checkpoint: handle config.Devices and config.MaskPaths
checkpoint: handle config.Devices and config.MaskPaths

In user namespaces devices are bind-mounted from the host, so
we need to add them as external mounts for CRIU.

Reported-by: Ross Boucher <39dbc6ecbd36c8e5d38d77e4849aef41e25acce4@gmail.com>
Signed-off-by: Andrei Vagin <74c05afa918858348d6db8037d82fa8124870113@virtuozzo.com>

justincormack/runc,opencontainers/runc,maxamillion/runc,estesp/runc,coolljt0725/runc,laijs/runc,shishir-a412ed/runc,wking/runc,adrianreber/runc,estesp/runc,justincormack/runc,avagin/runc,rajasec/runc,kolyshkin/runc,vbatts/runc,hqhq/runc,crosbymichael/runc,crosbymichael/runc,wking/runc,dqminh/runc,hqhq/runc,opencontainers/runc,crosbymichael/runc,xiaochenshen/runc,docker/runc,kolyshkin/runc,xiaochenshen/runc,docker/runc,rhatdan/runc,dqminh/runc,docker/runc,stefanberger/runc,sunyuan3/runc,mikebrow/runc,WeiZhang555/runc,mikebrow/runc,WeiZhang555/runc,avagin/runc,mheon/runc,shishir-a412ed/runc,cyphar/runc,sunyuan3/runc,maxamillion/runc,coolljt0725/runc,rajasec/runc,laijs/runc,coolljt0725/runc,rhatdan/runc,maxamillion/runc,mikebrow/runc,WeiZhang555/runc,xiaochenshen/runc,laijs/runc,shishir-a412ed/runc,cloudfoundry-incubator/runc,rajasec/runc,vbatts/runc,vbatts/runc,cloudfoundry-incubator/runc,hqhq/runc,rhatdan/runc,opencontainers/runc,mheon/runc,dqminh/runc,dqminh/runc,opencontainers/runc,kolyshkin/runc,rhatdan/runc,adrianreber/runc,stefanberger/runc,justincormack/runc,avagin/runc,cloudfoundry-incubator/runc,mYmNeo/runc,mheon/runc,adrianreber/runc,wking/runc,kolyshkin/runc,mYmNeo/runc,sunyuan3/runc,mYmNeo/runc,estesp/runc,stefanberger/runc,cyphar/runc,cyphar/runc