AppendDevicePermissionsFromCgroupRules takes rules for the devices cgroup to append to the default set.

DefaultLinuxSpec create a default spec for running Linux containers.

DefaultOSSpec returns the spec for a given OS.

DefaultSpec returns the default spec used by docker for the current Platform.

DefaultWindowsSpec create a default spec for running Windows containers.

Device transforms a libcontainer configs.Device to a specs.LinuxDevice object.

DevicesFromPath computes a list of devices and device permissions from paths (pathOnHost and pathInContainer) and cgroup permissions.

RemoveNamespace removes the `nsType` namespace from OCI spec `s`.

SetCapabilities sets the provided capabilities on the spec All capabilities are added if privileged is true.