I want to match outgoing packet's cgroup ID in my rules. Reading nft man page: cgroup | control group id | integer (32 bit) How can I determine this ID? I use cgroups v2 and systemd as cgroup manager. In systemd-cgls output there's no mention of ID. I couldn't find any in /sys/fs/cgroup either. Please tell me a way to find it out.