code: func WithSysctls(c *container.Container) coci.SpecOpts {
  	return func(ctx context.Context, _ coci.Client, _ *containers.Container, s *coci.Spec) error {
  		// We merge the sysctls injected above with the HostConfig (latter takes
  		// precedence for backwards-compatibility reasons).
  		for k, v := range c.HostConfig.Sysctls {
  			s.Linux.Sysctl[k] = v
  		}
  		return nil
  	}
  }
docs: // WithSysctls sets the container's sysctls