remove a unnecessary calls to clone() by limiting the lifetime.

src/container/builder_impl.rs

@@ -103,13 +103,13 @@ impl<'a> ContainerBuilderImpl<'a> {
         let container_args = ContainerArgs {
             init: self.init,
             syscall: self.syscall,
-            spec: self.spec.clone(),
-            rootfs: self.rootfs.clone(),
+            spec: self.spec,
+            rootfs: &self.rootfs,
             console_socket: self.console_socket,
             notify_socket,
             preserve_fds: self.preserve_fds,
-            container: self.container.clone(),
-            rootless: self.rootless.clone(),
+            container: &self.container,
+            rootless: &self.rootless,
             cgroup_manager: cmanager,
         };
 

src/process/args.rs

@@ -12,19 +12,19 @@ pub struct ContainerArgs<'a> {
     /// Interface to operating system primitives
     pub syscall: &'a dyn Syscall,
     /// OCI complient runtime spec
-    pub spec: Spec,
+    pub spec: &'a Spec,
     /// Root filesystem of the container
-    pub rootfs: PathBuf,
+    pub rootfs: &'a PathBuf,
     /// Socket to communicate the file descriptor of the ptty
     pub console_socket: Option<RawFd>,
     /// The Unix Domain Socket to communicate container start
     pub notify_socket: NotifyListener,
     /// File descriptos preserved/passed to the container init process.
     pub preserve_fds: i32,
     /// Container state
-    pub container: Option<Container>,
+    pub container: &'a Option<Container>,
     /// Options for rootless containers
-    pub rootless: Option<Rootless<'a>>,
+    pub rootless: &'a Option<Rootless<'a>>,
     /// Cgroup Manager
     pub cgroup_manager: Box<dyn CgroupManager>,
 }

src/process/container_init_process.rs

@@ -298,7 +298,7 @@ pub fn container_init_process(
         }
     };
 
-    set_supplementary_gids(proc.user(), &args.rootless)
+    set_supplementary_gids(proc.user(), args.rootless)
         .context("failed to set supplementary gids")?;
 
     syscall