title | description | keywords | toc_max | toc_min |
---|---|---|---|---|
Docker CE release notes |
Release notes for Docker CE |
release notes, community |
2 |
1 |
{% raw %} For Docker Enterprise Edition, see Docker EE.
For Docker releases prior to 17.03.0, see Docker Engine release notes.
Release notes for stable versions are listed first. You can go straight to the Edge release notes or learn more about Stable and Edge releases.
- Fix no error if build args are missing during docker build. docker/engine#25
- Set BuildKit's ExportedProduct variable to show useful errors. docker/engine#21
- Various shell completion script updates: docker/cli#1229, docker/cli#1268, and docker/cli#1272
- Fix
DOCKER_CONFIG
warning message and fallback search. docker/cli#1241 - Fix help message flags on
docker stack
commands and sub-commands. docker/cli#1267
- Disable CRI plugin listening on port 10010 by default. docker/engine#29
- Update containerd to v1.1.2. docker/engine#33
- Windows: Do not invoke HCS shutdown if terminate called. docker/engine#31
- Windows: Select polling-based watcher for Windows log watcher. docker/engine#34
- Fix the condition used for skipping over running tasks. docker/swarmkit#2677
- Fix task sorting. docker/swarmkit#2712
- Docker 18.06 CE will be the last release with a 4-month maintenance lifecycle. The planned Docker 18.09 CE release will be supported for 7 months with Docker 19.03 CE being the next release in line. More details about the release process can be found here.
- Builder: fix layer leak on multi-stage wildcard copy. moby/moby#37178
- Fix parsing of invalid environment variable substitution . moby/moby#37134
- Builder: use the arch info from base image. moby/moby#36816 moby/moby#37197
- New experimental builder backend based on BuildKit. To enable, run daemon in experimental mode and set
DOCKER_BUILDKIT=1
environment variable on the docker CLI. moby/moby#37151 docker/cli#1111
- Fix handling uppercase targets names in multi-stage builds. moby/moby#36960
- Bump spf13/cobra to v0.0.3, pflag to v1.0.1. moby/moby#37106
- Add support for the new Stack API for Kubernetes v1beta2. docker/cli#899
- K8s: more robust stack error detection on deploy. docker/cli#948
- Support for rollback config in compose 3.7. docker/cli#409
- Update Cobra and pflag, and use built-in --version feature. docker/cli#1069
- Fix
docker stack deploy --prune
with empty name removing all services. docker/cli#1088 - [Kubernetes] stack services filters. docker/cli#1023
- Only show orchestrator flag in root, stack and version commands in help. docker/cli#1106
- Add an
Extras
field on the compose config types. docker/cli#1126 - Add options to the compose loader. docker/cli#1128
- Fix always listing nodes in docker stack ps command on Kubernetes. docker/cli#1093
- Fix output being shown twice on stack rm error message. docker/cli#1093
- Extend client API with custom HTTP requests. moby/moby#37071
- Changed error message for unreadable files to clarify possibility of a .Dockerignore entry. docker/cli#1053
- Restrict kubernetes.allNamespaces value to 'enabled' or 'disabled' in configuration file. docker/cli#1087
- Check errors when initializing the docker client in the help command. docker/cli#1119
- Better namespace experience with Kubernetes. Fix using namespace defined in ~/.kube/config for stack commands. Add a NAMESPACE column for docker stack ls command. Add a --all-namespaces flag for docker stack ls command. docker/cli#991
- Export Push and Save. docker/cli#1123
- Export pull as a public function. docker/cli#1026
- Remove Kubernetes commands from experimental. docker/cli#1068
- Adding configs/secrets to service inspect pretty. docker/cli#1006
- Fix service filtering by name on Kubernetes. docker/cli#1101
- Fix component information alignment in
docker version
. docker/cli#1065 - Fix cpu/memory limits and reservations being reset on service update. docker/cli#1079
- Manifest list: request specific permissions. docker/cli#1024
- Setting --orchestrator=all also sets --all-namespaces unless specific --namespace are set. docker/cli#1059
- Fix panics when --compress and --stream are used together. docker/cli#1105
- Switch from x/net/context to context. docker/cli#1038
- Add --init option to
docker service create
. docker/cli#479 - Fixed bug displaying garbage output for build command when --stream and --quiet flags combined. docker/cli#1090
- Add
init
support in 3.7 schema. docker/cli#1129
- Fix docker trust signer removal. docker/cli#1112
- Fix error message from docker inspect. docker/cli#1071
- Allow
x-*
extension on 3rd level objects. docker/cli#1097 - An invalid orchestrator now generates an error instead of being silently ignored. docker/cli#1055
- Added ORCHESTRATOR column to docker stack ls command. docker/cli#973
- Warn when using host-ip for published ports for services. docker/cli#1017
- Added the option to enable experimental cli features through the
DOCKER_CLI_EXPERIMENTAL
environment variable. docker/cli#1138 - Add exec_die to the list of known container events. docker/cli#1028
- [K8s] Do env-variable expansion on the uninterpreted Config files. docker/cli#974
- Print warnings on stderr for each unsupported features while parsing a compose file for deployment on Kubernetes. docker/cli#903
- Added description about pids count. docker/cli#1045
- Warn user of filter when pruning. docker/cli#1043
- Fix
--rollback-*
options overwriting--update-*
options. docker/cli#1052
- Update Attach, Build, Commit, Cp, Create subcommand fish completions. docker/cli#1005
- Add bash completion for
dockerd --default-address-pool
. docker/cli#1173 - Add bash completion for
exec_die
event. docker/cli#1173
- Update docker-credential-helper so
pass
is not called on every docker command. docker/cli#1184 - Fix for rotating swarm external CA. docker/cli#1199
- Improve version output alignment. docker/cli#1207
- Add bash completion for
service create|update --init
. docker/cli#1210
- Document reserved namespaces deprecation. docker/cli#1040
- Allow awslogs to use non-blocking mode. moby/moby#36522
- Improve logging of long log lines on fluentd log driver.. moby/moby#36159
- Re-order CHANGELOG.md to pass
make validate
test. moby/moby#37047 - Update Events, Exec, Export, History, Images, Import, Inspect, Load, and Login subcommand fish completions. docker/cli#1061
- Update documentation for RingLogger's ring buffer. moby/moby#37084
- Add metrics for log failures/partials. moby/moby#37034
- Fix logging plugin crash unrecoverable. moby/moby#37028
- Fix logging test type. moby/moby#37070
- Fix race conditions in logs API. moby/moby#37062
- Fix some issues in logfile reader and rotation. moby/moby#37063
- Allow user to specify default address pools for docker networks. moby/moby#36396 docker/cli#818
- Adding logs for ipam state doccker/libnetwork#2417
- Fix race conditions in the overlay network driver doccker/libnetwork#2143
- Add wait time into xtables lock warning doccker/libnetwork#2142
- filter xtables lock warnings when firewalld is active doccker/libnetwork#2135
- Switch from x/net/context to context doccker/libnetwork#2140
- Adding a recovery mechanism for a split gossip cluster doccker/libnetwork#2134
- Running docker inspect on network attachment tasks now returns a full task object. moby/moby#35246
- Some container/network cleanups. moby/moby#37033
- Fix network inspect for overlay network. moby/moby#37045
- Improve Scalability of the Linux load balancing. docker/engine#16
- Change log level from error to warning. docker/engine#19
- Aufs: log why aufs is not supported. moby/moby#36995
- Hide experimental checkpoint features on Windows. docker/cli#1094
- Lcow: Allow the client to customize capabilities and device cgroup rules for LCOW containers. moby/moby#37294
- Changed path given for executable output in windows to actual location of executable output. moby/moby#37295
- Add windows recycle bin test and update hcsshim to v0.6.11. moby/moby#36994
- Allow to add any args when doing a make run. moby/moby#37190
- Optimize ContainerTop() aka docker top. moby/moby#37131
- Fix compilation on 32bit machines. moby/moby#37292
- Update API version to v1 38. moby/moby#37141
- Fix
docker service update --host-add
does not update existing host entry. docker/cli#1054 - Fix swagger file type for ExecIds. moby/moby#36962
- Fix swagger volume type generation. moby/moby#37060
- Fix wrong assertion in volume/service package. moby/moby#37211
- Fix daemon panic on restart when a plugin is running. moby/moby#37234
- Construct and add 'LABEL' command from 'label' option to last stage. moby/moby#37011
- Fix race condition between exec start and resize.. moby/moby#37172
- Alternative failure mitigation of
TestExecInteractiveStdinClose
. moby/moby#37143 - RawAccess allows a set of paths to be not set as masked or readonly. moby/moby#36644
- Be explicit about github.com prefix being a legacy feature. moby/moby#37174
- Bump Golang to 1.10.3. docker/cli#1122
- Close ReadClosers to prevent xz zombies. moby/moby#34218
- Daemon.ContainerStop(): fix for a negative timeout. moby/moby#36874
- Daemon.setMounts(): copy slice in place. moby/moby#36991
- Describe IP field of swagger Port definition. moby/moby#36971
- Extract volume interaction to a volumes service. moby/moby#36688
- Fixed markdown formatting in docker image v1, v1.1, and v1.2 spec. moby/moby#37051
- Improve GetTimestamp parsing. moby/moby#35402
- Jsonmessage: pass message to aux callback. moby/moby#37064
- Overlay2: remove unused cdMountFrom() helper function. moby/moby#37041
- Overlay: Fix overlay storage-driver silently ignoring unknown storage-driver options. moby/moby#37040
- Remove some unused contrib items. moby/moby#36977
- Restartmanager: do not apply restart policy on created containers. moby/moby#36924
- Set item-type for ExecIDs. moby/moby#37121
- Use go-systemd const instead of magic string in Linux version of dockerd. moby/moby#37136
- Use stdlib TLS dialer. moby/moby#36687
- Warn when an engine label using a reserved namespace (com.docker.*, io.docker.*, or org.dockerproject.*) is configured, as per https://docs.docker.com/config/labels-custom-metadata/. moby/moby#36921
- Fix missing plugin name in message. moby/moby#37052
- Fix link anchors in CONTRIBUTING.md. moby/moby#37276
- Fix link to Docker Toolbox. moby/moby#37240
- Fix mis-used skip condition. moby/moby#37179
- Fix bind mounts not working in some cases. moby/moby#37031
- Fix fd leak on attach. moby/moby#37184
- Fix fluentd partial detection. moby/moby#37029
- Fix incorrect link in version-history.md. moby/moby#37049
- Allow vim to be case insensitive for D in dockerfile. moby/moby#37235
- Add
t.Name()
to tests so that service names are unique. moby/moby#37166 - Add additional message when backendfs is extfs without d_type support. moby/moby#37022
- Add api version checking for tests from new feature. moby/moby#37169
- Add image metrics for push and pull. moby/moby#37233
- Add support for
init
on services. moby/moby#37183 - Add verification of escapeKeys array length in pkg/term/proxy.go. moby/moby#36918
- When link id is empty for overlay2, do not remove this link.. moby/moby#36161
- Fix build on OpenBSD by defining Self(). moby/moby#37301
- Windows: Fix named pipe support for hyper-v isolated containers. docker/engine#2 docker/cli#1165
- Fix manifest lists to always use correct size. docker/cli#1183
- Register OCI media types. docker/engine#4
- Update containerd to v1.1.1 docker/engine#17
- LCOW: Prefer Windows over Linux in a manifest list. docker/engine#3
- Add updated
MaskPaths
that are used in code paths directly using containerd to address CVE-2018-10892. docker/engine#15 - Add
/proc/acpi
to masked paths to address CVE-2018-10892. docker/engine#14
- Fix bindmount autocreate race. docker/engine#11
- List stacks for both Swarm and Kubernetes with --orchestrator=all in docker stack ls. Allow several occurrences of --namespace for Kubernetes with docker stack ls. docker/cli#1031
- Bump SwarmKit to remove deprecated grpc metadata wrappers. moby/moby#36905
- Issue an error for --orchestrator=all when working on mismatched Swarm and Kubernetes hosts. docker/cli#1035
- Fix broken swarm commands with Kubernetes defined as orchestrator. "--orchestrator" flag is no longer global but local to stack commands and subcommands docker/cli#1137 docker/cli#1139
- Bump swarmkit to include task reaper fixes and more metrics. docker/engine#13
- Avoid a leak when a service with unassigned tasks is deleted. docker/engine#27
- Fix racy batching on the dispatcher. docker/engine#27
- Fix error with merge compose file with networks docker/cli#983
- Fix docker stack deploy re-deploying services after the service was updated with
--force
docker/cli#963 - Fix docker version output alignment docker/cli#965
- Fix AppArmor profiles not being applied to
docker exec
processes moby/moby#36466 - Don't sort plugin mount slice moby/moby#36711
- Daemon/cluster: handle partial attachment entries during configure moby/moby#36769
- Bump Golang to 1.9.5 moby/moby#36779 docker/cli#986
- Daemon/stats: more resilient cpu sampling moby/moby#36519
- Containerd: update to 1.0.3 release moby/moby#36749
- Fix Windows layer leak when write fails moby/moby#36728
- Don't make container mount unbindable moby/moby#36768
- Fix Daemon panics on container export after a daemon restart moby/moby/36586
- Fix digest cache being removed on autherrors moby/moby#36509
- Make sure plugin container is removed on failure moby/moby#36715
- Copy: avoid using all system memory with authz plugins moby/moby#36595
- Relax some libcontainerd client locking moby/moby#36848
- Update
hcsshim
to v0.6.10 to address CVE-2018-8115
- Increase raft Election tick to 10 times Heartbeat tick moby/moby#36672
- Gracefully remove LB endpoints from services docker/libnetwork#2112
- Retry other external DNS servers on ServFail docker/libnetwork#2121
- Improve scalabiltiy of bridge network isolation rules docker/libnetwork#2117
- Allow for larger preset property values, do not override docker/libnetwork#2124
- Prevent panics on concurrent reads/writes when calling
changeNodeState
docker/libnetwork#2136
- Switch to -buildmode=pie moby/moby#34369
- Allow Dockerfile to be outside of build-context docker/cli#886
- Builder: fix wrong cache hits building from tars moby/moby#36329
- Fixes files leaking to other images in a multi-stage build moby/moby#36338
- Simplify the marshaling of compose types.Config docker/cli#895
- Add support for multiple composefile when deploying docker/cli#569
- Fix broken Kubernetes stack flags docker/cli#831
- Fix stack marshaling for Kubernetes docker/cli#890
- Fix and simplify bash completion for service env, mounts and labels docker/cli#682
- Fix
before
andsince
filter fordocker ps
moby/moby#35938 - Fix
--label-file
weird behavior docker/cli#838 - Fix compilation of defaultCredentialStore() on unsupported platforms docker/cli#872
- Improve and fix bash completion for images docker/cli#717
- Added check for empty source in bind mount docker/cli#824
- Fix TLS from environment variables in client moby/moby#36270
- docker build now runs faster when registry-specific credential helper(s) are configured docker/cli#840
- Update event filter zsh completion with
disable
,enable
,install
andremove
docker/cli#372 - Produce errors when empty ids are passed into inspect calls moby/moby#36144
- Marshall version for the k8s controller docker/cli#891
- Set a non-zero timeout for HTTP client communication with plugin backend docker/cli#883
- Add DOCKER_TLS environment variable for --tls option docker/cli#863
- Add --template-driver option for secrets/configs docker/cli#896
- Move
docker trust
commands out of experimental docker/cli#934 docker/cli#935 docker/cli#944
- AWS logs - don't add new lines to maximum sized events moby/moby#36078
- Move log validator logic after plugins are loaded moby/moby#36306
- Support a proxy in Splunk log driver moby/moby#36220
- Fix log tail with empty logs moby/moby#36305
- Libnetwork revendoring moby/moby#36137
- Fix for deadlock on exit with Memberlist revendor docker/libnetwork#2040
- Fix user specified ndots option docker/libnetwork#2065
- Fix to use ContainerID for Windows instead of SandboxID docker/libnetwork#2010
- Verify NetworkingConfig to make sure EndpointSettings is not nil moby/moby#36077
- Fix
DockerNetworkInternalMode
issue moby/moby#36298 - Fix race in attachable network attachment moby/moby#36191
- Fix timeout issue of
InspectNetwork
on AArch64 moby/moby#36257
- Verbose info is missing for partial overlay ID moby/moby#35989
- Update
FindNetwork
to address network name duplications moby/moby#30897 - Disallow attaching ingress network docker/swarmkit#2523
- Prevent implicit removal of the ingress network moby/moby#36538
- Fix stale HNS endpoints on Windows moby/moby#36603
- IPAM fixes for duplicate IP addresses docker/libnetwork#2104 docker/libnetwork#2105
- Enable HotAdd for Windows moby/moby#35414
- LCOW: Graphdriver fix deadlock in hotRemoveVHDs moby/moby#36114
- LCOW: Regular mount if only one layer moby/moby#36052
- Remove interim env var LCOW_API_PLATFORM_IF_OMITTED moby/moby#36269
- Revendor Microsoft/opengcs @ v0.3.6 moby/moby#36108
- Fix issue of ExitCode and PID not show up in Task.Status.ContainerStatus moby/moby#36150
- Fix issue with plugin scanner going too deep moby/moby#36119
- Do not make graphdriver homes private mounts moby/moby#36047
- Do not recursive unmount on cleanup of zfs/btrfs moby/moby#36237
- Don't restore image if layer does not exist moby/moby#36304
- Adjust minimum API version for templated configs/secrets moby/moby#36366
- Bump containerd to 1.0.2 (cfd04396dc68220d1cecbe686a6cc3aa5ce3667c) moby/moby#36308
- Bump Golang to 1.9.4 moby/moby#36243
- Ensure daemon root is unmounted on shutdown moby/moby#36107
- Update runc to 6c55f98695e902427906eed2c799e566e3d3dfb5 moby/moby#36222
- Fix container cleanup on daemon restart moby/moby#36249
- Support SCTP port mapping (bump up API to v1.37) moby/moby#33922
- Support SCTP port mapping docker/cli#278
- Fix Volumes property definition in ContainerConfig moby/moby#35946
- Bump moby and dependencies docker/cli#829
- C.RWLayer: check for nil before use moby/moby#36242
- Add
REMOVE
andORPHANED
to TaskState moby/moby#36146
- Fixed error detection using
IsErrNotFound
andIsErrNotImplemented
forContainerStatPath
,CopyFromContainer
, andCopyToContainer
methods moby/moby#35979
- Add an integration/internal/container helper package moby/moby#36266
- Add canonical import path moby/moby#36194
- Add/use container.Exec() to integration moby/moby#36326
- Fix "--node-generic-resource" singular/plural moby/moby#36125
- Daemon.cleanupContainer: nullify container RWLayer upon release moby/moby#36160
- Daemon: passdown the
--oom-kill-disable
option to containerd moby/moby#36201 - Display a warn message when there is binding ports and net mode is host moby/moby#35510
- Refresh containerd remotes on containerd restarted moby/moby#36173
- Set daemon root to use shared propagation moby/moby#36096
- Optimizations for recursive unmount moby/moby#34379
- Perform plugin mounts in the runtime moby/moby#35829
- Graphdriver: Fix RefCounter memory leak moby/moby#36256
- Use continuity fs package for volume copy moby/moby#36290
- Use proc/exe for reexec moby/moby#36124
- Add API support for templated secrets and configs moby/moby#33702 and moby/moby#36366
- Use rslave propagation for mounts from daemon root moby/moby#36055
- Add /proc/keys to masked paths moby/moby#36368
- Bump Runc to 1.0.0-rc5 moby/moby#36449
- Fixes
runc exec
on big-endian architectures moby/moby#36449
- Use chroot when mount namespaces aren't provided moby/moby#36449
- Fix systemd slice expansion so that it could be consumed by cAdvisor moby/moby#36449
- Fix devices mounted with wrong uid/gid moby/moby#36449
- Fix read-only containers with IPC private mounts
/dev/shm
read-only moby/moby#36526
- Replace EC Private Key with PKCS#8 PEMs docker/swarmkit#2246
- Fix IP overlap with empty EndpointSpec docker/swarmkit #2505
- Add support for Support SCTP port mapping docker/swarmkit#2298
- Do not reschedule tasks if only placement constraints change and are satisfied by the assigned node docker/swarmkit#2496
- Ensure task reaper stopChan is closed no more than once docker/swarmkit #2491
- Synchronization fixes docker/swarmkit#2495
- Add log message to indicate message send retry if streaming unimplemented docker/swarmkit#2483
- Debug logs for session, node events on dispatcher, heartbeats docker/swarmkit#2486
- Add swarm types to bash completion event type filter docker/cli#888
- Fix issue where network inspect does not show Created time for networks in swarm scope moby/moby#36095
- Fix
node-generic-resource
typo moby/moby#35970 and moby/moby#36125
- Return errors from daemon on stack deploy configs create/update docker/cli#757
- awslogs: fix batch size calculation for large logs moby/moby#35726
- Support a proxy in splunk log driver moby/moby#36220
- Fix ingress network when upgrading from 17.09 to 17.12 moby/moby#36003
- Add verbose info to partial overlay ID moby/moby#35989
- Fix IPv6 networking being deconfigured if live-restore is being enabled docker/libnetwork#2043
- Fix watchMiss thread context docker/libnetwork#2051
- Set TasksMax in docker.service docker/docker-ce-packaging#78
- Bump Golang to 1.9.4
- Bump containerd to 1.0.1
- Fix dockerd not being able to reconnect to containerd when it is restarted moby/moby#36173
- Fix containerd events from being processed twice moby/moby#35891
- Fix vfs graph driver failure to initialize because of failure to setup fs quota moby/moby#35827
- Fix regression of health check not using container's working directory moby/moby#35845
- Honor
DOCKER_RAMDISK
with containerd 1.0 moby/moby#35957 - Update runc to fix hang during start and exec moby/moby#36097
- Windows: Vendor of Microsoft/hcsshim @v.0.6.8 partial fix for import layer failing moby/moby#35924
- Do not make graphdriver homes private mounts moby/moby#36047
- Use rslave propagation for mounts from daemon root moby/moby#36055
- Set daemon root to use shared mount propagation moby/moby#36096
- Validate that mounted paths exist when container is started, not just during creation moby/moby#35833
- Add
REMOVE
andORPHANED
to TaskState moby/moby#36146
- Fix issue where network inspect does not show Created time for networks in swarm scope moby/moby#36095
- Nullify container read write layer upon release moby/moby#36130 and moby/moby#36343
- Remove watchMiss from swarm mode docker/libnetwork#2047
- AWS logs batch size calculation moby/moby#35726
- Health check no longer uses the container's working directory moby/moby#35843
- Errors not returned from client in stack deploy configs moby/moby#757
- Daemon aborts when project quota fails moby/moby#35827
- Docker cannot use memory limit when using systemd options moby/moby#35123
- Fix build cache hash for broken symlink moby/moby#34271
- Fix long stream sync moby/moby#35404
- Fix dockerfile parser failing silently on long tokens moby/moby#35429
- Remove secret/config duplication in cli/compose docker/cli#671
- Add
--local
flag todocker trust sign
docker/cli#575 - Add
docker trust inspect
docker/cli#694
- Add
name
field to secrets and configs to allow interpolation in Compose files docker/cli#668 - Add
--isolation
for setting swarm service isolation mode docker/cli#426
- Remove deprecated "daemon" subcommand docker/cli#689
- Fix behaviour of
rmi -f
with unexpected errors docker/cli#654
- Integrated Generic resource in service create docker/cli#429
- Fix external networks in stacks docker/cli#743
- Remove support for referencing images by image shortid docker/cli#753 and moby/moby#35790
- Use commit-sha instead of tag for containerd moby/moby#35770
- Update API version history for 1.35 moby/moby#35724
- Logentries driver line-only=true []byte output fix moby/moby#35612
- Logentries line-only logopt fix to maintain backwards compatibility moby/moby#35628
- Add
--until
flag for docker logs moby/moby#32914 - Add gelf log driver plugin to Windows build moby/moby#35073
- Set timeout on splunk batch send moby/moby#35496
- Update Graylog2/go-gelf moby/moby#35765
- Move load balancer sandbox creation/deletion into libnetwork moby/moby#35422
- Only chown network files within container metadata moby/moby#34224
- Restore error type in FindNetwork moby/moby#35634
- Fix consumes MIME type for NetworkConnect moby/moby#35542
- Added support for persisting Windows network driver specific options moby/moby#35563
- Fix timeout on netlink sockets and watchmiss leak moby/moby#35677
- New daemon config for networking diagnosis moby/moby#35677
- Clean up node management logic docker/libnetwork#2036
- Allocate VIPs when endpoints are restored docker/swarmkit#2474
- Update to containerd v1.0.0 moby/moby#35707
- Have VFS graphdriver use accelerated in-kernel copy moby/moby#35537
- Introduce
workingdir
option for docker exec moby/moby#35661 - Bump Go to 1.9.2 moby/moby#33892 docker/cli#716
/dev
should not be readonly with--readonly
flag moby/moby#35344
- Add custom build-time Graphdrivers priority list moby/moby#35522
- LCOW: CLI changes to add platform flag - pull, run, create and build docker/cli#474
- Fix width/height on Windows for
docker exec
moby/moby#35631 - Detect overlay2 support on pre-4.0 kernels moby/moby#35527
- Devicemapper: remove container rootfs mountPath after umount moby/moby#34573
- Disallow overlay/overlay2 on top of NFS moby/moby#35483
- Fix potential panic during plugin set. moby/moby#35632
- Fix some issues with locking on the container moby/moby#35501
- Fixup some issues with plugin refcounting moby/moby#35265
- Add missing lock in ProcessEvent moby/moby#35516
- Add vfs quota support moby/moby#35231
- Skip empty directories on prior graphdriver detection moby/moby#35528
- Skip xfs quota tests when running in user namespace moby/moby#35526
- Added SubSecondPrecision to config option. moby/moby#35529
- Update fsnotify to fix deadlock in removing watch moby/moby#35453
- Fix "duplicate mount point" when
--tmpfs /dev/shm
is used moby/moby#35467 - Fix honoring tmpfs-size for user
/dev/shm
mount moby/moby#35316 - Fix EBUSY errors under overlayfs and v4.13+ kernels moby/moby#34948
- Container: protect health monitor channel moby/moby#35482
- Container: protect the health status with mutex moby/moby#35517
- Container: update real-time resources moby/moby#33731
- Create labels when volume exists only remotely moby/moby#34896
- Fix leaking container/exec state moby/moby#35484
- Disallow using legacy (v1) registries moby/moby#35751 and docker/cli#747
- Windows: Fix case insensitive filename matching against builder cache moby/moby#35793
- Fix race conditions around process handling and error checks moby/moby#35809
- Ensure containers are stopped on daemon startup moby/moby#35805
- Follow containerd namespace conventions moby/moby#35812
- Added support for swarm service isolation mode moby/moby#34424
- Fix task clean up for tasks that are complete docker/swarmkit#2477
- Add Packaging for Fedora 27 docker/docker-ce-packaging#59
- Change default versioning scheme to 0.0.0-dev unless specified for packaging docker/docker-ce-packaging#67
- Pass Version to engine static builds docker/docker-ce-packaging#70
- Added support for aarch64 on Debian (stretch/jessie) and Ubuntu Zesty or newer docker/docker-ce-packaging#35
- Fix config leakage on shared parent stage moby/moby#33753
- Warn on empty continuation lines only, not on comment-only lines moby/moby#35004
- Set API version on Client even when Ping fails docker/cli#546
- Overlay fix for transient IP reuse docker/libnetwork#2016
- Fix reapTime logic in NetworkDB and handle DNS cleanup for attachable container docker/libnetwork#2017
- Disable hostname lookup on chain exists check docker/libnetwork#2019
- Fix lint issues docker/libnetwork#2020
- Restore error type in FindNetwork moby/moby#35634
- Protect
health monitor
Go channel moby/moby#35482 - Fix leaking container/exec state moby/moby#35484
- Add /proc/scsi to masked paths (patch to work around CVE-2017-16539) moby/moby/#35399
- Vendor tar-split: fix to prevent memory exhaustion issue that could crash Docker daemon moby/moby/#35424 Fixes CVE-2017-14992
- Fix P/Z HubPullSuite tests moby/moby#34837
- Windows: Add support for version filtering on pull moby/moby#35090
- Windows: Stop filtering Windows manifest lists by version moby/moby#35117
- Use rslave instead of rprivate in chroot archive moby/moby/#35217
- Remove container rootfs mountPath after unmount moby/moby#34573
- Fix honoring tmpfs size of user /dev/shm mount moby/moby#35316
- Don't abort when setting may_detach_mounts (log the error instead) moby/moby#35172
- Fix version comparison when negotiating the API version moby/moby#35008
- Increase gRPC request timeout when sending snapshots docker/swarmkit#2404
- Fix node filtering when there is no log driver docker/swarmkit#2442
- Add an error on attempt to change cluster name docker/swarmkit/#2454
- Delete node attachments when node is removed docker/swarmkit/#2456
- Provide custom gRPC dialer to override default proxy dialer docker/swarmkit/#2457
- Avoids recursive readlock on swarm info moby/moby#35388
- Add
--chown
flag toADD/COPY
commands in Dockerfile moby/moby#34263
- Fix cloning unneeded files while building from git repositories moby/moby#33704
- Allow extension fields in the v3.4 version of the compose format docker/cli#452
- Make compose file allow to specify names for non-external volume docker/cli#306
- Support
--compose-file -
as stdin docker/cli#347 - Support
start_period
for healthcheck in Docker Compose docker/cli#475
- Add support for
stop-signal
in docker stack commands docker/cli#388 - Add support for update order in compose deployments docker/cli#360
- Add ulimits to unsupported compose fields docker/cli#482
- Add
--format
todocker-search
docker/cli#440
- Show images digests when
{{.Digest}}
is in format docker/cli#439 - Print output of
docker stack rm
onstdout
instead ofstderr
docker/cli#491
- Fix
docker history --format {{json .}}'
printing human-readable timestamps instead of ISO8601 when--human=true
docker/cli#438 - Fix idempotence of
docker stack deploy
when secrets or configs are used docker/cli#509 - Fix presentation of random host ports docker/cli#404
- Fix redundant service restarts when service created with multiple secrets moby/moby#34746
- Fix Splunk logger not transmitting log data when tag is empty and raw-mode is used moby/moby#34520
- Add the control plane MTU option in the daemon config moby/moby#34103
- Add service virtual IP to sandbox's loopback address docker/libnetwork#1877
- Graphdriver: promote overlay2 over aufs moby/moby#34430
- LCOW: Additional flags for VHD boot moby/moby#34451
- LCOW: Don't block export moby/moby#34448
- LCOW: Dynamic sandbox management moby/moby#34170
- LCOW: Force Hyper-V Isolation moby/moby#34468
- LCOW: Move toolsScratchPath to /tmp moby/moby#34396
- LCOW: Remove hard-coding moby/moby#34398
- LCOW: WORKDIR correct handling moby/moby#34405
- Windows: named pipe mounts moby/moby#33852
- Fix "permission denied" errors when accessing volume with SELinux enforcing mode moby/moby#34684
- Fix layers size reported as
0
indocker system df
moby/moby#34826 - Fix some "device or resource busy" errors when removing containers on RHEL 7.4 based kernels moby/moby#34886
- Include whether the managers in the swarm are autolocked as part of
docker info
docker/cli#471
- Add 'docker service rollback' subcommand docker/cli#205
- Fix managers failing to join if the gRPC snapshot is larger than 4MB docker/swarmkit#2375
- Fix "permission denied" errors for configuration file in SELinux-enabled containers moby/moby#34732
- Fix services failing to deploy on ARM nodes moby/moby#34021
- Build scripts for ppc64el on Ubuntu docker/docker-ce-packaging#43
- Remove deprecated
--enable-api-cors
daemon flag moby/moby#34821
- Enable TCP keepalive in the client to prevent loss of connection docker/cli#415
- Devmapper: ensure UdevWait is called after calls to setCookie moby/moby#33732
- Aufs: ensure diff layers are correctly removed to prevent leftover files from using up storage moby/moby#34587
- Ignore PullOptions for running tasks docker/swarmkit#2351
- Fix a regression, where
ADD
from remote URL's extracted archives #89 - Fix handling of remote "git@" notation #100
- Fix copy
--from
conflict with force pull #86
- Make pruning volumes optional when running
docker system prune
, and add a--volumes
flag #109 - Show progress of replicated tasks before they are assigned #97
- Fix
docker wait
hanging if the container does not exist #106 - If
docker swarm ca
is called without the--rotate
flag, warn if other flags are passed #110 - Fix API version negotiation not working if the daemon returns an error #115
- Print an error if "until" filter is combined with "--volumes" on system prune #154
- Fix stderr logging for
journald
andsyslog
#95 - Fix log readers can block writes indefinitely #98
- Fix
awslogs
driver repeating last event #151
- Fix issue with driver options not received by network drivers #127
- Make plugin removes more resilient to failure #91
- Prevent a
goroutine
leak whenhealthcheck
gets stopped #90 - Do not error on relabel when relabel not supported #92
- Limit max backoff delay to 2 seconds for GRPC connection #94
- Fix issue preventing containers to run when memory cgroup was specified due to bug in certain kernels #102
- Fix container not responding to SIGKILL when paused #102
- Improve error message if an image for an incompatible OS is loaded #108
- Fix a handle leak in
go-winio
#112 - Fix issue upon upgrade, preventing docker from showing running containers when
--live-restore
is enabled #117 - Fix bug where services using secrets would fail to start on daemons using the
userns-remap
feature #121 - Fix error handling with
not-exist
errors on remove #142 - Fix REST API Swagger representation cannot be loaded with SwaggerUI #156
- Redact secret data on secret creation #99
- Do not add duplicate platform information to service spec #107
- Cluster update and memory issue fixes #114
- Changing get network request to return predefined network in swarm #150
Note: Docker 17.06.0 has an issue in the image builder causing a change in the behavior of the
ADD
instruction of Dockerfile when referencing a remote.tar.gz
file. The issue will be fixed in Docker 17.06.1.
Note: Starting with Docker CE 17.06, Ubuntu packages are also available for IBM Z using the s390x architecture.
Note: Docker 17.06 by default disables communication with legacy (v1) registries. If you require interaction with registries that have not yet migrated to the v2 protocol, set the
--disable-legacy-registry=false
daemon option. Interaction with v1 registries will be removed in Docker 17.12.
- Add
--iidfile
option to docker build. It allows specifying a location where to save the resulting image ID - Allow specifying any remote ref in git checkout URLs #32502
- Add
--format
option todocker stack ls
#31557 - Add support for labels in compose initiated builds #32632 #32972
- Add
--format
option todocker history
#30962 - Add
--format
option todocker system df
#31482 - Allow specifying Nameservers and Search Domains in stack files #32059
- Add support for
read_only
service todocker stack deploy
#docker/cli/73
- Display Swarm cluster and node TLS information #docker/cli/44
- Add support for placement preference to
docker stack deploy
#docker/cli/35 - Add new
ca
subcommand todocker swarm
to allow managing a swarm CA #docker/cli/48 - Add credential-spec to compose #docker/cli/71
- Add support for csv format options to
--network
and--network-add
#docker/cli/62 #33130
- Fix stack compose bind-mount volumes on Windows #docker/cli/136
- Correctly handle a Docker daemon without registry info #docker/cli/126
- Allow
--detach
and--quiet
flags when using --rollback #docker/cli/144 - Remove deprecated
--email
flag fromdocker login
#docker/cli/143
- Adjusted
docker stats
memory output #docker/cli/80
- Select digest over tag when both are provided during a pull #33214
- Add monitored resource type metadata for GCP logging driver #32930
- Add multiline processing to the AWS CloudWatch logs driver #30891
- Add Support swarm-mode services with node-local networks such as macvlan, ipvlan, bridge, host #32981
- Pass driver-options to network drivers on service creation #32981
- Isolate Swarm Control-plane traffic from Application data traffic using --data-path-addr #32717
- Several improvements to Service Discovery #docker/libnetwork/1796
- Rely on
container-selinux
on Centos/Fedora/RHEL when available #32437
- Add build & engine info prometheus metrics #32792
- Update containerd to d24f39e203aa6be4944f06dd0fe38a618a36c764 #33007
- Update runc to 992a5be178a62e026f4069f443c6164912adbf09 #33007
- Add option to auto-configure blkdev for devmapper #31104
- Add log driver list to
docker info
#32540 - Add API endpoint to allow retrieving an image manifest #32061
- Do not remove container from memory on error with
forceremove
#31012
- Add support for metric plugins #32874
- Return an error when an invalid filter is given to
prune
commands #33023
- Add daemon option to allow pushing foreign layers #33151
- Fix an issue preventing containerd to be restarted after it died #32986
- Upgrade to Go 1.8.3 #33387
- Prevent a containerd crash when journald is restarted #containerd/930
- Fix healthcheck failures due to invalid environment variables #33249
- Prevent a directory to be created in lieu of the daemon socket when a container mounting it is to be restarted during a shutdown #30348
- Prevent a container to be restarted upon stop if its stop signal is set to
SIGKILL
#33335 - Ensure log drivers get passed the same filename to both StartLogging and StopLogging endpoints #33583
- Remove daemon data structure dump on
SIGUSR1
to avoid a panic #33598
- Allow personality with UNAME26 bit set in default seccomp profile #32965
- Add an option to allow specifying a different interface for the data traffic (as opposed to control traffic) #32717
- Allow specifying a secret location within the container #32571
- Add support for secrets on Windows #32208
- Add TLS Info to swarm info and node info endpoint #32875
- Add support for services to carry arbitrary config objects #32336, #docker/cli/45,#33169
- Add API to rotate swarm CA certificate #32993
- Placement now also take platform in account #33144
- Fix possible hang when joining fails #docker-ce/19
- Fix an issue preventing external CA to be accepted #33341
- Fix possible orchestration panic in mixed version clusters #swarmkit/2233
- Avoid assigning duplicate IPs during initialization #swarmkit/2237
- Disable legacy registry (v1) by default #33629
- Update go-connections to d217f8e #28
- Fix a concurrency issue preventing network creation #33273
- Relabel secrets path to avoid a Permission Denied on selinux enabled systems #33236 (ref #32529
- Fix cases where local volume were not properly relabeled if needed #33236 (ref #29428)
- Fix an issue while upgrading if a plugin rootfs was still mounted #33236 (ref #32525)
- Fix an issue where volume wouldn't default to the
rprivate
propagation mode #33236 (ref #32851) - Fix a panic that could occur when a volume driver could not be retrieved #33236 (ref #32347)
- Add a warning in
docker info
when theoverlay
oroverlay2
graphdriver is used on a filesystem withoutd_type
support #33236 (ref #31290)
- Fix an issue with backporting mount spec to older volumes #33207
- Fix issue where a failed unmount can lead to data loss on local volume remove #33120
- Fix a case where tasks could get killed unexpectedly #33118
- Fix an issue preventing to deploy services if the registry cannot be reached despite the needed images being locally present #33117
- Fix autoremove on older api #31692
- Fix default network customization for a stack #31258
- Correct CPU usage calculation in presence of offline CPUs and newer Linux #31802
- Fix issue where service healthcheck is
{}
in remote API #30197
- Update runc to 54296cf40ad8143b62dbcaa1d90e520a2136ddfe #31666
- Ignore cgroup2 mountpoints opencontainers/runc#1266
- Update containerd to 4ab9917febca54791c5f071a9d1f404867857fcc #31662 #31852
- Register healtcheck service before calling restore() docker/containerd#609
- Fix
docker exec
not working after unattended upgrades that reload apparmor profiles #31773 - Fix unmounting layer without merge dir with Overlay2 #31069
- Do not ignore "volume in use" errors when force-delete #31450
- Update swarmkit to 17756457ad6dc4d8a639a1f0b7a85d1b65a617bb #31807
- Scheduler now correctly considers tasks which have been assigned to a node but aren't yet running docker/swarmkit#1980
- Allow removal of a network when only dead tasks reference it docker/swarmkit#2018
- Retry failed network allocations less aggressively docker/swarmkit#2021
- Avoid network allocation for tasks that are no longer running docker/swarmkit#2017
- Bookkeeping fixes inside network allocator allocator docker/swarmkit#2019 docker/swarmkit#2020
- Cleanup HCS on restore #31503
IMPORTANT: Starting with this release, Docker is on a monthly release cycle and uses a new YY.MM versioning scheme to reflect this. Two channels are available: monthly and quarterly. Any given monthly release will only receive security and bugfixes until the next monthly release is available. Quarterly releases receive security and bugfixes for 4 months after initial release. This release includes bugfixes for 1.13.1 but there are no major feature additions and the API version stays the same. Upgrading from Docker 1.13.1 to 17.03.0 is expected to be simple and low-risk.
- Fix panic in
docker stats --format
#30776
- Update various
bash
andzsh
completion scripts #30823, #30945 and more... - Block obsolete socket families in default seccomp profile - mitigates unpatched kernels' CVE-2017-6074 #29076
- Fix bug on overlay encryption keys rotation in cross-datacenter swarm #30727
- Fix side effect panic in overlay encryption and network control plane communication failure ("No installed keys could decrypt the message") on frequent swarm leader re-election #25608
- Several fixes around system responsiveness and datapath programming when using overlay network with external kv-store docker/libnetwork#1639, docker/libnetwork#1632 and more...
- Discard incoming plain vxlan packets for encrypted overlay network #31170
- Release the network attachment on allocation failure #31073
- Fix port allocation when multiple published ports map to the same target port docker/swarmkit#1835
- Fix a deadlock in docker logs #30223
- Fix CPU spin waiting for log write events #31070
- Fix a possible crash when using journald #31231 #31263
- Fix a panic on close of nil channel #31274
- Fix duplicate mount point for
--volumes-from
indocker run
#29563 - Fix
--cache-from
does not cache last step #31189
- Shutdown leaks an error when the container was never started #31279
- Fix possibility of tasks getting stuck in the "NEW" state during a leader failover docker/swarmkit#1938
- Fix extraneous task creations for global services that led to confusing replica counts in
docker service ls
docker/swarmkit#1957 - Fix problem that made rolling updates slow when
task-history-limit
was set to 1 docker/swarmkit#1948 - Restart tasks elsewhere, if appropriate, when they are shut down as a result of nodes no longer satisfying constraints docker/swarmkit#1958
- (experimental)
- Adding
netbsd
compatibility to the packagepkg/term
. moby/moby#36887 - Standardizes output path for artifacts of intermediate builds to
/build/
. moby/moby#36858
- Fix
docker stack deploy
reference flag. docker/cli#981 - Fix docker stack deploy re-deploying services after the service was updated with
--force
. docker/cli#963
- Add bash completion for
secret|config create --template-driver
. docker/cli#1004 - Add fish completions for docker trust subcommand. docker/cli#984
- Fix --format example for docker history. docker/cli#980
- Fix error with merge composefile with networks. docker/cli#983
- Standardized the properties of storage-driver log messages. moby/moby#36492
- Improve partial message support in logger. moby/moby#35831
- Allow for larger preset property values, do not override. docker/libnetwork#2124
- networkdb: User write lock in handleNodeEvent. docker/libnetwork#2136
- Import libnetwork fix for rolling updates. moby/moby#36638
- Update libnetwork to improve scalabiltiy of bridge network isolation rules. moby/moby#36774
- Fix a misused network object name. moby/moby#36745
- LCOW: Implement
docker save
. moby/moby#36599 - Pkg: devmapper: dynamically load dm_task_deferred_remove. moby/moby#35518
- Windows: Add GetLayerPath implementation in graphdriver. moby/moby#36738
- Fix Windows layer leak when write fails. moby/moby#36728
- Fix FIFO, sockets and device files when run in user NS. moby/moby#36756
- Fix docker version output alignment. docker/cli#965
- Always make sysfs read-write with privileged. moby/moby#36808
- Bump Golang to 1.10.1. moby/moby#35739
- Bump containerd client. moby/moby#36684
- Bump golang.org/x/net to go1.10 release commit. moby/moby#36894
- Context.WithTimeout: do call the cancel func. moby/moby#36920
- Copy: avoid using all system memory with authz plugins. moby/moby#36595
- Daemon/cluster: handle partial attachment entries during configure. moby/moby#36769
- Don't make container mount unbindable. moby/moby#36768
- Extra check before unmounting on shutdown. moby/moby#36879
- Move mount parsing to separate package. moby/moby#36896
- No global volume driver store. moby/moby#36637
- Pkg/mount improvements. moby/moby#36091
- Relax some libcontainerd client locking. moby/moby#36848
- Remove daemon dependency on api packages. moby/moby#36912
- Remove the retries for service update. moby/moby#36827
- Revert unencryted storage warning prompt. docker/cli#1008
- Support cancellation in
directory.Size()
. moby/moby#36734 - Switch from x/net/context -> context. moby/moby#36904
- Fixed a function to check Content-type is
application/json
or not. moby/moby#36778
- Add default pollSettings config functions. moby/moby#36706
- Add if judgment before receiving operations on daemonWaitCh. moby/moby#36651
- Fix issues with running volume tests as non-root.. moby/moby#36935
- RoleManager will remove detected nodes from the cluster membership docker/swarmkit#2548
- Scheduler/TaskReaper: handle unassigned tasks marked for shutdown docker/swarmkit#2574
- Avoid predefined error log. docker/swarmkit#2561
- Task reaper should delete tasks with removed slots that were not yet assigned. docker/swarmkit#2557
- Agent reports FIPS status. docker/swarmkit#2587
- Fix: timeMutex critical operation outside of critical section. docker/swarmkit#2603
- Expose swarmkit's Raft tuning parameters in engine config. moby/moby#36726
- Make internal/test/daemon.Daemon swarm aware. moby/moby#36826
- Fix typos in builder and client. moby/moby#36424
- Print Stack API and Kubernetes versions in version command. docker/cli#898
- Fix Kubernetes duplication in version command. docker/cli#953
- Use HasAvailableFlags instead of HasFlags for Options in help. docker/cli#959
- Add support for mandatory variables to stack deploy. docker/cli#893
- Fix docker stack services command Port output. docker/cli#943
- Deprecate unencrypted storage. docker/cli#561
- Don't set a default filename for ConfigFile. docker/cli#917
- Fix compose network name. docker/cli#941
- Silent login: use credentials from cred store to login. docker/cli#139
- Add support for compressibility of log file. moby/moby#29932
- Fix empty LogPath with non-blocking logging mode. moby/moby#36272
- Prevent explicit removal of ingress network. moby/moby#36538
- Devmapper cleanup improvements. moby/moby#36307
- Devmapper.Mounted: remove. moby/moby#36437
- Devmapper/Remove(): use Rmdir, ignore errors. moby/moby#36438
- LCOW - Change platform parser directive to FROM statement flag. moby/moby#35089
- Split daemon service code to windows file. moby/moby#36653
- Windows: Block pulling uplevel images. moby/moby#36327
- Windows: Hyper-V containers are broken after 36586 was merged. moby/moby#36610
- Windows: Move kernel_windows to use golang registry functions. moby/moby#36617
- Windows: Pass back system errors on container exit. moby/moby#35967
- Windows: Remove servicing mode. moby/moby#36267
- Windows: Report Version and UBR. moby/moby#36451
- Bump Runc to 1.0.0-rc5. moby/moby#36449
- Mount failure indicates the path that failed. moby/moby#36407
- Change return for errdefs.getImplementer(). moby/moby#36489
- Client: fix hijackedconn reading from buffer. moby/moby#36663
- Content encoding negotiation added to archive request. moby/moby#36164
- Daemon/stats: more resilient cpu sampling. moby/moby#36519
- Daemon/stats: remove obnoxious types file. moby/moby#36494
- Daemon: use context error rather than inventing new one. moby/moby#36670
- Enable CRIU on non-amd64 architectures (v2). moby/moby#36676
- Fixes intermittent client hang after closing stdin to attached container moby/moby#36517
- Fix daemon panic on container export after restart moby/moby#36586
- Follow-up fixes on multi-stage moby's Dockerfile. moby/moby#36425
- Freeze busybox and latest glibc in Docker image. moby/moby#36375
- If container will run as non root user, drop permitted, effective caps early. moby/moby#36587
- Layer: remove metadata store interface. moby/moby#36504
- Minor optimizations to dockerd. moby/moby#36577
- Whitelist statx syscall. moby/moby#36417
- Add missing error return for plugin creation. moby/moby#36646
- Fix AppArmor not being applied to Exec processes. moby/moby#36466
- Daemon/logger/ring.go: log error not instance. moby/moby#36475
- Fix stats collector spinning CPU if no stats are collected. moby/moby#36609
- Fix(distribution): digest cache should not be moved if it was an auth. moby/moby#36509
- Make sure plugin container is removed on failure. moby/moby#36715
- Bump to containerd 1.0.3. moby/moby#36749
- Don't sort plugin mount slice. moby/moby#36711
- Fixes for synchronizing the dispatcher shutdown with in-progress rpcs. moby/moby#36371
- Increase raft ElectionTick to 10xHeartbeatTick. moby/moby#36672
- Make Swarm manager Raft quorum parameters configurable in daemon config. moby/moby#36726
- Ingress network should not be attachable. docker/swarmkit#2523
- [manager/state] Add fernet as an option for raft encryption. docker/swarmkit#2535
- Log GRPC server errors. docker/swarmkit#2541
- Log leadership changes at the manager level. docker/swarmkit#2542
- Remove the containerd executor. docker/swarmkit#2568
- Agent: backoff session when no remotes are available. docker/swarmkit#2570
- [ca/manager] Remove root CA key encryption support entirely. docker/swarmkit#2573
- Fix agent logging race. docker/swarmkit#2578
- Adding logic to restore networks in order. docker/swarmkit#2571
- Gitutils: fix checking out submodules moby/moby#35737
- Attach: Ensure attach exit code matches container's docker/cli#696
- Added support for tmpfs-mode in compose file docker/cli#808
- Adds a new compose file version 3.6 docker/cli#808
- Fix issue of filter in
docker ps
wherehealth=starting
returns nothing moby/moby#35940
- Improve presentation of published port ranges docker/cli#581
- Bump Go to 1.9.3 docker/cli#827
- Fix broken Kubernetes stack flags docker/cli#831
- Annotate "stack" commands to be "swarm" and "kubernetes" docker/cli#804
- Add manifest command docker/cli#138
- LCOW remotefs - return error in Read() implementation moby/moby#36051
- LCOW: Coalesce daemon stores, allow dual LCOW and WCOW mode moby/moby#34859
- LCOW: Fix OpenFile parameters moby/moby#36043
- LCOW: Raise minimum requirement to Windows RS3 RTM build (16299) moby/moby#36065
- Improve daemon config reload; log active configuration moby/moby#36019
- Fixed error detection using IsErrNotFound and IsErrNotImplemented for the ContainerLogs method moby/moby#36000
- Add journald tag as SYSLOG_IDENTIFIER moby/moby#35570
- Splunk: limit the reader size on error responses moby/moby#35509
- Disable service on release network results in zero-downtime deployments with rolling upgrades moby/moby#35960
- Fix services failing to start if multiple networks with the same name exist in different spaces moby/moby#30897
- Fix duplicate networks being added with
docker service update --network-add
docker/cli#780 - Fixing ingress network when upgrading from 17.09 to 17.12. moby/moby#36003
- Fix ndots configuration docker/libnetwork#1995
- Fix IPV6 networking being deconfigured if live-restore is enabled docker/libnetwork#2043
- Add support for MX type DNS queries in the embedded DNS server docker/libnetwork#2041
- Added packaging for Fedora 26, Fedora 27, and Centos 7 on aarch64 docker/docker-ce-packaging#71
- Removed support for Ubuntu Zesty docker/docker-ce-packaging#73
- Removed support for Fedora 25 docker/docker-ce-packaging#72
- Fixes unexpected Docker Daemon shutdown based on pipe error moby/moby#35968
- Fix some occurrences of hcsshim::ImportLayer failed in Win32: The system cannot find the path specified moby/moby#35924
- Windows: increase the maximum layer size during build to 127GB moby/moby#35925
- Fix Devicemapper: Error running DeleteDevice dm_task_run failed moby/moby#35919
- Introduce « exec_die » event moby/moby#35744
- Update API to version 1.36 moby/moby#35744
- Fix
docker update
not updating cpu quota, and cpu-period of a running container moby/moby#36030
- Make container shm parent unbindable moby/moby#35830
- Make image (layer) downloads faster by using pigz moby/moby#35697
- Protect the daemon from volume plugins that are slow or deadlocked moby/moby#35441
- Fix
DOCKER_RAMDISK
environment variable not being honoured moby/moby#35957
- Bump containerd to 1.0.1 (9b55aab90508bd389d7654c4baf173a981477d55) moby/moby#35986
- Update runc to fix hang during start and exec moby/moby#36097
- Fix "--node-generic-resource" singular/plural moby/moby#36125
- Fix files not being deleted if user-namespaces are enabled moby/moby#35822
- Add support for expanding environment-variables in
docker commit --change ...
moby/moby#35582
- Return errors from client in stack deploy configs docker/cli#757
- Fix description of filter flag in prune commands docker/cli#774
- Add "pid" to unsupported options list docker/cli#768
- Add support for experimental Cli configuration docker/cli#758
- Add support for generic resources to bash completion docker/cli#749
- Fix error in zsh completion script for docker exec docker/cli#751
- Add a debug message when client closes websocket attach connection moby/moby#35720
- Fix bash completion for
"docker swarm"
docker/cli#772
- Correct references to
--publish
long syntax in docs docker/cli#746 - Corrected descriptions for MAC_ADMIN and MAC_OVERRIDE docker/cli#761
- Updated developer doc to explain external CLI moby/moby#35681
- Fix
"on-failure"
restart policy being documented as "failure" docker/cli#754 - Fix anchors to "Storage driver options" docker/cli#748
- Add kubernetes support to
docker stack
command docker/cli#721
- Don't append the container id to custom directory checkpoints. moby/moby#35694
- Fix daemon crash when using the GELF log driver over TCP when the GELF server goes down moby/moby#35765
- Fix awslogs batch size calculation for large logs moby/moby#35726
- Windows: Fix to allow docker service to start on Windows VM docker/libnetwork#1916
- Fix for docker intercepting DNS requests on ICS network docker/libnetwork#2014
- Windows: Added a new network creation driver option docker/libnetwork#2021
- Validate Mount-specs on container start to prevent missing host-path moby/moby#35833
- Fix overlay2 storage driver inside a user namespace moby/moby#35794
- Zfs: fix busy error on container stop moby/moby#35674
- Fix health checks not using the container's working directory moby/moby#35845
- Fix VFS graph driver failure to initialize because of failure to setup fs quota moby/moby#35827
- Fix containerd events being processed twice moby/moby#35896
- Fix published ports not being updated if a service has the same number of host-mode published ports with Published Port 0 docker/swarmkit#2376
- Make the task termination order deterministic docker/swarmkit#2265
Important: Docker CE 17.11 is the first Docker release based on containerd 1.0 beta. Docker CE 17.11 and later don't recognize containers started with previous Docker versions. If using Live Restore, you must stop all containers before upgrading to Docker CE 17.11. If you don't, any containers started by Docker versions that predate 17.11 aren't recognized by Docker after the upgrade and keep running, un-managed, on the system. {:.important}
- Test & Fix build with rm/force-rm matrix moby/moby#35139
- Fix build with
--stream
with a large context moby/moby#35404
- Hide help flag from help output docker/cli#645
- Support parsing of named pipes for compose volumes docker/cli#560
- [Compose] Cast values to expected type after interpolating values docker/cli#601
- Add output for "secrets" and "configs" on
docker stack deploy
docker/cli#593
- Fix flag description for
--host-add
docker/cli#648
- Do not truncate ID on docker service ps --quiet docker/cli#579
- Update bash completion and deprecation for synchronous service updates docker/cli#610
- copy to log driver's bufsize, fixes #34887 moby/moby#34888
- Add TCP support for GELF log driver moby/moby#34758
- Add credentials endpoint option for awslogs driver moby/moby#35055
- Fix network name masking network ID on delete moby/moby#34509
- Fix returned error code for network creation from 500 to 409 moby/moby#35030
- Fix tasks fail with error "Unable to complete atomic operation, key modified" docker/libnetwork#2004
- Switch to Containerd 1.0 client moby/moby#34895
- Increase container default shutdown timeout on Windows moby/moby#35184
- LCOW: API: Add
platform
to /images/create and /build moby/moby#34642 - Stop filtering Windows manifest lists by version moby/moby#35117
- Use windows console mode constants from Azure/go-ansiterm moby/moby#35056
- Windows Daemon should respect DOCKER_TMPDIR moby/moby#35077
- Windows: Fix startup logging moby/moby#35253
- Add support for Windows version filtering on pull moby/moby#35090
- Fixes LCOW after containerd 1.0 introduced regressions moby/moby#35320
- ContainerWait on remove: don't stuck on rm fail moby/moby#34999
- oci: obey CL_UNPRIVILEGED for user namespaced daemon moby/moby#35205
- Don't abort when setting may_detach_mounts moby/moby#35172
- Fix panic on get container pid when live restore containers moby/moby#35157
- Mask
/proc/scsi
path for containers to prevent removal of devices (CVE-2017-16539) moby/moby#35399
- Update to github.com/vbatts/[email protected] (CVE-2017-14992) moby/moby#35424
- Modifying integration test due to new ipam options in swarmkit moby/moby#35103
- Fix deadlock on getting swarm info moby/moby#35388
- Expand the scope of the
Err
field inTaskStatus
to also cover non-terminal errors that block the task from progressing docker/swarmkit#2287
- Build packages for Debian 10 (Buster) docker/docker-ce-packaging#50
- Build packages for Ubuntu 17.10 (Artful) docker/docker-ce-packaging#55
Important: Starting with this release,
docker service create
,docker service update
,docker service scale
anddocker service rollback
use non-detached mode as default, use--detach
to keep the old behaviour. {: .important }
- Reset uid/gid to 0 in uploaded build context to share build cache with other clients docker/cli#513
- Add support for
ADD
urls without any sub path moby/moby#34217
- Move output of
docker stack rm
to stdout docker/cli#491 - Use natural sort for secrets and configs in cli docker/cli#307
- Use non-detached mode as default for
docker service
commands docker/cli#525 - Set APIVersion on the client, even when Ping fails docker/cli#546
- Fix loader error with different build syntax in
docker stack deploy
docker/cli#544
- Change the default output format for
docker container stats
to showCONTAINER ID
andNAME
docker/cli#565
- Add
--no-trunc
flag todocker container stats
docker/cli#565 - Add experimental
docker trust
:view
,revoke
,sign
subcommands docker/cli#472
- Various doc and shell completion fixes docker/cli#610 docker/cli#611 docker/cli#618 docker/cli#580 docker/cli#598 docker/cli#603
- Enabling ILB/ELB on windows using per-node, per-network LB endpoint moby/moby#34674
- Overlay fix for transient IP reuse docker/libnetwork#1935
- Serializing bitseq alloc docker/libnetwork#1788
- Disable hostname lookup on chain exists check docker/libnetwork#1974
- LCOW: Add UVM debuggability by grabbing logs before tear-down moby/moby#34846
- LCOW: Prepare work for bind mounts moby/moby#34258
- LCOW: Support for docker cp, ADD/COPY on build moby/moby#34252
- LCOW: VHDX boot to readonly moby/moby#34754
- Volume: evaluate symlinks before relabeling mount source moby/moby#34792
- Fixing ‘docker cp’ to allow new target file name in a host symlinked directory moby/moby#31993
- Add support for Windows version filtering on pull moby/moby#35090
- Produce an error if
docker swarm init --force-new-cluster
is executed on worker nodes moby/moby#34881
- Add support for
.Node.Hostname
templating in swarm services moby/moby#34686
- Increase gRPC request timeout to 20 seconds for sending snapshots docker/swarmkit#2391
- Do not filter nodes if logdriver is set to
none
docker/swarmkit#2396
- Adding ipam options to ipam driver requests docker/swarmkit#2324
- Add support for proxy configuration in config.json docker/cli#93
- Enable pprof/debug endpoints by default moby/moby#32453
- Passwords can now be passed using
STDIN
using the new--password-stdin
flag ondocker login
docker/cli#271
- Add
--detach
to docker scale docker/cli#243
- Prevent
docker logs --no-stream
from hanging due to non-existing containers moby/moby#34004
- Fix
docker stack ps
printing error tostdout
instead ofstderr
docker/cli#298
- Fix progress bar being stuck on
docker service create
if an error occurs during deploy docker/cli#259 - Improve presentation of progress bars in interactive mode docker/cli#260 docker/cli#237
- Print a warning if
docker login --password
is used, and recommend--password-stdin
docker/cli#270 - Make API version negotiation more robust moby/moby#33827
- Hide
--detach
when connected to daemons older than Docker 17.05 docker/cli#219
- Add
scope
filter inGET /networks/(id or name)
moby/moby#33630
- Implement long running interactive session and sending build context incrementally moby/moby#32677 docker/cli#231 moby/moby#33859
- Warn on empty continuation lines moby/moby#33719
- Fix
.dockerignore
entries with a leading/
not matching anything moby/moby#32088
- Fix wrong filemode for rotate log files moby/moby#33926
- Fix stderr logging for journald and syslog moby/moby#33832
- Allow stopping of paused container moby/moby#34027
- Add quota support for the overlay2 storage driver moby/moby#32977
- Remove container locks on
docker ps
moby/moby#31273 - Store container names in memdb moby/moby#33886
- Fix race condition between
docker exec
anddocker pause
moby/moby#32881 - Devicemapper: Rework logging and add
--storage-opt dm.libdm_log_level
moby/moby#33845 - Devicemapper: Prevent "device in use" errors if deferred removal is enabled, but not deferred deletion moby/moby#33877
- Devicemapper: Use KeepAlive to prevent tasks being garbage-collected while still in use moby/moby#33376
- Report intermediate prune results if prune is cancelled moby/moby#33979
- Fix run
docker rename <container-id> new_name
concurrently resulting in the having multiple names moby/moby#33940
- Fix file-descriptor leak and error handling moby/moby#33713
- Fix SIGSEGV when running containers docker/cli#303
- Prevent a goroutine leak when healthcheck gets stopped moby/moby#33781
- Image: Improve store locking moby/moby#33755
- Fix Btrfs quota groups not being removed when container is destroyed moby/moby#29427
- Libcontainerd: fix defunct containerd processes not being properly reaped moby/moby#33419
- Preparations for Linux Containers on Windows
- LCOW: Dedicated scratch space for service VM utilities moby/moby#33809
- LCOW: Support most operations excluding remote filesystem moby/moby#33241 moby/moby#33826
- LCOW: Change directory from lcow to "Linux Containers" moby/moby#33835
- LCOW: pass command arguments without extra quoting moby/moby#33815
- LCOW: Updates necessary due to platform schema change moby/moby#33785
- Initial support for plugable secret backends moby/moby#34157 moby/moby#34123
- Sort swarm stacks and nodes using natural sorting docker/cli#315
- Make engine support cluster config event moby/moby#34032
- Only pass a join address when in the process of joining a cluster moby/moby#33361
- Fix error during service creation if a network with the same name exists both as "local" and "swarm" scoped network docker/cli#184
- (experimental) Add support for plugins on swarm moby/moby#33575
- Add multi-stage build support #31257 #32063
- Allow using build-time args (
ARG
) inFROM
#31352 - Add an option for specifying build target #32496
- Accept
-f -
to read Dockerfile fromstdin
, but use local context for building #31236 - The values of default build time arguments (e.g
HTTP_PROXY
) are no longer displayed in docker image history unless a correspondingARG
instruction is written in the Dockerfile. #31584
- Fix setting command if a custom shell is used in a parent image #32236
- Fix
docker build --label
when the label includes single quotes and a space #31750
- Add
--mount
flag todocker run
anddocker create
#32251 - Add
--type=secret
todocker inspect
#32124 - Add
--format
option todocker secret ls
#31552 - Add
--filter
option todocker secret ls
#30810 - Add
--filter scope=<swarm|local>
todocker network ls
#31529 - Add
--cpus
support todocker update
#31148 - Add label filter to
docker system prune
and otherprune
commands #30740 docker stack rm
now accepts multiple stacks as input #32110- Improve
docker version --format
option when the client has downgraded the API version #31022 - Prompt when using an encrypted client certificate to connect to a docker daemon #31364
- Display created tags on successful
docker build
#32077 - Cleanup compose convert error messages #32087
- Add support for building docker debs for Ubuntu 17.04 Zesty on amd64 #32435
- Fix
--api-cors-header
being ignored if--api-enable-cors
is not set #32174 - Cleanup docker tmp dir on start #31741
- Deprecate
--graph
flag in favor or--data-root
#28696
- Add support for logging driver plugins #28403
- Add support for showing logs of individual tasks to
docker service logs
, and add/task/{id}/logs
REST endpoint #32015 - Add
--log-opt env-regex
option to match environment variables using a regular expression #27565
- Allow user to replace, and customize the ingress network #31714
- Fix UDP traffic in containers not working after the container is restarted #32505
- Fix files being written to
/var/lib/docker
if a different data-root is set #32505
- Ensure health probe is stopped when a container exits #32274
- Add update/rollback order for services (
--update-order
/--rollback-order
) #30261 - Add support for synchronous
service create
andservice update
#31144 - Add support for "grace periods" on healthchecks through the
HEALTHCHECK --start-period
and--health-start-period
flag todocker service create
,docker service update
,docker create
, anddocker run
to support containers with an initial startup time #28938
docker service create
now omits fields that are not specified by the user, when possible. This will allow defaults to be applied inside the manager #32284docker service inspect
now shows default values for fields that are not specified by the user #32284- Move
docker service logs
out of experimental #32462 - Add support for Credential Spec and SELinux to services to the API #32339
- Add
--entrypoint
flag todocker service create
anddocker service update
#29228 - Add
--network-add
and--network-rm
todocker service update
#32062 - Add
--credential-spec
flag todocker service create
anddocker service update
#32339 - Add
--filter mode=<global|replicated>
todocker service ls
#31538 - Resolve network IDs on the client side, instead of in the daemon when creating services #32062
- Add
--format
option todocker node ls
#30424 - Add
--prune
option todocker stack deploy
to remove services that are no longer defined in the docker-compose file #31302 - Add
PORTS
column fordocker service ls
when usingingress
mode #30813
- Fix unnescessary re-deploying of tasks when environment-variables are used #32364
- Fix
docker stack deploy
not supportingendpoint_mode
when deploying from a docker compose file #32333 - Proceed with startup if cluster component cannot be created to allow recovering from a broken swarm setup #31631
- Allow setting SELinux type or MCS labels when using
--ipc=container:
or--ipc=host
#30652
- Deprecate
--api-enable-cors
daemon flag. This flag was marked deprecated in Docker 1.6.0 but not listed in deprecated features #32352 - Remove Ubuntu 12.04 (Precise Pangolin) as supported platform. Ubuntu 12.04 is EOL, and no longer receives updates #32520
- Output of docker CLI --help is now wrapped to the terminal width #28751
- Suppress image digest in docker ps #30848
- Hide command options that are related to Windows #30788
- Fix
docker plugin install
prompt to accept "enter" for the "N" default #30769
- Add
truncate
function for Go templates #30484
- Support expanded syntax of ports in
stack deploy
#30476 - Support expanded syntax of mounts in
stack deploy
#30597 #31795
- Add
--add-host
for docker build #30383 - Add
.CreatedAt
placeholder fordocker network ls --format
#29900
- Update order of
--secret-rm
and--secret-add
#29802
- Add
--filter enabled=true
fordocker plugin ls
#28627 - Add
--format
todocker service ls
#28199 - Add
publish
andexpose
filter fordocker ps --filter
#27557
- Support multiple service IDs on
docker service ps
#25234
- Allow swarm join with
--availability=drain
#24993
- Docker inspect now shows "docker-default" when AppArmor is enabled and no other profile was defined #27083
- Implement optional ring buffer for container logs #28762
- Add
--log-opt awslogs-create-group=<true|false>
for awslogs (CloudWatch) to support creation of log groups as needed #29504
- Fix segfault when using the gcplogs logging driver with a "static" binary #29478
- Check parameter
--ip
,--ip6
and--link-local-ip
indocker network connect
#30807
- Added support for
dns-search
#30117 - Added --verbose option for docker network inspect to show task details from all swarm nodes #31710
- Clear stale datapath encryption states when joining the cluster docker/libnetwork#1354
- Ensure iptables initialization only happens once docker/libnetwork#1676
- Fix bad order of iptables filter rules docker/libnetwork#961
- Add anonymous container alias to service record on attachable network docker/libnetwork#1651
- Support for
com.docker.network.container_interface_prefix
driver label docker/libnetwork#1667 - Improve network list performance by omitting network details that are not used #30673
- Handle paused container when restoring without live-restore set #31704
- Do not allow sub second in healthcheck options in Dockerfile #31177
- Support name and id prefix in
secret update
#30856 - Use binary frame for websocket attach endpoint #30460
- Fix linux mount calls not applying propagation type changes #30416
- Fix ExecIds leak on failed
exec -i
#30340 - Prune named but untagged images if
danglingOnly=true
#30330
- Add daemon flag to set
no_new_priv
as default for unprivileged containers #29984 - Add daemon option
--default-shm-size
#29692 - Support registry mirror config reload #29650
- Ignore the daemon log config when building images #29552
- Move secret name or ID prefix resolving from client to daemon #29218
- Allow adding rules to
cgroup devices.allow
on container create/run #22563
- Fix
cpu.cfs_quota_us
being reset when runningsystemd daemon-reload
#31736
- Topology-aware scheduling #30725
- Automatic service rollback on failure #31108
- Worker and manager on the same node are now connected through a UNIX socket docker/swarmkit#1828, docker/swarmkit#1850, docker/swarmkit#1851
- Improve raft transport package docker/swarmkit#1748
- No automatic manager shutdown on demotion/removal docker/swarmkit#1829
- Use TransferLeadership to make leader demotion safer docker/swarmkit#1939
- Decrease default monitoring period docker/swarmkit#1967
- Add Service logs formatting #31672
- Fix service logs API to be able to specify stream #31313
- Add
--stop-signal
forservice create
andservice update
#30754 - Add
--read-only
forservice create
andservice update
#30162 - Renew the context after communicating with the registry #31586
- (experimental) Add
--tail
and--since
options todocker service logs
#31500 - (experimental) Add
--no-task-ids
and--no-trunc
options todocker service logs
#31672
- Block pulling Windows images on non-Windows daemons #29001
{% endraw %}