rejig the helloflask example as more advanced, and move it to the end

Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@home.org.au> (github: SvenDowideit)
swap busybox for ubuntu, its quicker..

Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@home.org.au> (github: SvenDowideit)
update a new movie: http://asciinema.org/a/7658

Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@fosiki.com> (github: SvenDowideit)
suggested improvements

Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@home.org.au> (github: SvenDowideit)
archive: Fix the storing of setuid bits, etc

In commit 3dfc910d7774d57c533b067fbe59d6b24dd803cd we changed from
syscall.Chmod() to os.Chmod(), but these take a different form of the
Mode argument. The sycall one takes the raw linux form, wheras
os.Chmod takes the os.FileMode form, and they differ for the higher
bits (setuid, setgid, etc). The raw tar header uses a form which
is compatible with the syscalls, but not the go calls.

We fix this by using hdr.FileInfo() which properly converts the mode
to what go expects.

Docker-DCO-1.1-Signed-off-by: Alexander Larsson <alexl@redhat.com> (github: alexlarsson)
This patch adds SELinux labeling support.

The basic idea is to run the process with an SELinux label and to label all the content with
a mount label.  Any temporary file systems created need to be mounted with the mount label.

For now the user can override the process label by specifying

-Z With a string of space separated options.

-Z "user=unconfined_u role=unconfined_r type=unconfined_t level=s0"

Would cause the process label to run with unconfined_u:unconfined_r:unconfined_t:s0"

By default the processes will run execute within the container as svirt_lxc_net_t.
All of the content in the container as svirt_sandbox_file_t.

The process mcs level is based of the PID of the docker process that is creating the container.
Merge pull request #4198 from alexlarsson/fix-setuid

archive: Fix the storing of setuid bits, etc
Fix dyntest problems finding dockerinit

Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
Add "Conflicts" to our lxc-docker package to make it more clear that we can't/shouldn't be installed alongside either "docker" or "docker.io"

Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
Merge pull request #4206 from tianon/ubuntu-conflicts

Add "Conflicts" to our lxc-docker package
Merge pull request #4205 from tianon/fix-dyntest

Fix dyntest problems finding dockerinit
Merge branch 'master' of https://github.com/dotcloud/docker
Merge pull request #4145 from SvenDowideit/redo-python-example

touch up the examples
Merge branch 'master' of https://github.com/dotcloud/docker