add --cap-add=NET_ADMIN to make a new network device

inspired by #9452

Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@docker.com> (github: SvenDowideit)

Signed-off-by: Sven Dowideit <SvenDowideit@docker.com>
Add a fuse example, combining both SYS_ADMIN and --device

inspired by #9448 and #9487

Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@docker.com> (github: SvenDowideit)

Signed-off-by: Sven Dowideit <SvenDowideit@docker.com>
Fix chroot untar for zero padded archive from slow reader

Signed-off-by: Lewis Marshall <lewis@lmars.net>
Running a container that links to a container with --net host
should throw an error.

Docker-DCO-1.1-Signed-off-by: Jessica Frazelle <jess@docker.com> (github: jfrazelle)
Merge pull request #9567 from jfrazelle/8333-net-link-error

Throw error when container links to --net host container
Merge pull request #9539 from flynn/chroot-untar-empty-archive-slow

Fix chroot untar for zero padded archive from slow reader
Flush stdin from within chroot archive

This makes sure that we don't buffer in memory and that we also flush
stdin from diff as well as untar.

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
Merge pull request #9522 from SvenDowideit/add-some-cap-add-examples

Add some cap add examples
Merge pull request #9573 from crosbymichael/flush-stdin

Flush stdin from within chroot archive
Merge remote-tracking branch 'origin/master' into bump_v1.4.0

* origin/master: (535 commits)
  Flush stdin from within chroot archive
  Running a container that links to a container with --net host should throw an error.
  Removed race condition If two interrupts were fired really quickly interruptCount could have been incremented twice before the LoadUint32 making cleanup not being called at all.
  Fix chroot untar for zero padded archive from slow reader
  Return docker's root dir in docker -D info
  I was talking to someone whom i listen to, and she noted that our docs don't mention the license
  Add a fuse example, combining both SYS_ADMIN and --device
  add --cap-add=NET_ADMIN to make a new network device
  Show image of the Build trigger screen, and add a little search engine fodder for it.
  Add some extra details to webhook docs
  this v spacing irritated me while i was reading
  Auto-update documentation from the output of the cli.
  Make 'docker build' send non-err output to stdout
  Use consistent ApplyLayer in overlayfs
  Update Amazon EC2 Docker installation instructions
  Fixing docs formatting for the forcerm flag on docker build
  Fix interactive exec over TLS
  Correctly close generated benchmark archives
  Something changed, broke the docs release script, and it seems that --exclude still doesn't work, so I'm removing it
  Fix output format where no variable specified in mount pkg
  ...

Docker-DCO-1.1-Signed-off-by: Jessica Frazelle <jess@docker.com> (github: jfrazelle)
Bump version to v1.4.0

Docker-DCO-1.1-Signed-off-by: Jessica Frazelle <jess@docker.com> (github: jfrazelle)