diff --git a/cli/command/container/create.go b/cli/command/container/create.go
index d070d8d15f..f70e474338 100644
--- a/cli/command/container/create.go
+++ b/cli/command/container/create.go
@@ -428,6 +428,7 @@ func copyDockerConfigIntoContainer(ctx context.Context, apiClient client.APIClie
 	})
 
 	if _, err := io.Copy(tarWriter, &configBuf); err != nil {
+		_ = tarWriter.Close()
 		return fmt.Errorf("writing config to tar file for config copy: %w", err)
 	}