Method CreateContainer

internal/pkg/runtime/engine/engine_linux.go:64–64

CreateContainer is called from master process to prepare container environment, e.g. perform mount operations, setup network, etc. Additional privileges required for setup may be gained when running in suid flow. However, when a user namespace is requested and it is not a hybrid workflow (e.g. fake

(context.Context, int, net.Conn)

	// a hybrid workflow (e.g. fakeroot), then there is no privileged saved uid
	// and thus no additional privileges can be gained.
	CreateContainer(context.Context, int, net.Conn) error
	// StartProcess is called during stage2 after RPC server finished
	// environment preparation. This is the container process itself.
	//