Indeed if the derived containers are booted with selinux already installed systemd does not work because of different selinux policies on the same file in the container and the host system:
```
[root@ctafrontend ~]# systemctl
Failed to get D-Bus connection: Operation not permitted
```

Anyway even if selinux is installed later it is not enabled in the running container...