1. container in the freezing state must be unfreeze
https://gitee.com/src-openeuler/lxc/pulls/498
2. bugfix for files.limit invalid
should return false if failed to write cgroup.procs after max times,
or will lead to files.limit invalid
3. run oci-prestart hook before switch root
In: https://gitee.com/src-openeuler/lxc/pulls/513, we move oci-prestart hook
after sync_cgroup_limits, for sync_cgroup_limits will write a *:* rwm device rule
which will lead the device rule we write in oci-prestart hook useless.
However the modification move oci-prestart hook after change root.
We restore the changes. Since setup_limits_legacy will do the a *:* rwm write,
we only ensure that setup_limits_legacy executes before oci-prestart.
Signed-off-by: jikai <jikai11@huawei.com>
(cherry picked from commit 66a11e65caa6a9d44578eff65ff1651ff2c7374e)
