pkg/tarsum: add dynamic buffer sizing

This commit makes tarsum buffer allocation dynamic. This change
is required to avoid allocating memory excessively after the archive
buffering changes.

Docker-DCO-1.1-Signed-off-by: Cristian Staretu <cristian.staretu@gmail.com> (github: unclejack)
add -p PORT as a valid format specification

Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@docker.com> (github: SvenDowideit)
Change default label of container volumes to shared SELinux Label

Since these will be shared between containers we want to label
them as svirt_sandbox_file_t:s0.  That will allow multiple containers
to write to them.

Currently we are allowing container domains to read/write all content in
/var/lib/docker because of container volumes.  This is a big security hole
in our SELinux story.

This patch will allow us to tighten up the security of docker containers.

Docker-DCO-1.1-Signed-off-by: Dan Walsh <dwalsh@redhat.com> (github: rhatdan)
tarsum: use Debugf, not Infof

Signed-off-by: Vincent Batts <vbatts@redhat.com>
Merge pull request #7660 from rhatdan/selinux-volumes

Change default label of container volumes to shared SELinux Label
Merge pull request #7948 from SvenDowideit/add-more-port-specification-doc

add -p PORT as a valid format specification
Merge pull request #7960 from vbatts/vbatts-tarsum_debugf_not_infof

tarsum: use Debugf, not Infof
Merge pull request #7921 from unclejack/increase_tarsum_buffer_size

pkg/tarsum: make buffer size dynamic
Deallocate port before trying to delete iptables chain

Fixes #7954
Signed-off-by: Alexandr Morozov <lk4d4math@gmail.com>
Add IsPrivate method for NetworkMode

This method indicates that container using private network stack

Signed-off-by: Alexandr Morozov <lk4d4math@gmail.com>
Merge pull request #7897 from LK4D4/refactoring_net_mode

Add IsPrivate method for NetworkMode
Merge pull request #7955 from LK4D4/ignore_delete_err_on_unmap_#7954

Deallocate port before trying to delete iptables chain