Comment # 3 on bug 1215903 from Johannes Hölzel

I think there is even more to it. I have currently adapted all my systems to
use cloud-init but i can not even get rke2 to work at all.

I checked the audit logs for selinux denies but there were none.

Something has seriously crippled root and currently there is no way to run rke2
rootless...

my current workaround is to deploy a deploy user with cloud-init and the old
version then updated right with dup after.

```
users:
  - name: ${var.deploy_user}
    sudo: ALL=(ALL) NOPASSWD:ALL
    ssh_authorized_keys:
      - ${var.SSH_pub_key}
```