Redirect stdout/stderr of wshd

Change-Id: I96d915fe79250036e52b5b8dffae07954328d482
Fix setup with ALLOW_NETWORKS/DENY_NETWORKS

Change-Id: If618758e896a418980fd668537e49ce1a196af54
do quotaoff  when disk quota is disabled

Change-Id: I73178ffbd692cc07bb17a33cb551da258a784196
[bugfix] read/write should set 0 as default hup

Change-Id: I56ac5784819b1956d9c27a6cae0d2f3dd246a9af
Move restore logic to container instance

Change-Id: I1f940512adc71c2a3c738828c2fccf7cf6853652
Do not treat -- in the middle as a field

Change-Id: I331693babbd4b5acbf0fde0a411dcc715eefb57e
Liberate access to resources hash

Change-Id: I62da2cd4b5f9a1b04ea25cbeb22a222f91e06517
Keep track of net_in/net_out in container snapshot

Change-Id: Ibe43679d54b4f5cd34c6aae197f8d70be62e4467
Always recover container snapshots

This used to only take place when the warden server was properly
drained. In reality, it is more likely that is is NOT properly drained
and just gets killed.

This commit doesn't cover every edge case but it a first attempt in
making this happen. Things that need to be checked/put in place are:

- The OOM notifier must run after recovery
- Memory limits must be persisted to and recovered from the snapshot
- Bandwidth limits must be persisted to and recovered from the snapshot
- The disk quota must be persisted to and recovered from the snapshot

Change-Id: I0d4fed1af58723d5f33c6be107f0cc2db999db19
Specify network pool as address/mask

Change-Id: Ib987434e04810be11b5a95b58605e2533aaa0417
Use pooled network for SNAT rule

Change-Id: I16376ecec7007e4bed56fc1542afa1deef5b3883
Merge "Specify network pool as address/mask"
Merge "Use pooled network for SNAT rule"
Properly assign netmask variable
Merge branch 'master' into snapshot-restore

Conflicts:
	warden/lib/warden/container/linux.rb
Add tmp directory to insecure skeleton
Fix tests

The stdout/stderr fields are no longer part of the job snapshot.
Rename netmask -> pooled_netmask for clarity

The previous implementation didn't return the right netmask for exactly
this reason.
Refactor oom.c to use select(2)
Make oom process die when parent dies