lxc-start：無效的參數 - 無法克隆

Question

完整的新手試圖讓我的腳在碼頭上弄溼，所以也許我做了明顯錯誤的事情。我無法運行的容器：

root@tethys:~# docker run ubuntu ls 
lxc-start: Invalid argument - failed to clone 

lxc-start: failed to create vethNGY9xv-veth3eKuyS : Operation not supported 
lxc-start: failed to create netdev 
lxc-start: failed to create the network 
lxc-start: failed to spawn '38e59da80ff79f024304c761704924172fbd7632be705f9b71659a91de8467e9' 
lxc-start: No such file or directory - failed to remove cgroup '/sys/fs/cgroup/cpuset//lxc/38e59da80ff79f024304c761704924172fbd7632be705f9b71659a91de8467e9' 

一切似乎正確安裝：

root@tethys:~# docker images 
REPOSITORY   TAG     IMAGE ID   CREATED    VIRTUAL SIZE 
learn/tutorial  latest    8dbd9e392a96  8 months ago  128 MB 
ubuntu    12.04    8dbd9e392a96  8 months ago  128 MB 
ubuntu    latest    8dbd9e392a96  8 months ago  128 MB 
ubuntu    precise    8dbd9e392a96  8 months ago  128 MB 
ubuntu    12.10    b750fe79269d  8 months ago  175.3 MB 
ubuntu    quantal    b750fe79269d  8 months ago  175.3 MB 

泊塢窗版本是目前最穩定的版本（實際上，致力於六天前）：

root@tethys:~# docker version 
Client version: 0.7.1 
Go version (client): go1.2 
Git commit (client): 88df052 
Server version: 0.7.1 
Git commit (server): 88df052 
Go version (server): go1.2 
Last stable version: 0.7.1 

我想說我的系統應該支持：

root@tethys:~# uname -a 
Linux tethys.wavilon.net 2.6.38.2-grsec-xxxx-grs-ipv6-64 #2 SMP Thu Aug 25 16:40:22 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux 
root@tethys:~# cat /etc/issue 
Ubuntu 12.04.3 LTS \n \l 

我還能檢查什麼？

Answer 1

根據the docs，docker「在3.8內核上效果最好」。

Answer 2

對於grsecurity的核心，特別是如果你正試圖運行LXC「無特權的容器」，您將需要設置/etc/sysctl.conf如下：

kernel.grsecurity.chroot_caps = 0 
kernel.grsecurity.chroot_deny_chmod = 0 
kernel.grsecurity.chroot_deny_pivot = 0 
kernel.grsecurity.chroot_deny_chroot = 0 
kernel.grsecurity.chroot_deny_mount = 0 

&然後sysctl -p