# Cert-deployer failing

**URL:** <https://forums.suse.com/t/cert-deployer-failing/17658>\
**Category:** General\
**Created:** [June 6, 2020, 8:57am UTC](https://forums.suse.com/t/cert-deployer-failing/17658 "2020-06-06T08:57:39Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Makrand](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/makrand/32/6444_2.png) [@Makrand](https://forums.suse.com/u/Makrand)\
**Post date:** [June 6, 2020, 8:57am UTC](https://forums.suse.com/t/cert-deployer-failing/17658/1 "2020-06-06T08:57:40Z")

</div>

Hi All,

My cluster.yaml is ready. Trying Single node for testing.

After doing rke up - I am running into below error.

> FATA[0008] [Failed to start Certificates deployer container on host [10.70.241.23]: Error response from daemon: OCI runtime create failed: container\_linux.go:349: starting container process caused “process\_linux.go:449: container init caused "process\_linux.go:415: setting cgroup config for procHooks process caused \"failed to write \\\"a _:_ rwm\\\" to \\\"/sys/fs/cgroup/devices/docker/326881b50b64365bbf4a3aa9457cd3fa45220464222bfd89cf214222910bc595/devices.allow\\\": write /sys/fs/cgroup/devices/docker/326881b50b64365bbf4a3aa9457cd3fa45220464222bfd89cf214222910bc595/devices.allow: operation not permitted\""”: unknown]

The host is LXD container (Ubu 18.04) and can run other containers fine. Even after RKE up…the initial contaieners like - rke-etcd-port-listener, rke-ca-port-listener ran and exited after doing their job. Its just cert-deployer is failing.  
Any idea why it’s not getting permission?

rke version v1.1.0