New folder structure to support TextMate2 bundles format

Docker-DCO-1.1-Signed-off-by: German Del Zotto <germ@ndz.com.ar> (github: GermanDZ)
Instructions for Textmate's bundle installation

Docker-DCO-1.1-Signed-off-by: German Del Zotto <germ@ndz.com.ar> (github: GermanDZ)
fix --run in docker commit

Docker-DCO-1.1-Signed-off-by: Victor Vieux <victor.vieux@docker.com> (github: vieux)
lxc: Drop NET_ADMIN capability in non-privileged containers

With this capability set the container can e.g. change the ip address
of his devices to that of another container on the docker0 bridge. In
a quick test I was able to listen to a port on a different ip than the
one docker assigned me, but was not able to hijack an open port
redirection that another container had open. Maybe its possible with
some more knowledge of networking though.

Anyway, network setup is meant to be handled by docker, not the apps,
so I believe denying this is generally in the spirit of docker, and
it closes down potential security issues.

Docker-DCO-1.1-Signed-off-by: Alexander Larsson <alexl@redhat.com> (github: alexlarsson)
Merge pull request #4059 from alexlarsson/no-netadmin-caps

lxc: Drop NET_ADMIN capability in non-privileged containers
Merge pull request #3990 from 1uptalent/3989-fix-textmate-syntax

Fix textmate syntax bundler organization
Merge pull request #4049 from vieux/fix_commit

fix --run in docker commit