runsc: Synchronize container metadata changes with a file lock.

Each container has associated metadata (particularly the container status) that
is manipulated by various runsc commands. This metadata is stored in a file
identified by the container id.

Different runsc processes may manipulate the same container metadata, and each
will read/write to the metadata file.

This CL adds a file lock per container which must be held when reading the
container metadata file, and when modifying and writing the container metadata.

PiperOrigin-RevId: 214019179
Change-Id: Ice4390ad233bc7f216c9a9a6cf05fb456c9ec0ad

1 files changed, 6 insertions, 0 deletions

diff --git a/WORKSPACE b/WORKSPACE
index 88577ae3a..a305bc730 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -23,6 +23,12 @@ go_repository(
 )
 
 go_repository(
+    name = "com_github_gofrs_flock",
+    importpath = "github.com/gofrs/flock",
+    commit = "886344bea0798d02ff3fae16a922be5f6b26cee0"
+)
+
+go_repository(
     name = "com_github_google_go-cmp",
     importpath = "github.com/google/go-cmp",
     commit = "3af367b6b30c263d47e8895973edcca9a49cf029",