Docker's default json-file log never rotates, and NOMAD set no log options
on any container. On a small root disk an unbounded nomad_admin log filled
/ and took MySQL down with it (#1412).
- management compose: a shared x-logging anchor caps every service at
3 x 10 MB.
- app containers: the admin now adds the same cap when it creates, updates,
or migrates a container, but only when the container would otherwise get
an unbounded json-file log. Another driver, or an existing max-size from
the user or the daemon's log-opts, is left alone (max-size is not valid
for most other drivers and would fail the create).
- the update path previously dropped LogConfig entirely; it now carries it
over.
Closes#1412
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>