Docker Engine Updates: Container Fixes, Swarm Mode, and Packaging

- Fix some issues with locking on the container [moby/moby#35501](https://github.com/moby/moby/pull/35501) - Fixup some issues with plugin refcounting [moby/moby#35265](https://github.com/moby/moby/pull/35265) + Add missing lock in ProcessEvent [moby/moby#35516](https://github.com/moby/moby/pull/35516) + Add vfs quota support [moby/moby#35231](https://github.com/moby/moby/pull/35231) * Skip empty directories on prior graphdriver detection [moby/moby#35528](https://github.com/moby/moby/pull/35528) * Skip xfs quota tests when running in user namespace [moby/moby#35526](https://github.com/moby/moby/pull/35526) + Added SubSecondPrecision to config option. [moby/moby#35529](https://github.com/moby/moby/pull/35529) * Update fsnotify to fix deadlock in removing watch [moby/moby#35453](https://github.com/moby/moby/pull/35453) - Fix "duplicate mount point" when `--tmpfs /dev/shm` is used [moby/moby#35467](https://github.com/moby/moby/pull/35467) - Fix honoring tmpfs-size for user `/dev/shm` mount [moby/moby#35316](https://github.com/moby/moby/pull/35316) - Fix EBUSY errors under overlayfs and v4.13+ kernels [moby/moby#34948](https://github.com/moby/moby/pull/34948) * Container: protect health monitor channel [moby/moby#35482](https://github.com/moby/moby/pull/35482) * Container: protect the health status with mutex [moby/moby#35517](https://github.com/moby/moby/pull/35517) * Container: update real-time resources [moby/moby#33731](https://github.com/moby/moby/pull/33731) * Create labels when volume exists only remotely [moby/moby#34896](https://github.com/moby/moby/pull/34896) - Fix leaking container/exec state [moby/moby#35484](https://github.com/moby/moby/pull/35484) * Disallow using legacy (v1) registries [moby/moby#35751](https://github.com/moby/moby/pull/35751) and [docker/cli#747](https://github.com/docker/cli/pull/747) - Windows: Fix case insensitive filename matching against builder cache [moby/moby#35793](https://github.com/moby/moby/pull/35793) - Fix race conditions around process handling and error checks [moby/moby#35809](https://github.com/moby/moby/pull/35809) * Ensure containers are stopped on daemon startup [moby/moby#35805](https://github.com/moby/moby/pull/35805) * Follow containerd namespace conventions [moby/moby#35812](https://github.com/moby/moby/pull/35812) ### Swarm Mode + Added support for swarm service isolation mode [moby/moby#34424](https://github.com/moby/moby/pull/34424) - Fix task clean up for tasks that are complete [docker/swarmkit#2477](https://github.com/docker/swarmkit/pull/2477) ### Packaging + Add Packaging for Fedora 27 [docker/docker-ce-packaging#59](https://github.com/docker/docker-ce-packaging/pull/59) * Change default versioning scheme to 0.0.0-dev unless specified for packaging [docker/docker-ce-packaging#67](https://github.com/docker/docker-ce-packaging/pull/67) * Pass Version to engine static builds [docker/docker-ce-packaging#70](https://github.com/docker/docker-ce-packaging/pull/70) + Added support for aarch64 on Debian (stretch/jessie) and Ubuntu Zesty or newer [docker/docker-ce-packaging#35](https://github.com/docker/docker-ce-packaging/pull/35)

This section details various updates and fixes in the Docker Engine, covering areas like container management, swarm mode, and packaging. It includes fixes for locking issues, plugin refcounting, tmpfs mount problems, and EBUSY errors. Updates add missing locks in ProcessEvent, vfs quota support, and sub-second precision to configuration options. Container health monitoring is improved, and legacy registries are disallowed. Additionally, the section highlights enhancements for swarm service isolation mode and task cleanup, along with packaging updates for Fedora 27 and support for aarch64 on Debian and Ubuntu.