Merge pull request #2902 from liusdu/checkpoint

checkpoint: resolve symlink for external bind mount

libcontainer/container_linux.go

@@ -780,6 +780,9 @@ const descriptorsFilename = "descriptors.json"
 
 func (c *linuxContainer) addCriuDumpMount(req *criurpc.CriuReq, m *configs.Mount) {
 	mountDest := strings.TrimPrefix(m.Destination, c.config.Rootfs)
+	if dest, err := securejoin.SecureJoin(c.config.Rootfs, mountDest); err == nil {
+		mountDest = dest[len(c.config.Rootfs):]
+	}
 	extMnt := &criurpc.ExtMountMap{
 		Key: proto.String(mountDest),
 		Val: proto.String(mountDest),

tests/integration/checkpoint.bats

@@ -130,6 +130,17 @@ function simple_cr() {
 	simple_cr
 }
 
+@test "checkpoint and restore (bind mount, destination is symlink)" {
+	mkdir -p rootfs/real/conf
+	ln -s /real/conf rootfs/conf
+	update_config '	  .mounts += [{
+					source: ".",
+					destination: "/conf",
+					options: ["bind"]
+				}]'
+	simple_cr
+}
+
 @test "checkpoint and restore (with --debug)" {
 	simple_cr --debug
 }