(In reply to Fabian Vogt from comment #4) > Should we focus on that or testing with cgroups v2? v2 should be a workaround if you need the worker up 'n running quickly (hopefully). For SP4 when no v2-specific feature [1] is required, we should fix that (as you wrote). So tracking it down with a reproducer is still helpful. [1] FTR, I'd count unprivileged containers among those too (have the source services User!=root?).