systemd-253.5 regression

systemd-253.5 backported a problematic commit which has since been reverted in systemd master.

Please see https://github.com/systemd/systemd-stable/issues/302.

You'll need to backport https://github.com/systemd/systemd/pull/28000
which is a revert of the problematic change.

Quoting the revert commit:
"""
[...]
The change in question also breaks user level socket activation for podman.service as the termination of the main podman system service process is not properly handled, causing any application accessing the socket to hang.

This is because the user-level podman.service unit also hosts two non-main processes: rootlessport and rootlessport-child which causes the cgroup_good check to still succeed.
[...]
"""

best,
sam