Add ulimits support to docker service and docker stack deploy

[akerouanton]

- What I did

1. Bump docker/docker to my own fork to have API changes regarding ulimits support on service endpoints ;
2. Add --ulimit to docker service create ;
3. Add --ulimit-add and --ulimit-rm options to docker service update ;
4. Add Ulimits to docker service inspect --pretty ;
5. Support ulimits in docker-compose files, to make them work with docker stack deploy ;

This is related to moby/moby#40639.

- How I did it

- How to verify it

Given the following docker-compose.yaml:

version: "3"

services:
  test:
    image: debian
    command: /bin/bash -c "ulimit -a && sleep 15"
    ulimits:
      nofile: 100
    deploy:
      mode: replicated

docker service create

$ docker service create --name t2 --ulimit=nofile=100 debian /bin/bash -c "ulimit -a && sleep 30"
$ docker service logs -f t2
...
t2.1.dkm9duj5i4rq@aker    | open files                      (-n) 100
t2.1.dkm9duj5i4rq@aker    | real-time priority              (-r) 0
...

docker service update

$ docker service update --ulimit-rm nofile --ulimit-add rtprio=1 t2
$ docker service logs -f t2
...
t2.1.dkm9duj5i4rq@aker    | open files                      (-n) 1048576
t2.1.dkm9duj5i4rq@aker    | real-time priority              (-r) 1
...

docker service inspect

$ docker service update --ulimit-add nofile=100:200 t2
$ docker service inspect --pretty t2
...
Ulimits:
 nofile: 100:200
 nproc: -1:-1
...

$ docker service inspect t2
...
        "Ulimits": [
            {
                "Name": "nproc",
                "Hard": -1,
                "Soft": -1
            },
            {
                "Name": "nofile",
                "Hard": 200,
                "Soft": 100
            }
        ]
...

docker stack deploy

$ cat docker-compose.yaml
version: "3"

services:
  test:
    image: debian
    command: /bin/bash -c "ulimit -a && sleep 15"
    ulimits:
      nofile: 100
    deploy:
      mode: replicated

$ docker stack deploy --compose-file docker-compose.yaml test
$ docker service logs -f test_test | grep "open files"
test_test.1.jezlw4wt08rz@aker    | open files                      (-n) 100
$ docker inspect $(docker ps --filter=name=test_test -q)
...
        "Ulimits": [
            {
                "Name": "nofile",
                "Hard": 100,
                "Soft": 100
            }
        ],
...

- Description for the changelog

Add ulimits support to docker service create|update|inspect and docker stack deploy

- A picture of a cute animal (not mandatory but encouraged)

[codecov-commenter]

Codecov Report

Merging #2660 into master will decrease coverage by 0.01%.
The diff coverage is 50.00%.

@@            Coverage Diff             @@
##           master    #2660      +/-   ##
==========================================
- Coverage   58.14%   58.12%   -0.02%     
==========================================
  Files         295      295              
  Lines       21198    21238      +40     
==========================================
+ Hits        12325    12345      +20     
- Misses       7966     7982      +16     
- Partials      907      911       +4     

[akerouanton]

@thaJeztah This PR is ready for review 😉

[thaJeztah]

Thanks!

[silvin-lubecki]

Thank you @akerouanton for this PR 👍 The code looks good, but I think this PR lacks some tests. Do you think you could add some to the formater part and to the service update 🙏 ?

[cpuguy83]

Just a couple of comments:

Need to make sure the final list of ulimits removes duplicates and is sorted.
Other than this seems good.

[thaJeztah]

carried in #2712, thanks!