本文介绍了docker run hello-world仍然失败，权限被拒绝的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！
问题描述
我正在尝试运行docker，但仍然失败.这就是我得到的
I'm trying to run docker but it still fails. Here is what i get
root@c1170137:~# docker run hello-world
Unable to find image 'hello-world:latest' locally
latest: Pulling from library/hello-world
c04b14da8d14: Extracting 974 B/974 B
docker: failed to register layer: ApplyLayer exit status 1 stdout: stderr: permission denied.
See 'docker run --help'.
内核:4.4.16-1-pve
kernel: 4.4.16-1-pve
我正在使用debian jessie
i'm using debian jessie
Distributor ID: Debian
Description: Debian GNU/Linux 8.5 (jessie)
Release: 8.5
Codename: jessie
daemon.log http://hastebin.com/qinufacuto.coffee
daemon.loghttp://hastebin.com/qinufacuto.coffee
码头工人信息
root@c1177124:~# docker info
Containers: 0
Running: 0
Paused: 0
Stopped: 0
Images: 0
Server Version: 1.12.1
Storage Driver: vfs
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
Volume: local
Network: host bridge null overlay
Swarm: inactive
Runtimes: runc
Default Runtime: runc
Security Options:
Kernel Version: 4.4.16-1-pve
Operating System: Debian GNU/Linux 8 (jessie)
OSType: linux
Architecture: x86_64
CPUs: 32
Total Memory: 2 GiB
Name: c1177124
ID: 4YUJ:OL2E:WLJC:23WJ:5HRW:LRY3:QHKC:MKXO:JDWO:VWOQ:JMWN:V52W
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled
Insecure Registries:
127.0.0.0/8
顺便说一句，问题可能是由内核引起的.谢谢您的任何想法或解决方案
By the way, the problem could be caused by the kernel.Thank you for any idea or solution
推荐答案
使用lxc.apparmor.profile: unconfined
只需将其放在/etc/pve/lxc/ID.conf文件的末尾，然后重新启动LXC容器即可.
Just put at the end of an /etc/pve/lxc/ID.conf file and restart your LXC container.
不建议使用lxc.aa_profile: unconfined，因为它已重命名.
Using lxc.aa_profile: unconfined is deprecated as was renamed.
这篇关于docker run hello-world仍然失败，权限被拒绝的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！