runtime: unlock the alive lock only once

Unlock the alive lock only once in the deferred func call.

Fixes: containers#3207
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>

libpod/runtime.go

@@ -877,12 +877,9 @@ func makeRuntime(ctx context.Context, runtime *Runtime) (err error) {
 	// TODO: we can't close the FD in this lock, so we should keep it around
 	// and use it to lock important operations
 	aliveLock.Lock()
-	locked := true
 	doRefresh := false
 	defer func() {
-		if locked {
-			aliveLock.Unlock()
-		}
+		aliveLock.Unlock()
 	}()
 
 	_, err = os.Stat(runtimeAliveFile)
@@ -891,7 +888,6 @@ func makeRuntime(ctx context.Context, runtime *Runtime) (err error) {
 		// no containers running.  Create immediately a namespace, as
 		// we will need to access the storage.
 		if os.Geteuid() != 0 {
-			aliveLock.Unlock()
 			pausePid, err := util.GetRootlessPauseProcessPidPath()
 			if err != nil {
 				return errors.Wrapf(err, "could not get pause process pid file path")