content/manuals/desktop/release-notes.md
This page contains information about the new features, improvements, known issues, and bug fixes in Docker Desktop releases.
Releases are gradually rolled out to ensure quality control. If the latest version is not yet available to you, allow some time — updates typically become available within a week of the release date.
Docker Desktop versions older than 6 months from the latest release are not available for download. Previous release notes are available in our documentation repository.
For more frequently asked questions, see the FAQs.
{{< release-date date="2026-03-16" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.65.0" build_path="/221669/" >}}
docker build, docker run, or docker compose commands fail, offering contextual suggestions.dhictl CLI plugin for managing Docker Hardened Images.{{< release-date date="2026-03-11" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.64.0" build_path="/221278/" >}}
docker ai command stopping after a Docker Agent update.docker ai CLI commands did not correctly shell out to Docker Agent.Docker.app under Application Support instead of /tmp.{{< release-date date="2026-03-02" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.63.0" build_path="/220185/" >}}
v6.12.72"required": null.mcp-gateway would hang when fetching secrets from the Secrets Engine while the Docker Desktop VM was in Resource Saver mode.{{< release-date date="2026-02-23" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.62.0" build_path="/219486/" >}}
v6.12.69{{< release-date date="2026-02-18" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.61.0" build_path="/219004/" >}}
v6.12.68v0.12.0{{< release-date date="2026-02-10" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.60.1" build_path="/218372/" >}}
{{< release-date date="2026-02-09" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.60.0" build_path="/218231/" >}}
docker desktop diagnose command to gather diagnostics.ping6 host.docker.internal.console.anthropic.com/claude.ai in proxy default rulesrun <agent> --help{{< release-date date="2026-02-03" >}}
{{< desktop-install-v2 mac=true version="4.59.1" build_path="/217750/" >}}
{{< release-date date="2026-02-02" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.59.0" build_path="/217644/" >}}
v6.12.67v0.10.1docker-pass.--use-api-socket flag.{{< release-date date="2026-01-29" >}}
{{< desktop-install-v2 mac=true version="4.58.1" build_path="/217134/" >}}
{{< release-date date="2026-01-26" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.58.0" build_path="/216728/" >}}
v6.12.65admin-settings.json and registry.json.[!IMPORTANT]
Starting with Docker Desktop version 4.59, installing an update from the tray menu will proceed without opening the Docker Desktop Dashboard.
ProgramData.docker/desktop-containerd-registry-mirror:v0.0.3docker/desktop-cloud-provider-kind:v0.5.0docker/desktop-vpnkit-controller:v4.0docker/desktop-storage-provisioner:v3.0kind dependency image envoyproxy/envoy was upgraded from v1.32.6 to v1.36.4. If you mirror kind images, ensure your mirrors are updated.{{< release-date date="2026-01-19" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.57.0" build_path="/215387/" >}}
C:\ProgramData\DockerDesktop directory.docker debug failed on containers started with environment variables but no '='. For example, docker run -e NONEXISTENT_ENV_VAR.{{< release-date date="2026-01-12" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.56.0" build_path="/214940/" >}}
ExtraDNSEntries configuration field.Fixed a bug on Windows where removing the state directory would fail because log files were still open.
Fixed installations from the Microsoft Store wrongly advertizing a new update.
Fixed a crash when running /sbin/ldconfig in ubuntu:22.04 ARM64 containers by upgrading QEMU from 8.1.5 to 10.0.4. This resolves a known issue reported in docker/for-win#15004.
[!NOTE]
When running under ARM64 emulation, some
amd64Go binaries built with older Go versions may still segfault. To avoid this, rebuild affected binaries using Go 1.25.4 or later. For details, see golang/go#69255 and the corresponding Go commit.
hostPath volume mounts failing on Linux hosts. Fixes docker/desktop-linux#12.{{< release-date date="2025-12-16" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.55.0" build_path="/213807/" >}}
daemon.json is invalid.[!IMPORTANT]
Wasm workloads will be deprecated and removed in a future Docker Desktop release.
{{< release-date date="2025-12-04" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.54.0" build_path="/212467/" >}}
/dev/shm did not have enough permission for containers to write into. Fixes docker/for-mac#7804.{{< release-date date="2025-11-27" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.53.0" build_path="/211793/" >}}
{{< release-date date="2025-11-20" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.52.0" build_path="/210994/" >}}
admin-settings.json file.docker model purge you can remove all your models.v0.28.0/engines prefix for Docker Model Runner's OpenAI API endpoint curl http://localhost:12434/v1/models.ai/ prefix for the models published on Docker Hub with docker model pull.{{< release-date date="2025-11-13" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.51.0" build_path="/210443/" >}}
v6.12.54{{< release-date date="2025-11-06" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.50.0" build_path="/209931/" >}}
192.168.65.0/24 then an alternative network will be chosen automatically. You can still override the choice as before via Docker Desktop settings and admin settings.{{< release-date date="2025-10-23" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.49.0" build_path="/208700/" >}}
[!IMPORTANT]
Support for Windows 10 21H2 (19044) and 11 22H2 (22621) has ended. Installing Docker Desktop will require Windows 10 22H2 (19045) or Windows 11 23H2 (22631) in the next release.
v0.0.45{{< release-date date="2025-10-09" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.48.0" build_path="/207573/" >}}
[!IMPORTANT]
Support for macOS 13 has ended. Installing Docker Desktop will require macOS 14 in the next release.
v0.22.0mcp key to align with the latest VS Code MCP server changes.--embeddings runtime flag as described in AI Models in Docker Compose. Fixes docker/model-runner#166.HKLM\SOFTWARE\Docker Inc.\Docker\1.0 registry key. Look for docker.exe in the path to find out where Docker Desktop is installed instead.{{< release-date date="2025-09-25" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.47.0" build_path="/206054/" >}}
docker plugin and docker login commands in containers with Docker socket mounts.docker model requests you can fetch requests and responses.v0.0.44com.apple.security.cs.allow-dyld-environment-variables entitlement which allow a signed, arbitrary dynamic library to be loaded with Docker Desktop via the DYLD_INSERT_LIBRARIES environment variable.docker model package command to hang when writing to the local content store (without the --push flag).unless-stopped were never restarted. Fixes docker/for-mac#7744.docker model package command to hang when writing to the local content store (without the --push flag).{{< release-date date="2025-09-11" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.46.0" build_path="/204649/" >}}
GODEBUG environment variable when the key-value pair ("GODEBUG":"...") exists inside the Docker context metadata. This means certificates that have negative serial numbers in the CLI binaries are supported by default.llama.cpp inference processes.llama.cpp inference processes.{{< release-date date="2025-08-28" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.45.0" build_path="/203075/" >}}
com.docker.diagnose to crash when uploading a diagnostics bundle behind a proxy that requires authentication.kind dependency image envoyproxy/envoy was upgraded from v1.32.0 to v1.32.6. If you mirror kind images, ensure your mirrors are updated.~/.docker/cli-plugins by default when users lacked the correct permissions.docker-desktop distribution was not present.{{< release-date date="2025-08-20" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.44.3" build_path="/202357/" >}}
{{< release-date date="2025-08-15" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.44.2" build_path="/202017/" >}}
{{< release-date date="2025-08-13" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.44.1" build_path="/201842/" >}}
vpnkit CIDR is locked without specifying a value in Desktop Settings Management.version-pack-data directory structure.~/.docker/cli-plugins if the user lacked execution permissions on that directory.{{< release-date date="2025-08-07" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.44.0" build_path="/201307/" >}}
--gpu (Windows only) and --cors flags for docker desktop enable model-runner.docker desktop kubernetes command to the Docker Desktop CLI.We are aware of CVE-2025-23266, a critical vulnerability affecting the NVIDIA Container Toolkit in CDI mode up to version 1.17.7. Docker Desktop includes version 1.17.8, which is not impacted. However, older versions of Docker Desktop that bundled earlier toolkit versions may be affected if CDI mode was manually enabled. Upgrade to Docker Desktop 4.44 or later to ensure you're using the patched version.
--restart flag to not restart properly when using Enhanced Container Isolation.--publish-all when --publish was already specified.io_uring. To enable io_uring in a container, use --security-opt seccomp=unconfined. Fixes docker/for-mac#7707.docker-users group to the named pipe security descriptors.SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall registry key.com.docker.build process and fail to start. Fixed docker/for-win#14840.cgroups v1 and Enhanced Container Isolation (ECI) is enabled.{{< release-date date="2025-07-15" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.43.2" build_path="/199162/" >}}
{{< release-date date="2025-07-04" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.43.1" build_path="/198352/" >}}
{{< release-date date="2025-07-03" >}}
{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.43.0" build_path="/198134/" >}}
docker start to drop the container's port mappings for a container already running.500 Internal Server Error for API route and version error application start.fsck.~/.kube/config in WSL2 when using a kind Kubernetes cluster.docker CLI command if Docker Desktop has been manually paused.eBPF which blocked io_uring. To enable io_uring in a container, use --security-opt seccomp=unconfined. Fixes docker/for-mac#7707.SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall registry key.com.docker.build process and fail to start. Fixes docker/for-win#14840docker buildx bake will not build images in Compose files with a top-level models attribute. Use docker compose build instead.persisted-state.json file to reset the UI. The file is located in the following directories:
%APPDATA%\Docker Desktop\persisted-state.json$XDG_CONFIG_HOME/Docker Desktop/persisted-state.json or ~/.config/Docker Desktop/persisted-state.json~/Library/Application Support/Docker Desktop/persisted-state.json{{< release-date date="2025-06-18" >}}
docker run -p ports to disappear.docker CLI commands hanging in WSL 2 distros. docker/for-win#14656{{< release-date date="2025-06-04" >}}
seccomp for containers by default. Use docker run --security-opt seccomp=unconfined to disable seccomp for a container.io_uring syscalls in containers.ai namespace.llama.cpp server now supports streaming and tool calling in Model Runner.nobody:nogroup ownership.The network name cannot be found error when starting with WSL 2. Fixes docker/for-win#14714.crossDistro option which was causing WSL 2 to log an error. See microsoft/WSL#4577docker port, resulting in "No host port found for host IP" errors when using testcontainers-node. See testcontainers/testcontainers-node#818{{< release-date date="2025-05-06" >}}
Models menu was displayed in the GUI even when Docker Model Runner was not supported or not enabled.{{< release-date date="2025-04-30" >}}
admin-settings.json file.llama.cpp DLLs in a directory included in the system PATH.{{< release-date date="2025-04-28" >}}
admin-settings.json file didn't contain the optional configurationFileVersion configuration./proc/sys/kernel/shm* sysctls when Enhanced Container Isolation is enabled on Mac, Windows Hyper-V, or Linux.nft_fib_inet, required for running firewalld in a Linux container./Library/Application Support/com.docker.docker/ directory can cause failure to apply RAM policy restrictions..exe installer now includes improved handling of locked files. Fixes docker/for-win#14299 and docker/for-win#14316.Docker Desktop.exe not showing version information after installation. Fixes docker/for-win#14703.desktop.plist (on macOS) or Registry key (on Windows) and also have a registry.json, sign-in will fail if the user belongs to an organization listed in desktop.plist/ registry key but not to any organizations specified in registry.json. To resolve this, remove the registry.json file.allowedOrgs Windows registry key using space-separated format, sign-in will fail and user will be logged out. As a workaround, specify each organization on a separate line in the registry key value.{{< release-date date="2025-03-31" >}}
docker-proxy to stop forwarding UDP datagrams to containers.--timeout flag.com.docker.admin for Mac and Linux.docker run -v /path/to/unix.sock:/unix.sock. The full socket path must be specified in the bind-mount. See for-mac/#483.docker-credential-osxkeychain and docker-credential-desktop to return malformed URIs when a token was stored for a server with a port specified..exe installers now disable Windows Containers by default when installing with the GUI.UseWindowsContainers to false in settings-store.json and restart Docker Desktop.Docker Desktop.exe does not contain the latest version information.{{< release-date date="2025-03-05" >}}
docker desktop logs command.--platform flag on docker load and docker save. This helps you import and export a subset of multi-platform images.docker historyv6.10.14 to fix a bug in OpenJDK that causes Java containers to terminate due to cgroups controller misidentification. See docker/for-mac#7573./usr/share/misc/usb.ids in the root mount namespace to fix usbip.com.docker.backend process consumed 100% of the CPU. See docker/for-mac#6951.docker compose log to stream when running apps in WSL.{{< release-date date="2025-01-30" >}}
update command has been added to the Docker Desktop CLI (Mac only).v0.0.38docker login web flow could not be refreshed by Docker Desktop.curl failed when Enhanced Container Isolation was enabled.0.0.0.0 HostIP in port-mappings. This caused default binding IPs configured through Engine's ip flag, or through the bridge option com.docker.network.bridge.host_binding_ipv4, to not be used.pac setting was ignored in admin-settings.json.com.docker.diagnose check|check-dot|check-hypervisordetect-host-hypervisor.{{< release-date date="2025-01-09" >}}
com.docker.vmnetd or com.docker.socket to newer versions.com.docker.vmnetd or com.docker.socket, follow the steps documented in docker/for-mac#7527.{{< release-date date="2024-12-17" >}}
index out of range [0] with length 0 when using Enhanced Container Isolation.com.docker.vmnetd or com.docker.socket, follow the steps documented in docker/for-mac#7527.{{< release-date date="2024-12-12" >}}
AF_VSOCK connections.sudo.registry.k8s.io and <geo>-docker.pkg.dev to Registry Access Management policies.com.docker.vmnetd or com.docker.socket, follow the steps documented in docker/for-mac#7527.{{< release-date date="2025-01-09" >}}
com.docker.vmnetd or com.docker.socket to newer versions.com.docker.vmnetd or com.docker.socket, follow the steps documented in docker/for-mac#7527.{{< release-date date="2024-11-18" >}}
allowedDerivedImages setting.v6.10.13docker events command would not terminate after streaming the events.filesharingAllowedDirectories setting in admin-settings.json.umask is set to 577 it would cause rpmbuild failure. Fixes docker/for-mac#6511.--network=host to 18 open host ports.{{< release-date date="2025-01-09" >}}
com.docker.vmnetd or com.docker.socket to newer versions.com.docker.vmnetd or com.docker.socket, follow the steps documented in docker/for-mac#7527.{{< release-date date="2024-10-30" >}}
8888. Fixes docker/for-win#14389 and docker/for-mac#7468{{< release-date date="2024-10-24" >}}
v0.0.37v6.10.9daemon.json would override proxies set in Docker Desktop settings.docker scout cves fs://<path to binary> instead.docker CLI did not work as expected when the registry.json file was malformed.invalid tag format error. Fixes docker/for-win#14258.NFT_NUMGEN, NFT_FIB_IPV4 and NFT_FIB_IPV6 kernel modules.settings.json has been renamed to settings-store.json~/.docker/cli-plugins to not be populated on start-up.{{< release-date date="2025-01-09" >}}
com.docker.vmnetd or com.docker.socket to newer versions.com.docker.vmnetd or com.docker.socket, follow the steps documented in docker/for-mac#7527.{{< release-date date="2024-10-09" >}}
{{< desktop-install-v2 all=true win_arm_release="Beta" version="4.34.3" build_path="/170107/" >}}
{{< release-date date="2024-09-12" >}}
docker compose up would become unresponsive while in Resource Saver mode.{{< release-date date="2024-09-05" >}}
{{< desktop-install-v2 win=true win_arm_release="Beta" version="4.34.1" build_path="/166053/" >}}
{{< release-date date="2024-08-29" >}}
.plist file) are now generally available.v6.10.1--rm) but whose port bindings would be rejected by Docker Desktop at start-up.docker image list to show multi-platform-related image information.Partial repair error would occasionally appear when triggering the Configuration integrity check feature.User.credsStore to desktop when the user's intention is to keep it empty. Fixes docker/for-win#9843.compose-bridge binary.docker login [registry address]) where, if the provided registry address includes a repository/image name (such as docker login index.docker.io/docker/welcome-to-docker), the repository part (docker/welcome-to-docker) is not normalized and results in credentials being stored incorrectly, which causes subsequent pulls from the registry (docker pull index.docker.io/docker/welcome-to-docker) to not be authenticated. To prevent this, don't include any extraneous suffix in the registry address when running docker login.
[!NOTE] Using
docker loginwith an address that includes URL path segments is not a documented use case and is considered unsupported. The recommended usage is to specify only a registry hostname, and optionally a port, as the address fordocker login.
docker compose up and Docker Desktop is in the Resource Saver mode, the command is unresponsive. As a workaround, manually exit the Resource Saving mode and Docker Compose becomes responsive again.{{< release-date date="2025-01-09" >}}
com.docker.vmnetd or com.docker.socket to newer versions.com.docker.vmnetd or com.docker.socket, follow the steps documented in docker/for-mac#7527.{{< release-date date="2024-07-31" >}}
{{< release-date date="2024-07-25" >}}
{{< desktop-install-v2 all=true win_arm_release="Beta" version="4.33.0" build_path="/160616/" >}}
v6.10--net=host and listening on an IPv6 address to be accessible from the host.grpcfuse filesharing option under heavy load.default-address-pools.bip, fixed-cidr and fixed-cidr-v6. Fixes docker/for-mac#7104.default-network-opts parameter is now properly validated.compose-bridge to convert your Compose configuration to Kubernetes resources.host.docker.internal. Fixes docker/for-mac#7332.docker-compose symlink pointed to an empty location. Fixes docker/for-mac#7345.wincred values were persisted after uninstall. Reported by Javier Yong @Javiery3889.wincred values were persisted after uninstall. Reported by Javier Yong @Javiery3889.v2.3.11.0 and v2.3.12.0, which is included in Windows 11 Insider. To fix this ensure WSL v2.2.4.0 is installed.
For more information, see microsoft/WSL#11794. This affects Docker Desktop 4.33.0 and earlier.{{< release-date date="2025-01-09" >}}
{{< desktop-install-v2 mac=true version="4.32.1" build_path="/179691/" >}}
com.docker.vmnetd or com.docker.socket to newer versions.com.docker.vmnetd or com.docker.socket, follow the steps documented in docker/for-mac#7527.{{< release-date date="2024-07-04" >}}
watch in the Compose File ViewerProxyEnableKerberosNTLM.docker-desktop-data distribution if it had been manually moved by the user.CONFIG_DM_CRYPT kernel module.CONFIG_PSI kernel module.CONFIG_GTP kernel module.CONFIG_NFT_BRIDGE_META kernel module./var/run/docker.socket was pointing to an unexpected path.AMD64 Java images. Fixes docker/for-mac/7286 and docker/for-mac/7006.Docker.app when installing from /Applications.docker-compose after an update, it will return command not found. As a workaround, you can create the following symlink: sudo ln -sf /Applications/Docker.app/Contents/Resources/cli-plugins/docker-compose /usr/local/bin/docker-composev6.6.31proxyEnableKerberosNTLM config to settings.json to enable fallback to basic proxy authentication if Kerberos/NTLM environment is not properly set up.admin-settings.json were not applied correctly on startup.default-load appearing as invalid driver-opt for the container driver.--allowed-org installer flag to write a policy registry key instead of to the registry.json.docker-users group can cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode. This vulnerability was discovered by Hashim Jawad (@ihack4falafel) working with Trend Micro Zero Day Initiative.com.docker.cli is now shipped simply as docker. This release leaves the CLI binary as com.docker.cli, but it will be removed next release.sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 needs to be ran at least once. Refer to the Ubuntu Blog.{{< release-date date="2024-05-06" >}}
runwasi shims to v0.4.0deislabs shims to v0.11.1spin shim to v0.13.1v0.0.29v6.6.26docker build commands in rootless containers.docker events exited with Unexpected EOF when Docker Desktop entered/exited Resource Saver mode.docker stats --no-stream hung when Docker Desktop was in Resource Saver mode.CONFIG_SECURITY=y kernel config, for example for Tetragon. Fixes docker/for-mac#7250.SQUASHFS compression. Fixes docker/for-mac#7260.docker-desktop-data WSL distribution (experimental)./var/run/docker.sock) on WSL.merging settings: integratedWslDistros type mismatch.--rm) if the container fails to start (e.g.: docker run --rm alpine invalidcommand). In this case, the CLI process may need to be manually killed.ENOENT \\.\pipe\errorReporter might be triggered if the user is not a member of the docker-users group.
This can be resolved by adding the user to the docker-users group. Before starting Docker Desktop, make sure to sign out and then sign back in and unregister docker-desktop distribution if that was created, using wsl --unregister docker-desktop.sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 needs to be ran at least once. Refer to the Ubuntu Blog for more details.{{< release-date date="2024-04-08" >}}
.dockerignore to avoid ignoring application files that start with "compose".host.docker.internal to be blocked by a rule in a PAC file.CONFIG_BONDING=y in the kernel config.docker run -v would fail after switching between WSL 2 and Hyper-V.docker-desktop and docker-desktop-data) when it was shutdown. Fixes docker/for-win/issues/13443 and docker/for-win/issues/13938.runAsNode fuse to improve security hardening. For more info, see Electron's documentation..{{< release-date date="2024-02-26" >}}
socks5:// HTTP and HTTPS proxy URLs when the SOCKS proxy support beta feature is enabled.v0.4.0, including:
v17.0, with initial support for WASI preview 2v0.13.5v4.1.2v0.11.1, including:
v0.13.2v0.5.1v2.2.0v1.7.0postgis with Qemu. Fixes docker/for-mac#7172.CONFIG_BLK_DEV_DM kernel config for kpartx. Fixes docker/for-mac#7197.SOCKS proxies to be set via a proxy autoconfig pac file.CONFIG_AUDIT kernel config.virtiofs. See rust-lang/docker-rust#161.missing registry authentication error when pulling Kubernetes images.docker build that caused Docker Desktop to crash. Fixes docker/for-win#13885, docker/for-win#13896, docker/for-win#13899, docker/for-mac#7164, docker/for-mac#7169httpd issue with Rosetta. docker/for-mac#7182virtualization.framework. Fixes docker/for-mac#7024failed to get console mode error when redirecting output from the CLI.{{< release-date date="2024-02-08" >}}
Istio. Fixes docker/for-mac#7148.php-fpm. Fixes docker/for-mac#7037.{{< release-date date="2024-02-01" >}}
{{< release-date date="2024-01-25" >}}
docker debug command (Beta).docker scan command has been removed. To continue learning about the vulnerabilities of your images, and many other features, use the docker scout command.docker command).minikube start --cni=cilium.btrfs, xfs, vfat, exfat, ntfs3, f2fs, squashfs, udf, 9p and autofs.Huge Pages and fixed PHP segmentation fault with Rosetta. Fixes docker/for-mac#7117.xvfb under Rosetta. Fixes docker/for-mac#7122ERR_WORKER_INVALID_EXEC_ARGV error under Rosetta. docker/for-mac#6998.admin-settings.json was syntactically invalid.admin-settings.json will be reset to default when Docker Desktop starts.{{< release-date date="2023-12-14" >}}
{{< release-date date="2023-12-04" >}}
docker init (Beta) now supports PHP with Apache + Composer.v0.3.1.v0.10.0.v14.0 and supports wasi preview-2 componentsv0.13.5v2.0.1v1.7.0docker feedback.docker push/pull authentication not being sent to non-DockerHub registries in cases where ServerAddress is not provided.docker history reporting wrong IDs and tags.docker tag not preserving internal metadata.docker commit when the daemon configured with --userns-remap.docker image list to show real image creation date.-a flag to docker pull (pull all remote repository tags).--group-add flag to docker run (append extra groups).docker push/pull.docker run --init was failing.uninstall CLI tool was missing.v2.0.4 and up).glibc version older than 2.32. This will be fixed in future releases. See docker/for-win#13824.{{< release-date date="2023-11-21" >}}
{{< release-date date="2023-11-13" >}}
sysctl vm.max_map_count is now set to 262144. See docker/for-mac#7047sh. See docker/for-win#13764.DockerCli.exe.{{< release-date date="2023-10-26" >}}
Accept License pop-up.docker push now supports Layer already exists and Mounted from progress statuses.docker save is now able to export images from all tags of the repository.docker diff containing extra differences.docker history not showing intermediate image IDs for images built with the classic builder.docker load not being able to load images from compressed tar archives.docker diff not working correctly when called multiple times concurrently for the same container.docker push not reusing layers when pushing layers to different repositories on the same registry.Docker.app. Fixes docker/for-mac#7000./var/run/docker.sock is mis-configured.ECRCredentialHelper if already present in /usr/local/bin.docker login. Fixes docker/docker-credential-helpers#299settings.json file and set "displaySwitchWinLinContainers": true.{{< release-date date="2023-10-12" >}}
notify.bugsnag.com. Fixes docker/for-win#13722.{{< release-date date="2023-10-04" >}}
{{< release-date date="2023-09-28" >}}
v0.2.0.v0.9.1.docker push --all-tags.docker system df -v).userns-remap daemon setting.docker load causing pool corruption which could some subsequent image related operations.sha256: prefix.docker images (without --all) showing intermediate layers (created by the legacy classic builder).docker diff containing extra differences.docker pull output to match the output with containerd integration disabled.filesharingDirectories. Fixes docker/for-mac#6980./Library/LaunchDaemons. Fixes docker/for-mac#6967.already in use. As a workaround, deactivate network acceleration by adding "kernelForUDP": false, in the settings.json file located at ~/Library/Group Containers/group.com.docker/settings.json.{{< release-date date="2023-09-11" >}}
d0a1a1cd.v0.9.0.docker init now supports ASP.NETdocker run -p.docker scout cache.docker scout environment.docker scout config.docker scout cves --format only-packages.docker scout enroll.docker scout cves --type fs.docker stats would hang when Docker Desktop was in Resource Saver mode.failed to read config content error when interacting with some images.FROM scratch instruction when using the legacy classic builder (DOCKER_BUILDKIT=0).mismatched image rootfs errors when building images with legacy classic builder (DOCKER_BUILDKIT=0).ONBUILD and MAINTAINER Dockerfile instruction0.0.0.0) or using localhost (using 127.0.0.1).{{< release-date date="2023-08-24" >}}
Clean / Purge data troubleshoot option on Windows. docker/for-win#13630{{< release-date date="2023-08-03" >}}
[!NOTE]
In this release, the bundled Docker Compose and Buildx binaries show a different version string. This relates to our efforts to test new features without causing backwards compatibility issues.
For example,
docker buildx versionoutputsbuildx v0.11.2-desktop.1.
include.{{< release-date date="2023-07-03" >}}
{{< release-date date="2023-06-29" >}}
wsl --shutdown.--hyper-v-default-data-root which specifies the default location for Hyper-V VM disk.--windows-containers-default-data-root which specifies the default data root for Windows Containers.--wsl-default-data-root which specifies the default location for WSL distribution disks.{{< release-date date="2023-06-05" >}}
docker load to fail when loading an image that contains attestations.{{< release-date date="2023-05-30" >}}
compare command.COMPOSE_CLOUD_EOL_SILENT=1.com.docker.diagnose check where it would complain about a missing vpnkit even when vpnkit is not expected to be running. Related to docker/for-mac#6825.{{< release-date date="2023-04-27" >}}
docker scan command. To continue learning about the vulnerabilities of your images, and many other features, use the new docker scout command. Run docker scout --help, or read the docs to learn more.docker scout compare command to compare two images, now also aliased under docker scout diff.docker-compose action fails (docker/for-win#13378).--proxy-http-mode, --overrider-proxy-http, --override-proxy-https and --override-proxy-exclude installer flags in the case of installation from the CLI on Mac and Windows, or alternatively by setting the values in the install-settings.json file.credsStore keys on application start. Note that if you use a custom credential helper then the CLI docker login and docker logout does not affect whether the UI is signed in to Docker or not. In general, it is better to sign into Docker via the UI since the UI supports multi-factor authentication.COMPOSE_V1_EOL_SILENT=1.true or false. Deprecated YAML 1.1 values such as “on” or “no” now produce a warning.host.docker.internal and gateway.docker.internal again). For WSL, this behavior is controlled by a new setting in the General tab. Fixes docker/for-win#13388 and docker/for-win#13398.courgette.log file appearing on the Desktop when updating Docker Desktop. Fixes docker/for-win#12468."networkType":"vpnkit" to your settings.json file located at ~/Library/Group Containers/group.com.docker/settings.json.deprecatedCgroupv1 was ignored. Fixes docker/for-mac#6801.docker pull would return EOF.registry.json enforced login via deleting the credsStore key from their Docker CLI configuration file. Only affects Docker Business customers.{{< release-date date="2023-04-03" >}}
docker init as per the roadmap.docker scout recommendations. It also displays a short overview of an image using docker scout quickview commands.docker buildx container builders would lose access to the network after 24hrs.. and _. in HTTP proxy exclude lists.docker run --gpus=all hangs. Fixes docker/for-win#13324.C:.com.docker.service privileged service to run permanently. For more information see Permission requirements for Windows.Access experimental features enabled are affected. Fixes docker/for-win#13344.com.apple.security.cs.allow-dyld-environment-variables and com.apple.security.cs.disable-library-validation entitlements which allow an arbitrary dynamic library to be loaded with Docker Desktop via the DYLD_INSERT_LIBRARIES environment variable.{{< release-date date="2023-03-20" >}}
docker buildx container builders would lose access to the network after 24hrs.--gpus on Windows with the WSL 2 backend does not work. This will be fixed in future releases. See docker/for-win/13324.{{< release-date date="2023-02-27" >}}
docker scan has been replaced by docker scout. See Docker Scout CLI, for more information.. and *. in HTTP proxy exclude lists.docker import for the containerd integration.docker ps failing with containers whose images are no longer present with the containerd integration.com.docker.vmnetd is not installed.com.docker.vmnetd could not be installed if /Library/PrivilegedHelperTools does not exist.Info.Plist on case-sensitive file systems. The actual filename is Info.plist. Fixes docker/for-mac#6677.host.docker.internal. Fixes docker/for-mac#6699./usr/local/bin. Fixes docker/for-mac#6328.musl so there is no need to install alpine-pkg-glibc in user distributions.kernelCommandLine = systemd.unified_cgroup_hierarchy=1 cgroup_no_v1=all to your %USERPROFILE%\.wslconfig file in the [wsl2] section.%LOCALAPPDATA%.~/.docker/context corruption and the error message "unexpected end of JSON input". You can also remove ~/.docker/context to work around this problem.xz for RPM and Arch Linux distribution.docker-desktop:// URL.docker.raw.sock, or npipe:////.pipe/docker_engine_linux on Windows, via the -H (--host) CLI flag or the DOCKER_HOST environment variable and launch containers without the additional hardening features provided by ECI. This does not affect already running containers, nor containers launched through the usual approach (without Docker's raw socket).{{< release-date date="2023-01-30" >}}
%LOCALAPPDATA%. Fixes docker/for-win#13184.{{< release-date date="2023-01-19" >}}
docker build and docker tag commands produced an image already exists error if the containerd integration feature is enabled.Info.plist which caused vmnetd to break on case-sensitive file systems. Fixes docker/for-mac/6677.{{< release-date date="2023-01-13" >}}
sudo inside a container failing with a security related error for some images. Fixes docker/for-mac/6675 and docker/for-win/13161.{{< release-date date="2023-01-12" >}}
docker build --quiet not outputting the image identifier with the containerd integration.containerd integration.com.docker.diagnose login to check HTTP proxy configuration.osxfs implementation is used for file sharing./usr/bin/kill. Fixes docker/for-mac#6589.truncate command) of very large files (> 38GB) shared on VirtioFS with an incorrect size./var/run/docker.sock symlink after every reboot./var/run/docker.sock symlink is signed.$HOME/.docker was removed on factory reset.docker build hanging while printing "load metadata for". Fixes docker/for-win#10247.kernelCommandLine = systemd.unified_cgroup_hierarchy=1 cgroup_no_v1=all to your %USERPROFILE%\.wslconfig file in the [wsl2] section.sudo inside a container fails with a security related error for some images. See docker/for-mac/6675 and docker/for-win/13161.{{< release-date date="2022-12-01" >}}
com.docker.vmnetd on install or on the first run. For more information see Permission requirements for Mac.docker extension share CLI or with the share button in the extensions Manage tab.proxy.pac in containers, docker pull etc.docker pull.{{< release-date date="2022-11-17" >}}
/usr/local/lib doesn't already exist. Fixes docker/for-mac#6569{{< release-date date="2022-11-10" >}}
image:tag@digest image references.vpnkit.exe is not running error reported in diagnostics.PR_SET_CHILD_SUBREAPER is unavailable when running emulated amd64 code.unpigz to allow parallel decompression of pulled images.docker pull with Control+C.kind not to start with the containerd integration.docker diff in the containerd integration.docker run —-platform in the containerd integration./var/run/docker.sock on Mac by default, to increase compatibility with tooling like tilt and docker-py.DockerCli.exe -SharedDrives. Fixes docker/for-win#5625.C:\Program Files\Docker folder at uninstall.sudo ln -s /Applications/Docker.app/Contents/Resources/bin/docker-index /usr/local/bin/docker-index{{< release-date date="2022-10-31" >}}
docker pull with Control+C or CMD+C.Qemu to 6.2.0 to fix errors like PR_SET_CHILD_SUBREAPER is unavailable when running emulated amd64 code./var/run/docker.sock symlink on Mac by default, to increase compatibility with tooling like tilt and docker-py. Fixes docker/for-mac#6529.error "Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?"){{< release-date date="2022-10-19" >}}
docker dev, so you can create, list, and run Dev Envs via command line. Now it's easier to integrate Dev Envs into custom scripts.--installation-dir. Partially addresses docker/roadmap#94.image:tag@digest image references, as well as a fix for CVE-2022-36109.ddClient.extension.vm.cli.exec, ddClient.extension.host.cli.exec, ddClient.docker.cli.exec to accept a different working directory and pass environment variables through the options parameters.kind not starting with the containerd integration.docker diff in the containerd integration.docker run —-platform in the containerd integration.{{< release-date date="2022-09-01" >}}
--no-windows-containers installation flag which was introduced in version 4.11. This flag allows administrators to disable the use of Windows containers.docker exec. Fixes https://github.com/apocas/dockerode/issues/534.docker login to private registries when Registry Access Management is enabled and access to Docker Hub is blocked..kube/config file.{{< release-date date="2022-08-05" >}}
docker login to private registries from WSL2 distribution docker/for-win#12871{{< release-date date="2022-07-28" >}}
--no-windows-containers disables the Windows containers integration.--user <username> sets up Docker Desktop for a specific user, preventing them from needing an admin password on first run.docker login if Registry Access Management is blocking the Docker engine's access to Docker Hub.docker cp.--backend=windows installer option to set Windows containers as the default backend.{{< release-date date="2022-07-05" >}}
{{< release-date date="2022-06-30" >}}
docker-desktop://extensions/marketplace?extensionId=docker/logs-explorer-extension.docker extension CLI commands are available with Docker Desktop by default.--backend=wsl-2 installer flag which did not set the backend to WSL 2. Fixes docker/for-win#12746.About screen.docker system prune. This is a known issue in the version of buildkit used in the current engine and will be fixed in future releases.{{< release-date date="2022-06-16" >}}
{{< desktop-install all=true version="4.9.1" build_path="/81317/" >}}
{{< release-date date="2022-06-02" >}}
/opt/containerd/bin and /opt/containerd/lib on the host if /opt has been added to the file sharing directories list.{{< release-date date="2022-05-18" >}}
{{< release-date date="2022-05-09" >}}
{{< release-date date="2022-05-06" >}}
docker pull fails because an HTTP proxy is required.C:\ProgramData\DockerDesktop is a file or a symlink.docker pull <private registry>/image, would be erroneously blocked by Registry Access Management unless access to Docker Hub was enabled in settings.Cmd+Q shortcut.Ctrl+W shortcut.{{< release-date date="2022-04-19" >}}
{{< release-date date="2022-04-07" >}}
dockershim. The change is transparent from the user's point of view and Kubernetes containers run on the Docker Engine as before. cri-dockerd allows Kubernetes to manage Docker containers using the standard Container Runtime Interface, the same interface used to control other container runtimes. For more information, see The Future of Dockershim is cri-dockerd.osxfs is used for file sharing.{{< release-date date="2022-03-22" >}}
{{< release-date date="2022-03-14" >}}
wsl --update.virtualization.framework. See benchmarks.starting state forever although Docker Desktop is working fine from the command line.root queries a file and another process running as user nginx tries to access the same file immediately, the nginx process will get a "Permission Denied" error.{{< release-date date="2022-02-15" >}}
If you are running Docker Desktop on Windows Home, installing 4.5.1 will switch it back to WSL 2 automatically. If you are running another version of Windows, and you want Docker Desktop to use the WSL 2 backend, you must manually switch by enabling the Use the WSL 2 based engine option in the Settings > General section.
Alternatively, you can edit the Docker Desktop settings file located at %APPDATA%\Docker\settings.json and manually switch the value of the wslEngineEnabled field to true.
{{< release-date date="2022-02-10" >}}
fs.inotify.max_user_watches=1048576 and fs.inotify.max_user_instances=8192 in Linux. Fixes docker/for-mac#6071.osxfs and when no host directories are shared with the VM.Installing Docker Desktop 4.5.0 from scratch has a bug which defaults Docker Desktop to use the Hyper-V backend instead of WSL 2. This means, Windows Home users will not be able to start Docker Desktop as WSL 2 is the only supported backend. To work around this issue, you must uninstall 4.5.0 from your machine and then download and install Docker Desktop 4.5.1 or a higher version. Alternatively, you can edit the Docker Desktop settings.json file located at %APPDATA%\Docker\settings.json and manually switch the value of the wslEngineEnabled field to true.
{{< release-date date="2022-01-24" >}}
registry.json file.{{< release-date date="2022-01-14" >}}
registry.json file.{{< release-date date="22-01-13" >}}
Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would require having access to the user’s local files.
registry.json contains more than one organization in the allowedOrgs field. If you are using multiple organizations for different groups of developers, you must provision a separate registry.json file for each group.- to _. Fixes docker/compose-switch.settings.json: "deprecatedCgroupv1": true, which switches the Linux environment back to cgroups v1. If your software requires cgroups v1, you should update it to be compatible with cgroups v2. Although cgroups v1 should continue to work, it is likely that some future features will depend on cgroups v2. It is also possible that some Linux kernel bugs will only be fixed with cgroups v2.Reset to factory defaults no longer shuts down Docker Desktop.registry.json file.{{< release-date date="2021-12-21" >}}
Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would require having access to the user’s local files.
Log4j 2 CVE-2021-44228: We have updated the docker scan CLI plugin.
This new version of docker scan is able to detect Log4j 2
CVE-2021-44228 and Log4j 2
CVE-2021-45046
For more information, read the blog post Apache Log4j 2 CVE-2021-44228.
{{< release-date date="2021-12-11" >}}
Log4j 2 CVE-2021-44228: We have updated the docker scan CLI plugin for you.
Older versions of docker scan in Docker Desktop 4.3.0 and earlier versions are
not able to detect Log4j 2
CVE-2021-44228.
For more information, read the blog post Apache Log4j 2 CVE-2021-44228.
{{< release-date date="2021-12-02" >}}
systemd in a container then:
systemd supports cgroupv2. It must be at least systemd 247. Consider upgrading any centos:7 images to centos:8.systemd need the following options: --privileged --cgroupns=host -v /sys/fs/cgroup:/sys/fs/cgroup:rw.Docker Desktop Dashboard incorrectly displays the container memory usage as zero on
Hyper-V based machines.
You can use the docker stats
command on the command line as a workaround to view the
actual memory usage. See
docker/for-mac#6076.
docker-for-desktop, docker-desktop, docker.for.mac.host.internal, docker.for.mac.localhost, docker.for.mac.gateway.internal. You must now use host.docker.internal, vm.docker.internal, and gateway.docker.internal.cluster-admin privileges to all Service Accounts. Fixes docker/for-mac/#4774.{{< release-date date="2021-11-09" >}}
Pause/Resume: You can now pause your Docker Desktop session when you are not actively using it and save CPU resources on your machine.
Software Updates: The option to turn off automatic check for updates is now available for users on all Docker subscriptions, including Docker Personal and Docker Pro. All update-related settings have been moved to the Software Updates section.
Window management: The Docker Desktop Dashboard window size and position persists when you close and reopen Docker Desktop.
docker networks.docker volume bind-mounted on top of a directory from the host. If existing, this fix will also remove manually user added DENY DELETE ACL entries on the corresponding host directory.Docker.qcow2 file would be ignored on upgrade and a fresh Docker.raw used instead, resulting in containers and images disappearing. Note that if a system has both files (due to the previous bug) then the most recently modified file will be used, to avoid recent containers and images disappearing again. To force the use of the old Docker.qcow2, delete the newer Docker.raw file. Fixes docker/for-mac#5998.{{< release-date date="2021-10-12" >}}
When upgrading from 4.1.0, the Docker menu does not change to Update and restart so you can just wait for the download to complete (icon changes) and then select Restart. This bug is fixed in 4.1.1, for future upgrades.
Docker.qcow2 file would be ignored on upgrade and a fresh Docker.raw used instead, resulting in containers and images disappearing. If a system has both files (due to the previous bug), then the most recently modified file will be used to avoid recent containers and images disappearing again. To force the use of the old Docker.qcow2, delete the newer Docker.raw file. Fixes docker/for-mac#5998.{{< release-date date="2021-09-30" >}}
net.exe utility.SeSecurityPrivilege requirement issue. See docker/for-win#12037.vpnKitMaxPortIdleTime to settings.json to allow the idle network connection timeout to be disabled or extended.Docker Desktop may fail to start when upgrading to 4.1.0 on some WSL-based distributions such as ArchWSL. See docker/for-win#12229
{{< release-date date="2021-09-13" >}}
compose up --scale.compose run --rm while capturing exit code.{{< release-date date="2021-08-31" >}}
Docker has announced updates and extensions to the product subscriptions to increase productivity, collaboration, and added security for our developers and businesses.
The updated Docker Subscription Service Agreement includes a change to the terms for Docker Desktop.
To understand how these changes affect you, read the FAQs. For more information, see Docker subscription overview.
compose down. See docker/compose-cli#2023panic.log. for-win#11899