Support the new --empty-ns flags in RunC for checkpoint/restore.

Signed-off-by: Ross Boucher <rboucher@gmail.com>

runtime/container.go

@@ -369,6 +369,9 @@ func (c *container) Checkpoint(cpt Checkpoint, checkpointDir string) error {
 	if cpt.UnixSockets {
 		add("--ext-unix-sk")
 	}
+	for _, ns := range cpt.EmptyNS {
+		add("--empty-ns", ns)
+	}
 	add(c.id)
 	out, err := exec.Command(c.runtime, args...).CombinedOutput()
 	if err != nil {

runtime/runtime.go

@@ -57,6 +57,8 @@ type Checkpoint struct {
 	Shell bool `json:"shell"`
 	// Exit exits the container after the checkpoint is finished
 	Exit bool `json:"exit"`
+	// EmptyNS tells CRIU to omit a specified namespace
+	EmptyNS []string `json:"emptyNS,omitempty"`
 }
 
 // PlatformProcessState container platform-specific fields in the ProcessState structure