container=lxc-libvirt
add useful error message for early dockerinit failures
misc fixes

- get rid of race condition between dockerinit socket bind and listen.
  instead we'll just crudely wait in a loop
- add ugly hack to create /.docker if it doesn't exist
- add /dev/console to dockerinit layer (needed for full OS mode)
- hook up dockerinit console so we'll see any earlier errors.  get rid
  of that init.log nonsense
- container=lxc fix
- /.docker/init fix
- env fix
hostname and capability dropping (privileged)