Annotations returns the bundle path and user defined annotations from the libcontainer state.

CleanPath makes a path safe for use with filepath.Join.

CloseExecFrom applies O_CLOEXEC to all file descriptors currently open for the process (except for those below the given fd value).

EnsureProcHandle returns whether or not the given file handle is on procfs.

ExitStatus returns the correct exit status for a process based on if it was signaled or exited cleanly.

NewSockPair returns a new unix socket pair.

RecvFd waits for a file descriptor to be sent over the given AF_UNIX socket.

SearchLabels searches through a list of key=value pairs for a given key, returning its value, and the binary flag telling whether the key exist.

SendFd sends a file descriptor over the given AF_UNIX socket.

SendFds sends a list of files descriptor and msg over the given AF_UNIX socket.

WithProcfd runs the passed closure with a procfd path (/proc/self/fd/...) corresponding to the unsafePath resolved within the root.

WriteJSON writes the provided struct v to w using standard json marshaling.

MaxSendfdLen is the maximum length of the name of a file descriptor being sent using SendFd.

NativeEndian is the native byte order of the host system.