docker run --pull always --rm -it -u 0 --security-opt seccomp=unconfined --security-opt apparmor=unconfined registry.werf.io/werf/werf:2-rock-solid werf version
Error during unshare(CLONE_NEWUSER): Operation not permitted
ERRO[0000] error parsing PID "": strconv.Atoi: parsing "": invalid syntax
ERRO[0000] (unable to determine exit status)
источник: werf/werf#6172