Docker and user namespaces on F30


I just updated to F30 and my docker setup with user namespaces doesn't
work anymore. When I try to run:
docker run -it --rm sh
I get this error:
docker: Error response from daemon: OCI runtime create failed:
container_linux.go:348: starting container process caused
"process_linux.go:402: container init caused \"rootfs_linux.go:58:
mounting \\\"mqueue\\\" to rootfs
383d1af57e8652ff4e4c411cebe0c2102a36a020\\\" at \\\"/dev/mqueue\\\"
caused \\\"operation not permitted\\\"\"": unknown.

I tried to disable SELinux with setenforce 0 but got the same result.

However, dk run --userns=host -it --rm sh
works fine. So it seems to be limited to user namespaces.

My kernel: 5.0.9-301.fc30.x86_64

Any ideas on where this may come from? This worked fine on F29 (and
probably on older versions too, I have this setup for a while now).