libcontainer: setup cpuset cgroup by default

Currently if we don't use --cpuset, the cpuset cgroup is not
created, it's bad if we want to modify cpuset config subsequently,
change the behavior to make it right.

Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
Always join fs.Cpuset reguardless of value

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
Merge pull request #271 from crosbymichael/always-set-cpuset

libcontainer: setup cpuset cgroup by default
Set child sub reaper option on nsenter to help cleanup all processes orphaned via ExecIn.

Docker-DCO-1.1-Signed-off-by: Vishnu Kannan <vishnuk@google.com> (github: vishh)
Remove hairpin nat on veth create

Writing to this file within /sys is casuing some issues for
older kernels, specifically with 2.6.xx, where the write is failing
because /sys is becoming ro.  We will continue to work on the 2.6 issues
but for the time being we cannot ship this with it enabled as it's
breaking all container runs.

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
Merge pull request #274 from crosbymichael/revert-hairpin-nat

Remove hairpin nat on veth create
Add call to label to allow it to tell kernel how to label created files

SELinux supports a call that tells the kernel, from this point onward
create content with this label.  If you pass "", the kernel will
go back to the default.

Docker-DCO-1.1-Signed-off-by: Dan Walsh <dwalsh@redhat.com> (github: rhatdan)
netlink: add NetworkSetTxQueueLen to set qlen

Signed-off-by: Cristian Staretu <cristian.staretu@gmail.com>
Merge pull request #275 from rhatdan/selinux

Add call to label to allow it to tell kernel how to label created files
Merge pull request #276 from unclejack/add_txq

netlink: add NetworkSetTxQueueLen to set qlen
Add support for ppc64, ppc64le, s390x

Signed-off-by: Yohei Ueda <yohei@jp.ibm.com>
Introducing macvtap device to netlink package

Small refactoring of MacVlan calls. Adds tests, too.

Signed-off-by: Milos Gajdos <milosgajdos83@gmail.com> (github: milosgajdos83)
Merge pull request #277 from yoheiueda/support-for-ppc64-ppc64le-s390x

Add support for ppc64, ppc64le, s390x
Add support for setting rlimit for contianer

Adds a new item to the config struct []*Rlimit
Rlimit takes a type (ie, syscall.RLIMIT_NOFILE) and the hard/soft limit
(As max/cur)

Signed-off-by: Brian Goff <cpuguy83@gmail.com>
Merge pull request #280 from cpuguy83/add_rlimit_support

Add support for setting rlimit for contianer
Add container spec

This document specifies the current container specification with all the
underlying setup and configuration that goes into making a container.
This is the v1 spec that is today but allows for flexability when we
introduce more features such as seccomp default profiles and more.

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
Merge pull request #282 from crosbymichael/spec

Add container spec
Merge pull request #278 from milosgajdos83/macvtap

Introducing macvtap device to netlink package
Merge pull request #273 from vishh/prctl

Set child sub reaper option on nsenter
Change namespaces config to include path for setns

This changes the namespace configuration on the config to include the
name of the namespace along with an optional path.  This path is used to
point to a file of another namespace for the namespace so that it can be
joined in place of the empty, initialized namespace.

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>