Various failed messages LXC unprivileged systemd containers

I noticed various failed messages when I booted systems lxc containers and I am not sure what should I do to fix them.

┌─[doskanoness@gentoo] - [~] - [2022-03-23 05:16:04]
└─[0] <> lxc-start -n foo_systemd -F                                                                                                                                          ⚡[▶▶▶▶▶▶▶▶▶▷]
lxc-start: foo_systemd: cgroups/cgfsng.c: __cgfsng_delegate_controllers: 2921 Device or resource busy - Could not enable "+cpuset +cpu +io +memory +hugetlb +pids" controllers in the unified cgroup 8
lxc-start: foo_systemd: cgroups/cgfsng.c: __cgfsng_delegate_controllers: 2921 Device or resource busy - Could not enable "+cpuset +cpu +io +memory +hugetlb +pids" controllers in the unified cgroup 8
systemd 241 running in system mode. (+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 +IDN -PCRE2 default-hierarchy=hybrid)
Detected virtualization lxc.
Detected architecture x86-64.

Welcome to Debian GNU/Linux 10 (buster)!

Set hostname to <foosystemd>.
File /lib/systemd/system/systemd-journald.service:12 configures an IP firewall (IPAddressDeny=any), but the local system does not support BPF/cgroup based firewalling.
Proceeding WITHOUT firewalling in effect! (This warning is only shown for the first loaded unit using IP firewalling.)
[  OK  ] Listening on Journal Socket.
         Starting Remount Root and Kernel File Systems...
[  OK  ] Listening on initctl Compatibility Named Pipe.
         Mounting Kernel Debug File System...
[  OK  ] Listening on Journal Socket (/dev/log).
         Mounting Kernel Configuration File System...
         Starting Journal Service...
         Starting Apply Kernel Variables...
[  OK  ] Created slice system-getty.slice.
         Mounting POSIX Message Queue File System...
[  OK  ] Reached target Remote File Systems.
         Starting Helper to synchronize boot up for ifupdown...
[  OK  ] Created slice User and Session Slice.
[  OK  ] Reached target Slices.
[  OK  ] Started Forward Password Requests to Wall Directory Watch.
[  OK  ] Reached target Swap.
[  OK  ] Started Dispatch Password Requests to Console Directory Watch.
[  OK  ] Reached target Paths.
[  OK  ] Reached target Local Encrypted Volumes.
sys-kernel-debug.mount: Mount process exited, code=exited, status=32/n/a
sys-kernel-debug.mount: Failed with result 'exit-code'.
[FAILED] Failed to mount Kernel Debug File System.
See 'systemctl status sys-kernel-debug.mount' for details.
sys-kernel-debug.mount: Consumed 1ms CPU time.
sys-kernel-config.mount: Mount process exited, code=exited, status=32/n/a
sys-kernel-config.mount: Failed with result 'exit-code'.
[FAILED] Failed to mount Kernel Configuration File System.
See 'systemctl status sys-kernel-config.mount' for details.
sys-kernel-config.mount: Consumed 1ms CPU time.
[  OK  ] Mounted POSIX Message Queue File System.
[  OK  ] Started Helper to synchronize boot up for ifupdown.
[  OK  ] Started Remount Root and Kernel File Systems.
         Starting Create System Users...
[  OK  ] Started Apply Kernel Variables.
[  OK  ] Started Create System Users.
         Starting Create Static Device Nodes in /dev...
[  OK  ] Started Journal Service.
         Starting Flush Journal to Persistent Storage...
[  OK  ] Started Create Static Device Nodes in /dev.
[  OK  ] Reached target Local File Systems (Pre).
[  OK  ] Reached target Local File Systems.
         Starting Raise network interfaces...
[  OK  ] Started Flush Journal to Persistent Storage.
         Starting Create Volatile Files and Directories...
[  OK  ] Started Create Volatile Files and Directories.
[  OK  ] Reached target System Time Synchronized.
         Starting Update UTMP about System Boot/Shutdown...
[  OK  ] Started Update UTMP about System Boot/Shutdown.
[  OK  ] Reached target System Initialization.
[  OK  ] Started Daily Cleanup of Temporary Directories.
[  OK  ] Started Daily apt download activities.
[  OK  ] Listening on D-Bus System Message Bus Socket.
[  OK  ] Reached target Sockets.
[  OK  ] Started Daily apt upgrade and clean activities.
[  OK  ] Reached target Timers.
[  OK  ] Reached target Basic System.
[  OK  ] Started D-Bus System Message Bus.
         Starting Login Service...
[  OK  ] Started Login Service.
[  OK  ] Started Raise network interfaces.
[  OK  ] Reached target Network.
         Starting Permit User Sessions...
[  OK  ] Started Permit User Sessions.
[  OK  ] Started Console Getty.
[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.

Debian GNU/Linux 10 foosystemd console

foosystemd login:

Those /sys/kernel/… filesystems are indeed not mountable inside of containers.
If they’re coming from /etc/fstab, you may be able to just comment them there, if they’re coming from a systemd unit, you may be able to systemctl mask them.