Mike Yuan
d4bdcecaf9
We enable nsdelegate for cgroupfs, and hence the kernel would always refuse writes to /sys/fs/cgroup/cgroup.pressure and friends regardless of whether the cgns is owned by userns: https://github.com/torvalds/linux/blob/cb82ca153949c6204af793de24b18a04236e79fd/kernel/cgroup/cgroup.c#L4132 This currently works because the mountns (thus cgroupfs) remains to be non-delegated and we're actually operating on the real root cgroup. It appears that cgroupfs generally doesn't care about userns, so I'm yet to see a way to test this properly. Let's drop this for now, to unblock fixes in the following commits.