Our automated tests caught this error when upgrading a Fedora 27 Atomic Host to the latest commit on the 'testing' branch:

# rpm-ostree status
State: idle
Deployments:
● custom:fedora/27/x86_64/testing/atomic-host
                   Version: 27.13 (2017-10-19 15:44:07)
                    Commit: 54322b3ae67b7079dc123a98f61d55898c33f8278802209aa86b0a135026bba9


# rpm -q docker
docker-1.13.1-33.git790e958.fc27.x86_64

# systemctl status docker
● docker.service - Docker Application Container Engine
   Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled; vendor preset: disabled)
   Active: inactive (dead) (Result: protocol) since Fri 2017-10-20 14:01:27 UTC; 3min 50s ago
     Docs: http://docs.docker.com
  Process: 1317 ExecStart=/usr/bin/dockerd-current --add-runtime oci=/usr/libexec/docker/docker-runc-current --default-runtime=oci --authorization-plugin=rhel-push-plugin --containerd /run/containerd.sock --exec
 Main PID: 1317 (code=exited, status=1/FAILURE)

Oct 20 14:01:27 micah-f26ah-vm1020a.localdomain systemd[1]: docker.service: Unit entered failed state.
Oct 20 14:01:27 micah-f26ah-vm1020a.localdomain systemd[1]: docker.service: Failed with result 'protocol'.
Oct 20 14:01:27 micah-f26ah-vm1020a.localdomain systemd[1]: docker.service: Service hold-off time over, scheduling restart.
Oct 20 14:01:27 micah-f26ah-vm1020a.localdomain systemd[1]: Stopped Docker Application Container Engine.
Oct 20 14:01:27 micah-f26ah-vm1020a.localdomain systemd[1]: Dependency failed for Docker Application Container Engine.
Oct 20 14:01:27 micah-f26ah-vm1020a.localdomain systemd[1]: docker.service: Job docker.service/start failed with result 'dependency'.


# journalctl -b -u docker
-- Logs begin at Fri 2017-10-20 13:48:06 UTC, end at Fri 2017-10-20 14:05:01 UTC. --
Oct 20 14:01:21 micah-f26ah-vm1020a.localdomain systemd[1]: Starting Docker Application Container Engine...
Oct 20 14:01:21 micah-f26ah-vm1020a.localdomain dockerd-current[962]: time="2017-10-20T14:01:21Z" level=info msg="SUSE:secrets :: enabled"
Oct 20 14:01:21 micah-f26ah-vm1020a.localdomain dockerd-current[962]: Error starting daemon: opening seccomp profile (/etc/docker/seccomp.json) failed: open /etc/docker/seccomp.json: no such file or directory
Oct 20 14:01:21 micah-f26ah-vm1020a.localdomain systemd[1]: docker.service: Main process exited, code=exited, status=1/FAILURE
Oct 20 14:01:21 micah-f26ah-vm1020a.localdomain systemd[1]: Failed to start Docker Application Container Engine.


If you would like to reproduce, start with any Fedora Atomic Host, then add the F27 remote and rebase to the 'testing' branch:


# ostree remote add --no-gpg-verify custom http://159.203.73.180
# rpm-ostree rebase custom:fedora/27/x86_64/testing/atomic-host 54322b3ae67b7079dc123a98f61d55898c33f8278802209aa86b0a135026bba9