Fix four file descriptor leaks:
1. tunnel/images.go Import: os.Open(opts.Source) never closed
2. tunnel/images.go Save: second os.Open for oci-dir/docker-dir never closed
3. bindings/checkpoint.go Restore: os.Open(importPath) never closed
4. container_internal_common.go: os.Create in checkpoint volume export
loop not closed on five error paths
These are the same class of bug fixed in #28723 and #28724.
Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca>
Sebastien Tardif
1d6b0e5b8c