问题描述：
Error response from daemon: failed to create shim: OCI runtime create failed: container_linux.go:380: starting container process caused: error adding seccomp filter rule for syscall clone3: peron denied: unknown
问题背景：
NVIDIA Docker: 2.8.0
Client:
Version: 20.10.7
API version: 1.41
Go version: go1.13.8
Git commit: 20.10.7-0ubuntu5~20.04.2
Built: Mon Nov 1 00:34:17 2021
OS/Arch: linux/amd64
Context: default
Experimental: true
解决办法：
更新版本
apt-get upgrade -y
参考https://github.com/containerd/containerd/issues/6203
