@@ -226,10 +226,10 @@ func (daemon *Daemon) setHostConfig(container *container.Container, hostConfig *

 // verifyContainerSettings performs validation of the hostconfig and config

 // structures.

-func (daemon *Daemon) verifyContainerSettings(daemonCfg *configStore, hostConfig *containertypes.HostConfig, config *containertypes.Config, update bool) (warnings []string, err error) {

+func (daemon *Daemon) verifyContainerSettings(daemonCfg *configStore, hostConfig *containertypes.HostConfig, config *containertypes.Config, update bool) (warnings []string, _ error) {

 	// First perform verification of settings common across all platforms.

-	if err = validateContainerConfig(config); err != nil {

-		return warnings, err

+	if err := validateContainerConfig(config); err != nil {

+		return nil, err

 	}

 	warns, err := validateHostConfig(hostConfig)

@@ -761,12 +761,12 @@ func (daemon *Daemon) connectToNetwork(ctx context.Context, cfg *config.Config,

 	if !ctr.Managed {

 		// add container name/alias to DNS

 		if err := daemon.ActivateContainerServiceBinding(ctr.Name); err != nil {

-			return fmt.Errorf("Activate container service binding for %s failed: %v", ctr.Name, err)

+			return fmt.Errorf("activate container service binding for %s failed: %v", ctr.Name, err)

 		}

 	}

 	if err := updateJoinInfo(ctr.NetworkSettings, n, ep); err != nil {

-		return fmt.Errorf("Updating join info failed: %v", err)

+		return fmt.Errorf("updating join info failed: %v", err)

 	}

 	ctr.NetworkSettings.Ports = getPortMapInfo(sb)

@@ -413,7 +413,7 @@ func adaptSharedNamespaceContainer(daemon containerGetter, hostConfig *container

 }

 // verifyPlatformContainerResources performs platform-specific validation of the container's resource-configuration

-func verifyPlatformContainerResources(resources *containertypes.Resources, sysInfo *sysinfo.SysInfo, update bool) (warnings []string, err error) {

+func verifyPlatformContainerResources(resources *containertypes.Resources, sysInfo *sysinfo.SysInfo, update bool) (warnings []string, _ error) {

 	fixMemorySwappiness(resources)

 	// memory subsystem checks and adjustments

@@ -650,7 +650,7 @@ func isRunningSystemd() bool {

 // verifyPlatformContainerSettings performs platform-specific validation of the

 // hostconfig and config structures.

-func verifyPlatformContainerSettings(daemon *Daemon, daemonCfg *configStore, hostConfig *containertypes.HostConfig, update bool) (warnings []string, err error) {

+func verifyPlatformContainerSettings(daemon *Daemon, daemonCfg *configStore, hostConfig *containertypes.HostConfig, update bool) (warnings []string, _ error) {

 	if hostConfig == nil {

 		return nil, nil

 	}

@@ -67,7 +67,7 @@ func (daemon *Daemon) adaptContainerSettings(daemonCfg *config.Config, hostConfi

 }

 // verifyPlatformContainerResources performs platform-specific validation of the container's resource-configuration

-func verifyPlatformContainerResources(resources *containertypes.Resources, isHyperv bool) (warnings []string, err error) {

+func verifyPlatformContainerResources(resources *containertypes.Resources, isHyperv bool) (warnings []string, _ error) {

 	fixMemorySwappiness(resources)

 	if !isHyperv {

 		// The processor resource controls are mutually exclusive on

@@ -171,7 +171,7 @@ func verifyPlatformContainerResources(resources *containertypes.Resources, isHyp

 // verifyPlatformContainerSettings performs platform-specific validation of the

 // hostconfig and config structures.

-func verifyPlatformContainerSettings(daemon *Daemon, daemonCfg *configStore, hostConfig *containertypes.HostConfig, update bool) (warnings []string, err error) {

+func verifyPlatformContainerSettings(daemon *Daemon, daemonCfg *configStore, hostConfig *containertypes.HostConfig, update bool) (warnings []string, _ error) {

 	if hostConfig == nil {

 		return nil, nil

 	}

@@ -589,14 +589,14 @@ func (daemon *Daemon) deleteNetwork(nw *libnetwork.Network, dynamic bool) error

 }

 // GetNetworks returns a list of all networks

-func (daemon *Daemon) GetNetworks(filter filters.Args, config backend.NetworkListConfig) (networks []networktypes.Inspect, err error) {

+func (daemon *Daemon) GetNetworks(filter filters.Args, config backend.NetworkListConfig) ([]networktypes.Inspect, error) {

 	var idx map[string]*libnetwork.Network

 	if config.Detailed {

 		idx = make(map[string]*libnetwork.Network)

 	}

 	allNetworks := daemon.getAllNetworks()

-	networks = make([]networktypes.Inspect, 0, len(allNetworks))

+	networks := make([]networktypes.Inspect, 0, len(allNetworks))

 	for _, n := range allNetworks {

 		nr := buildNetworkResource(n)

 		networks = append(networks, nr)

@@ -605,6 +605,7 @@ func (daemon *Daemon) GetNetworks(filter filters.Args, config backend.NetworkLis

 		}

 	}

+	var err error

 	networks, err = network.FilterNetworks(networks, filter)

 	if err != nil {

 		return nil, err

@@ -476,7 +476,7 @@ func inSlice(slice []string, s string) bool {

 // withMounts sets the container's mounts

 func withMounts(daemon *Daemon, daemonCfg *configStore, c *container.Container, mounts []container.Mount) coci.SpecOpts {

-	return func(ctx context.Context, _ coci.Client, _ *containers.Container, s *coci.Spec) (err error) {

+	return func(ctx context.Context, _ coci.Client, _ *containers.Container, s *coci.Spec) error {

 		sortMounts(mounts)

 		userMounts := make(map[string]struct{})

@@ -1003,7 +1003,7 @@ func WithUser(c *container.Container) coci.SpecOpts {

 	}

 }

-func (daemon *Daemon) createSpec(ctx context.Context, daemonCfg *configStore, c *container.Container, mounts []container.Mount) (retSpec *specs.Spec, err error) {

+func (daemon *Daemon) createSpec(ctx context.Context, daemonCfg *configStore, c *container.Container, mounts []container.Mount) (retSpec *specs.Spec, _ error) {

 	var (

 		opts []coci.SpecOpts

 		s    = oci.DefaultSpec()

@@ -478,7 +478,7 @@ func (daemon *Daemon) mergeUlimits(c *containertypes.HostConfig, daemonCfg *conf

 // listing only the methods we care about here.

 // It's mainly useful to easily allow mocking the registry in tests.

 type registryKey interface {

-	GetStringValue(name string) (val string, valtype uint32, err error)

+	GetStringValue(name string) (val string, valType uint32, err error)

 	Close() error

 }

@@ -526,7 +526,8 @@ func readCredentialSpecFile(id, root, location string) (string, error) {

 	return string(bcontents[:]), nil

 }

-func setupWindowsDevices(devices []containertypes.DeviceMapping) (specDevices []specs.WindowsDevice, err error) {

+func setupWindowsDevices(devices []containertypes.DeviceMapping) ([]specs.WindowsDevice, error) {

+	var specDevices []specs.WindowsDevice

 	for _, deviceMapping := range devices {

 		if strings.HasPrefix(deviceMapping.PathOnHost, "class/") {

 			specDevices = append(specDevices, specs.WindowsDevice{

@@ -111,7 +111,7 @@ func TestSetWindowsCredentialSpecInSpec(t *testing.T) {

 	t.Run("happy path with a 'registry://' option", func(t *testing.T) {

 		valueName := "my-cred-spec"

 		key := &dummyRegistryKey{

-			getStringValueFunc: func(name string) (val string, valtype uint32, err error) {

+			getStringValueFunc: func(name string) (val string, valType uint32, _ error) {

 				assert.Equal(t, valueName, name)

 				return dummyCredFileContents, 0, nil

 			},

@@ -141,7 +141,7 @@ func TestSetWindowsCredentialSpecInSpec(t *testing.T) {

 	t.Run("when using a 'registry://' option pointing to a value that doesn't exist, it fails gracefully", func(t *testing.T) {

 		valueName := "my-cred-spec"

 		key := &dummyRegistryKey{

-			getStringValueFunc: func(name string) (val string, valtype uint32, err error) {

+			getStringValueFunc: func(name string) (val string, valType uint32, _ error) {

 				assert.Equal(t, valueName, name)

 				return "", 0, registry.ErrNotExist

 			},

@@ -159,7 +159,7 @@ func TestSetWindowsCredentialSpecInSpec(t *testing.T) {

 		dummyError := fmt.Errorf("dummy error")

 		valueName := "my-cred-spec"

 		key := &dummyRegistryKey{

-			getStringValueFunc: func(name string) (val string, valtype uint32, err error) {

+			getStringValueFunc: func(name string) (val string, valType uint32, _ error) {

 				assert.Equal(t, valueName, name)

 				return "", 0, dummyError

 			},

@@ -274,11 +274,11 @@ func TestSetWindowsCredentialSpecInSpec(t *testing.T) {

 /* Helpers below */

 type dummyRegistryKey struct {

-	getStringValueFunc func(name string) (val string, valtype uint32, err error)

+	getStringValueFunc func(name string) (val string, valType uint32, err error)

 	closed             bool

 }

-func (k *dummyRegistryKey) GetStringValue(name string) (val string, valtype uint32, err error) {

+func (k *dummyRegistryKey) GetStringValue(name string) (val string, valType uint32, _ error) {

 	return k.getStringValueFunc(name)

 }

@@ -358,8 +358,7 @@ func getSystemCPUUsage() (cpuUsage uint64, cpuNum uint32, _ error) {

 				}

 				totalClockTicks += v

 			}

-			cpuUsage = (totalClockTicks * nanoSecondsPerSecond) /

-				clockTicksPerSecond

+			cpuUsage = (totalClockTicks * nanoSecondsPerSecond) / clockTicksPerSecond

 		}

 		if '0' <= line[3] && line[3] <= '9' {

 			cpuNum++