提示错误
pve lcx docker ,错误 net.ipv4.ip_unprivileged_port_start
docker: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied
Run 'docker run --help' for more information
解决方案:
权限设置的问题,在 pve 控制台 cat /etc/pve/lxc/114.conf
arch: amd64
cores: 2
features: keyctl=1,nesting=1
hostname: giteaHub
memory: 4096
net0: name=eth0,bridge=vmbr0,firewall=1,hwaddr=BC:24:11:C7:A4:A3,ip=dhcp,type=veth
ostype: ubuntu
rootfs: local-lvm:vm-114-disk-0,size=200G
swap: 512
unprivileged: 1上述文件(114是pve的lcx的id)增加下面2行:
lxc.apparmor.profile:unconfined
lxc.mount.entry:/dev/null sys/module/apparmor/parameters/enabled none bind,ro 0 最后一次更新于2026-04-11


