as well as update existing tests to allow drop_infra_ctr to be true or false by default

Signed-off-by: Peter Hunt <[email protected]>

specifically, set RUNTIME_NAME and CONTAINER_DEFAULT_RUNTIME if it's set as such

Signed-off-by: Peter Hunt <[email protected]>

sysctls must be passed to pinns of the format -s 'key=value'+'key2=value2'
also, move the pinns source code to `pinns/src` to clean up the top level directory a bit

Signed-off-by: Peter Hunt <[email protected]>

as it would otherwise unconditionally have pexit() called

Signed-off-by: Peter Hunt <[email protected]>

Signed-off-by: Peter Hunt <[email protected]>

to hold crio specific annotations until they are stable enough to put in containers/common

Signed-off-by: Peter Hunt <[email protected]>

as well as a constructor for a spoofed container

a Spoofed() container is one that exists in cri-o's state, but not in the runtime

This allows us to drop the infra, but keep bookkeeping standardized
(for instance, when we restore cri-o, we look at the container's state directory)

Signed-off-by: Peter Hunt <[email protected]>

to allow the sandbox to decide when it needs an infra container

Signed-off-by: Peter Hunt <[email protected]>

in the initial (very old) implementation of a dropped infra,
infra containers were allowed to be nil

This is no longer the case, so we can remove traces of that old implementation

Signed-off-by: Peter Hunt <[email protected]>

this commit includes:
- propegate sysctls from pod creation down to pinns
- use the annotations package for userns and spoofed containers
- add restore code for when a container was spoofed
- query a runtime handler based on the string instead of by container
  - this allows us to query the runtime handler before we create the container to allow it to be spoofed
- drop the infra container when the pod is not kernel separated, and when NeedsInfra is false

Signed-off-by: Peter Hunt <[email protected]>