LoongArch64 (loong64) 龙芯架构：AnolisOS 23.4 默认仓库安装的 Docker 无法创建容器

LoongArch 龙芯
,
1

系统

龙蜥 Anolis OS 23.4

[root@anolis ~]# cat /etc/os-release 
NAME="Anolis OS"
VERSION="23.4"
ID="anolis"
VERSION_ID="23.4"
PLATFORM_ID="platform:an23"
PRETTY_NAME="Anolis OS 23.4"
ANSI_COLOR="0;31"
HOME_URL="https://openanolis.cn/"
BUG_REPORT_URL="https://bugzilla.openanolis.cn/"

[root@anolis ~]#

[root@anolis ~]# uname -a
Linux anolis 6.6.102-5.3.3.an23.loongarch64 #1 SMP Tue May 26 14:00:16 CST 2026 loongarch64 loongarch64 loongarch64 GNU/Linux
[root@anolis ~]#

软件

docker 24.0.9

[root@anolis ~]# docker info
Client:
 Version:    24.0.9
 Context:    default
 Debug Mode: false

Server:
 Containers: 1
  Running: 0
  Paused: 0
  Stopped: 1
 Images: 2
 Server Version: 24.0.9
 Storage Driver: overlay2
  Backing Filesystem: extfs
  Supports d_type: true
  Using metacopy: false
  Native Overlay Diff: false
  userxattr: false
 Logging Driver: json-file
 Cgroup Driver: systemd
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 
 runc version: 
 init version: de40ad0
 Security Options:
  seccomp
   Profile: builtin
  cgroupns
 Kernel Version: 6.6.102-5.3.3.an23.loongarch64
 Operating System: Anolis OS 23.4
 OSType: linux
 Architecture: loongarch64
 CPUs: 8
 Total Memory: 14.76GiB
 Name: anolis
 ID: 173f9822-7754-4714-9e92-2721c1853634
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Experimental: false
 Insecure Registries:
  127.0.0.0/8
 Registry Mirrors:
  https://docker.1ms.run/
  https://k-docker.asia/
  https://docker.1panel.live/
  https://dockerproxy.cn/
  https://docker.nastool.de/
  https://docker.agsv.top/
  https://docker.agsvpt.work/
  https://docker.m.daocloud.io/
  https://dockerhub.anzu.vip/
  https://docker.chenby.cn/
  https://docker.jijiai.cn/
 Live Restore Enabled: false

[root@anolis ~]#

问题

无法创建容器

docker run -itd --name debian-14 lcr.loongnix.cn/debian:14

[root@anolis ~]# docker run -itd --name debian-14 lcr.loongnix.cn/debian:14
830df032d9ff7df2c8ead206081acc473e4f45048b68343ad99c7639436310f3
docker: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error loading seccomp filter into kernel: error patching filter: error generating patch for filter: error finding last syscalls for -ENOSYS stub: unable to get native arch: unrecognized architecture 0xc0000102: unknown.
[root@anolis ~]#

临时解决方案：不推荐

创建容器时，增加 --security-opt seccomp=unconfined 参数

此方案无法在 GitLab Runner Docker 执行器中使用，推荐下方永久解决方案

docker run -itd --name debian-14 --security-opt seccomp=unconfined lcr.loongnix.cn/debian:14

[root@anolis ~]# docker run -itd --name debian-14 --security-opt seccomp=unconfined lcr.loongnix.cn/debian:14
0903aa4d11a86f5aab4882ae3840440cec967b50ff69619883e45223679508aa
[root@anolis ~]# docker exec -it debian-14 bash
root@0903aa4d11a8:/# cat /etc/os-release 
PRETTY_NAME="Debian GNU/Linux forky/sid"
NAME="Debian GNU/Linux"
VERSION_CODENAME=forky
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"
root@0903aa4d11a8:/#

永久解决

LoongArch64 (loong64) 龙芯架构：AnolisOS 23.4 默认仓库安装 Docker
LoongArch64 (loong64) 龙芯架构：安装 containerd、docker 话题列表