[Error] rootless docker container create failed with flags: 0x5021: operation not permitted

Please, before opening a bug:

- make sure you've read the documentation.
- Ensure there isn't already an open issue about this.
- Ensure there isn't already a closed/resolved issue about this.

**Describe the bug**
A clear and concise description of what the bug is.
rootless docker container create failed with flags: 0x5021: operation not permitted

**To Reproduce**
Steps to reproduce the behavior
DBX_CONTAINER_MANAGER=docker distrobox create --name debian -i debian:sid

**Expected behavior**
A clear and concise description of what you expected to happen.
no errror
**Logs**
Run the commands with `--verbose` and post the log here as a file upload
Attach also the output of `podman logs` or `docker logs`, possibly with `--latest` flag

```

❯ DBX_CONTAINER_MANAGER=docker distrobox create --name debian222 -i debian:sid --verbose
+ '[' -z '' ']'
+ '[' -z debian:sid ']'
+ '[' -z debian222 ']'
+ '[' -z debian222 ']'
+ '[' -z '' ']'
++ uname -n
+ container_hostname=ipc
+ '[' 0 -eq 1 ']'
++ printf %s ipc
++ wc -m
+ '[' 3 -gt 64 ']'
+ case "${container_manager}" in
+ container_manager=docker
+ command -v docker
+ '[' 1 -ne 0 ']'
+ container_manager='docker --log-level debug'
+ '[' 0 -ne 0 ']'
+ '[' 0 -ne 0 ']'
+ '[' -n /nix:/nix ']'
+ for volume in ${container_additional_volumes}
+ container_manager_additional_flags=$'\n\t\t\t--volume /nix:/nix'
+ '[' -z /nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init ']'
+ '[' -z /nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export ']'
+ '[' 0 -ne 0 ']'
+ docker --log-level debug inspect --type container debian222
+ '[' -n '' ']'
+ '[' 0 -eq 1 ']'
+ docker --log-level debug inspect --type image debian:sid
+ printf 'Creating '\''%s'\'' using image %s\t' debian222 debian:sid
Creating 'debian222' using image debian:sid ++ generate_create_command
++ result_command='docker --log-level debug create'
++ result_command='docker --log-level debug create '
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root'
++ '[' 0 -eq 0 ']'
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host'
++ '[' 0 -eq 0 ']'
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host'
++ '[' 0 -eq 0 ']'
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host'
+++ basename /run/current-system/sw/bin/zsh
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave'
++ echo 'docker --log-level debug'
++ grep -q podman
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave\n\t\t\t--volume /:/run/host/:rslave'
++ '[' 0 -eq 0 ']'
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave\n\t\t\t--volume /:/run/host/:rslave\n\t\t\t--volume /dev:/dev:rslave\n\t\t\t--volume /sys:/sys:rslave'
++ '[' 0 -eq 1 ']'
++ '[' 0 -eq 1 ']'
++ '[' 0 -eq 0 ']'
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave\n\t\t\t--volume /:/run/host/:rslave\n\t\t\t--volume /dev:/dev:rslave\n\t\t\t--volume /sys:/sys:rslave\n\t\t\t--volume /dev/pts\n\t\t\t--volume /dev/null:/dev/ptmx'
++ '[' -e /sys/fs/selinux ']'
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave\n\t\t\t--volume /:/run/host/:rslave\n\t\t\t--volume /dev:/dev:rslave\n\t\t\t--volume /sys:/sys:rslave\n\t\t\t--volume /dev/pts\n\t\t\t--volume /dev/null:/dev/ptmx\n\t\t\t--volume /var/log/journal'
++ '[' -L /dev/shm ']'
++ RHEL_SUBSCRIPTION_FILES=$'\n\t\t/etc/pki/entitlement/:/run/secrets/etc-pki-entitlement:ro\n\t\t/etc/rhsm/:/run/secrets/rhsm:ro\n\t\t/etc/yum.repos.d/redhat.repo:/run/secrets/redhat.repo:ro\n\t'
++ for rhel_file in ${RHEL_SUBSCRIPTION_FILES}
+++ echo /etc/pki/entitlement/:/run/secrets/etc-pki-entitlement:ro
+++ cut -d: -f1
++ '[' -e /etc/pki/entitlement/ ']'
++ for rhel_file in ${RHEL_SUBSCRIPTION_FILES}
+++ echo /etc/rhsm/:/run/secrets/rhsm:ro
+++ cut -d: -f1
++ '[' -e /etc/rhsm/ ']'
++ for rhel_file in ${RHEL_SUBSCRIPTION_FILES}
+++ echo /etc/yum.repos.d/redhat.repo:/run/secrets/redhat.repo:ro
+++ cut -d: -f1
++ '[' -e /etc/yum.repos.d/redhat.repo ']'
++ '[' -n '' ']'
++ '[' -n '' ']'
++ '[' /home/dev '!=' /var/home/dev ']'
++ '[' -d /var/home/dev ']'
++ '[' -d /run/user/1003 ']'
++ '[' 0 -eq 0 ']'
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave\n\t\t\t--volume /:/run/host/:rslave\n\t\t\t--volume /dev:/dev:rslave\n\t\t\t--volume /sys:/sys:rslave\n\t\t\t--volume /dev/pts\n\t\t\t--volume /dev/null:/dev/ptmx\n\t\t\t--volume /var/log/journal\n\t\t\t--volume /run/user/1003:/run/user/1003:rslave'
++ '[' 0 -eq 0 ']'
++ NET_FILES=$'\n\t\t\t/etc/hosts\n\t\t\t/etc/resolv.conf\n\t\t'
+++ uname -n
++ '[' ipc = ipc ']'
++ NET_FILES=$'\n\t\t\t/etc/hosts\n\t\t\t/etc/resolv.conf\n\t\t /etc/hostname'
++ for net_file in ${NET_FILES}
++ '[' -e /etc/hosts ']'
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave\n\t\t\t--volume /:/run/host/:rslave\n\t\t\t--volume /dev:/dev:rslave\n\t\t\t--volume /sys:/sys:rslave\n\t\t\t--volume /dev/pts\n\t\t\t--volume /dev/null:/dev/ptmx\n\t\t\t--volume /var/log/journal\n\t\t\t--volume /run/user/1003:/run/user/1003:rslave\n\t\t\t\t\t--volume /etc/hosts:/etc/hosts:ro'
++ for net_file in ${NET_FILES}
++ '[' -e /etc/resolv.conf ']'
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave\n\t\t\t--volume /:/run/host/:rslave\n\t\t\t--volume /dev:/dev:rslave\n\t\t\t--volume /sys:/sys:rslave\n\t\t\t--volume /dev/pts\n\t\t\t--volume /dev/null:/dev/ptmx\n\t\t\t--volume /var/log/journal\n\t\t\t--volume /run/user/1003:/run/user/1003:rslave\n\t\t\t\t\t--volume /etc/hosts:/etc/hosts:ro\n\t\t\t\t\t--volume /etc/resolv.conf:/etc/resolv.conf:ro'
++ for net_file in ${NET_FILES}
++ '[' -e /etc/hostname ']'
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave\n\t\t\t--volume /:/run/host/:rslave\n\t\t\t--volume /dev:/dev:rslave\n\t\t\t--volume /sys:/sys:rslave\n\t\t\t--volume /dev/pts\n\t\t\t--volume /dev/null:/dev/ptmx\n\t\t\t--volume /var/log/journal\n\t\t\t--volume /run/user/1003:/run/user/1003:rslave\n\t\t\t\t\t--volume /etc/hosts:/etc/hosts:ro\n\t\t\t\t\t--volume /etc/resolv.conf:/etc/resolv.conf:ro\n\t\t\t\t\t--volume /etc/hostname:/etc/hostname:ro'
++ echo 'docker --log-level debug'
++ grep -q podman
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave\n\t\t\t--volume /:/run/host/:rslave\n\t\t\t--volume /dev:/dev:rslave\n\t\t\t--volume /sys:/sys:rslave\n\t\t\t--volume /dev/pts\n\t\t\t--volume /dev/null:/dev/ptmx\n\t\t\t--volume /var/log/journal\n\t\t\t--volume /run/user/1003:/run/user/1003:rslave\n\t\t\t\t\t--volume /etc/hosts:/etc/hosts:ro\n\t\t\t\t\t--volume /etc/resolv.conf:/etc/resolv.conf:ro\n\t\t\t\t\t--volume /etc/hostname:/etc/hostname:ro\n\t\t\n\t\t\t--volume /nix:/nix'
++ result_command=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave\n\t\t\t--volume /:/run/host/:rslave\n\t\t\t--volume /dev:/dev:rslave\n\t\t\t--volume /sys:/sys:rslave\n\t\t\t--volume /dev/pts\n\t\t\t--volume /dev/null:/dev/ptmx\n\t\t\t--volume /var/log/journal\n\t\t\t--volume /run/user/1003:/run/user/1003:rslave\n\t\t\t\t\t--volume /etc/hosts:/etc/hosts:ro\n\t\t\t\t\t--volume /etc/resolv.conf:/etc/resolv.conf:ro\n\t\t\t\t\t--volume /etc/hostname:/etc/hostname:ro\n\t\t\n\t\t\t--volume /nix:/nix\n\t--entrypoint /usr/bin/entrypoint\n\tdebian:sid\n\t\t--verbose\n\t\t--name "dev"\n\t\t--user 1003\n\t\t--group 100\n\t\t--home "/home/dev"\n\t\t--init "0"\n\t\t--nvidia "0"\n\t\t--pre-init-hooks ""\n\t\t--additional-packages ""\n\t\t-- \'\'\n\t'
++ printf %s $'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave\n\t\t\t--volume /:/run/host/:rslave\n\t\t\t--volume /dev:/dev:rslave\n\t\t\t--volume /sys:/sys:rslave\n\t\t\t--volume /dev/pts\n\t\t\t--volume /dev/null:/dev/ptmx\n\t\t\t--volume /var/log/journal\n\t\t\t--volume /run/user/1003:/run/user/1003:rslave\n\t\t\t\t\t--volume /etc/hosts:/etc/hosts:ro\n\t\t\t\t\t--volume /etc/resolv.conf:/etc/resolv.conf:ro\n\t\t\t\t\t--volume /etc/hostname:/etc/hostname:ro\n\t\t\n\t\t\t--volume /nix:/nix\n\t--entrypoint /usr/bin/entrypoint\n\tdebian:sid\n\t\t--verbose\n\t\t--name "dev"\n\t\t--user 1003\n\t\t--group 100\n\t\t--home "/home/dev"\n\t\t--init "0"\n\t\t--nvidia "0"\n\t\t--pre-init-hooks ""\n\t\t--additional-packages ""\n\t\t-- \'\'\n\t'
+ cmd=$'docker --log-level debug create \n\t\t--hostname "ipc"\n\t\t--name "debian222"\n\t\t--privileged\n\t\t--security-opt label=disable\n\t\t--security-opt apparmor=unconfined\n\t\t--pids-limit=-1\n\t\t--user root:root\n\t\t\t--ipc host\n\t\t\t--network host\n\t\t\t--pid host\n\t\t--label "manager=distrobox"\n\t\t--label "distrobox.unshare_groups=0"\n\t\t--env "SHELL=zsh"\n\t\t--env "HOME=/home/dev"\n\t\t--env "container=docker --log-level debug"\n\t\t--env "TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"\n\t\t--env "CONTAINER_ID=debian222"\n\t\t--volume /tmp:/tmp:rslave\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro\n\t\t--volume "/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro\n\t\t--volume "/home/dev":"/home/dev":rslave\n\t\t\t--volume /:/run/host/:rslave\n\t\t\t--volume /dev:/dev:rslave\n\t\t\t--volume /sys:/sys:rslave\n\t\t\t--volume /dev/pts\n\t\t\t--volume /dev/null:/dev/ptmx\n\t\t\t--volume /var/log/journal\n\t\t\t--volume /run/user/1003:/run/user/1003:rslave\n\t\t\t\t\t--volume /etc/hosts:/etc/hosts:ro\n\t\t\t\t\t--volume /etc/resolv.conf:/etc/resolv.conf:ro\n\t\t\t\t\t--volume /etc/hostname:/etc/hostname:ro\n\t\t\n\t\t\t--volume /nix:/nix\n\t--entrypoint /usr/bin/entrypoint\n\tdebian:sid\n\t\t--verbose\n\t\t--name "dev"\n\t\t--user 1003\n\t\t--group 100\n\t\t--home "/home/dev"\n\t\t--init "0"\n\t\t--nvidia "0"\n\t\t--pre-init-hooks ""\n\t\t--additional-packages ""\n\t\t-- \'\'\n\t'
+ eval docker --log-level debug create --hostname '"ipc"' --name '"debian222"' --privileged --security-opt label=disable --security-opt apparmor=unconfined --pids-limit=-1 --user root:root --ipc host --network host --pid host --label '"manager=distrobox"' --label '"distrobox.unshare_groups=0"' --env '"SHELL=zsh"' --env '"HOME=/home/dev"' --env '"container=docker' --log-level 'debug"' --env '"TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo"' --env '"CONTAINER_ID=debian222"' --volume /tmp:/tmp:rslave --volume '"/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init":/usr/bin/entrypoint:ro' --volume '"/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export":/usr/bin/distrobox-export:ro' --volume '"/nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec":/usr/bin/distrobox-host-exec:ro' --volume '"/home/dev":"/home/dev":rslave' --volume /:/run/host/:rslave --volume /dev:/dev:rslave --volume /sys:/sys:rslave --volume /dev/pts --volume /dev/null:/dev/ptmx --volume /var/log/journal --volume /run/user/1003:/run/user/1003:rslave --volume /etc/hosts:/etc/hosts:ro --volume /etc/resolv.conf:/etc/resolv.conf:ro --volume /etc/hostname:/etc/hostname:ro --volume /nix:/nix --entrypoint /usr/bin/entrypoint debian:sid --verbose --name '"dev"' --user 1003 --group 100 --home '"/home/dev"' --init '"0"' --nvidia '"0"' --pre-init-hooks '""' --additional-packages '""' -- ''\'''\'''
++ docker --log-level debug create --hostname ipc --name debian222 --privileged --security-opt label=disable --security-opt apparmor=unconfined --pids-limit=-1 --user root:root --ipc host --network host --pid host --label manager=distrobox --label distrobox.unshare_groups=0 --env SHELL=zsh --env HOME=/home/dev --env 'container=docker --log-level debug' --env TERMINFO_DIRS=/usr/share/terminfo:/run/host/usr/share/terminfo --env CONTAINER_ID=debian222 --volume /tmp:/tmp:rslave --volume /nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-init:/usr/bin/entrypoint:ro --volume /nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-export:/usr/bin/distrobox-export:ro --volume /nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-host-exec:/usr/bin/distrobox-host-exec:ro --volume /home/dev:/home/dev:rslave --volume /:/run/host/:rslave --volume /dev:/dev:rslave --volume /sys:/sys:rslave --volume /dev/pts --volume /dev/null:/dev/ptmx --volume /var/log/journal --volume /run/user/1003:/run/user/1003:rslave --volume /etc/hosts:/etc/hosts:ro --volume /etc/resolv.conf:/etc/resolv.conf:ro --volume /etc/hostname:/etc/hostname:ro --volume /nix:/nix --entrypoint /usr/bin/entrypoint debian:sid --verbose --name dev --user 1003 --group 100 --home /home/dev --init 0 --nvidia 0 --pre-init-hooks '' --additional-packages '' -- ''
+ printf '\033[32m [ OK ]\n\033[0mDistrobox '\''%s'\'' successfully created.\n' debian222
[ OK ]
Distrobox 'debian222' successfully created.
+ printf 'To enter, run:\n\n'
To enter, run:

+ '[' 0 -eq 1 ']'
+ '[' 1003 -eq 0 ']'
+ '[' 0 -eq 0 ']'
+ printf 'distrobox enter %s\n\n' debian222
distrobox enter debian222

+ '[' 0 -eq 0 ']'
+ '[' 1 -ne 0 ']'
+ /nix/store/z9ry9x4f5g61kmmmwv5a8ydjxhvapr7n-distrobox-1.8.2.2/bin/distrobox-generate-entry debian222
Error response from daemon: remount-ro /home/dev/.local/share/docker/rootfs/overlayfs/62b4907a6f29d2cedfc0d0853cf702f138dc28d3a1abd5f4042770689790e44c/usr/bin/distrobox-host-exec, flags: 0x5021: operation not permitted

```

**Desktop (please complete the following information):**

- Are you using podman, docker or lilipod? docker
- Which version or podman, docker or lilipod? Docker version 29.1.2, build v29.1.2

- Which version of distrobox? distrobox: 1.8.2.2

- Which host distribution? NixOS
- How did you install distrobox? nixpkgs and environment.systemPackages

**Additional context**
Add any other context about the problem here.

這個 issue 是關於 rootless Docker 容器建立失敗並出現 'operation not permitted'。詳細記錄顯示了包含許多 flag 的產生後 Docker 指令。先檢查 distrobox script 中的容器建立邏輯，可能位於某個 shell script 檔案中。尋找 'generate_create_command' 函式以及加入的 flag，尤其是 --privileged 和 --ipc host。在 rootless Docker 環境中進行測試，以確認是哪個 flag 導致錯誤。修正可能需要針對 rootless 模式調整 flag。

由索引模型根據 Issue 內容生成。