From 82fd0523dcefb3c39e50bbd8d77928758c31f546 Mon Sep 17 00:00:00 2001
From: Fabricio Voznika <fvoznika@google.com>
Date: Tue, 23 Nov 2021 15:23:25 -0800
Subject: [PATCH] Skip readonly controllers

Some system have controller directories created, but they are
read-only. Handle that case and skip optional controllers.

Closes #5887

PiperOrigin-RevId: 411907208
---
 runsc/cgroup/cgroup.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/runsc/cgroup/cgroup.go b/runsc/cgroup/cgroup.go
index df1fc03cb..3adf6bd83 100644
--- a/runsc/cgroup/cgroup.go
+++ b/runsc/cgroup/cgroup.go
@@ -20,6 +20,7 @@ import (
 	"bufio"
 	"context"
 	"encoding/json"
+	"errors"
 	"fmt"
 	"io"
 	"io/ioutil"
@@ -445,7 +446,7 @@ func createController(c Cgroup, name string) (bool, error) {
 	path := c.MakePath(name)
 	log.Debugf("Creating cgroup %q: %q", name, path)
 	if err := os.MkdirAll(path, 0755); err != nil {
-		return false, err
+		return errors.Is(err, unix.EROFS), err
 	}
 	return false, nil
 }