From 5cd55cd90fd5a32685807a57617cde6f5f76d22b Mon Sep 17 00:00:00 2001
From: Fabricio Voznika <fvoznika@google.com>
Date: Thu, 1 Nov 2018 17:51:22 -0700
Subject: Use spec with clean paths for gofer

Otherwise the gofer's attach point may be different from sandbox when there
symlinks in the path.

PiperOrigin-RevId: 219730492
Change-Id: Ia9c4c2d16228c6a1a9e790e0cb673fd881003fe1
---
 runsc/container/container.go | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'runsc/container')

diff --git a/runsc/container/container.go b/runsc/container/container.go
index 9da25a863..4c542ccb9 100644
--- a/runsc/container/container.go
+++ b/runsc/container/container.go
@@ -374,6 +374,9 @@ func (c *Container) Start(conf *boot.Config) error {
 			return fmt.Errorf("setup mounts: %v", err)
 		}
 		c.Spec.Mounts = cleanMounts
+		if err := specutils.WriteCleanSpec(c.BundleDir, c.Spec); err != nil {
+			return fmt.Errorf("writing clean spec: %v", err)
+		}
 
 		// Create the gofer process.
 		ioFiles, err := c.createGoferProcess(c.Spec, conf, c.BundleDir)
-- 
cgit v1.2.3