Docker Engine 17.06 release notes

17.06.2-ce

2017-09-05

Client

• Enable TCP keepalive in the client to prevent loss of connection docker/cli#415

Runtime

• Devmapper: ensure UdevWait is called after calls to setCookie moby/moby#33732
• Aufs: ensure diff layers are correctly removed to prevent leftover files from using up storage moby/moby#34587

Swarm mode

• Ignore PullOptions for running tasks docker/swarmkit#2351

17.06.1-ce

2017-08-15

Builder

• Fix a regression, where ADD from remote URL's extracted archives #89
• Fix handling of remote "git@" notation #100
• Fix copy --from conflict with force pull #86

Client

• Make pruning volumes optional when running docker system prune, and add a --volumes flag #109
• Show progress of replicated tasks before they are assigned #97
• Fix docker wait hanging if the container does not exist #106
• If docker swarm ca is called without the --rotate flag, warn if other flags are passed #110
• Fix API version negotiation not working if the daemon returns an error #115
• Print an error if "until" filter is combined with "--volumes" on system prune #154

Logging

• Fix stderr logging for journald and syslog #95
• Fix log readers can block writes indefinitely #98
• Fix awslogs driver repeating last event #151

Networking

• Fix issue with driver options not received by network drivers #127

Plugins

• Make plugin removes more resilient to failure #91

Runtime

• Prevent a goroutine leak when healthcheck gets stopped #90
• Do not error on relabel when relabel not supported #92
• Limit max backoff delay to 2 seconds for GRPC connection #94
• Fix issue preventing containers to run when memory cgroup was specified due to bug in certain kernels #102
• Fix container not responding to SIGKILL when paused #102
• Improve error message if an image for an incompatible OS is loaded #108
• Fix a handle leak in go-winio #112
• Fix issue upon upgrade, preventing docker from showing running containers when --live-restore is enabled #117
• Fix bug where services using secrets would fail to start on daemons using the userns-remap feature #121
• Fix error handling with not-exist errors on remove #142
• Fix REST API Swagger representation cannot be loaded with SwaggerUI #156

Security

• Redact secret data on secret creation #99

Swarm mode

• Do not add duplicate platform information to service spec #107
• Cluster update and memory issue fixes #114
• Changing get network request to return predefined network in swarm #150

17.06.0-ce

2017-06-28

[!NOTE]: Docker 17.06.0 has an issue in the image builder causing a change in the behavior of the ADD instruction of Dockerfile when referencing a remote .tar.gz file. The issue will be fixed in Docker 17.06.1.

[!NOTE]: Starting with Docker CE 17.06, Ubuntu packages are also available for IBM Z using the s390x architecture.

[!NOTE]: Docker 17.06 by default disables communication with legacy (v1) registries. If you require interaction with registries that have not yet migrated to the v2 protocol, set the --disable-legacy-registry=false daemon option. Interaction with v1 registries will be removed in Docker 17.12.

Builder

• Add --iidfile option to docker build. It allows specifying a location where to save the resulting image ID
• Allow specifying any remote ref in git checkout URLs #32502

Client

• Add --format option to docker stack ls #31557
• Add support for labels in compose initiated builds #32632 #32972
• Add --format option to docker history #30962
• Add --format option to docker system df #31482
• Allow specifying Nameservers and Search Domains in stack files #32059
• Add support for read_only service to docker stack deploy #docker/cli/73

• Display Swarm cluster and node TLS information #docker/cli/44

• Add support for placement preference to docker stack deploy #docker/cli/35
• Add new ca subcommand to docker swarm to allow managing a swarm CA #docker/cli/48
• Add credential-spec to compose #docker/cli/71
• Add support for csv format options to --network and --network-add #docker/cli/62 #33130

• Fix stack compose bind-mount volumes on Windows #docker/cli/136
• Correctly handle a Docker daemon without registry info #docker/cli/126

• Allow --detach and --quiet flags when using --rollback #docker/cli/144
• Remove deprecated --email flag from docker login #docker/cli/143

• Adjusted docker stats memory output #docker/cli/80

Distribution

• Select digest over tag when both are provided during a pull #33214

Logging

• Add monitored resource type metadata for GCP logging driver #32930
• Add multiline processing to the AWS CloudWatch logs driver #30891

Networking

• Add Support swarm-mode services with node-local networks such as macvlan, ipvlan, bridge, host #32981
• Pass driver-options to network drivers on service creation #32981
• Isolate Swarm Control-plane traffic from Application data traffic using --data-path-addr #32717

• Several improvements to Service Discovery #docker/libnetwork/1796

Packaging

• Rely on container-selinux on Centos/Fedora/RHEL when available #32437

Runtime

• Add build & engine info prometheus metrics #32792

• Update containerd to d24f39e203aa6be4944f06dd0fe38a618a36c764 #33007
• Update runc to 992a5be178a62e026f4069f443c6164912adbf09 #33007

• Add option to auto-configure blkdev for devmapper #31104
• Add log driver list to docker info #32540
• Add API endpoint to allow retrieving an image manifest #32061

• Do not remove container from memory on error with forceremove #31012

• Add support for metric plugins #32874

• Return an error when an invalid filter is given to prune commands #33023

• Add daemon option to allow pushing foreign layers #33151

• Fix an issue preventing containerd to be restarted after it died #32986

• Add cluster events to Docker event stream. #32421
• Add support for DNS search on windows #33311

• Upgrade to Go 1.8.3 #33387

• Prevent a containerd crash when journald is restarted #containerd/930
• Fix healthcheck failures due to invalid environment variables #33249
• Prevent a directory to be created in lieu of the daemon socket when a container mounting it is to be restarted during a shutdown #30348
• Prevent a container to be restarted upon stop if its stop signal is set to SIGKILL #33335
• Ensure log drivers get passed the same filename to both StartLogging and StopLogging endpoints #33583
• Remove daemon data structure dump on SIGUSR1 to avoid a panic #33598

Security

• Allow personality with UNAME26 bit set in default seccomp profile #32965

Swarm Mode

• Add an option to allow specifying a different interface for the data traffic (as opposed to control traffic) #32717

• Allow specifying a secret location within the container #32571

• Add support for secrets on Windows #32208
• Add TLS Info to swarm info and node info endpoint #32875
• Add support for services to carry arbitrary config objects #32336, #docker/cli/45,#33169
• Add API to rotate swarm CA certificate #32993

• Service digest pining is now handled client side #32388, #33239

• Placement now also take platform in account #33144

• Fix possible hang when joining fails #docker-ce/19
• Fix an issue preventing external CA to be accepted #33341
• Fix possible orchestration panic in mixed version clusters #swarmkit/2233
• Avoid assigning duplicate IPs during initialization #swarmkit/2237

Deprecation

• Disable legacy registry (v1) by default #33629