condor-worker requirements

The condor workers require

/sys/fs/cgroup:/sys/fs/cgroup mounted
rngd service daemon running to generate entropy for starting up callback server see gist
SET_NOBODY_USER_GUID = 999 (or the GID of the mounted dirs)
SET_NOBODY_USER_UID = 999 (or the UID of the mounted dirs)
REFDATA Permissions set correctly
Docker needs privileges to set cgroups/namespaces
CLIENTGROUPS set with extra apostrophes

Environmental variables to be set in rancher

COLLECTOR_HOST
CONDOR_HOST
POOL_PASSWORD
SCHEDD_HOST
UID_DOMAIN
USE_TCP
SET_NOBODY_USER_GUID
SET_NOBODY_USER_UID
CONDOR_SUBMIT_WORKDIR
EXECUTE_SUFFIX
SLACK_WEBHOOK_URL
DELETE_ABANDONED_CONTAINERS
NJS_ENDPOINT
EE2_ENDPOINT
SERVICE_ENDPOINT
DOCKER_CACHE
CGROUP_MEMORY_LIMIT_POLICY
USE_POOL_PASSWORD=yes