Wrap the start command with cgroup manager too

When running with podman, to match the run cmd

pkg/drivers/kic/kic.go

@@ -300,8 +300,7 @@ func (d *Driver) Restart() error {
 
 // Start an already created kic container
 func (d *Driver) Start() error {
-	cr := command.NewExecRunner() // using exec runner for interacting with docker/podman daemon
-	if _, err := cr.RunCmd(oci.PrefixCmd(exec.Command(d.NodeConfig.OCIBinary, "start", d.MachineName))); err != nil {
+	if err := oci.StartContainer(d.NodeConfig.OCIBinary, d.MachineName); err != nil {
 		return errors.Wrap(err, "start")
 	}
 	checkRunning := func() error {

pkg/drivers/kic/oci/oci.go

@@ -257,6 +257,25 @@ func createContainer(ociBin string, image string, opts ...createOpt) error {
 	return nil
 }
 
+// StartContainer starts a container with "docker/podman start"
+func StartContainer(ociBin string, container string) error {
+	// construct the actual docker start argv
+	args := []string{"start"}
+
+	// to run nested container from privileged container in podman https://bugzilla.redhat.com/show_bug.cgi?id=1687713
+	if ociBin == Podman {
+		args = append(args, "--cgroup-manager", "cgroupfs")
+	}
+
+	args = append(args, container)
+
+	if err := PrefixCmd(exec.Command(ociBin, args...)).Run(); err != nil {
+		return err
+	}
+
+	return nil
+}
+
 // ContainerID returns id of a container name
 func ContainerID(ociBin string, nameOrID string) (string, error) {
 	rr, err := runCmd(exec.Command(ociBin, "inspect", "-f", "{{.Id}}", nameOrID))