Minor features and fixes:

* Add the memory swappiness tuning support to libcontainer
* Use simpler parsing of /proc/self/mountinfo for FindCgroupMountpoint
* Additional ppc architectures follow the arm datatype
* Fix nsinit README.md config link
* Only try to get AdditionalGroups if they are configured

This release includes seccomp support and additional groups for conta…

…iner.

Full list of changes:

* Update nsinit readme for C/R
* process.go can compile on FreeBSD
* cgroup memory: Enchance stats support of memory
* hugetlb: Add support of Set and GetStats function
* Add mutex in Manager to read from m.Paths
* bug fix: slice bounds out of range in TestGenerateName
* spec: Fix errors in file system mount points table in spec
* Update dockerproject.com links to dockerproject.org
* Fix hack/validate.sh(scripts was changed in docker/docker repo)
* make libcontainer compile on freebsd
* Add seccomp feature
* Stop systemd unit on destroy
* Fix relabel to allow volume mounting of /
* Convert dup2 calls to dup3
* Additional groups lookup
* Don't change memswap value in libcontainer

Fix relabel to allow volume mounting of /

Major features:

    * Add Checkpoint and Restore methods to Container
        Containers support checkpointing and restore via criu(8) for linux
        containers.

Minor features and bugfixes:
    * Set the seed when randMacAddr
    * cgroup: add support for net_prio
    * croup cpu: add support for realtime throttling
    * cgroups: add support for net_cls
    * cgroup: add freeze Set When calls systemd to Apply
    * Fix stacktrace panic in capturing error stack
    * cgroup: Add freeze Set When calls systemd to Apply
    * Windows: Initial compilation enablement
    * Fix nsenter package on unsupported platforms
    * Add a flag for specifying system properties

* Do not prevent mounts in /sys

* Update github.com/syndtr/gocapability to 66ef2aa
* Don't fail when subsystem not mounted(except devices)

Includes new libcontainer API, various fixes and important security u…

…pdate