Thank you for looking into it. Sorry for the long delay, but my answers got blocked by xmission several times and I think I just gave up on containers at some point. This is still not solved though. To answer Eric's question:
> Why you don't see the new sysfs is something I need more information to > understand. > Since everything else is mounted on top of sysfs. The code probably needs an > update to bind mount (cgroups, debugfs, configs, pstore, selinuxfs, and > securitfs) from the old sysfs to the new sysfs. That everything now gets > mount points on sysfs is new from the time the code was written and the code > just needs an update for that. There is a mount of type sysfs. It is now called after the network namespace rather than being called sysfs, that's why I missed it last time. It looks like: testns on /sys type sysfs (rw,relatime) So that's probably not a problem. So it seems the code of `ip netns exec` still hasn't been updated not to lose cgroups and all other system mounts... I just checked with 5.2.14-arch2-1-ARCH Thanks in advance, Naja Melan