Annotations returns the bundle path and user defined annotations from the libcontainer state.

CleanPath makes a path safe for use with filepath.Join.

CloseExecFrom applies O_CLOEXEC to all file descriptors currently open for the process (except for those below the given fd value).

EnsureProcHandle returns whether or not the given file handle is on procfs.

ExitStatus returns the correct exit status for a process based on if it was signaled or exited cleanly.

NewSockPair returns a new unix socket pair.

RecvFd waits for a file descriptor to be sent over the given AF_UNIX socket.

ResolveRootfs ensures that the current working directory is not a symlink and returns the absolute path to the rootfs.

SearchLabels searches a list of key-value pairs for the provided key and returns the corresponding value.

SendFd sends a file descriptor over the given AF_UNIX socket.

WriteJSON writes the provided struct v to w using standard json marshaling.

MaxSendfdLen is the maximum length of the name of a file descriptor being sent using SendFd.