Comment 5 for bug 1953738

Hello,

indeed, can't say more for now (didn't really test cs9), but this is the right issue:

+ nsenter --net=/run/netns/qrouter-ac39aabb-b846-44d3-a702-54a58e5b187a --preserve-credentials -m -t 1 podman run --detach --log-driver k8s-file --log-opt path=/var/log/containers/stdouts/neutron-keepalived-qrouter-ac39aabb-b846-44d3-a702-54a58e5b187a.log -v /var/lib/config-data/puppet-generated/neutron/etc/neutron:/etc/neutron:ro -v /lib/modules:/lib/modules:ro -v /sbin/modprobe:/sbin/modprobe:ro -v /run/netns:/run/netns:shared -v /var/lib/neutron:/var/lib/neutron:shared -v /dev/log:/dev/log --net host --pid host --cgroupns host --privileged -u root --name neutron-keepalived-qrouter-ac39aabb-b846-44d3-a702-54a58e5b187a 192.168.24.1:8787/tripleomastercentos9/openstack-neutron-l3-agent:9d27ee6e0e4f5143dbc49d4c775c9cd5-updated-20211208080944 /usr/sbin/keepalived -n -l -D -P -f /var/lib/neutron/ha_confs/ac39aabb-b846-44d3-a702-54a58e5b187a/keepalived.conf -p /var/lib/neutron/ha_confs/ac39aabb-b846-44d3-a702-54a58e5b187a.pid.keepalived -r /var/lib/neutron/ha_confs/ac39aabb-b846-44d3-a702-54a58e5b187a.pid.keepalived-vrrp -D
Error: create directory `/sys/fs/cgroup/../../libpod-74030e1ee20a0de5fd4791acb2b5751fe0e1e8e03f6bb4f5714da41487e27d94.scope`: No such file or directory: OCI runtime attempted to invoke a command that was not found

It would be interesting to check the denials in parallel (though CI is in permissive), and see if we get any other error in the system logs.

A local reproducer would also be nice so that we can iterate on it.

Wondering if the *path* isn't different with cgroup2... Needs some investigations there imho.

Also, mayb nsenter also has some cgroup2 option?