Description

Cluster containers with securityContext don't start anymore:

standard_init_linux.go:228: exec user process caused: operation not permitted

Impact

All containers with a securityContext setting don't start as expected.

Environment and steps to reproduce

1. Set-up: RKE Cluster with Flatcar 2905.2.0 nodes
2. Task: Update from previous release 2765.2.6
3. Action(s):
   a. Update downloads and installs automatically
   b. Node reboots
4. Error: Containers won't start anymore.

Expected behavior

Containers should start.

Additional information

Imho this is related to the change:

Docker: disabled SELinux support in the Docker daemon