runsc: Only uninstall cgroup for sandbox stop.

PiperOrigin-RevId: 231263114
Change-Id: I57467a34fe94e395fdd3685462c4fe9776d040a3

1 files changed, 4 insertions, 1 deletions

diff --git a/runsc/container/container.go b/runsc/container/container.go
index 1b410c63a..37969d8c5 100644
--- a/runsc/container/container.go
+++ b/runsc/container/container.go
@@ -721,7 +721,10 @@ func (c *Container) stop() error {
 		if err := c.Sandbox.DestroyContainer(c.ID); err != nil {
 			return fmt.Errorf("destroying container %q: %v", c.ID, err)
 		}
-		cgroup = c.Sandbox.Cgroup
+		// Only uninstall cgroup for sandbox stop.
+		if c.Sandbox.IsRootContainer(c.ID) {
+			cgroup = c.Sandbox.Cgroup
+		}
 		// Only set sandbox to nil after it has been told to destroy the container.
 		c.Sandbox = nil
 	}