I figured this out - it turns out the problem was that following a recent update, both docker-selinux and container-selinux were present.

container-selinux is what the docker 1.12 update uses, but docker 1.10 used docker-selinux. So the problem was that container-selinux doesn't contain: "Deprecates: docker-selinux".

This should probably be fixed before somebody else ends up wasting their time troubleshooting the issue.

On Thu, Mar 9, 2017 at 12:53 PM, Gordan Bobic <gordan@redsleeve.org> wrote:

Recent SELinux policy update breaks SELinux with docker-selinux < 1.10.3-57. The current version in extras repository seems to be 1.10.3-46.

This breaks a lot of things, including any attempt to change the policy using semanage for anyone who has ever had docker-selinux installed on their system.

Scientific Linux guys seem to be on the ball with this one, but CentOS ARM hasn't had docker-selinux updated yet even though the update has been upstream since late November.

Gordan