Docker: fix “permission denied” error on sysctl net.ipv4.ip_unprivileged_port_start

Updated 26/11/2025

In version 9.1.1 of Proxmox, the problem appears to be resolved.

In this tutorial, I will explain how to resolve the following error on a Docker host running on Proxmox in LXC.

When starting your Docker containers, you encounter the following error:

Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied: unknown

This error appeared with version 1.7.28-2 of the containerd.io package.

To resolve this issue, you need to downgrade to version: 1.7.28-1.

Start by displaying the list of available versions:

apt list -a containerd.io

Install the old version:

apt install containerd.io=1.7.28-1~ubuntu.24.04~noble

Adapt the command to your operating system

Once installed, block the version of the containerd.io package.

apt-mark hold containerd.io

You can now restart your Docker containers.

This is a temporary solution, until the bug is fixed.

To follow the progress:

Romain Drouche
System Architect | MCSE: Core Infrastructure
IT infrastructure expert with over 15 years of field experience. Currently a Systems and Networks Project Manager and Information Systems Security (ISS) expert, I use my expertise to ensure the reliability and security of technological environments.

Leave a Comment