@@ -26,7 +26,7 @@ require (

 	github.com/cloudflare/cfssl v1.6.4

 	github.com/containerd/cgroups/v3 v3.0.3

 	github.com/containerd/containerd v1.7.13

-	github.com/containerd/continuity v0.4.2

+	github.com/containerd/continuity v0.4.3

 	github.com/containerd/fifo v1.1.0

 	github.com/containerd/log v0.1.0

 	github.com/containerd/typeurl/v2 v2.1.1

@@ -309,8 +309,8 @@ github.com/containerd/containerd v1.7.13 h1:wPYKIeGMN8vaggSKuV1X0wZulpMz4CrgEsZd

 github.com/containerd/containerd v1.7.13/go.mod h1:zT3up6yTRfEUa6+GsITYIJNgSVL9NQ4x4h1RPzk0Wu4=

 github.com/containerd/continuity v0.0.0-20190426062206-aaeac12a7ffc/go.mod h1:GL3xCUCBDV3CZiTSEKksMWbLE66hEyuu9qyDOOqM47Y=

 github.com/containerd/continuity v0.0.0-20200710164510-efbc4488d8fe/go.mod h1:cECdGN1O8G9bgKTlLhuPJimka6Xb/Gg7vYzCTNVxhvo=

-github.com/containerd/continuity v0.4.2 h1:v3y/4Yz5jwnvqPKJJ+7Wf93fyWoCB3F5EclWG023MDM=

-github.com/containerd/continuity v0.4.2/go.mod h1:F6PTNCKepoxEaXLQp3wDAjygEnImnZ/7o4JzpodfroQ=

+github.com/containerd/continuity v0.4.3 h1:6HVkalIp+2u1ZLH1J/pYX2oBVXlJZvh1X1A7bEZ9Su8=

+github.com/containerd/continuity v0.4.3/go.mod h1:F6PTNCKepoxEaXLQp3wDAjygEnImnZ/7o4JzpodfroQ=

 github.com/containerd/fifo v0.0.0-20190226154929-a9fb20d87448/go.mod h1:ODA38xgv3Kuk8dQz2ZQXpnv/UZZUHUCL7pnLehbXgQI=

 github.com/containerd/fifo v0.0.0-20200410184934-f15a3290365b/go.mod h1:jPQ2IAeZRCYxpS/Cm1495vGFww6ecHmMk1YJH2Q5ln0=

 github.com/containerd/fifo v1.1.0 h1:4I2mbh5stb1u6ycIABlBw9zgtlK8viPI9QkQNRQEEmY=

@@ -103,11 +103,6 @@ func copyDirectory(dst, src string, inodes map[uint64]string, o *copyDirOpts) er

 		}

 	}

-	entries, err := os.ReadDir(src)

-	if err != nil {

-		return fmt.Errorf("failed to read %s: %w", src, err)

-	}

-

 	if err := copyFileInfo(stat, src, dst); err != nil {

 		return fmt.Errorf("failed to copy file info for %s: %w", dst, err)

 	}

@@ -116,7 +111,15 @@ func copyDirectory(dst, src string, inodes map[uint64]string, o *copyDirOpts) er

 		return fmt.Errorf("failed to copy xattrs: %w", err)

 	}

-	for _, entry := range entries {

+	f, err := os.Open(src)

+	if err != nil {

+		return err

+	}

+	defer f.Close()

+

+	dr := &dirReader{f: f}

+

+	handleEntry := func(entry os.DirEntry) error {

 		source := filepath.Join(src, entry.Name())

 		target := filepath.Join(dst, entry.Name())

@@ -130,7 +133,7 @@ func copyDirectory(dst, src string, inodes map[uint64]string, o *copyDirOpts) er

 			if err := copyDirectory(target, source, inodes, o); err != nil {

 				return err

 			}

-			continue

+			return nil

 		case (fileInfo.Mode() & os.ModeType) == 0:

 			link, err := getLinkSource(target, fileInfo, inodes)

 			if err != nil {

@@ -159,7 +162,7 @@ func copyDirectory(dst, src string, inodes map[uint64]string, o *copyDirOpts) er

 			}

 		default:

 			logrus.Warnf("unsupported mode: %s: %s", source, fileInfo.Mode())

-			continue

+			return nil

 		}

 		if err := copyFileInfo(fileInfo, source, target); err != nil {

@@ -169,9 +172,20 @@ func copyDirectory(dst, src string, inodes map[uint64]string, o *copyDirOpts) er

 		if err := copyXAttrs(target, source, o.xex, o.xeh); err != nil {

 			return fmt.Errorf("failed to copy xattrs: %w", err)

 		}

+		return nil

 	}

-	return nil

+	for {

+		entry := dr.Next()

+		if entry == nil {

+			break

+		}

+

+		if err := handleEntry(entry); err != nil {

+			return err

+		}

+	}

+	return dr.Err()

 }

 // CopyFile copies the source file to the target.

new file mode 100644

@@ -0,0 +1,53 @@

+/*

+   Copyright The containerd Authors.

+

+   Licensed under the Apache License, Version 2.0 (the "License");

+   you may not use this file except in compliance with the License.

+   You may obtain a copy of the License at

+

+       http://www.apache.org/licenses/LICENSE-2.0

+

+   Unless required by applicable law or agreed to in writing, software

+   distributed under the License is distributed on an "AS IS" BASIS,

+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

+   See the License for the specific language governing permissions and

+   limitations under the License.

+*/

+

+package fs

+

+import (

+	"io"

+	"os"

+)

+

+type dirReader struct {

+	buf []os.DirEntry

+	f   *os.File

+	err error

+}

+

+func (r *dirReader) Next() os.DirEntry {

+	if len(r.buf) == 0 {

+		infos, err := r.f.ReadDir(32)

+		if err != nil {

+			if err != io.EOF {

+				r.err = err

+			}

+			return nil

+		}

+		r.buf = infos

+	}

+

+	if len(r.buf) == 0 {

+		return nil

+	}

+	out := r.buf[0]

+	r.buf[0] = nil

+	r.buf = r.buf[1:]

+	return out

+}

+

+func (r *dirReader) Err() error {

+	return r.err

+}

@@ -361,7 +361,7 @@ github.com/containerd/containerd/sys

 github.com/containerd/containerd/sys/reaper

 github.com/containerd/containerd/tracing

 github.com/containerd/containerd/version

-# github.com/containerd/continuity v0.4.2

+# github.com/containerd/continuity v0.4.3

 ## explicit; go 1.19

 github.com/containerd/continuity/devices

 github.com/containerd/continuity/driver