title: docker run hello-world fails, stderr: permission denied
body: <p>I have installed docker via <a href="https://get.docker.com/" rel="nofollow noreferrer">https://get.docker.com/</a> and the process went fine but when I try to run it I'm receiving the error </p>
  
  <blockquote>
    <p>docker: failed to register layer: ApplyLayer exit status 1 stdout: 
    stderr: permission denied.</p>
  </blockquote>
  
  <p><strong>lsb_release -a:</strong></p>
  
  <pre><code>No LSB modules are available.
  Distributor ID: Ubuntu
  Description:    Ubuntu 16.04.5 LTS
  Release:    16.04
  Codename:   xenial
  </code></pre>
  
  <p><strong>uname -a</strong></p>
  
  <pre><code>Linux stage 4.15.18-1-pve #1 SMP PVE 4.15.18-16 (Mon, 23 Jul 2018 15:59:19 +0200) x86_64 x86_64 x86_64 GNU/Linux
  </code></pre>
  
  <p><strong>docker version:</strong></p>
  
  <pre><code>Client:
   Version:           18.09.3
   API version:       1.39
   Go version:        go1.10.8
   Git commit:        774a1f4
   Built:             Thu Feb 28 06:40:58 2019
   OS/Arch:           linux/amd64
   Experimental:      false
  
  Server: Docker Engine - Community
   Engine:
    Version:          18.09.3
    API version:      1.39 (minimum version 1.12)
    Go version:       go1.10.8
    Git commit:       774a1f4
    Built:            Thu Feb 28 05:59:55 2019
    OS/Arch:          linux/amd64
    Experimental:     false
  </code></pre>
  
  <p><strong>docker info:</strong></p>
  
  <pre><code>Containers: 0
   Running: 0
   Paused: 0
   Stopped: 0
  Images: 0
  Server Version: 18.09.3
  Storage Driver: vfs
  Logging Driver: json-file
  Cgroup Driver: cgroupfs
  Plugins:
   Volume: local
   Network: bridge host macvlan null overlay
   Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
  Swarm: inactive
  Runtimes: runc
  Default Runtime: runc
  Init Binary: docker-init
  containerd version: e6b3f5632f50dbc4e9cb6288d911bf4f5e95b18e
  runc version: 6635b4f0c6af3810594d2770f662f34ddc15b40d
  init version: fec3683
  Security Options:
   apparmor
   seccomp
    Profile: default
  Kernel Version: 4.15.18-1-pve
  Operating System: Ubuntu 16.04.5 LTS
  OSType: linux
  Architecture: x86_64
  CPUs: 8
  Total Memory: 16GiB
  Name: stage
  ID: QFBZ:LSOW:2QT3:XGVI:4MIH:5BM7:7XR6:YKC7:JOMO:OWUW:T6YT:KVMA
  Docker Root Dir: /var/lib/docker
  Debug Mode (client): false
  Debug Mode (server): false
  Registry: https://index.docker.io/v1/
  Labels:
  Experimental: false
  Insecure Registries:
   127.0.0.0/8
  Live Restore Enabled: false
  Product License: Community Engine
  
  WARNING: bridge-nf-call-iptables is disabled
  WARNING: bridge-nf-call-ip6tables is disabled
  </code></pre>
  
  <p><strong>docker -D run hello-world:</strong></p>
  
  <pre><code>Unable to find image 'hello-world:latest' locally
  latest: Pulling from library/hello-world
  1b930d010525: Extracting [==================================================&gt;]     977B/977B
  docker: failed to register layer: ApplyLayer exit status 1 stdout:  stderr: permission denied.
  See 'docker run --help'.
  </code></pre>
  
  <p>I don't have /etc/pve/lxc folder nor lxc command available as <a href="https://stackoverflow.com/questions/39557576/docker-run-hello-world-still-fails-permission-denied">docker run hello-world still fails, permission denied</a> seems to suggest to resolve it.</p>
  
  <p>I'm losing my mind around this error, please help!</p>