ningmingxiao

containerd integration:imageservice: support pull encrypted oci image

1

Signed-off-by: ningmingxiao **- What I did** use github.com/containers/ocicrypt to decrypt oci encrypted oci image **- How to verify it** docker can pull and run an encrypted oci image

docker pull: support decrypting images

1

### Description I want docker can auto decrypt an encrypted image,when use docker run with an encrypted image.

fix grpc prometheus monitor is allways enabled

5

Signed-off-by: ningmingxiao

fix opts maybe nill err

1

Signed-off-by: ningmingxiao

fix can't save image by image id

2

fix can't save image by image id

add attach command

6

Signed-off-by: ningmingxiao

support print stack

3

Signed-off-by: ningmingxiao

fix can't start with -it flag

2

Signed-off-by: ningmingxiao

Signed-off-by: ningmingxiao ``` openssl genrsa -out mykey.pem openssl rsa -in mykey.pem -pubout -out mypubkey.pem nerdctl image encrypt --recipient=jwe:mypubkey.pem ghcr.io/stargz-containers/fedora:30-esgz test:encrypted [root@LIN-FFF47298CDA ~]# nerdctl inspect --mode=native --format="{{len .Index.Manifests}}" test:encrypted FATA[0000] 1...