Security fixes: - CVE-2021-21285 Prevent an invalid image from crashing docker daemon - CVE-2021-21284 Lock down file permissions to prevent remapped root from accessing docker state - Ensure AppArmor and SELinux profiles are applied when building with BuildKit Signed-off-by: Christian Stewart <christian@paral.in> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>