you need -v /sys/fs/cgroup:/sys/fs/cgroup:ro when you exec your command.