Issue in running rootless podman with cgroup v2

[cwrx777]

Hi,

I encountered an issue in running rootless podman with cgroupv2. No issue if using cgroupv1.
My objective of using cgroupv2 is to get the podman stats.

My setup is as follows:

1. unix account used to run the rootless podman:

• name: romih_podman
• UID: 1024
• shell: nologin

2. How the container is run:

• using sudo systemctl start/stop systemd-unit-name.service
• Example of the systemd unit file is here.

3. the systemd unit will launch a bash script.
4. the bash script uses podman play kube to launch the pod. here is the kube yaml file and here is the configmap file.
5. I have created delegate.conf and override.conf as shown below.

delegate.conf

[Service]
Delegate=cpu cpuset io memory pids

override.conf

[Slice]
Slice=user.slice

CPUAccounting=yes
MemoryAccounting=yes
IOAccounting=yes
TasksAccounting=yes

Issue/Error message:

Error: /app/romih/app/_TEMP_app_rev_proxy_pod.yaml: unable to create pod cgroup for pod 7e32ab8d150f3c758496a191e0b86c47f601f83744d0101674acc5d33b68451d: error creating cgroup user.slice/user-libpod_pod_7e32ab8d150f3c758496a191e0b86c47f601f83744d0101674acc5d33b68451d.slice: dial unix /run/user/1024: connect: connection refused
Apr 10 13:57:38 RHELVM systemd[1]: app_rev_proxy_pod.service: Failed with result 'protocol'.

Output:
here

OS: RHEL 8.7

podman info:

host:
  arch: amd64
  buildahVersion: 1.27.3
  cgroupControllers:
  - cpuset
  - cpu
  - io
  - memory
  - pids
  cgroupManager: systemd
  cgroupVersion: v2
  conmon:
    package: conmon-2.1.4-1.module+el8.7.0+17498+a7f63b89.x86_64
    path: /usr/bin/conmon
    version: 'conmon version 2.1.4, commit: 419a7c7817d7da098aa7648abddea5014f593ac6'
  cpuUtilization:
    idlePercent: 96.79
    systemPercent: 0.96
    userPercent: 2.26
  cpus: 4
  distribution:
    distribution: '"rhel"'
    version: "8.7"
  eventLogger: file
  hostname: RHELVM
  idMappings:
    gidmap:
    - container_id: 0
      host_id: 1024
      size: 1
    - container_id: 1
      host_id: 1476256
      size: 65536
    uidmap:
    - container_id: 0
      host_id: 1024
      size: 1
    - container_id: 1
      host_id: 1476256
      size: 65536
  kernel: 4.18.0-425.10.1.el8_7.x86_64
  linkmode: dynamic
  logDriver: k8s-file
  memFree: 232341504
  memTotal: 8140361728
  networkBackend: cni
  ociRuntime:
    name: crun
    package: crun-1.5-1.module+el8.7.0+17824+66a0202b.x86_64
    path: /usr/bin/crun
    version: |-
      crun version 1.5
      commit: 54ebb8ca8bf7e6ddae2eb919f5b82d1d96863dea
      spec: 1.0.0
      +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +YAJL
  os: linux
  remoteSocket:
    exists: true
    path: /run/user/1024/podman/podman.sock
  security:
    apparmorEnabled: false
    capabilities: CAP_NET_RAW,CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
    rootless: true
    seccompEnabled: true
    seccompProfilePath: /usr/share/containers/seccomp.json
    selinuxEnabled: true
  serviceIsRemote: false
  slirp4netns:
    executable: /bin/slirp4netns
    package: slirp4netns-1.2.0-2.module+el8.7.0+17498+a7f63b89.x86_64
    version: |-
      slirp4netns version 1.2.0
      commit: 656041d45cfca7a4176f6b7eed9e4fe6c11e8383
      libslirp: 4.4.0
      SLIRP_CONFIG_VERSION_MAX: 3
      libseccomp: 2.5.2
  swapFree: 8362336256
  swapTotal: 8589930496
  uptime: 42h 55m 54.00s (Approximately 1.75 days)
plugins:
  authorization: null
  log:
  - k8s-file
  - none
  - passthrough
  - journald
  network:
  - bridge
  - macvlan
  - ipvlan
  volume:
  - local
registries:
  search:
  - registry.access.redhat.com
  - registry.redhat.io
  - docker.io
store:
  configFile: /home/romih_podman/.config/containers/storage.conf
  containerStore:
    number: 3
    paused: 0
    running: 3
    stopped: 0
  graphDriverName: overlay
  graphOptions:
    overlay.mountopt: nodev,metacopy=on
  graphRoot: /app/containers/romih_podman/storage
  graphRootAllocated: 41956900864
  graphRootUsed: 19696840704
  graphStatus:
    Backing Filesystem: extfs
    Native Overlay Diff: "false"
    Supports d_type: "true"
    Using metacopy: "false"
  imageCopyTmpDir: /var/tmp
  imageStore:
    number: 12
  runRoot: /run/user/1024/containers
  volumePath: /app/containers/romih_podman/storage/volumes
version:
  APIVersion: 4.2.0
  Built: 1670845316
  BuiltTime: Mon Dec 12 19:41:56 2022
  GitCommit: ""
  GoVersion: go1.18.4
  Os: linux
  OsArch: linux/amd64
  Version: 4.2.0