// Create a new sandbox or container with the underlying OCI runtime
func (s *service) Create(ctx context.Context, r *taskAPI.CreateTaskRequest) (_ *taskAPI.CreateTaskResponse, err error) {
    s.mu.Lock()
    defer s.mu.Unlock()

//the network namespace created by cni plugin                                              
    netns, err :=                                             
    if err != nil {                                                                            
        return nil, errors.Wrap(err, "create namespace")                                       
    }