After updating my Fedora Linux machine it is no longer able to start the Docker container engine. Any ideas how to fix this?
Please find the journalctl -xe output afterwards:
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit containerd.service has begun execution.
░░
░░ The job identifier is 6359.
Jan 19 08:19:35 server audit[3812]: AVC avc: denied { execute } for pid=3812 comm="(ntainerd)" name="containerd" dev="dm-0" ino=>
Jan 19 08:19:35 server systemd[3812]: containerd.service: Failed to locate executable /usr/bin/containerd: Permission denied
░░ Subject: Process /usr/bin/containerd could not be executed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ The process /usr/bin/containerd could not be executed and failed.
░░
░░ The error number returned by this process is ERRNO.
Jan 19 08:19:35 server systemd[3812]: containerd.service: Failed at step EXEC spawning /usr/bin/containerd: Permission denied
░░ Subject: Process /usr/bin/containerd could not be executed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ The process /usr/bin/containerd could not be executed and failed.
░░
░░ The error number returned by this process is ERRNO.
Jan 19 08:19:35 server systemd[1]: containerd.service: Main process exited, code=exited, status=203/EXEC
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ An ExecStart= process belonging to unit containerd.service has exited.
░░
░░ The process' exit code is 'exited' and its exit status is 203.
Jan 19 08:19:35 server systemd[1]: containerd.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ The unit containerd.service has entered the 'failed' state with result 'exit-code'.
Jan 19 08:19:35 server systemd[1]: Failed to start containerd container runtime.
░░ Subject: A start job for unit containerd.service has failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit containerd.service has finished with a failure.
░░
░░ The job identifier is 6359 and the job result is failed.
Jan 19 08:19:35 server audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='uni>
lines 2153-2197/2197 (END)
░░ The unit docker.socket has entered the 'failed' state with result 'resources'.
Jan 19 08:19:32 server systemd[1]: Failed to listen on Docker Socket for the API.
░░ Subject: A start job for unit docker.socket has failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit docker.socket has finished with a failure.
░░
░░ The job identifier is 6358 and the job result is failed.
Jan 19 08:19:32 server systemd[1]: Dependency failed for Docker Application Container Engine.
░░ Subject: A start job for unit docker.service has failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit docker.service has finished with a failure.
░░
░░ The job identifier is 6221 and the job result is dependency.
Jan 19 08:19:32 server systemd[1]: docker.service: Job docker.service/start failed with result 'dependency'.
Jan 19 08:19:32 server sudo[3808]: pam_unix(sudo:session): session closed for user root
Jan 19 08:19:32 server audit[3808]: USER_END pid=3808 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:ses>
Jan 19 08:19:32 server audit[3808]: CRED_DISP pid=3808 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:se>
Jan 19 08:19:35 server systemd[1]: containerd.service: Scheduled restart job, restart counter is at 17.
░░ Subject: Automatic restarting of a unit has been scheduled
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ Automatic restarting of the unit containerd.service has been scheduled, as the result for
░░ the configured Restart= setting for the unit.
Jan 19 08:19:35 server audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="sys>
Jan 19 08:19:35 server audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="syst>
Jan 19 08:19:35 server systemd[1]: Stopped containerd container runtime.
░░ Subject: A stop job for unit containerd.service has finished
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A stop job for unit containerd.service has finished.
░░
░░ The job identifier is 6359 and the job result is done.
Jan 19 08:19:35 server systemd[1]: Starting containerd container runtime...
░░ Subject: A start job for unit containerd.service has begun execution
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit containerd.service has begun execution.
░░
░░ The job identifier is 6359.
Jan 19 08:19:35 server audit[3812]: AVC avc: denied { execute } for pid=3812 comm="(ntainerd)" name="containerd" dev="dm-0" ino=1970611 scontext=syste>
Jan 19 08:19:35 server systemd[3812]: containerd.service: Failed to locate executable /usr/bin/containerd: Permission denied
░░ Subject: Process /usr/bin/containerd could not be executed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ The process /usr/bin/containerd could not be executed and failed.
░░
░░ The error number returned by this process is ERRNO.
Jan 19 08:19:35 server systemd[3812]: containerd.service: Failed at step EXEC spawning /usr/bin/containerd: Permission denied
░░ Subject: Process /usr/bin/containerd could not be executed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ The process /usr/bin/containerd could not be executed and failed.
░░
░░ The error number returned by this process is ERRNO.
Jan 19 08:19:35 server systemd[1]: containerd.service: Main process exited, code=exited, status=203/EXEC
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
lines 2112-2179/2197 99%
░░ The unit docker.socket has entered the 'failed' state with result 'resources'.
Jan 19 08:19:32 server systemd[1]: Failed to listen on Docker Socket for the API.
░░ Subject: A start job for unit docker.socket has failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit docker.socket has finished with a failure.
░░
░░ The job identifier is 6358 and the job result is failed.
Jan 19 08:19:32 server systemd[1]: Dependency failed for Docker Application Container Engine.
░░ Subject: A start job for unit docker.service has failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit docker.service has finished with a failure.
░░
░░ The job identifier is 6221 and the job result is dependency.
Jan 19 08:19:32 server systemd[1]: docker.service: Job docker.service/start failed with result 'dependency'.
Jan 19 08:19:32 server sudo[3808]: pam_unix(sudo:session): session closed for user root
Jan 19 08:19:32 server audit[3808]: USER_END pid=3808 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/>
Jan 19 08:19:32 server audit[3808]: CRED_DISP pid=3808 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_fprintd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
Jan 19 08:19:35 server systemd[1]: containerd.service: Scheduled restart job, restart counter is at 17.
░░ Subject: Automatic restarting of a unit has been scheduled
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ Automatic restarting of the unit containerd.service has been scheduled, as the result for
░░ the configured Restart= setting for the unit.
Jan 19 08:19:35 server audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 19 08:19:35 server audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 19 08:19:35 server systemd[1]: Stopped containerd container runtime.
░░ Subject: A stop job for unit containerd.service has finished
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A stop job for unit containerd.service has finished.
░░
░░ The job identifier is 6359 and the job result is done.
Jan 19 08:19:35 server systemd[1]: Starting containerd container runtime...
░░ Subject: A start job for unit containerd.service has begun execution
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit containerd.service has begun execution.
░░
░░ The job identifier is 6359.
Jan 19 08:19:35 server audit[3812]: AVC avc: denied { execute } for pid=3812 comm="(ntainerd)" name="containerd" dev="dm-0" ino=1970611 scontext=system_u:system_r:init_t:s```
I tried to reinstall or downgrade the Docker packages, but it is failing as well. Never had something like this before:
sudo dnf reinstall docker-ce docker-ce-cli containerd.io Letzte Prüfung auf abgelaufene Metadaten: vor 0:04:34 am Mi 19 Jan 2022 08:28:22 CET. Abhängigkeiten sind aufgelöst. ============================================================================================================================================================================================================================================================================================================================= Package Architecture Version Repository Size ============================================================================================================================================================================================================================================================================================================================= Neuinstallieren: containerd.io x86_64 1.4.3-3.1.fc31 docker-ce-stable 32 M docker-ce x86_64 3:20.10.3-3.fc31 docker-ce-stable 25 M docker-ce-cli x86_64 1:20.10.3-3.fc31 docker-ce-stable 33 M Transaktionsübersicht ============================================================================================================================================================================================================================================================================================================================= Gesamte Downloadgröße: 90 M Installationsgröße: 398 M Ist dies in Ordnung? [j/N]: j Pakete werden heruntergeladen: (1/3): docker-ce-20.10.3-3.fc31.x86_64.rpm 1.2 MB/s | 25 MB 00:21 (2/3): containerd.io-1.4.3-3.1.fc31.x86_64.rpm 1.5 MB/s | 32 MB 00:21 (3/3): docker-ce-cli-20.10.3-3.fc31.x86_64.rpm 1.3 MB/s | 33 MB 00:25 ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Gesamt 3.6 MB/s | 90 MB 00:25 Transaktionsüberprüfung wird ausgeführt Transaktionsprüfung war erfolgreich. Transaktion wird getestet Transaktionstest war erfolgreich. Transaktion wird ausgeführt Vorbereitung läuft : 1/1 Neuinstallieren : docker-ce-cli-1:20.10.3-3.fc31.x86_64 1/6 Fehler: lsetfilecon: (/usr/bin/docker;61e7bec5, system_u:object_r:container_runtime_exec_t:s0) Das Argument ist ungültig Fehler: Plugin selinux: hook fsm_file_prepare failed Error unpacking rpm package docker-ce-cli-1:20.10.3-3.fc31.x86_64 Neuinstallieren : containerd.io-1.4.3-3.1.fc31.x86_64 2/6 Fehler: Entpacken des Archivs fehlgeschlagen bei Datei /usr/bin/docker;61e7bec5: cpio: (Fehler 0x2) Fehler: docker-ce-cli-1:20.10.3-3.fc31.x86_64: installieren fehlgeschlagen Fehler: lsetfilecon: (/etc/containerd, system_u:object_r:container_config_t:s0) Das Argument ist ungültig Fehler: Plugin selinux: hook fsm_file_prepare failed Error unpacking rpm package containerd.io-1.4.3-3.1.fc31.x86_64 Neuinstallieren : docker-ce-3:20.10.3-3.fc31.x86_64 3/6 Fehler: Entpacken des Archivs fehlgeschlagen bei Datei /etc/containerd: cpio: (Fehler 0x2) Fehler: containerd.io-1.4.3-3.1.fc31.x86_64: installieren fehlgeschlagen Fehler: lsetfilecon: (/usr/bin/docker-init;61e7bec5, system_u:object_r:container_runtime_exec_t:s0) Das Argument ist ungültig Fehler: Plugin selinux: hook fsm_file_prepare failed Error unpacking rpm package docker-ce-3:20.10.3-3.fc31.x86_64 Überprüfung läuft : containerd.io-1.4.3-3.1.fc31.x86_64 1/6 Überprüfung läuft : containerd.io-1.4.3-3.1.fc31.x86_64 2/6 Überprüfung läuft : docker-ce-3:20.10.3-3.fc31.x86_64 3/6 Überprüfung läuft : docker-ce-3:20.10.3-3.fc31.x86_64 4/6 Überprüfung läuft : docker-ce-cli-1:20.10.3-3.fc31.x86_64 5/6 Überprüfung läuft : docker-ce-cli-1:20.10.3-3.fc31.x86_64 6/6 Fehlgeschlagen: containerd.io-1.4.3-3.1.fc31.x86_64 containerd.io-1.4.3-3.1.fc31.x86_64 docker-ce-3:20.10.3-3.fc31.x86_64 docker-ce-3:20.10.3-3.fc31.x86_64 docker-ce-cli-1:20.10.3-3.fc31.x86_64 docker-ce-cli-1:20.10.3-3.fc31.x86_64 Fehler: Transaktion fehlgeschlagenIt is working again after uninstalling and reinstalling docker again. Don’t know what the problem is, but luckily it works again…
sudo dnf remove docker \ docker-client \ docker-client-latest \ docker-common \ docker-latest \ docker-latest-logrotate \ docker-logrotate \ docker-selinux \ docker-engine-selinux \ docker-enginesudo dnf -y install dnf-plugins-core sudo dnf config-manager \ --add-repo \ https://download.docker.com/linux/fedora/docker-ce.repo sudo dnf install docker-ce docker-ce-cli containerd.io