Fix potential race in volume creation

Docker-DCO-1.1-Signed-off-by: Brian Goff <cpuguy83@gmail.com> (github: cpuguy83)
Document Volumes and Binds

Signed-off-by: Jean-Paul Calderone <jean-paul@clusterhq.com>
Add more info about when build cache is invalidated/used - Issue #3636
Plus some edits as suggested by @jamtur01

Closes #3636

Signed-off-by: Doug Davis <dug@us.ibm.com>
Update libcontainer to c744f6470e37be5ce1f1ae09b84

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
Update native driver to set RootFs

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
Source the bash_completion after installation

Signed-off-by: Przemek Hejman <przemyslaw.hejman@gmail.com>
Strongly type exec driver context

This also removes dead code in the native driver for a past feature that
was never fully implemented.

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
Fixed simple typo

Signed-off-by: Scott Collier <emailscottcollier@gmail.com>
Merge pull request #8295 from crosbymichael/type-exec-context

Strongly type exec driver context
Add --security-opts options to allow user to customize security configuration

security-opts will allow you to customise the security subsystem.

For example the labeling system like SELinux will run on a container.

    --security-opt="label:user:USER"   : Set the label user for the container
    --security-opt="label:role:ROLE"   : Set the label role for the container
    --security-opt="label:type:TYPE"   : Set the label type for the container
    --security-opt="label:level:LEVEL" : Set the label level for the container
    --security-opt="label:disabled"    : Turn off label confinement for the container

Since we are passing a list of string options instead of a space separated
string of options, I will change function calls to use InitLabels instead of
GenLabels.  Genlabels interface is Depracated.

Docker-DCO-1.1-Signed-off-by: Dan Walsh <dwalsh@redhat.com> (github: rhatdan)
Merge pull request #8293 from crosbymichael/update-libcontainer-sep8

Update libcontainer to c744f6470e37be5ce1f1ae09b842c15c1bee120d
add apparmor:

Signed-off-by: Victor Vieux <vieux@docker.com>
Merge pull request #8296 from scollier/typo

Fixed simple typo
Doc update to clarify EXPOSE vs -p functionality.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
Merge pull request #8280 from duglin/Issue3636

Add more info about when build cache is invalidated/used - Issue #3636
Merge pull request #8281 from dfarrell07/master

Doc update to clarify EXPOSE vs -p functionality.
Filter containers by status.

A continuation of #7616.
Adds `docker ps --filter=status=(restarting|running|paused|stopped)` option.

Docker-DCO-1.1-Signed-off-by: Jessica Frazelle <jess@docker.com> (github: jfrazelle)
Move Go() promise-like func from utils to pkg/promise

This is the first of two steps to break the archive package's dependence
on utils so that archive may be moved into pkg.  Also, the `Go()`
function is small, concise, and not specific to the docker internals, so
it is a good candidate for pkg.

Signed-off-by: Rafe Colton <rafael.colton@gmail.com>
Move Matches() file path matching function into pkg/fileutils

This is the second of two steps to break the archive package's
dependence on utils so that archive may be moved into pkg. `Matches()`
is also a good candidate pkg in that it is small, concise, and not
specific to docker internals

Signed-off-by: Rafe Colton <rafael.colton@gmail.com>
Move archive package into pkg/archive

Now that the archive package does not depend on any docker-specific
packages, only those in pkg and vendor, it can be safely moved into pkg.

Signed-off-by: Rafe Colton <rafael.colton@gmail.com>