Update libcontainer dec8

This updates the config with a namespace struct that allows any of the namespaces to be joined at the create of a container instead of one off fields for NET and IPC.  

This also adds support of cpuset.mems being implemented in #9536
I think it's more of an issue with go and not having generic lists with standard operations, you always have to loop over everything or hack in a map to create a generic set