Oct 16, 2025 · Oct 13, 2025 · Oct 14, 2025 · Oct 15, 2025
diff --git a/libcontainer/process_linux.go b/libcontainer/process_linux.go
 return fd, nil
 }

 func (p *setnsProcess) start() (retErr error) {
 defer p.comm.closeParent()
 // startWithCgroupFD starts a process via clone3 with CLONE_INTO_CGROUP,
 // with a fallback if it fails (e.g. not available).
 func (p *setnsProcess) startWithCgroupFD() error {
 // Close the child side of the pipes.
 defer p.comm.closeChild()

 fd, err := p.prepareCgroupFD()
 if err != nil {
 p.comm.closeChild()
 return err
 }

 // Get the "before" value of oom kill count.
 oom, _ := p.manager.OOMKillCount()

 err = p.startWithCPUAffinity()
 if fd != nil {
 fd.Close()
 deferfd.Close()
 }

 err = p.startWithCPUAffinity()
 if err != nil && p.cmd.SysProcAttr.UseCgroupFD {
 logrus.Debugf("exec with CLONE_INTO_CGROUP failed: %v; retrying without", err)
 // SysProcAttr.CgroupFD is never used when UseCgroupFD is unset.
 p.cmd.SysProcAttr.UseCgroupFD = false
 err = p.startWithCPUAffinity()
 }

 // Close the child-side of the pipes (controlled by child).
 p.comm.closeChild()
 if err != nil {
 return err
 }

 func (p *setnsProcess) start() (retErr error) {
 defer p.comm.closeParent()

 // Get the "before" value of oom kill count.
 oom, _ := p.manager.OOMKillCount()

 if err := p.startWithCgroupFD(); err != nil {
 return fmt.Errorf("error starting setns process: %w", err)
 }
Original file line number	Diff line number	Diff line change
Expand Up		@@ -353,32 +353,38 @@ func (p setnsProcess) prepareCgroupFD() (os.File, error) {
		return fd, nil
		}

		func (p *setnsProcess) start() (retErr error) {
		defer p.comm.closeParent()
		// startWithCgroupFD starts a process via clone3 with CLONE_INTO_CGROUP,
		// with a fallback if it fails (e.g. not available).
		func (p *setnsProcess) startWithCgroupFD() error {
		// Close the child side of the pipes.
		defer p.comm.closeChild()

		fd, err := p.prepareCgroupFD()
		if err != nil {
		p.comm.closeChild()
		return err
		}

		// Get the "before" value of oom kill count.
		oom, _ := p.manager.OOMKillCount()

		err = p.startWithCPUAffinity()
		if fd != nil {
		fd.Close()
		deferfd.Close()
		}

		err = p.startWithCPUAffinity()
		if err != nil && p.cmd.SysProcAttr.UseCgroupFD {
		logrus.Debugf("exec with CLONE_INTO_CGROUP failed: %v; retrying without", err)
		// SysProcAttr.CgroupFD is never used when UseCgroupFD is unset.
		p.cmd.SysProcAttr.UseCgroupFD = false
		err = p.startWithCPUAffinity()
		}

		// Close the child-side of the pipes (controlled by child).
		p.comm.closeChild()
		if err != nil {
		return err
		}

		func (p *setnsProcess) start() (retErr error) {
		defer p.comm.closeParent()

		// Get the "before" value of oom kill count.
		oom, _ := p.manager.OOMKillCount()

		if err := p.startWithCgroupFD(); err != nil {
		return fmt.Errorf("error starting setns process: %w", err)
		}

Expand Down