I am currently trying to configure my more or less fresh installation of CentOS Stream (8) to delegate cgroup controllers to non-privileged users. However, I fail at this and I've searched the web for two days now but I can't find someone with the same or similar problem.
I want to run rootless containers with podman. Yet, I fail at this because a non-privileged user needs to have cgroup controller
pids. Yet, the following command yields no result, indicating that there is no cgroup controller available:
$ cat /sys/fs/cgroup/user.slice/user-$(id -u).slice/user@$(id -u).service/cgroup.controllers
As far as I understand, this command should yield in the default configuration something like this (see docker.com):
$ cat /sys/fs/cgroup/user.slice/user-$(id -u).slice/user@$(id -u).service/cgroup.controllers memory pids
Of course, I already enabled cgroups v2 with
/etc/default/grub and rebuilt with
So, I tried the following command described at docker.com:
# mkdir -p /etc/systemd/system/user@.service.d # cat > /etc/systemd/system/user@.service.d/delegate.conf << EOF [Service] Delegate=cpu cpuset io memory pids EOF # systemctl daemon-reload
Finally, I rebooted, but to no avail. There are still no cgroup controllers at all for the non-privileged user.
configuration: CentOS Stream (8) up-to-date, Systemd v239