[v0.22.1 regression] rootless mode fails on Fedora and Arch Linux: runc create failed: unable to start container process: can't get final child's PID from pipe: EOF: unknown

[AkihiroSuda]

Description

Rootless mode seems broken in v0.22.1.

Works on Ubuntu 22.04, but fails on Fedora 36 and Arch Linux.
lima-vm/lima#1006

Steps to reproduce the issue

$ nerdctl run hello-world
FATA[0000] failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: can't get final child's PID from pipe: EOF: unknown 

v0.22.0 works as expected.
Rootful mode works too.

Describe the results you received and expected

Received: failing as shown above
Expected: should work

What version of nerdctl are you using?

$ nerdctl version
Client:
 Version:       v0.22.1
 OS/Arch:       linux/amd64
 Git commit:    3c83196ab006154fd1c3bc14bbcc0d3660fb7d5f
 buildctl:
  Version:      v0.10.3
  GitCommit:    c8d25d9a103b70dc300a4fd55e7e576472284e31

Server:
 containerd:
  Version:      v1.6.6
  GitCommit:    10c12954828e7c7c9b6e0ea9b0c02b01407d3ae1
 runc:
  Version:      1.1.3
  GitCommit:    v1.1.3-0-g6724737f

Are you using a variant of nerdctl? (e.g., Rancher Desktop)

Lima

Host information

$ nerdctl info
Client:
 Namespace:     default
 Debug Mode:    false

Server:
 Server Version: v1.6.6
 Storage Driver: overlayfs
 Logging Driver: json-file
 Cgroup Driver: systemd
 Cgroup Version: 2
 Plugins:
  Log: fluentd journald json-file
  Storage: btrfs native overlayfs fuse-overlayfs stargz
 Security Options:
  seccomp
   Profile: default
  cgroupns
  rootless
 Kernel Version: 5.17.5-300.fc36.x86_64
 Operating System: Fedora Linux 36 (Cloud Edition)
 OSType: linux
 Architecture: x86_64
 CPUs: 4
 Total Memory: 3.821GiB
 Name: lima-fedora
 ID: bd3dbbe0-0fdf-4b6d-b5eb-bd5c2019f639

WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled

[AkihiroSuda]

Seems a regression in:

• Add oom-score-adj option while running #1255

Workaround: nerdctl run --oom-score-adj 1000