Fix potential race in volume creation

Docker-DCO-1.1-Signed-off-by: Brian Goff <cpuguy83@gmail.com> (github: cpuguy83)
Add --security-opts options to allow user to customize security configuration

security-opts will allow you to customise the security subsystem.

For example the labeling system like SELinux will run on a container.

    --security-opt="label:user:USER"   : Set the label user for the container
    --security-opt="label:role:ROLE"   : Set the label role for the container
    --security-opt="label:type:TYPE"   : Set the label type for the container
    --security-opt="label:level:LEVEL" : Set the label level for the container
    --security-opt="label:disabled"    : Turn off label confinement for the container

Since we are passing a list of string options instead of a space separated
string of options, I will change function calls to use InitLabels instead of
GenLabels.  Genlabels interface is Depracated.

Docker-DCO-1.1-Signed-off-by: Dan Walsh <dwalsh@redhat.com> (github: rhatdan)
add apparmor:

Signed-off-by: Victor Vieux <vieux@docker.com>
Move Go() promise-like func from utils to pkg/promise

This is the first of two steps to break the archive package's dependence
on utils so that archive may be moved into pkg.  Also, the `Go()`
function is small, concise, and not specific to the docker internals, so
it is a good candidate for pkg.

Signed-off-by: Rafe Colton <rafael.colton@gmail.com>
Move Matches() file path matching function into pkg/fileutils

This is the second of two steps to break the archive package's
dependence on utils so that archive may be moved into pkg. `Matches()`
is also a good candidate pkg in that it is small, concise, and not
specific to docker internals

Signed-off-by: Rafe Colton <rafael.colton@gmail.com>
Move archive package into pkg/archive

Now that the archive package does not depend on any docker-specific
packages, only those in pkg and vendor, it can be safely moved into pkg.

Signed-off-by: Rafe Colton <rafael.colton@gmail.com>
Add missing "tag" parameter to tag API

Closes #4877

Signed-off-by: Doug Davis <dug@us.ibm.com>
update docs

Signed-off-by: Victor Vieux <vieux@docker.com>
update tests

Signed-off-by: Victor Vieux <vieux@docker.com>
Edits and fixes to Dockerfile Best Practices based on review feedback.

Docker-DCO-1.1-Signed-off-by: Fred Lifton <fred.lifton@docker.com> (github: fredlf)
Merge pull request #8299 from vieux/pr_7425

Add --security-opts options to allow user to customize container labels and apparmor profile
Merge pull request #8266 from cpuguy83/fix_race_in_createing_volumes

Fix potential race in volume creation
Create registry_api_client_libraries.md
Signed-off-by: Konrad Kleine <konrad.wilhelm.kleine@gmail.com>
Add registry_api_client_libraries.md to mkdocs.yml

Signed-off-by: Konrad Kleine <konrad.wilhelm.kleine@gmail.com>
Update host_integration.md
bump Go to 1.3.3

Docker-DCO-1.1-Signed-off-by: Cristian Staretu <cristian.staretu@gmail.com> (github: unclejack)
Merge pull request #8302 from rafecolton/move_archive_package_to_pkg

Move archive package to pkg
Merge pull request #8340 from unclejack/bump_go_to_1.3.3

bump Go to 1.3.3
Merge pull request #8313 from duglin/Issue4877

Add missing "tag" parameter to tag API - Issue #4877
Add a note about using an open schema model

Closes: #4787

Signed-off-by: Doug Davis <dug@us.ibm.com>