docker run 启动失败

docker: Error response from daemon: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: unable to apply apparmor profile: apparmor failed to apply profile: write /proc/self/attr/apparmor/exec: no such file or directory: unknown.

原因：

debian 默认没有安装 apparmor

解决方案：

$ apt install apparmor
$ systemctl enable --now apparmor
$ systemctl restart docker