Make vTPM work with user namespaces

The setup call for Usernamespaces must come before creating the
VTPM devices, otherwise we get odd error messages that the uid
mappings are not available.

Signed-off-by: Stefan Berger <[email protected]>

Author: stefanberger

libcontainer/specconv/spec_linux.go

@@ -191,10 +191,10 @@ func CreateLibcontainerConfig(opts *CreateOpts) (*configs.Config, error) {
 	if err := createDevices(spec, config); err != nil {
 		return nil, err
 	}
-	if err := createVTPMs(spec, config); err != nil {
+	if err := setupUserNamespace(spec, config); err != nil {
 		return nil, err
 	}
-	if err := setupUserNamespace(spec, config); err != nil {
+	if err := createVTPMs(spec, config); err != nil {
 		return nil, err
 	}
 	c, err := createCgroupConfig(opts)