[embedding-shape]

Did you try it on systems that don't have the patch already? Seems many distributions already shipped kernels with the patch ~a month ago.

[progval]

Yes. Alpine in rootless Podman doesn't work (after replacing "/usr/bin/su" with "/bin/su" in the .py, running the .py just doesn't do anything) while it does in Debian in rootless Podman on the same host.