diff --git a/executor/runcexecutor/executor.go b/executor/runcexecutor/executor.go
index 593ecf0a..edffb5bf 100644
--- a/executor/runcexecutor/executor.go
+++ b/executor/runcexecutor/executor.go
@@ -73,7 +73,10 @@ func New(opt Opt) (executor.Executor, error) {
 	if err != nil {
 		return nil, err
 	}
-	// TODO: check that root is not symlink to fail early
+	root, err = filepath.EvalSymlinks(root)
+	if err != nil {
+		return nil, err
+	}
 
 	runtime := &runc.Runc{
 		Command:      cmd,