fix off-by-one writing to container list

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>