#!/bin/bash
mountpoint -q "/sys/fs/cgroup/systemd" \
    || (mkdir -p /sys/fs/cgroup/systemd && mount -t cgroup cgroup -o none,name=systemd /sys/fs/cgroup/systemd)

for d in /sys/fs/cgroup/*; do
    f=$(basename $d)
    if [ "$f" = "unified" ]; then
        continue
    elif [ "$f" = "cpuset" ]; then
        echo 1 > $d/cgroup.clone_children;
    elif [ "$f" = "memory" ]; then
        echo 1 > $d/memory.use_hierarchy;
    fi
    mkdir -p $d/doskanoness
    chown -R doskanoness:doskanoness $d/doskanoness
done

doskanoness@lxc-gentoo ~ $ cat /proc/self/cgroup 
15:name=systemd:/
14:misc:/doskanoness
13:pids:/doskanoness
12:hugetlb:/doskanoness
11:net_prio:/doskanoness
10:perf_event:/doskanoness
9:net_cls:/doskanoness
8:freezer:/doskanoness
7:devices:/doskanoness
6:memory:/doskanoness
5:blkio:/doskanoness
4:cpuacct:/doskanoness
3:cpu:/doskanoness
2:cpuset:/doskanoness
1:name=openrc:/sshd
0::/ssh
doskanoness@lxc-gentoo ~ $ cat /etc/cgroup/cgrules.conf 
# /etc/cgrules.conf
#The format of this file is described in cgrules.conf(5)
#manual page.
#
# Example:
#<user>         <controllers>   <destination>
#@student       cpu,memory      usergroup/student/
#peter          cpu             test1/
#%              memory          test2/
doskanoness     misc,pids,hugetlb,net_prio,perf_event,net_cls,freezer,devices,memory,blkio,cpuacct,cpu,cpuset           doskanoness/
# End of file
doskanoness@lxc-gentoo ~ $ cat /etc/cgroup/cgred.conf 
# /etc/sysconfig/cgred.conf - CGroup Rules Engine Daemon configuration file
# 
# The four options listed below (CONFIG_FILE, LOG_FILE, NODAEMON, LOG) are
# the only valid ones.  Defining anything else in this file will cause the
# CGroup Rules Engine program to fail.  So, don't do it.

# The pathname to the configuration file for CGroup Rules Engine
CONFIG_FILE="/etc/cgroup/cgrules.conf"

# Uncomment the following line to log to specified file instead of syslog
#LOG_FILE="/var/log/cgrulesengd.log"

# Uncomment the second line to run CGroup Rules Engine in non-daemon mode
NODAEMON=""
#NODAEMON="--nodaemon"

# Set owner of cgred socket. 'cgexec' tool should have write access there
# (either using suid and/or sgid permissions or Linux capabilities).
SOCKET_USER=""
SOCKET_GROUP="cgred"

# Uncomment the second line to disable logging for CGroup Rules Engine
# Uncomment the third line to enable more verbose logging.
LOG=""
#LOG="--nolog"
#LOG="-v

doskanoness@lxc-gentoo ~ $ cat /proc/self/cgroup 
15:name=systemd:/
14:misc:/
13:pids:/
12:hugetlb:/
11:net_prio:/
10:perf_event:/
9:net_cls:/
8:freezer:/
7:devices:/
6:memory:/
5:blkio:/
4:cpuacct:/
3:cpu:/
2:cpuset:/
1:name=openrc:/sshd
0::/sshd
doskanoness@lxc-gentoo ~ $ cat /etc/cgroup/cgrules.conf 
# /etc/cgrules.conf
#The format of this file is described in cgrules.conf(5)
#manual page.
#
# Example:
#<user>         <controllers>   <destination>
#@student       cpu,memory      usergroup/student/
#peter          cpu             test1/
#%              memory          test2/
doskanoness     name=systemd,name=openrc,misc,pids,hugetlb,net_prio,perf_event,net_cls,freezer,devices,memory,blkio,cpuacct,cpu,cpuset          doskanoness/
# End of file
doskanoness@lxc-gentoo ~ $ cat /etc/cgroup/cgred.conf 
# /etc/sysconfig/cgred.conf - CGroup Rules Engine Daemon configuration file
# 
# The four options listed below (CONFIG_FILE, LOG_FILE, NODAEMON, LOG) are
# the only valid ones.  Defining anything else in this file will cause the
# CGroup Rules Engine program to fail.  So, don't do it.

# The pathname to the configuration file for CGroup Rules Engine
CONFIG_FILE="/etc/cgroup/cgrules.conf"

# Uncomment the following line to log to specified file instead of syslog
#LOG_FILE="/var/log/cgrulesengd.log"

# Uncomment the second line to run CGroup Rules Engine in non-daemon mode
NODAEMON=""
#NODAEMON="--nodaemon"

# Set owner of cgred socket. 'cgexec' tool should have write access there
# (either using suid and/or sgid permissions or Linux capabilities).
SOCKET_USER=""
SOCKET_GROUP="cgred"

# Uncomment the second line to disable logging for CGroup Rules Engine
# Uncomment the third line to enable more verbose logging.
LOG=""
#LOG="--nolog"
#LOG="-v"
doskanoness@lxc-gentoo ~ $ echo $$
2585
doskanoness@lxc-gentoo ~ $ sudo cgclassify -g name=systemd:doskanoness 2585
Error changing group of pid 2585: Success