[feature request] cgroup delegation insufficient for lxd/incus?

[aanderse]

i tried to use delegate = true with incus and noticed that it doesn't quite seem to work... incus fails to apply things like cpuset, for example, warning/errors like Unable to set cpuset ... value="0,1,2,3,4,5"

finit is doing what it set out to do, but i think incus has certain expectations - i think the problem is that finit needs to create a private cgroup namespace because incus is trying to reparent to the cgroup of pid 1 🤔

i'm not an expert at incus internals, and i didn't dig through the finit code on delegation... so there is a bit of hand waving on my side here... does this make sense though?

[troglobit]

I think I found the root cause for this, and the fix is a bit unconventional: lifting out PID 1 to the root cgroup. If you have the time try #498 out I'd be very grateful! 🙏