新到Jeson nano，立刻装上系统体验一把，结果掉坑里了，运行
sudo docker run -it --rm --net=host --runtime nvidia -e DISPLAY=$DISPLAY -w /opt/nvidia/deepstream/deepstream-6.0 -v /tmp/.X11-unix/:/tmp/.X11-unix nvcr.io/nvidia/deepstream-l4t:6.0-samples`
错误提示为failed to create shim: OCI runtime create failed: container_linux.go:380: starting container process caused: error adding seccomp filter rule for syscall clone3: permission denied: unknown
经过一番排查后，只要将启动命令中的--runtime nvidia移除掉，即可正常启动容器。原来是官方SD卡的镜像包jetson-nano-jp46-sd-card-image.zip中docker的版本与nvidia container runtime不兼容
docker --version
Docker version 20.10.7, build 20.10.7-0ubuntu5~18.04.3
可以看到，居然被升级到了20.10.7，解决方案很简单，将当前系统中的docker版本降级到19.03就行了
wget http://launchpadlibrarian.net/511874292/docker.io_19.03.6-0ubuntu1~18.04.3_arm64.deb
sudo dpkg -i docker.io_19.03.6-0ubuntu1_18.04.3_arm64.deb
