I can reproduce that yes This seems also (from a quick test) NOT related to selinux. It seems like runc has some permission enforcement, probably related to some breaking changes introduced upstream: https://github.com/opencontainers/runc/commit/d4b670fca6d0ac606777376440ffe49686ce15f4 --- Will need to find a fix (in my upstream) because mounting /:/run/host is an integral part of distrobox, and likely of any toolbox implementation (be it MicroOS, CoreOS, Fedora and so on) Can we link this ticket to an issue upstream?