提示错误

pve lcx docker ,错误 net.ipv4.ip_unprivileged_port_start

docker: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied

Run 'docker run --help' for more information

解决方案:

权限设置的问题,在 pve 控制台 cat /etc/pve/lxc/114.conf

arch: amd64
cores: 2
features: keyctl=1,nesting=1
hostname: giteaHub
memory: 4096
net0: name=eth0,bridge=vmbr0,firewall=1,hwaddr=BC:24:11:C7:A4:A3,ip=dhcp,type=veth
ostype: ubuntu
rootfs: local-lvm:vm-114-disk-0,size=200G
swap: 512
unprivileged: 1

上述文件(114是pve的lcx的id)增加下面2行:

lxc.apparmor.profile:unconfined
lxc.mount.entry:/dev/null sys/module/apparmor/parameters/enabled none bind,ro 0