# setenforce Permissive nspawn "stretch-nspawn-1" { state => "running", }