The daemon root exists before graphdriver initialization, so recursively creating driver homes can apply the driver's ownership and mode to missing parent directories. Create each driver-owned directory directly during initialization, including the VFS layer parent. Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com> Signed-off-by: Sebastiaan van Stijn <github@gone.nl>