contrib: fix the docker-device-tool

Signed-off-by: Vincent Batts <vbatts@hashbangbash.com>
Fix the issue when docker exec a paused container, it will always hang.
Add the test case of this issue.

Docker-DCO-1.1-Signed-off-by: Chen Chao <cc272309126@gmail.com> (github: cc272309126)
Reduce permissions changes scope after ADD/COPY

Permissions after an ADD or COPY build instructions are now restricted
to the scope of files potentially modified by the operation rather than
the entire impacted tree.

Fixes #9401.

Signed-off-by: Arnaud Porterie <arnaud.porterie@docker.com>
LXC CAP ADD CAP DROP IN TEMPLATE

Added cap-drop and cap-add in lxc template
Docker-DCO-1.1-Signed-off-by: Abin Shahab <ashahab@altiscale.com> (github: ashahab-altiscale)
Added description for 'docker run' command, -c/--cpu-shares flag

Signed-off-by: Shishir Mahajan <shishir.mahajan@redhat.com>
Merge pull request #9581 from vbatts/vbatts-fix_gh9138

contrib: fix the docker-device-tool
Merge pull request #9447 from ashahab-altiscale/7687-lxc-cap-add-cap-drop

LXC CAP ADD CAP DROP IN TEMPLATE
Merge pull request #9467 from icecrime/9401-restrict_add_chown_scope

Reduce permissions changes scope after ADD/COPY
Merge pull request #9356 from cc272309126/fix-exec-paused-container

Fix the issue that when docker exec a paused container, it will always
User should get error message on wrong config
closes #9501

Signed-off-by: Srini Brahmaroutu <srbrahma@us.ibm.com>
Merge pull request #9575 from brahmaroutu/lxcconf_9501

User should get error message on wrong config
Add test for exec tty stdin close

Signed-off-by: Brian Goff <cpuguy83@gmail.com>
Forbid client piping to tty enabled container

Forbid `docker run -t` with a redirected stdin (such as `echo test |
docker run -ti busybox cat`). Forbid `docker exec -t` with a redirected
stdin. Forbid `docker attach` with a redirect stdin toward a tty enabled
container.

Signed-off-by: Arnaud Porterie <arnaud.porterie@docker.com>
Merge pull request #9537 from icecrime/9476-tty_stdin_redirect

Forbid client piping to tty enabled container
Merge pull request #9318 from shishir-a412ed/doc-cpu-share

Enhanced description for 'docker run' command, -c/--cpu-shares flag
Use Set for stderr "logs" job in builder

Because engine implicitly adds his stder to job stderr

Signed-off-by: Alexandr Morozov <lk4d4@docker.com>
Merge pull request #9588 from LK4D4/remove_stderr_from_build

Use Set for stderr "logs" job in builder