stage1: update to CoreOS 1151.0.0 and systemd v231 (#3122).
common: fall back to non-overlay with ftype=0 (#3105).
rkt: honor insecure-options in run-prepared (#3138).
Bug fixes
stage0: fix golint warnings (#3099).
rkt: avoid possible panic in api-server (#3111).
rkt/run: allow --set-env-file files with comments (#3115).
scripts/install-rkt: add wget as dependency (#3124).
install-rkt.sh: scripts: Fix missing files in .deb when using install-rkt.sh (#3127).
tests: check for run-prepared with insecure options (#3139).
Other changes
seccomp/docker: update docker whitelist to include mlock (#3126). This updates the@docker/default-whitelist to include mlock-related syscalls (mlock, mlock2, mlockall).
build: add PowerPC (#2936).
scripts: install-rkt.sh: fail install-pak on errors (#3150). When install-pak (called from install-rkt.sh) fails at some point abort packaging.
api_service: Rework cgroup detection (#3072). Use the subcgroup file hint provided by some stage1s rather than machined registration.
Documentation/devel: add make images target (#3142). This introduces the possibility to generate graphivz based PNG images using a new images make target.