Support Privileged.

[Random-Liu]

Privileged is initially a Docker concept. Docker grants a group of permissions and mounts a group of directories into a privileged pod.

In Kubernetes, we should define our own Privileged kubernetes/kubernetes#44503. For now, we could do whatever docker is doing.

Things to do:

1. Figure out what docker is doing to Privileged container.
2. Do the same in cri-contained.

/cc @heartlock

[heartlock]

I will take this task. Wait for #22

[Random-Liu]

@heartlock I'll update #22 today, and will try to get it merged this week.

[Random-Liu]

FYI, @heartlock The container lifecycle PR is merged. #22

[heartlock]

@Random-Liu ok, will do it.

[Random-Liu]

@heartlock For the device mapping, you could reference the cri-o implementation. https://github.com/kubernetes-incubator/cri-o/blob/master/server/container_create.go#L68-L93

For CRI config -> runc config part, we are very similar. :p

[Random-Liu]

Close this one since the PR is merged.

Thanks @heartlock