As syncfs is neither provided by golang syscall package nor by golang.org/x/sys/unix adds a local syncfs syscall implementation. By now the syscall numbers for linux amd64, 386 and arm architectures are provided.
When launching metadata service and net plugins, set the close-on-exec flag so the child processes don't end up holding the lock.