add --cap-add=NET_ADMIN to make a new network device

inspired by #9452

Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@docker.com> (github: SvenDowideit)

Signed-off-by: Sven Dowideit <SvenDowideit@docker.com>
Add a fuse example, combining both SYS_ADMIN and --device

inspired by #9448 and #9487

Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@docker.com> (github: SvenDowideit)

Signed-off-by: Sven Dowideit <SvenDowideit@docker.com>
Fix chroot untar for zero padded archive from slow reader

Signed-off-by: Lewis Marshall <lewis@lmars.net>
Running a container that links to a container with --net host
should throw an error.

Docker-DCO-1.1-Signed-off-by: Jessica Frazelle <jess@docker.com> (github: jfrazelle)
Merge pull request #9567 from jfrazelle/8333-net-link-error

Throw error when container links to --net host container
Merge pull request #9539 from flynn/chroot-untar-empty-archive-slow

Fix chroot untar for zero padded archive from slow reader
Flush stdin from within chroot archive

This makes sure that we don't buffer in memory and that we also flush
stdin from diff as well as untar.

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
Merge pull request #9522 from SvenDowideit/add-some-cap-add-examples

Add some cap add examples
Merge pull request #9573 from crosbymichael/flush-stdin

Flush stdin from within chroot archive