AppendDevicePermissionsFromCgroupRules takes rules for the devices cgroup to append to the default set.

DefaultLinuxSpec create a default spec for running Linux containers.

DefaultPathEnv is unix style list of directories to search for executables.

DefaultSpec returns the default spec used by docker for the current Platform.

DefaultWindowsSpec create a default spec for running Windows containers.

DevicesFromPath computes a list of devices and device permissions from paths (pathOnHost and pathInContainer) and cgroup permissions.

NamespacePath returns the configured Path of the first namespace in s.Linux.Namespaces of type nsType.

RemoveNamespace removes the `nsType` namespace from OCI spec `s`.

SetCapabilities sets the provided capabilities on the spec All capabilities are added if privileged is true.