docker:来自守护程序的错误响应:OCI 运行时创建失败

Question

docker：来自守护程序的错误响应：OCI 运行时创建失败：container_linux.go：345：启动容器进程导致"process_linux.go：430：容器初始化导致"写入/proc/self/attr/keycreate：权限被拒绝"：未知。 ERRO[0000] 等待容器时出错：Fedora 28 中的上下文被取消

Answer 1

$ /usr/sbin/getenforce
enforcing

• 编辑/etc/selinux/config

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#       enforcing - SELinux security policy is enforced.
#       permissive - SELinux prints warnings instead of enforcing.
#       disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of these two values:
#       targeted - Targeted processes are protected,
#       mls - Multi Level Security protection.
SELINUXTYPE=targeted

• 重新启动服务器

$ /usr/sbin/getenforce
Disabled