Container doesn't start because 'group for sudo not found'

**Describe the bug**
I have two containers with fedora 31 images. None of them can be started. Here is one of them

`7ae8d51ca24f pymol 2 years ago exited registry.fedoraproject.org/f31/fedora-toolbox:31`

`toolbox enter pymol -v`
```
DEBU Running as real user ID 1000
DEBU Resolved absolute path to the executable as /usr/bin/toolbox
DEBU Running on a cgroups v2 host
DEBU Checking if /etc/subgid and /etc/subuid have entries for user ocelot
DEBU Validating sub-ID file /etc/subuid
DEBU Validating sub-ID file /etc/subgid
DEBU TOOLBOX_PATH is /usr/bin/toolbox
DEBU Migrating to newer Podman
DEBU Toolbox config directory is /home/ocelot/.config/toolbox
DEBU Current Podman version is 3.4.4
DEBU Creating runtime directory /run/user/1000/toolbox
DEBU Old Podman version is 3.4.4
DEBU Migration not needed: Podman version 3.4.4 is unchanged
DEBU Setting up configuration
DEBU Setting up configuration: file /home/ocelot/.config/containers/toolbox.conf not found
DEBU Resolving image name
DEBU Distribution (CLI): ''
DEBU Image (CLI): ''
DEBU Release (CLI): ''
DEBU Resolved image name
DEBU Image: 'fedora-toolbox:34'
DEBU Release: '34'
DEBU Resolving container name
DEBU Container: ''
DEBU Image: 'fedora-toolbox:34'
DEBU Release: '34'
DEBU Resolved container name
DEBU Container: 'fedora-toolbox-34'
DEBU Resolving image name
DEBU Distribution (CLI): ''
DEBU Image (CLI): ''
DEBU Release (CLI): ''
DEBU Resolved image name
DEBU Image: 'fedora-toolbox:34'
DEBU Release: '34'
DEBU Resolving container name
DEBU Container: 'pymol'
DEBU Image: 'fedora-toolbox:34'
DEBU Release: '34'
DEBU Resolved container name
DEBU Container: 'pymol'
DEBU Checking if container pymol exists
DEBU Inspecting mounts of container pymol
DEBU Requires org.freedesktop.Flatpak.SessionHelper
DEBU Calling org.freedesktop.Flatpak.SessionHelper.RequestSession
DEBU Starting container pymol
DEBU Inspecting entry point of container pymol
DEBU Entry point PID is a float64
DEBU Entry point of container pymol is toolbox (PID=0)
Error: invalid entry point PID of container pymol
```

Podman log shows that the container can't be started because `Error: failed to get group for sudo: group for sudo not found`
`podman start --attach pymol --log-level debug`
```
INFO[0000] podman filtering at log level debug
DEBU[0000] Called start.PersistentPreRunE(podman start --attach pymol --log-level debug)
DEBU[0000] overlay: storage already configured with a mount-program
DEBU[0000] Merged system config "/usr/share/containers/containers.conf"
DEBU[0000] Merged system config "/home/ocelot/.config/containers/containers.conf"
DEBU[0000] overlay: storage already configured with a mount-program
DEBU[0000] Using conmon: "/usr/bin/conmon"
DEBU[0000] Initializing boltdb state at /home/ocelot/.local/share/containers/storage/libpod/bolt_state.db
DEBU[0000] Using graph driver overlay
DEBU[0000] Using graph root /home/ocelot/.local/share/containers/storage
DEBU[0000] Using run root /run/user/1000
DEBU[0000] Using static dir /home/ocelot/.local/share/containers/storage/libpod
DEBU[0000] Using tmp dir /run/user/1000/libpod/tmp
DEBU[0000] Using volume path /home/ocelot/.local/share/containers/storage/volumes
DEBU[0000] overlay: storage already configured with a mount-program
DEBU[0000] Set libpod namespace to ""
DEBU[0000] [graphdriver] trying provided driver "overlay"
DEBU[0000] overlay: mount_program=/usr/bin/fuse-overlayfs
DEBU[0000] overlay: mount_program=/usr/bin/fuse-overlayfs
DEBU[0000] backingFs=extfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=false
DEBU[0000] Initializing event backend journald
DEBU[0000] configured OCI runtime kata initialization failed: no valid executable found for OCI runtime kata: invalid argument
DEBU[0000] configured OCI runtime runsc initialization failed: no valid executable found for OCI runtime runsc: invalid argument
DEBU[0000] Using OCI runtime "/usr/bin/crun"
INFO[0000] Found CNI network podman (type=bridge) at /home/ocelot/.config/cni/net.d/87-podman.conflist
DEBU[0000] Default CNI network name podman is unchangeable
INFO[0000] Setting parallel job count to 97
DEBU[0000] [graphdriver] trying provided driver "overlay"
DEBU[0000] overlay: mount_program=/usr/bin/fuse-overlayfs
DEBU[0000] overlay: mount_program=/usr/bin/fuse-overlayfs
DEBU[0000] backingFs=extfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=false
DEBU[0000] overlay: mount_data=,lowerdir=/home/ocelot/.local/share/containers/storage/overlay/l/4Q3SR3VJ5DIERAZJ4ETCE4G6LJ:/home/ocelot/.local/share/containers/storage/overlay/l/JA36CM7NR3LTZ6QYUZE6DSXVQS,upperdir=/home/ocelot/.local/share/containers/storage/overlay/a2003efb1d225fa519c5d2f74737a05466a714e1070f198f8b7b8e49fe906ba2/diff,workdir=/home/ocelot/.local/share/containers/storage/overlay/a2003efb1d225fa519c5d2f74737a05466a714e1070f198f8b7b8e49fe906ba2/work,context="system_u:object_r:container_file_t:s0:c184,c662"
DEBU[0000] mounted container "7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9" at "/home/ocelot/.local/share/containers/storage/overlay/a2003efb1d225fa519c5d2f74737a05466a714e1070f198f8b7b8e49fe906ba2/merged"
DEBU[0000] Created root filesystem for container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 at /home/ocelot/.local/share/containers/storage/overlay/a2003efb1d225fa519c5d2f74737a05466a714e1070f198f8b7b8e49fe906ba2/merged
DEBU[0000] Not modifying container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 /etc/passwd
DEBU[0000] Not modifying container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 /etc/group
DEBU[0000] /etc/system-fips does not exist on host, not mounting FIPS mode subscription
DEBU[0000] Setting CGroup path for container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 to user.slice/libpod-7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9
DEBU[0000] set root propagation to "rslave"
DEBU[0000] reading hooks from /usr/share/containers/oci/hooks.d
DEBU[0000] Workdir "/" resolved to host path "/home/ocelot/.local/share/containers/storage/overlay/a2003efb1d225fa519c5d2f74737a05466a714e1070f198f8b7b8e49fe906ba2/merged"
DEBU[0000] Created OCI spec for container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 at /home/ocelot/.local/share/containers/storage/overlay-containers/7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9/userdata/config.json
DEBU[0000] /usr/bin/conmon messages will be logged to syslog
DEBU[0000] running conmon: /usr/bin/conmon args="[--api-version 1 -c 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 -u 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 -r /usr/bin/crun -b /home/ocelot/.local/share/containers/storage/overlay-containers/7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9/userdata -p /run/user/1000/overlay-containers/7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9/userdata/pidfile -n pymol --exit-dir /run/user/1000/libpod/tmp/exits --full-attach -l k8s-file:/home/ocelot/.local/share/containers/storage/overlay-containers/7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9/userdata/ctr.log --log-level debug --syslog --conmon-pidfile /run/user/1000/overlay-containers/7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9/userdata/conmon.pid --exit-command /usr/bin/podman --exit-command-arg --root --exit-command-arg /home/ocelot/.local/share/containers/storage --exit-command-arg --runroot --exit-command-arg /run/user/1000 --exit-command-arg --log-level --exit-command-arg error --exit-command-arg --cgroup-manager --exit-command-arg systemd --exit-command-arg --tmpdir --exit-command-arg /run/user/1000/libpod/tmp --exit-command-arg --runtime --exit-command-arg crun --exit-command-arg --storage-driver --exit-command-arg overlay --exit-command-arg --storage-opt --exit-command-arg overlay.mount_program=/usr/bin/fuse-overlayfs --exit-command-arg --events-backend --exit-command-arg journald --exit-command-arg container --exit-command-arg cleanup --exit-command-arg 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9]"
INFO[0000] Failed to add conmon to cgroupfs sandbox cgroup: error creating cgroup path user.slice/conmon: open /sys/fs/cgroup/cgroup.subtree_control: permission denied
[conmon:d]: failed to write to /proc/self/oom_score_adj: Permission denied

DEBU[0000] Received: -1
DEBU[0000] Cleaning up container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9
DEBU[0000] Network is already cleaned up, skipping...
DEBU[0000] unmounted container "7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9"
Error: unable to start container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9: create `/sys/fs/cgroup/user.slice/libpod-7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9`: Permission denied: OCI permission denied
[ocelot@yellowtrain ~]$ rm .config/containers/containers.conf
[ocelot@yellowtrain ~]$ podman start --attach pymol --log-level debug
INFO[0000] podman filtering at log level debug
DEBU[0000] Called start.PersistentPreRunE(podman start --attach pymol --log-level debug)
DEBU[0000] overlay: storage already configured with a mount-program
DEBU[0000] Merged system config "/usr/share/containers/containers.conf"
DEBU[0000] overlay: storage already configured with a mount-program
DEBU[0000] Using conmon: "/usr/bin/conmon"
DEBU[0000] Initializing boltdb state at /home/ocelot/.local/share/containers/storage/libpod/bolt_state.db
DEBU[0000] Using graph driver overlay
DEBU[0000] Using graph root /home/ocelot/.local/share/containers/storage
DEBU[0000] Using run root /run/user/1000
DEBU[0000] Using static dir /home/ocelot/.local/share/containers/storage/libpod
DEBU[0000] Using tmp dir /run/user/1000/libpod/tmp
DEBU[0000] Using volume path /home/ocelot/.local/share/containers/storage/volumes
DEBU[0000] overlay: storage already configured with a mount-program
DEBU[0000] Set libpod namespace to ""
DEBU[0000] [graphdriver] trying provided driver "overlay"
DEBU[0000] overlay: mount_program=/usr/bin/fuse-overlayfs
DEBU[0000] overlay: mount_program=/usr/bin/fuse-overlayfs
DEBU[0000] backingFs=extfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=false
DEBU[0000] Initializing event backend journald
DEBU[0000] configured OCI runtime kata initialization failed: no valid executable found for OCI runtime kata: invalid argument
DEBU[0000] configured OCI runtime runsc initialization failed: no valid executable found for OCI runtime runsc: invalid argument
DEBU[0000] Using OCI runtime "/usr/bin/crun"
INFO[0000] Found CNI network podman (type=bridge) at /home/ocelot/.config/cni/net.d/87-podman.conflist
DEBU[0000] Default CNI network name podman is unchangeable
INFO[0000] Setting parallel job count to 97
DEBU[0000] [graphdriver] trying provided driver "overlay"
DEBU[0000] overlay: mount_program=/usr/bin/fuse-overlayfs
DEBU[0000] overlay: mount_program=/usr/bin/fuse-overlayfs
DEBU[0000] backingFs=extfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=false
DEBU[0000] overlay: mount_data=,lowerdir=/home/ocelot/.local/share/containers/storage/overlay/l/4Q3SR3VJ5DIERAZJ4ETCE4G6LJ:/home/ocelot/.local/share/containers/storage/overlay/l/JA36CM7NR3LTZ6QYUZE6DSXVQS,upperdir=/home/ocelot/.local/share/containers/storage/overlay/a2003efb1d225fa519c5d2f74737a05466a714e1070f198f8b7b8e49fe906ba2/diff,workdir=/home/ocelot/.local/share/containers/storage/overlay/a2003efb1d225fa519c5d2f74737a05466a714e1070f198f8b7b8e49fe906ba2/work,context="system_u:object_r:container_file_t:s0:c184,c662"
DEBU[0000] mounted container "7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9" at "/home/ocelot/.local/share/containers/storage/overlay/a2003efb1d225fa519c5d2f74737a05466a714e1070f198f8b7b8e49fe906ba2/merged"
DEBU[0000] Created root filesystem for container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 at /home/ocelot/.local/share/containers/storage/overlay/a2003efb1d225fa519c5d2f74737a05466a714e1070f198f8b7b8e49fe906ba2/merged
DEBU[0000] Not modifying container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 /etc/passwd
DEBU[0000] Not modifying container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 /etc/group
DEBU[0000] /etc/system-fips does not exist on host, not mounting FIPS mode subscription
DEBU[0000] Setting CGroups for container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 to user.slice:libpod:7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9
DEBU[0000] set root propagation to "rslave"
DEBU[0000] reading hooks from /usr/share/containers/oci/hooks.d
DEBU[0000] Workdir "/" resolved to host path "/home/ocelot/.local/share/containers/storage/overlay/a2003efb1d225fa519c5d2f74737a05466a714e1070f198f8b7b8e49fe906ba2/merged"
DEBU[0000] Created OCI spec for container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 at /home/ocelot/.local/share/containers/storage/overlay-containers/7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9/userdata/config.json
DEBU[0000] /usr/bin/conmon messages will be logged to syslog
DEBU[0000] running conmon: /usr/bin/conmon args="[--api-version 1 -c 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 -u 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 -r /usr/bin/crun -b /home/ocelot/.local/share/containers/storage/overlay-containers/7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9/userdata -p /run/user/1000/overlay-containers/7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9/userdata/pidfile -n pymol --exit-dir /run/user/1000/libpod/tmp/exits --full-attach -s -l k8s-file:/home/ocelot/.local/share/containers/storage/overlay-containers/7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9/userdata/ctr.log --log-level debug --syslog --conmon-pidfile /run/user/1000/overlay-containers/7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9/userdata/conmon.pid --exit-command /usr/bin/podman --exit-command-arg --root --exit-command-arg /home/ocelot/.local/share/containers/storage --exit-command-arg --runroot --exit-command-arg /run/user/1000 --exit-command-arg --log-level --exit-command-arg error --exit-command-arg --cgroup-manager --exit-command-arg systemd --exit-command-arg --tmpdir --exit-command-arg /run/user/1000/libpod/tmp --exit-command-arg --runtime --exit-command-arg crun --exit-command-arg --storage-driver --exit-command-arg overlay --exit-command-arg --storage-opt --exit-command-arg overlay.mount_program=/usr/bin/fuse-overlayfs --exit-command-arg --events-backend --exit-command-arg journald --exit-command-arg container --exit-command-arg cleanup --exit-command-arg 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9]"
INFO[0000] Running conmon under slice user.slice and unitName libpod-conmon-7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9.scope
[conmon:d]: failed to write to /proc/self/oom_score_adj: Permission denied

DEBU[0000] Received: 739793
INFO[0000] Got Conmon PID as 739785
DEBU[0000] Created container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 in OCI runtime
DEBU[0000] Attaching to container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9
DEBU[0000] Starting container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9 with command [toolbox --verbose init-container --home /home/ocelot --monitor-host --shell /bin/bash --uid 1000 --user ocelot]
DEBU[0000] Started container 7ae8d51ca24fbd80811718f546f949d35724f37a68a3f27a6b4d32b43120bbf9
DEBU[0000] Enabling signal proxying
level=debug msg="Running as real user ID 0"
level=debug msg="Resolved absolute path to the executable as /usr/bin/toolbox"
level=debug msg="TOOLBOX_PATH is /usr/bin/toolbox"
level=debug msg="Migrating to newer Podman"
level=debug msg="Setting up configuration"
level=debug msg="Setting up configuration: file /etc/containers/toolbox.conf not found"
level=debug msg="Setting up configuration: file /root/.config/containers/toolbox.conf not found"
level=debug msg="Resolving image name"
level=debug msg="Distribution (CLI): ''"
level=debug msg="Image (CLI): ''"
level=debug msg="Release (CLI): ''"
level=debug msg="Resolved image name"
level=debug msg="Image: 'fedora-toolbox:31'"
level=debug msg="Release: '31'"
level=debug msg="Resolving container name"
level=debug msg="Container: ''"
level=debug msg="Image: 'fedora-toolbox:31'"
level=debug msg="Release: '31'"
level=debug msg="Resolved container name"
level=debug msg="Container: 'fedora-toolbox-31'"
level=debug msg="XDG_RUNTIME_DIR is unset"
level=debug msg="XDG_RUNTIME_DIR set to /run/user/1000"
level=debug msg="Creating /run/.toolboxenv"
level=debug msg="Monitoring host"
level=debug msg="Path /run/host/etc exists"
level=debug msg="Resolved /etc/localtime to /run/host/usr/share/zoneinfo/America/Chicago"
level=debug msg="Creating regular file /etc/machine-id"
level=debug msg="Binding /etc/machine-id to /run/host/etc/machine-id"
level=debug msg="Creating directory /run/libvirt"
level=debug msg="Binding /run/libvirt to /run/host/run/libvirt"
level=debug msg="Creating directory /run/systemd/journal"
level=debug msg="Binding /run/systemd/journal to /run/host/run/systemd/journal"
level=debug msg="Creating directory /run/systemd/resolve"
level=debug msg="Binding /run/systemd/resolve to /run/host/run/systemd/resolve"
level=debug msg="Creating directory /run/udev/data"
level=debug msg="Binding /run/udev/data to /run/host/run/udev/data"
level=debug msg="Creating directory /tmp"
level=debug msg="Binding /tmp to /run/host/tmp"
level=debug msg="Creating directory /var/lib/flatpak"
level=debug msg="Binding /var/lib/flatpak to /run/host/var/lib/flatpak"
level=debug msg="Creating directory /var/lib/libvirt"
level=debug msg="Binding /var/lib/libvirt to /run/host/var/lib/libvirt"
level=debug msg="Creating directory /var/lib/systemd/coredump"
level=debug msg="Binding /var/lib/systemd/coredump to /run/host/var/lib/systemd/coredump"
level=debug msg="Creating directory /var/log/journal"
level=debug msg="Binding /var/log/journal to /run/host/var/log/journal"
level=debug msg="Creating directory /sys/fs/selinux"
level=debug msg="Binding /sys/fs/selinux to /usr/share/empty"
level=debug msg="Looking up group for sudo"
Error: failed to get group for sudo: group for sudo not found
DEBU[0000] Called start.PersistentPostRunE(podman start --attach pymol --log-level debug)
```

**Expected behaviour**
Clearly the container ought to work...

**Actual behaviour**
It doesn't work and gives a dubious error that's actually not helpful unless you look at the podman log

**Screenshots**
If applicable, add screenshots to help explain your problem.

**Output of `toolbox --version` (v0.0.90+)**
`toolbox version 0.0.99.3`

**Toolbox package info (`rpm -q toolbox`)**
`toolbox-0.0.99.3-2.fc34.x86_64`

**Output of `podman version`**
```
Version: 3.4.4
API Version: 3.4.4
Go Version: go1.16.8
Built: Wed Dec 8 15:45:01 2021
OS/Arch: linux/amd64
```

**Podman package info (`rpm -q podman`)**
`podman-1.9.2-1.fc32.x86_64`

**Info about your OS**
```
.',;::::;,'. ocelot@yellowtrain
.';:cccccccccccc:;,. ------------------
.;cccccccccccccccccccccc;. OS: Fedora 34 (Workstation Edition) x86_64
.:cccccccccccccccccccccccccc:. Kernel: 5.16.20-100.fc34.x86_64
.;ccccccccccccc;.:dddl:.;ccccccc;. Uptime: 19 hours, 39 mins
.:ccccccccccccc;OWMKOOXMWd;ccccccc:. Packages: 3168 (rpm), 29 (flatpak)
.:ccccccccccccc;KMMc;cc;xMMc:ccccccc:. Shell: bash 5.1.0
,cccccccccccccc;MMM.;cc;;WW::cccccccc, Resolution: 2560x1440
:cccccccccccccc;MMM.;cccccccccccccccc: DE: GNOME 40.9
:ccccccc;oxOOOo;MMM0OOk.;cccccccccccc: WM: Mutter
cccccc:0MMKxdd:;MMMkddc.;cccccccccccc; WM Theme: Adwaita
ccccc:XM0';cccc;MMM.;cccccccccccccccc' Theme: Adwaita [GTK2/3]
ccccc;MMo;ccccc;MMW.;ccccccccccccccc; Icons: Adwaita [GTK2/3]
ccccc;0MNc.ccc.xMMd:ccccccccccccccc; Terminal: gnome-terminal
cccccc;dNMWXXXWM0::cccccccccccccc:, CPU: AMD Ryzen Threadripper 2950X (32) @ 3.500GHz
cccccccc;.:odl:.;cccccccccccccc:,. GPU: AMD ATI Radeon VII
:cccccccccccccccccccccccccccc:'. Memory: 31197MiB / 64308MiB
.:cccccccccccccccccccccc:;,..
'::cccccccccccccc::;,.

```
**Additional context**
I remember that when I first upgraded to Fedora 34 from 33, that I could still start and enter the two containers that used the fedora 31 image...I don't know when they broke, only recently did I need to run them again and find that they are not working...Not good...
`toolbox list -i`
```
IMAGE ID IMAGE NAME CREATED
3a3fb0a29265 registry.fedoraproject.org/f31/fedora-toolbox:31 2 years ago
e6d38a7d896c registry.fedoraproject.org/fedora-toolbox:34 9 months ago
```

`podman info`
```
host:
arch: amd64
buildahVersion: 1.23.1
cgroupControllers:
- memory
- pids
cgroupManager: systemd
cgroupVersion: v2
conmon:
package: conmon-2.0.32-1.fc34.x86_64
path: /usr/bin/conmon
version: 'conmon version 2.0.32, commit: '
cpus: 32
distribution:
distribution: fedora
variant: workstation
version: "34"
eventLogger: journald
hostname: yellowtrain
idMappings:
gidmap:
- container_id: 0
host_id: 1000
size: 1
- container_id: 1
host_id: 100000
size: 65536
uidmap:
- container_id: 0
host_id: 1000
size: 1
- container_id: 1
host_id: 100000
size: 65536
kernel: 5.16.20-100.fc34.x86_64
linkmode: dynamic
logDriver: k8s-file
memFree: 3386540032
memTotal: 67432009728
ociRuntime:
name: crun
package: crun-1.4.4-1.fc34.x86_64
path: /usr/bin/crun
version: |-
crun version 1.4.4
commit: 6521fcc5806f20f6187eb933f9f45130c86da230
spec: 1.0.0
+SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +YAJL
os: linux
remoteSocket:
path: /run/user/1000/podman/podman.sock
security:
apparmorEnabled: false
capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
rootless: true
seccompEnabled: true
seccompProfilePath: /usr/share/containers/seccomp.json
selinuxEnabled: true
serviceIsRemote: false
slirp4netns:
executable: /usr/bin/slirp4netns
package: slirp4netns-1.1.12-2.fc34.x86_64
version: |-
slirp4netns version 1.1.12
commit: 7a104a101aa3278a2152351a082a6df71f57c9a3
libslirp: 4.4.0
SLIRP_CONFIG_VERSION_MAX: 3
libseccomp: 2.5.3
swapFree: 77150281728
swapTotal: 77151068160
uptime: 19h 48m 54.83s (Approximately 0.79 days)
plugins:
log:
- k8s-file
- none
- journald
network:
- bridge
- macvlan
volume:
- local
registries:
search:
- registry.fedoraproject.org
- registry.access.redhat.com
- docker.io
- quay.io
store:
configFile: /home/ocelot/.config/containers/storage.conf
containerStore:
number: 4
paused: 0
running: 1
stopped: 3
graphDriverName: overlay
graphOptions:
overlay.mount_program:
Executable: /usr/bin/fuse-overlayfs
Package: fuse-overlayfs-1.7.1-2.fc34.x86_64
Version: |-
fusermount3 version: 3.10.4
fuse-overlayfs: version 1.7.1
FUSE library version 3.10.4
using FUSE kernel interface version 7.31
graphRoot: /home/ocelot/.local/share/containers/storage
graphStatus:
Backing Filesystem: extfs
Native Overlay Diff: "false"
Supports d_type: "true"
Using metacopy: "false"
imageStore:
number: 2
runRoot: /run/user/1000
volumePath: /home/ocelot/.local/share/containers/storage/volumes
version:
APIVersion: 3.4.4
Built: 1638999901
BuiltTime: Wed Dec 8 15:45:01 2021
GitCommit: ""
GoVersion: go1.16.8
OsArch: linux/amd64
Version: 3.4.4
```

Reproduce the failure with `toolbox enter pymol -v` and `podman start --attach pymol --log-level debug`, starting from the logged container-start path that reports an invalid entry-point PID. Trace how the group-for-sudo and cgroup permission errors are surfaced, then verify that the affected Fedora 31 container starts successfully and that the resulting error handling is covered by an appropriate test.

Written by the indexing model from the issue text.