contrib: fix the docker-device-tool

Signed-off-by: Vincent Batts <vbatts@hashbangbash.com>
Fix the issue when docker exec a paused container, it will always hang.
Add the test case of this issue.

Docker-DCO-1.1-Signed-off-by: Chen Chao <cc272309126@gmail.com> (github: cc272309126)
Reduce permissions changes scope after ADD/COPY

Permissions after an ADD or COPY build instructions are now restricted
to the scope of files potentially modified by the operation rather than
the entire impacted tree.

Fixes #9401.

Signed-off-by: Arnaud Porterie <arnaud.porterie@docker.com>
LXC CAP ADD CAP DROP IN TEMPLATE

Added cap-drop and cap-add in lxc template
Docker-DCO-1.1-Signed-off-by: Abin Shahab <ashahab@altiscale.com> (github: ashahab-altiscale)
docs: docker.service not services

Minor but important typo in the new systemd guide introduced in #9347.

Signed-off-by: Brandon Philips <brandon.philips@coreos.com>
docs: remove a trailing whitespace

Signed-off-by: Brandon Philips <brandon.philips@coreos.com>
docs: use systemd drop-ins instead of copying

Copying the entire docker service file isn't necessary to add an
environment variable, instead use a drop-in configuration file. The nice
side-effect is that the user gets any vendor updates to the
docker.service file.

Signed-off-by: Brandon Philips <brandon.philips@coreos.com>
Merge pull request #9559 from philips/use-dropins-in-systemd-article

docs: use systemd drop-ins instead of copying
Merge pull request #9558 from philips/fixup-typo-in-systemd-article

docs: docker.service not services
Merge pull request #9581 from vbatts/vbatts-fix_gh9138

contrib: fix the docker-device-tool
Merge pull request #9447 from ashahab-altiscale/7687-lxc-cap-add-cap-drop

LXC CAP ADD CAP DROP IN TEMPLATE
Merge pull request #9467 from icecrime/9401-restrict_add_chown_scope

Reduce permissions changes scope after ADD/COPY
Merge pull request #9356 from cc272309126/fix-exec-paused-container

Fix the issue that when docker exec a paused container, it will always
Merge remote-tracking branch 'origin/master' into bump_v1.4.0

* origin/master: (542 commits)
  Flush stdin from within chroot archive
  Running a container that links to a container with --net host should throw an error.
  docs: use systemd drop-ins instead of copying
  docs: remove a trailing whitespace
  docs: docker.service not services
  Removed race condition If two interrupts were fired really quickly interruptCount could have been incremented twice before the LoadUint32 making cleanup not being called at all.
  Fix chroot untar for zero padded archive from slow reader
  LXC CAP ADD CAP DROP IN TEMPLATE
  Return docker's root dir in docker -D info
  I was talking to someone whom i listen to, and she noted that our docs don't mention the license
  Add a fuse example, combining both SYS_ADMIN and --device
  add --cap-add=NET_ADMIN to make a new network device
  Show image of the Build trigger screen, and add a little search engine fodder for it.
  Add some extra details to webhook docs
  this v spacing irritated me while i was reading
  Reduce permissions changes scope after ADD/COPY
  Auto-update documentation from the output of the cli.
  Make 'docker build' send non-err output to stdout
  Use consistent ApplyLayer in overlayfs
  Update Amazon EC2 Docker installation instructions
  ...
Bump version to v1.4.0