contrib: fix the docker-device-tool

Signed-off-by: Vincent Batts <vbatts@hashbangbash.com>
Fix the issue when docker exec a paused container, it will always hang.
Add the test case of this issue.

Docker-DCO-1.1-Signed-off-by: Chen Chao <cc272309126@gmail.com> (github: cc272309126)
Reduce permissions changes scope after ADD/COPY

Permissions after an ADD or COPY build instructions are now restricted
to the scope of files potentially modified by the operation rather than
the entire impacted tree.

Fixes #9401.

Signed-off-by: Arnaud Porterie <arnaud.porterie@docker.com>
LXC CAP ADD CAP DROP IN TEMPLATE

Added cap-drop and cap-add in lxc template
Docker-DCO-1.1-Signed-off-by: Abin Shahab <ashahab@altiscale.com> (github: ashahab-altiscale)
docs: docker.service not services

Minor but important typo in the new systemd guide introduced in #9347.

Signed-off-by: Brandon Philips <brandon.philips@coreos.com>
docs: remove a trailing whitespace

Signed-off-by: Brandon Philips <brandon.philips@coreos.com>
docs: use systemd drop-ins instead of copying

Copying the entire docker service file isn't necessary to add an
environment variable, instead use a drop-in configuration file. The nice
side-effect is that the user gets any vendor updates to the
docker.service file.

Signed-off-by: Brandon Philips <brandon.philips@coreos.com>
Merge pull request #9559 from philips/use-dropins-in-systemd-article

docs: use systemd drop-ins instead of copying
Merge pull request #9558 from philips/fixup-typo-in-systemd-article

docs: docker.service not services
Merge pull request #9581 from vbatts/vbatts-fix_gh9138

contrib: fix the docker-device-tool
Merge pull request #9447 from ashahab-altiscale/7687-lxc-cap-add-cap-drop

LXC CAP ADD CAP DROP IN TEMPLATE
Merge pull request #9467 from icecrime/9401-restrict_add_chown_scope

Reduce permissions changes scope after ADD/COPY
Merge pull request #9356 from cc272309126/fix-exec-paused-container

Fix the issue that when docker exec a paused container, it will always
User should get error message on wrong config
closes #9501

Signed-off-by: Srini Brahmaroutu <srbrahma@us.ibm.com>
Merge pull request #9575 from brahmaroutu/lxcconf_9501

User should get error message on wrong config
Add test for exec tty stdin close

Signed-off-by: Brian Goff <cpuguy83@gmail.com>
Forbid client piping to tty enabled container

Forbid `docker run -t` with a redirected stdin (such as `echo test |
docker run -ti busybox cat`). Forbid `docker exec -t` with a redirected
stdin. Forbid `docker attach` with a redirect stdin toward a tty enabled
container.

Signed-off-by: Arnaud Porterie <arnaud.porterie@docker.com>
Merge pull request #9537 from icecrime/9476-tty_stdin_redirect

Forbid client piping to tty enabled container