CreateLibcontainerConfig creates a new libcontainer configuration from a given specification and a cgroup name.

Example returns an example spec file, with many options set so a user can see what a standard spec file looks like.

KnownMountOptions returns the list of the known mount options.

KnownNamespaces returns the list of the known namespaces.

ToRootless converts the given spec file into one that should work with rootless containers (euid != 0), by removing incompatible options and adding others that are needed.

AllowedDevices is the set of devices which are automatically included for all containers.