code: func (s *Server) createContainerPlatform(container *oci.Container, infraContainer *oci.Container, cgroupParent string) error {
  	if s.defaultIDMappings != nil && !s.defaultIDMappings.Empty() {
  		rootPair := s.defaultIDMappings.RootPair()
  
  		for _, path := range []string{container.BundlePath(), container.MountPoint()} {
  			if err := os.Chown(path, rootPair.UID, rootPair.GID); err != nil {
  				return errors.Wrapf(err, "cannot chown %s to %d:%d", path, rootPair.UID, rootPair.GID)
  			}
  			if err := makeAccessible(path, rootPair.UID, rootPair.GID); err != nil {
  				return errors.Wrapf(err, "cannot make %s accessible to %d:%d", path, rootPair.UID, rootPair.GID)
  			}
  		}
  	}
  	return s.Runtime().CreateContainer(container, cgroupParent)
  }
docs: // createContainerPlatform performs platform dependent intermediate steps before calling the container's oci.Runtime().CreateContainer()