Description of problem:

Starting systemd in container with sssd installed, the sssd.service is shown failed.

Version-Release number of selected component (if applicable):

sssd-2.0.0-7.fc30.x86_64

How reproducible:

Deterministic.

Steps to Reproduce:
1. Have Dockerfile:

# Clone from the Fedora rawhide image
FROM registry.fedoraproject.org/fedora:rawhide

MAINTAINER FreeIPA Developers <freeipa-devel.org>

# Workaround 1615948
RUN ln -s /bin/false /usr/sbin/systemd-machine-id-setup
RUN dnf upgrade -y --setopt=install_weak_deps=False \
	&& dnf install -y --setopt=install_weak_deps=False sssd \
	&& dnf clean all

# Workaround 1668836
RUN systemctl mask nfs-convert.service
# var-lib-nfs-rpc_pipefs.mount would run (and fail) nondeterministically
RUN systemctl mask rpc-gssd.service

# Container image which runs systemd
RUN test -f /etc/machine-id && ! test -s /etc/machine-id
RUN test -z "$container"
ENV container oci
ENTRYPOINT [ "/usr/sbin/init" ]
STOPSIGNAL RTMIN+3
VOLUME [ "/var/log/journal" ]

2. Build container image:
   docker build -t sssd .
3. Run container:
   docker run --name sssd -d sssd
4. Wait a while
5. Run
   docker exec sssd systemctl | grep sssd

Actual results:

● sssd.service                           loaded failed failed    System Security Services Daemon                      

Expected results:

● sssd.service                           loaded active running    System Security Services Daemon                      

Additional info:

Running

docker exec sssd systemctl status sssd

shows:

● sssd.service - System Security Services Daemon
   Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Wed 2019-02-13 16:15:48 UTC; 1min 29s ago
  Process: 27 ExecStart=/usr/sbin/sssd -i ${DEBUG_LOGGER} (code=exited, status=3)
 Main PID: 27 (code=exited, status=3)

Feb 13 16:15:48 869f1e0a9013 systemd[1]: Starting System Security Services Daemon...
Feb 13 16:15:48 869f1e0a9013 sssd[27]: Could not create private keyring session. If you store password there they may be easily accessible to the root user. (1, Operation not permitted)
Feb 13 16:15:48 869f1e0a9013 sssd[27]: Could not set permissions on private keyring. If you store password there they may be easily accessible to the root user. (1, Operation not permitted)
Feb 13 16:15:48 869f1e0a9013 sssd[27]: Starting up
Feb 13 16:15:48 869f1e0a9013 systemd[1]: sssd.service: Main process exited, code=exited, status=3/NOTIMPLEMENTED
Feb 13 16:15:48 869f1e0a9013 systemd[1]: sssd.service: Failed with result 'exit-code'.
Feb 13 16:15:48 869f1e0a9013 systemd[1]: Failed to start System Security Services Daemon.