[bug] failed to write -1 to memory.memsw.limit_in_bytes

[allencloud]

Ⅰ. Issue Description

Today when I run the master code to build pouchd to run a container , it shows that:

root@ubuntu:~/go/src/github.com/alibaba/pouch# pouch run -d registry.hub.docker.com/library/busybox:1.28 sleep 10000
WARNING: Current Kernel does not support memory swap, discard --memory-swap
Error: failed to run container dbc41f: {"message":"failed to create task, container id: dbc41f9d3dc74b40ba3993f70034d447f001cb6db845da6bb78b06745fb9053a: OCI runtime create failed: container_linux.go:265: starting container process caused \"process_linux.go:348: container init caused \\\"process_linux.go:320: setting cgroup config for procHooks process caused \\\\\\\"failed to write -1 to memory.memsw.limit_in_bytes: open /sys/fs/cgroup/memory/default/dbc41f9d3dc74b40ba3993f70034d447f001cb6db845da6bb78b06745fb9053a/memory.memsw.limit_in_bytes: permission denied\\\\\\\"\\\"\": unknown"}

I think this error is introduced by pr #1375. Since when I checkout to the commit d35b6b3 which is just one commit before pr #1375 , it works fine:

root@ubuntu:~/go/src/github.com/alibaba/pouch# git checkout d35b6b38728dbbbcb75c80e7aa94b6336289ec18
Previous HEAD position was 60c6043... docs: add docs about  lxcfs feature (#1461)
HEAD is now at d35b6b3... Merge pull request #1450 from ZouRui89/log_add
root@ubuntu:~/go/src/github.com/alibaba/pouch# make install
GOOS=linux go build -o pouchd
go build -o pouch github.com/alibaba/pouch/cli
install
installing pouchd and pouch to /usr/local/bin
root@ubuntu:~/go/src/github.com/alibaba/pouch# pouch run -d registry.hub.docker.com/library/busybox:1.28 sleep 10000
78bc8d2d9ec8d1283d053985210e2c0b6daef97a78dfeb3fa36a1c31e5a97d1c

Ⅱ. Describe what happened

failed to write -1 to memory.memsw.limit_in_bytes when running a container against master's pouchd.

Ⅲ. Describe what you expected to happen

Nothing error happens when running a container.

Ⅳ. How to reproduce it (as minimally and precisely as possible)

Ⅴ. Anything else we need to know?

none

Ⅵ. Environment:

• pouch version (use pouch version):

KernelVersion:   4.4.0-87-generic
Os:              linux
Version:         0.5.0
APIVersion:      1.24
Arch:            amd64
BuildTime:       2018-06-04T18:24:57+08:00
GitCommit:       0.4.0-363-gd35b6b3
GoVersion:       go1.9.1

• OS (e.g. from /etc/os-release): VERSION="16.04.3 LTS (Xenial Xerus)"
• Kernel (e.g. uname -a): Linux ubuntu 4.4.0-87-generic
• Install tools:
• Others:

[pouchrobot]

Thanks for your report, @allencloud
😱 This is a priority/P1 issue which is highest.
Seems to be severe enough.
ping @alibaba/pouch , PTAL.