pkg/tarsum: add dynamic buffer sizing

This commit makes tarsum buffer allocation dynamic. This change
is required to avoid allocating memory excessively after the archive
buffering changes.

Docker-DCO-1.1-Signed-off-by: Cristian Staretu <cristian.staretu@gmail.com> (github: unclejack)
add -p PORT as a valid format specification

Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@docker.com> (github: SvenDowideit)
typo fix: immediatly -> immediately

Signed-off-by: Hu Tao <hutao@cn.fujitsu.com>
Reformat the API docs so I can read them

Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@docker.com> (github: SvenDowideit)
Change default label of container volumes to shared SELinux Label

Since these will be shared between containers we want to label
them as svirt_sandbox_file_t:s0.  That will allow multiple containers
to write to them.

Currently we are allowing container domains to read/write all content in
/var/lib/docker because of container volumes.  This is a big security hole
in our SELinux story.

This patch will allow us to tighten up the security of docker containers.

Docker-DCO-1.1-Signed-off-by: Dan Walsh <dwalsh@redhat.com> (github: rhatdan)
Merge pull request #7951 from taohu/typo

typo fix: immediatly -> immediately
Merge pull request #7953 from SvenDowideit/reformat-api-docs

Reformat the API docs so I can read them
fix console attribute in lxc template

commit 4aa5da278f49c889d43191f82ff42d3a95266d62 moves `Console` from Command to
ProcessConfig, but missed the change in lxc_template. Therefore creating a
container with tty using lxc driver with fail with error

template: lxc:60:20: executing "lxc" at <.Console>: Console is not a field of
struct type struct { *execdriver.Command; AppArmor bool; ProcessLabel string; MountLabel string }

This changes lxc_console template to refers to `.ProcessConfig.Console`

Docker-DCO-1.1-Signed-off-by: Daniel, Dao Quang Minh <dqminh89@gmail.com> (github: dqminh)
Merge pull request #7958 from dqminh/fix-lxc-template-console

fix console attribute in lxc template
tarsum: use Debugf, not Infof

Signed-off-by: Vincent Batts <vbatts@redhat.com>
Merge pull request #7660 from rhatdan/selinux-volumes

Change default label of container volumes to shared SELinux Label
Merge pull request #7948 from SvenDowideit/add-more-port-specification-doc

add -p PORT as a valid format specification
Merge pull request #7960 from vbatts/vbatts-tarsum_debugf_not_infof

tarsum: use Debugf, not Infof
Merge pull request #7921 from unclejack/increase_tarsum_buffer_size

pkg/tarsum: make buffer size dynamic
Deallocate port before trying to delete iptables chain

Fixes #7954
Signed-off-by: Alexandr Morozov <lk4d4math@gmail.com>
Add IsPrivate method for NetworkMode

This method indicates that container using private network stack

Signed-off-by: Alexandr Morozov <lk4d4math@gmail.com>
Merge pull request #7897 from LK4D4/refactoring_net_mode

Add IsPrivate method for NetworkMode
Merge pull request #7955 from LK4D4/ignore_delete_err_on_unmap_#7954

Deallocate port before trying to delete iptables chain