 28 中取消上下文

Answer 1

$ /usr/sbin/getenforce
enforcing

编辑/etc/selinux/config

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#       enforcing - SELinux security policy is enforced.
#       permissive - SELinux prints warnings instead of enforcing.
#       disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of these two values:
#       targeted - Targeted processes are protected,
#       mls - Multi Level Security protection.
SELINUXTYPE=targeted

重启服务器

$ /usr/sbin/getenforce
Disabled

docker：来自守护程序的错误响应：OCI 运行时创建失败

docker: Error response from daemon: OCI runtime create failed

docker

fedora

selinux