container/init: avoid multiple lastcap calls

This reduces the size of []kexpect in the test suite.

Signed-off-by: Ophestra <cat@gensokyo.uk>

1 files changed, 2 insertions, 2 deletions

diff --git a/container/init.go b/container/init.go
index 39adefbc..6bb5a9e7 100644
--- a/container/init.go
+++ b/container/init.go
@@ -156,7 +156,7 @@ func initEntrypoint(k syscallDispatcher, prepareLogger func(prefix string), setV
 	}
 
 	// cache sysctl before pivot_root
-	k.lastcap()
+	lastcap := k.lastcap()
 
 	if err := k.mount(zeroString, FHSRoot, zeroString, MS_SILENT|MS_SLAVE|MS_REC, zeroString); err != nil {
 		k.fatalf("cannot make / rslave: %v", err)
@@ -262,7 +262,7 @@ func initEntrypoint(k syscallDispatcher, prepareLogger func(prefix string), setV
 	if err := k.capAmbientClearAll(); err != nil {
 		k.fatalf("cannot clear the ambient capability set: %v", err)
 	}
-	for i := uintptr(0); i <= k.lastcap(); i++ {
+	for i := uintptr(0); i <= lastcap; i++ {
 		if params.Privileged && i == CAP_SYS_ADMIN {
 			continue
 		}