Docker-in-Docker (WITH DOCKER) scenarios fail on hosts using cgroups v2: kind clusters and some podman flows do not start inside earthly builds on cgroups v2 systems. Docker Desktop 4.3.0 moved to cgroups v2, which exposed the gap; the kernel param systemd.unifiedcgrouphierarchy=0 reverts to v1 as a workaround.