Move deps from _workspace/ to vendor/

godep restore
pushd $GOPATH/src/github.com/appc/spec
git co master
popd
go get go4.org/errorutil
rm -rf Godeps
godep save ./...
git add vendor
git add -f $(git ls-files --other vendor/)
git co -- Godeps/LICENSES Godeps/.license_file_state Godeps/OWNERS

vendor/github.com/opencontainers/runc/libcontainer/setns_init_linux.go

@@ -0,0 +1,44 @@
+// +build linux
+
+package libcontainer
+
+import (
+	"os"
+
+	"github.com/opencontainers/runc/libcontainer/apparmor"
+	"github.com/opencontainers/runc/libcontainer/label"
+	"github.com/opencontainers/runc/libcontainer/seccomp"
+	"github.com/opencontainers/runc/libcontainer/system"
+)
+
+// linuxSetnsInit performs the container's initialization for running a new process
+// inside an existing container.
+type linuxSetnsInit struct {
+	config *initConfig
+}
+
+func (l *linuxSetnsInit) Init() error {
+	if err := setupRlimits(l.config.Config); err != nil {
+		return err
+	}
+	if err := setOomScoreAdj(l.config.Config.OomScoreAdj); err != nil {
+		return err
+	}
+	if l.config.Config.Seccomp != nil {
+		if err := seccomp.InitSeccomp(l.config.Config.Seccomp); err != nil {
+			return err
+		}
+	}
+	if err := finalizeNamespace(l.config); err != nil {
+		return err
+	}
+	if err := apparmor.ApplyProfile(l.config.Config.AppArmorProfile); err != nil {
+		return err
+	}
+	if l.config.Config.ProcessLabel != "" {
+		if err := label.SetProcessLabel(l.config.Config.ProcessLabel); err != nil {
+			return err
+		}
+	}
+	return system.Execv(l.config.Args[0], l.config.Args[0:], os.Environ())
+}