3aecfd0ec5
1. container in the freezing state must be unfreeze https://gitee.com/src-openeuler/lxc/pulls/498 2. bugfix for files.limit invalid should return false if failed to write cgroup.procs after max times, or will lead to files.limit invalid 3. run oci-prestart hook before switch root In: https://gitee.com/src-openeuler/lxc/pulls/513, we move oci-prestart hook after sync_cgroup_limits, for sync_cgroup_limits will write a *:* rwm device rule which will lead the device rule we write in oci-prestart hook useless. However the modification move oci-prestart hook after change root. We restore the changes. Since setup_limits_legacy will do the a *:* rwm write, we only ensure that setup_limits_legacy executes before oci-prestart. Signed-off-by: jikai <jikai11@huawei.com> (cherry picked from commit 66a11e65caa6a9d44578eff65ff1651ff2c7374e)