Inside a container PID namespace (the Kata microVM CI runner), the host
process's session leader lives outside the namespace, so getsid(0) returns
0 via task_session_vnr — not an error. The assert host_sid > 0 was too
strict and panicked with 'getsid(0) failed: Success (os error 0)'. Relax
to host_sid >= 0 (only -1 is a real failure); the meaningful invariant
(child detaches into its own session: child_sid == child_pid, distinct
from host) is unchanged.
can1357
3f5cc41f91