Looks like I voted “everything went smooth” too soon. Two of my docker containers (mediawiki and teamspeak3-server) are no longer starting up. Looks like the issue described here. There’s also a post with some kernel parameters that are supposed to fix it, but I’ve never really had to touch u-boot so far so I’m not sure how to try these out.
Edit: Forgot to mention, my home-assistant container is still running. I’m not sure why it is not affected by the issue…
It did. I don’t even use AppArmor. Still, here’s the error I get when launching the Teamspeak container:
docker: Error response from daemon: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: unable to apply apparmor profile: apparmor failed to apply profile: write /proc/self/attr/apparmor/exec: no such file or directory: unknown.
The mediawiki container throws the same error as teamspeak. My installation is running on a Rock Pi 4B+.
Edit: Doing some investigating, it seems the problem is happening inside the containers, which makes sense because as mentioned, I never had AppArmor installed. Seeing how two images have this problem, one of which has not received any kind of update in three months, I assumed the problem is with docker itself, or rather there’s been some kind of change that necessitates changing the images in some way. Downgrading docker to 20.10.22-1 -aarch64 confirmed this suspicion.
Thank you, but sadly I still get the same error, even after rebooting. It’s strange how I get this exact error-message on three different containers (I found an apache-instance on another Rock Pi affected as well), but searching online I can’t find anyone with this exact error. Anything I’m missing I could investigate on my end?
FYI, the January update had a known broken (for the Allwinner A64) Mesa, which is fixed in this update. But you may be running into some other regression.
The upstream issue@rootgordon linked to makes it pretty clear that this is an upstream regression (apparently in runc) that makes Docker no longer work if AppArmor is not installed.