WithContainerdShimCgroup returns function that sets the containerd shim cgroup path.

WithNewSnapshot wraps `containerd.WithNewSnapshot` so that if creating the snapshot fails we make sure the image is actually unpacked and and retry.

WithVolumes copies ownership of volume in rootfs to its corresponding host path.