diff --git a/setup.sh b/setup.sh
index 74c6056..4c41ed8 100644
--- a/setup.sh
+++ b/setup.sh
@@ -23,6 +23,15 @@ set -x  # show what's happening to make debugging easier
 # DNF itself or a dependence may need upgrading, take care of it first.
 $DNF upgrade
 
+# WORKAROUND: crun: write to `/proc/self/oom_score_adj`: Permission denied
+# Ref: https://github.com/containers/podman/pull/19843
+if [[ $(date +%Y%m%d) -gt 20231115 ]]; then
+  echo "FIXME: Please check if crun 1.9.3+ is available in CentOS Stream-9."
+  echo "If so, this crun-1.8.7 workaround may be removed."
+  exit 1
+fi
+dnf $x install -y crun-1.8.7
+
 $DNF $x install \
   podman \
   systemd