18.09.1

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the release notes page.

18.09.1 (2019-01-09)

Builder

• Fix inefficient networking config. docker/engine#123
• Fix docker system prune doesn't accept until filter. docker/engine#122
• Avoid unset credentials in containerd. docker/engine#122

• Update to BuildKit 0.3.3. docker/engine#122

• Additional warnings for use of deprecated legacy overlay and devicemapper storage dirvers. docker/engine#85

Client

• Add bash completion for experimental CLI commands (manifest). docker/cli#1542

• Fix yamldocs outputing [flags] in usage output. docker/cli#1540
• Fix setting default schema to tcp for docker host. docker/cli#1454
• prune: perform image pruning before build cache pruning. docker/cli#1532
• Fix bash completion for service update --force. docker/cli#1526

Networking

• Fix iptables compatibility on debian. docker/engine#107

Packaging

• Add docker.socket requirement for docker.service. docker/docker-ce-packaging#276
• Add socket activation for RHEL-based distributions. docker/docker-ce-packaging#274

• Add libseccomp requirement for RPM packages. docker/docker-ce-packaging#266

Runtime

• Add /proc/asound to masked paths. docker/engine#126
• Update to containerd 1.2.1-rc.0. docker/engine#121

• Windows: allow process isolation. docker/engine#81

• Windows: DetachVhd attempt in cleanup docker/engine#113
• API: properly handle invalid JSON to return a 400 status. docker/engine#110
• API: ignore default address-pools on API < 1.39. docker/engine#118
• API: add missing default address pool fields to swagger. docker/engine#119
• awslogs: account for UTF-8 normalization in limits. docker/engine#112
• Prohibit reading more than 1MB in HTTP error responses. docker/engine#114
• apparmor: allow receiving of signals from docker kill. docker/engine#116
• overlay2: use index=off if possible (fix EBUSY on mount). docker/engine#84

18.09.0 (2018-11-08)

Deprecation

For more information on the list of deprecated flags and APIs, have a look at
https://docs.docker.com/engine/deprecated/ where you can find the target removal dates

• Deprecate devicemapper storage driver docker/cli#1455 / docker/cli#1424
• Deprecate legacy overlay storage driver docker/cli#1455 / docker/cli#1425
• Remove support for TLS < 1.2 moby/moby#37660
• Remove Ubuntu 14.04 "Trusty Tahr" as a supported platform docker-ce-packaging#255 / docker-ce-packaging#254
• Remove Debian 8 "Jessie" as a supported platform docker-ce-packaging#255 / docker-ce-packaging#254

API

• Update API version to 1.39 moby/moby#37640
• Add support for remote connections using SSH docker/cli#1014
• Builder: add prune options to the API moby/moby#37651
• Add "Warnings" to /info endpoint, and move detection to the daemon moby/moby#37502

• Do not return "<unknown>" in /info response moby/moby#37472

Builder

• Allow BuildKit builds to run without experimental mode enabled. Buildkit can now be configured with an option in daemon.json moby/moby#37593 moby/moby#37686 moby/moby#37692 docker/cli#1303 docker/cli#1275
• Add support for build-time secrets using a --secret flag when using BuildKit docker/cli#1288
• Add SSH agent socket forwarder (docker build --ssh $SSHMOUNTID=$SSH_AUTH_SOCK) when using BuildKit docker/cli#1438 / docker/cli#1419
• Add --chown flag support for ADD and COPY commands on Windows moby/moby#35521
• Add builder prune subcommand to prune BuildKit build cache docker/cli#1295 docker/cli#1334
• BuildKit: Add configurable garbage collection policy for the BuildKit build cache docker/engine#59 / moby/moby#37846
• BuildKit: Add support for docker build --pull ... when using BuildKit moby/moby#37613
• BuildKit: Add support or "registry-mirrors" and "insecure-registries" when using BuildKit docker-archive/engine#59](docker-archive/engine#59) / moby/moby#37852
• BuildKit: Enable net modes and bridge. moby/moby#37620

• BuildKit: Change --console=[auto,false,true] to --progress=[auto,plain,tty] docker/cli#1276
• BuildKit: Set BuildKit's ExportedProduct variable to show useful errors in the future. moby/moby#37439

• BuildKit: Do not cancel buildkit status request. moby/moby#37597
• Fix no error is shown if build args are missing during docker build moby/moby#37396
• Fix error "unexpected EOF" when adding an 8GB file moby/moby#37771
• LCOW: Ensure platform is populated on COPY/ADD. moby/moby#37563

Client

• Add docker engine subcommand to manage the lifecycle of a Docker Engine running as a privileged container on top of containerd, and to allow upgrades to Docker Engine Enterprise docker/cli#1260
• Expose product license in docker info output docker/cli#1313
• Show warnings produced by daemon in docker info output docker/cli#1225

• Hide --data-path-addr flags when connected to a daemon that doesn't support this option docker/docker/cli#1240
• Only show buildkit-specific flags if BuildKit is enabled docker/cli#1438 / docker/cli#1427
• Improve version output alignment docker/cli#1204
• Sort plugin names and networks in a natural order docker/cli#1166, docker/cli#1266
• Updated bash and zsh completion scripts

• Fix mapping a range of host ports to a single container port docker/cli#1102
• Fix trust inspect typo: "AdminstrativeKeys" docker/cli#1300
• Fix environment file parsing for imports of absent variables and those with no name. docker/cli#1019
• Fix a potential "out of memory exception" when running docker image prune with a large list of dangling images docker/cli#1432 / docker/cli#1423
• Fix pipe handling in ConEmu and ConsoleZ on Windows moby/moby#37600
• Fix long startup on windows, with non-hns governed Hyper-V networks docker/engine#67 / moby/moby#37774

Daemon

• Fix daemon won't start when "runtimes" option is defined both in config file and cli docker/engine#57 / moby/moby#37871
• Loosen permissions on /etc/docker directory to prevent "permission denied" errors when using docker manifest inspect docker/engine#56 / [moby/moby#37847](https://github.com/moby/moby/pul...

18.09.1-rc1

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
[https://docs.docker.com/engine/release-notes/](release notes page).

18.09.1 (2018-12-DD)

Builder

• Fix inefficient networking config. docker/engine#123
• Fix docker system prune doesn't accept until filter. docker/engine#122
• Avoid unset credentials in containerd. docker/engine#122

• Update to BuildKit 0.3.3. docker/engine#122

• Additional warnings for use of deprecated legacy overlay and devicemapper storage dirvers. docker/engine#85

Client

• Add bash completion for experimental CLI commands (manifest). docker/cli#1542

• Fix yamldocs outputing [flags] in usage output. docker/cli#1540
• Fix setting default schema to tcp for docker host. docker/cli#1454
• prune: perform image pruning before build cache pruning. docker/cli#1532
• Fix bash completion for service update --force. docker/cli#1526

Networking

• Fix iptables compatibility on debian. docker/engine#107

Packaging

• Add docker.socket requirement for docker.service. docker/docker-ce-packaging#276
• Add socket activation for RHEL-based distributions. docker/docker-ce-packaging#274

• Add libseccomp requirement for RPM packages. docker/docker-ce-packaging#266

Runtime

• Add /proc/asound to masked paths. docker/engine#126
• Update to containerd 1.2.1-rc.0. docker/engine#121

• Windows: allow process isolation. docker/engine#81

• Windows: DetachVhd attempt in cleanup docker/engine#113
• API: properly handle invalid JSON to return a 400 status. docker/engine#110
• API: ignore default address-pools on API < 1.39. docker/engine#118
• API: add missing default address pool fields to swagger. docker/engine#119
• awslogs: account for UTF-8 normalization in limits. docker/engine#112
• Prohibit reading more than 1MB in HTTP error responses. docker/engine#114
• apparmor: allow receiving of signals from docker kill. docker/engine#116
• overlay2: use index=off if possible (fix EBUSY on mount). docker/engine#84

18.09.0 (2018-11-08)

Deprecation

For more information on the list of deprecated flags and APIs, have a look at
https://docs.docker.com/engine/deprecated/ where you can find the target removal dates

• Deprecate devicemapper storage driver docker/cli#1455 / docker/cli#1424
• Deprecate legacy overlay storage driver docker/cli#1455 / docker/cli#1425
• Remove support for TLS < 1.2 moby/moby#37660
• Remove Ubuntu 14.04 "Trusty Tahr" as a supported platform docker-ce-packaging#255 / docker-ce-packaging#254
• Remove Debian 8 "Jessie" as a supported platform docker-ce-packaging#255 / docker-ce-packaging#254

API

• Update API version to 1.39 moby/moby#37640
• Add support for remote connections using SSH docker/cli#1014
• Builder: add prune options to the API moby/moby#37651
• Add "Warnings" to /info endpoint, and move detection to the daemon moby/moby#37502

• Do not return "<unknown>" in /info response moby/moby#37472

Builder

• Allow BuildKit builds to run without experimental mode enabled. Buildkit can now be configured with an option in daemon.json moby/moby#37593 moby/moby#37686 moby/moby#37692 docker/cli#1303 docker/cli#1275
• Add support for build-time secrets using a --secret flag when using BuildKit docker/cli#1288
• Add SSH agent socket forwarder (docker build --ssh $SSHMOUNTID=$SSH_AUTH_SOCK) when using BuildKit docker/cli#1438 / docker/cli#1419
• Add --chown flag support for ADD and COPY commands on Windows moby/moby#35521
• Add builder prune subcommand to prune BuildKit build cache docker/cli#1295 docker/cli#1334
• BuildKit: Add configurable garbage collection policy for the BuildKit build cache docker/engine#59 / moby/moby#37846
• BuildKit: Add support for docker build --pull ... when using BuildKit moby/moby#37613
• BuildKit: Add support or "registry-mirrors" and "insecure-registries" when using BuildKit docker-archive/engine#59](docker-archive/engine#59) / moby/moby#37852
• BuildKit: Enable net modes and bridge. moby/moby#37620

• BuildKit: Change --console=[auto,false,true] to --progress=[auto,plain,tty] docker/cli#1276
• BuildKit: Set BuildKit's ExportedProduct variable to show useful errors in the future. moby/moby#37439

• BuildKit: Do not cancel buildkit status request. moby/moby#37597
• Fix no error is shown if build args are missing during docker build moby/moby#37396
• Fix error "unexpected EOF" when adding an 8GB file moby/moby#37771
• LCOW: Ensure platform is populated on COPY/ADD. moby/moby#37563

Client

• Add docker engine subcommand to manage the lifecycle of a Docker Engine running as a privileged container on top of containerd, and to allow upgrades to Docker Engine Enterprise docker/cli#1260
• Expose product license in docker info output docker/cli#1313
• Show warnings produced by daemon in docker info output docker/cli#1225

• Hide --data-path-addr flags when connected to a daemon that doesn't support this option docker/docker/cli#1240
• Only show buildkit-specific flags if BuildKit is enabled docker/cli#1438 / docker/cli#1427
• Improve version output alignment docker/cli#1204
• Sort plugin names and networks in a natural order docker/cli#1166, docker/cli#1266
• Updated bash and zsh completion scripts

• Fix mapping a range of host ports to a single container port docker/cli#1102
• Fix trust inspect typo: "AdminstrativeKeys" docker/cli#1300
• Fix environment file parsing for imports of absent variables and those with no name. docker/cli#1019
• Fix a potential "out of memory exception" when running docker image prune with a large list of dangling images docker/cli#1432 / docker/cli#1423
• Fix pipe handling in ConEmu and ConsoleZ on Windows moby/moby#37600
• Fix long startup on windows, with non-hns governed Hyper-V networks docker/engine#67 / moby/moby#37774

Daemon

• Fix daemon won't start when "runtimes" option is defined both in config file and cli docker/engine#57 / moby/moby#37871
• Loosen permissions on /etc/docker directory to prevent "permission denied" errors when using docker manifest inspect docker/engine#56 / moby/moby#37847
• Fix denial of service with large numbers in cpuset-cpus and cpuset-mems [docker-archive/engine#70](htt...

18.09.1-beta2

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
[https://docs.docker.com/engine/release-notes/](release notes page).

18.09.1 (2018-12-DD)

TODO

18.09.0 (2018-11-08)

Deprecation

For more information on the list of deprecated flags and APIs, have a look at
https://docs.docker.com/engine/deprecated/ where you can find the target removal dates

• Deprecate devicemapper storage driver docker/cli#1455 / docker/cli#1424
• Deprecate legacy overlay storage driver docker/cli#1455 / docker/cli#1425
• Remove support for TLS < 1.2 moby/moby#37660
• Remove Ubuntu 14.04 "Trusty Tahr" as a supported platform docker-ce-packaging#255 / docker-ce-packaging#254
• Remove Debian 8 "Jessie" as a supported platform docker-ce-packaging#255 / docker-ce-packaging#254

API

• Update API version to 1.39 moby/moby#37640
• Add support for remote connections using SSH docker/cli#1014
• Builder: add prune options to the API moby/moby#37651
• Add "Warnings" to /info endpoint, and move detection to the daemon moby/moby#37502

• Do not return "<unknown>" in /info response moby/moby#37472

Builder

• Allow BuildKit builds to run without experimental mode enabled. Buildkit can now be configured with an option in daemon.json moby/moby#37593 moby/moby#37686 moby/moby#37692 docker/cli#1303 docker/cli#1275
• Add support for build-time secrets using a --secret flag when using BuildKit docker/cli#1288
• Add SSH agent socket forwarder (docker build --ssh $SSHMOUNTID=$SSH_AUTH_SOCK) when using BuildKit docker/cli#1438 / docker/cli#1419
• Add --chown flag support for ADD and COPY commands on Windows moby/moby#35521
• Add builder prune subcommand to prune BuildKit build cache docker/cli#1295 docker/cli#1334
• BuildKit: Add configurable garbage collection policy for the BuildKit build cache docker/engine#59 / moby/moby#37846
• BuildKit: Add support for docker build --pull ... when using BuildKit moby/moby#37613
• BuildKit: Add support or "registry-mirrors" and "insecure-registries" when using BuildKit docker-archive/engine#59](docker-archive/engine#59) / moby/moby#37852
• BuildKit: Enable net modes and bridge. moby/moby#37620

• BuildKit: Change --console=[auto,false,true] to --progress=[auto,plain,tty] docker/cli#1276
• BuildKit: Set BuildKit's ExportedProduct variable to show useful errors in the future. moby/moby#37439

• BuildKit: Do not cancel buildkit status request. moby/moby#37597
• Fix no error is shown if build args are missing during docker build moby/moby#37396
• Fix error "unexpected EOF" when adding an 8GB file moby/moby#37771
• LCOW: Ensure platform is populated on COPY/ADD. moby/moby#37563

Client

• Add docker engine subcommand to manage the lifecycle of a Docker Engine running as a privileged container on top of containerd, and to allow upgrades to Docker Engine Enterprise docker/cli#1260
• Expose product license in docker info output docker/cli#1313
• Show warnings produced by daemon in docker info output docker/cli#1225

• Hide --data-path-addr flags when connected to a daemon that doesn't support this option docker/docker/cli#1240
• Only show buildkit-specific flags if BuildKit is enabled docker/cli#1438 / docker/cli#1427
• Improve version output alignment docker/cli#1204
• Sort plugin names and networks in a natural order docker/cli#1166, docker/cli#1266
• Updated bash and zsh completion scripts

• Fix mapping a range of host ports to a single container port docker/cli#1102
• Fix trust inspect typo: "AdminstrativeKeys" docker/cli#1300
• Fix environment file parsing for imports of absent variables and those with no name. docker/cli#1019
• Fix a potential "out of memory exception" when running docker image prune with a large list of dangling images docker/cli#1432 / docker/cli#1423
• Fix pipe handling in ConEmu and ConsoleZ on Windows moby/moby#37600
• Fix long startup on windows, with non-hns governed Hyper-V networks docker/engine#67 / moby/moby#37774

Daemon

• Fix daemon won't start when "runtimes" option is defined both in config file and cli docker/engine#57 / moby/moby#37871
• Loosen permissions on /etc/docker directory to prevent "permission denied" errors when using docker manifest inspect docker/engine#56 / moby/moby#37847
• Fix denial of service with large numbers in cpuset-cpus and cpuset-mems docker/engine#70 / moby/moby#37967

Experimental

• LCOW: Add --platform to docker import docker/cli#1375 / docker/cli#1371
• LCOW: Add LinuxMetadata support by default on Windows moby/moby#37514
• LCOW: Mount to short container paths to avoid command-line length limit moby/moby#37659
• LCOW: Fix builder using wrong cache layer moby/moby#37356

Logging

• Add "local" log driver moby/moby#37092
• Amazon CloudWatch: add awslogs-endpoint logging option moby/moby#37374

• Pass log-level to containerd. moby/moby#37419

• Fix json-log file descriptors leaking when using --follow docker/engine#48 moby/moby#37576 moby/moby#37734
• Fix a possible deadlock on closing the watcher on kqueue moby/moby#37392
• Use poller based watcher to work around the file caching issue in Windows moby/moby#37412

Networking

• Add support for global default address pools moby/moby#37558 docker/cli#1233

• Use direct server return (DSR) in east-west overlay load balancing docker/engine#93 / docker/libnetwork#2270
• Builder: temporarily disable bridge networking when using buildkit. moby/moby#37691

• Handle systemd-resolved case by providing appropriate resolv.conf to networking layer moby/moby#37485

Runtime

• Configure containerd log-level to be the same as dockerd moby/moby#37419
• Add configuration option for cri-containerd moby/moby#37519
• Update containerd client to v1.2.0-rc.1 moby/moby#37664, docker/engine#75 / moby/moby#37710

Security

• Remove support for TLS < 1.2 moby/moby#37660
• Seccomp: Whitelist syscalls linked to CAP_SYS_NICE in default seccomp profile moby/moby#37242
• Seccomp: move the syslog syscall to be gated by CAP_SYS_ADMIN or CAP_SYSLOG docker/engine#64 / [moby/moby#37929]...

18.09.1-beta1

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
[https://docs.docker.com/engine/release-notes/](release notes page).

18.09.1 (2018-12-DD)

TODO

18.09.0 (2018-11-08)

Deprecation

For more information on the list of deprecated flags and APIs, have a look at
https://docs.docker.com/engine/deprecated/ where you can find the target removal dates

• Deprecate devicemapper storage driver docker/cli#1455 / docker/cli#1424
• Deprecate legacy overlay storage driver docker/cli#1455 / docker/cli#1425
• Remove support for TLS < 1.2 moby/moby#37660
• Remove Ubuntu 14.04 "Trusty Tahr" as a supported platform docker-ce-packaging#255 / docker-ce-packaging#254
• Remove Debian 8 "Jessie" as a supported platform docker-ce-packaging#255 / docker-ce-packaging#254

API

• Update API version to 1.39 moby/moby#37640
• Add support for remote connections using SSH docker/cli#1014
• Builder: add prune options to the API moby/moby#37651
• Add "Warnings" to /info endpoint, and move detection to the daemon moby/moby#37502

• Do not return "<unknown>" in /info response moby/moby#37472

Builder

• Allow BuildKit builds to run without experimental mode enabled. Buildkit can now be configured with an option in daemon.json moby/moby#37593 moby/moby#37686 moby/moby#37692 docker/cli#1303 docker/cli#1275
• Add support for build-time secrets using a --secret flag when using BuildKit docker/cli#1288
• Add SSH agent socket forwarder (docker build --ssh $SSHMOUNTID=$SSH_AUTH_SOCK) when using BuildKit docker/cli#1438 / docker/cli#1419
• Add --chown flag support for ADD and COPY commands on Windows moby/moby#35521
• Add builder prune subcommand to prune BuildKit build cache docker/cli#1295 docker/cli#1334
• BuildKit: Add configurable garbage collection policy for the BuildKit build cache docker/engine#59 / moby/moby#37846
• BuildKit: Add support for docker build --pull ... when using BuildKit moby/moby#37613
• BuildKit: Add support or "registry-mirrors" and "insecure-registries" when using BuildKit docker-archive/engine#59](docker-archive/engine#59) / moby/moby#37852
• BuildKit: Enable net modes and bridge. moby/moby#37620

• BuildKit: Change --console=[auto,false,true] to --progress=[auto,plain,tty] docker/cli#1276
• BuildKit: Set BuildKit's ExportedProduct variable to show useful errors in the future. moby/moby#37439

• BuildKit: Do not cancel buildkit status request. moby/moby#37597
• Fix no error is shown if build args are missing during docker build moby/moby#37396
• Fix error "unexpected EOF" when adding an 8GB file moby/moby#37771
• LCOW: Ensure platform is populated on COPY/ADD. moby/moby#37563

Client

• Add docker engine subcommand to manage the lifecycle of a Docker Engine running as a privileged container on top of containerd, and to allow upgrades to Docker Engine Enterprise docker/cli#1260
• Expose product license in docker info output docker/cli#1313
• Show warnings produced by daemon in docker info output docker/cli#1225

• Hide --data-path-addr flags when connected to a daemon that doesn't support this option docker/docker/cli#1240
• Only show buildkit-specific flags if BuildKit is enabled docker/cli#1438 / docker/cli#1427
• Improve version output alignment docker/cli#1204
• Sort plugin names and networks in a natural order docker/cli#1166, docker/cli#1266
• Updated bash and zsh completion scripts

• Fix mapping a range of host ports to a single container port docker/cli#1102
• Fix trust inspect typo: "AdminstrativeKeys" docker/cli#1300
• Fix environment file parsing for imports of absent variables and those with no name. docker/cli#1019
• Fix a potential "out of memory exception" when running docker image prune with a large list of dangling images docker/cli#1432 / docker/cli#1423
• Fix pipe handling in ConEmu and ConsoleZ on Windows moby/moby#37600
• Fix long startup on windows, with non-hns governed Hyper-V networks docker/engine#67 / moby/moby#37774

Daemon

• Fix daemon won't start when "runtimes" option is defined both in config file and cli docker/engine#57 / moby/moby#37871
• Loosen permissions on /etc/docker directory to prevent "permission denied" errors when using docker manifest inspect docker/engine#56 / moby/moby#37847
• Fix denial of service with large numbers in cpuset-cpus and cpuset-mems docker/engine#70 / moby/moby#37967

Experimental

• LCOW: Add --platform to docker import docker/cli#1375 / docker/cli#1371
• LCOW: Add LinuxMetadata support by default on Windows moby/moby#37514
• LCOW: Mount to short container paths to avoid command-line length limit moby/moby#37659
• LCOW: Fix builder using wrong cache layer moby/moby#37356

Logging

• Add "local" log driver moby/moby#37092
• Amazon CloudWatch: add awslogs-endpoint logging option moby/moby#37374

• Pass log-level to containerd. moby/moby#37419

• Fix json-log file descriptors leaking when using --follow docker/engine#48 moby/moby#37576 moby/moby#37734
• Fix a possible deadlock on closing the watcher on kqueue moby/moby#37392
• Use poller based watcher to work around the file caching issue in Windows moby/moby#37412

Networking

• Add support for global default address pools moby/moby#37558 docker/cli#1233

• Use direct server return (DSR) in east-west overlay load balancing docker/engine#93 / docker/libnetwork#2270
• Builder: temporarily disable bridge networking when using buildkit. moby/moby#37691

• Handle systemd-resolved case by providing appropriate resolv.conf to networking layer moby/moby#37485

Runtime

• Configure containerd log-level to be the same as dockerd moby/moby#37419
• Add configuration option for cri-containerd moby/moby#37519
• Update containerd client to v1.2.0-rc.1 moby/moby#37664, docker/engine#75 / moby/moby#37710

Security

• Remove support for TLS < 1.2 moby/moby#37660
• Seccomp: Whitelist syscalls linked to CAP_SYS_NICE in default seccomp profile moby/moby#37242
• Seccomp: move the syslog syscall to be gated by CAP_SYS_ADMIN or CAP_SYSLOG docker/engine#64 / [moby/moby#37929]...

18.09.0

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
release notes page.

18.09.0 (2018-11-08)

Deprecation

For more information on the list of deprecated flags and APIs, have a look at
https://docs.docker.com/engine/deprecated/ where you can find the target removal dates

• Deprecate devicemapper storage driver docker/cli#1455 / docker/cli#1424
• Deprecate legacy overlay storage driver docker/cli#1455 / docker/cli#1425
• Remove support for TLS < 1.2 moby/moby#37660
• Remove Ubuntu 14.04 "Trusty Tahr" as a supported platform docker-ce-packaging#255 / docker-ce-packaging#254
• Remove Debian 8 "Jessie" as a supported platform docker-ce-packaging#255 / docker-ce-packaging#254

API

• Update API version to 1.39 moby/moby#37640
• Add support for remote connections using SSH docker/cli#1014
• Builder: add prune options to the API moby/moby#37651
• Add "Warnings" to /info endpoint, and move detection to the daemon moby/moby#37502

• Do not return "<unknown>" in /info response moby/moby#37472

Builder

• Allow BuildKit builds to run without experimental mode enabled. Buildkit can now be configured with an option in daemon.json moby/moby#37593 moby/moby#37686 moby/moby#37692 docker/cli#1303 docker/cli#1275
• Add support for build-time secrets using a --secret flag when using BuildKit docker/cli#1288
• Add SSH agent socket forwarder (docker build --ssh $SSHMOUNTID=$SSH_AUTH_SOCK) when using BuildKit docker/cli#1438 / docker/cli#1419
• Add --chown flag support for ADD and COPY commands on Windows moby/moby#35521
• Add builder prune subcommand to prune BuildKit build cache docker/cli#1295 docker/cli#1334
• BuildKit: Add configurable garbage collection policy for the BuildKit build cache docker/engine#59 / moby/moby#37846
• BuildKit: Add support for docker build --pull ... when using BuildKit moby/moby#37613
• BuildKit: Add support or "registry-mirrors" and "insecure-registries" when using BuildKit docker-archive/engine#59](docker-archive/engine#59) / moby/moby#37852
• BuildKit: Enable net modes and bridge. moby/moby#37620

• BuildKit: Change --console=[auto,false,true] to --progress=[auto,plain,tty] docker/cli#1276
• BuildKit: Set BuildKit's ExportedProduct variable to show useful errors in the future. moby/moby#37439

• BuildKit: Do not cancel buildkit status request. moby/moby#37597
• Fix no error is shown if build args are missing during docker build moby/moby#37396
• Fix error "unexpected EOF" when adding an 8GB file moby/moby#37771
• LCOW: Ensure platform is populated on COPY/ADD. moby/moby#37563

Client

• Add docker engine subcommand to manage the lifecycle of a Docker Engine running as a privileged container on top of containerd, and to allow upgrades to Docker Engine Enterprise docker/cli#1260
• Expose product license in docker info output docker/cli#1313
• Show warnings produced by daemon in docker info output docker/cli#1225

• Hide --data-path-addr flags when connected to a daemon that doesn't support this option docker/docker/cli#1240
• Only show buildkit-specific flags if BuildKit is enabled docker/cli#1438 / docker/cli#1427
• Improve version output alignment docker/cli#1204
• Sort plugin names and networks in a natural order docker/cli#1166, docker/cli#1266
• Updated bash and zsh completion scripts

• Fix mapping a range of host ports to a single container port docker/cli#1102
• Fix trust inspect typo: "AdminstrativeKeys" docker/cli#1300
• Fix environment file parsing for imports of absent variables and those with no name. docker/cli#1019
• Fix a potential "out of memory exception" when running docker image prune with a large list of dangling images docker/cli#1432 / docker/cli#1423
• Fix pipe handling in ConEmu and ConsoleZ on Windows moby/moby#37600
• Fix long startup on windows, with non-hns governed Hyper-V networks docker/engine#67 / moby/moby#37774

Daemon

• Fix daemon won't start when "runtimes" option is defined both in config file and cli docker/engine#57 / moby/moby#37871
• Loosen permissions on /etc/docker directory to prevent "permission denied" errors when using docker manifest inspect docker/engine#56 / moby/moby#37847
• Fix denial of service with large numbers in cpuset-cpus and cpuset-mems docker/engine#70 / moby/moby#37967

Experimental

• LCOW: Add --platform to docker import docker/cli#1375 / docker/cli#1371
• LCOW: Add LinuxMetadata support by default on Windows moby/moby#37514
• LCOW: Mount to short container paths to avoid command-line length limit moby/moby#37659
• LCOW: Fix builder using wrong cache layer moby/moby#37356

Logging

• Add "local" log driver moby/moby#37092
• Amazon CloudWatch: add awslogs-endpoint logging option moby/moby#37374

• Pass log-level to containerd. moby/moby#37419

• Fix json-log file descriptors leaking when using --follow docker/engine#48 moby/moby#37576 moby/moby#37734
• Fix a possible deadlock on closing the watcher on kqueue moby/moby#37392
• Use poller based watcher to work around the file caching issue in Windows moby/moby#37412

Networking

• Add support for global default address pools moby/moby#37558 docker/cli#1233

• Use direct server return (DSR) in east-west overlay load balancing docker/engine#93 / docker/libnetwork#2270
• Builder: temporarily disable bridge networking when using buildkit. moby/moby#37691

• Handle systemd-resolved case by providing appropriate resolv.conf to networking layer moby/moby#37485

Runtime

• Configure containerd log-level to be the same as dockerd moby/moby#37419
• Add configuration option for cri-containerd moby/moby#37519
• Update containerd client to v1.2.0-rc.1 moby/moby#37664, docker/engine#75 / moby/moby#37710

Security

• Remove support for TLS < 1.2 moby/moby#37660
• Seccomp: Whitelist syscalls linked to CAP_SYS_NICE in default seccomp profile moby/moby#37242
• Seccomp: move the syslog syscall to be gated by CAP_SYS_ADMIN or CAP_SYSLOG [d...

18.09.0-rc1

Changelog

For more information on the list of deprecated flags and APIs, have a look at
https://docs.docker.com/engine/deprecated/ where you can find the target removal dates

18.09.0 (2018-MM-DD)

Deprecation

• Deprecate devicemapper storage driver docker/cli#1455 / docker/cli#1424
• Deprecate devicemapper legacy overlay storage driver docker/cli#1455 / docker/cli#1425
• Remove support for TLS < 1.2 moby/moby#37660
• Remove Ubuntu 14.04 "Trusty Tahr" as a supported platform docker-ce-packaging#255 / docker-ce-packaging#254
• Remove Debian 8 "Jessie" as a supported platform docker-ce-packaging#255 / docker-ce-packaging#254

API

• Update API version to 1.39 moby/moby#37640
• Add support for remote connections using SSH docker/cli#1014
• Builder: add prune options to the API moby/moby#37651
• Add "Warnings" to /info endpoint, and move detection to the daemon moby/moby#37502

• Do not return "<unknown>" in /info response moby/moby#37472

Builder

• Allow BuildKit builds to run without experimental mode enabled. Buildkit can now be configured with an option in daemon.json moby/moby#37593 moby/moby#37686 moby/moby#37692 docker/cli#1303 docker/cli#1275
• Add support for build-time secrets using a --secret flag when using BuildKit docker/cli#1288
• Add SSH agent socket forwarder (docker build --ssh $SSHMOUNTID=$SSH_AUTH_SOCK) when using BuildKit docker/cli#1438 / docker/cli#1419
• Add --chown flag support for ADD and COPY commands on Windows moby/moby#35521
• Add builder prune subcommand to prune BuildKit build cache docker/cli#1295 docker/cli#1334
• BuildKit: Add configurable garbage collection policy for the BuildKit build cache docker/engine#59 / moby/moby#37846
• BuildKit: Add support for docker build --pull ... when using BuildKit moby/moby#37613
• BuildKit: Add support or "registry-mirrors" and "insecure-registries" when using BuildKit docker-archive/engine#59](docker-archive/engine#59) / moby/moby#37852
• BuildKit: Enable net modes and bridge. moby/moby#37620

• BuildKit: Change --console=[auto,false,true] to --progress=[auto,plain,tty] docker/cli#1276
• BuildKit: Set BuildKit's ExportedProduct variable to show useful errors in the future. moby/moby#37439

• BuildKit: Do not cancel buildkit status request. moby/moby#37597
• Fix no error is shown if build args are missing during docker build moby/moby#37396
• Fix error "unexpected EOF" when adding an 8GB file moby/moby#37771
• LCOW: Ensure platform is populated on COPY/ADD. moby/moby#37563

Client

• Add docker engine subcommand to manage the lifecycle of a Docker Engine running as a privileged container on top of containerd, and to allow upgrades to Docker Engine Enterprise docker/cli#1260
• Expose product license in docker info output docker/cli#1313
• Show warnings produced by daemon in docker info output docker/cli#1225

• Hide --data-path-addr flags when connected to a daemon that doesn't support this option docker/docker/cli#1240
• Only show buildkit-specific flags if BuildKit is enabled docker/cli#1438 / docker/cli#1427
• Improve version output alignment docker/cli#1204
• Sort plugin names and networks in a natural order docker/cli#1166, docker/cli#1266
• Updated bash and zsh completion scripts

• Fix mapping a range of host ports to a single container port docker/cli#1102
• Fix trust inspect typo: "AdminstrativeKeys" docker/cli#1300
• Fix environment file parsing for imports of absent variables and those with no name. docker/cli#1019
• Fix a potential "out of memory exception" when running docker image prune with a large list of dangling images docker/cli#1432 / docker/cli#1423
• Fix pipe handling in ConEmu and ConsoleZ on Windows moby/moby#37600
• Fix long startup on windows, with non-hns governed Hyper-V networks docker/engine#67 / moby/moby#37774

Daemon

• Fix daemon won't start when "runtimes" option is defined both in config file and cli docker/engine#57 / moby/moby#37871
• Loosen permissions on /etc/docker directory to prevent "permission denied" errors when using docker manifest inspect docker/engine#56 / moby/moby#37847
• Fix denial of service with large numbers in cpuset-cpus and cpuset-mems docker/engine#70 / moby/moby#37967

Experimental

• LCOW: Add --platform to docker import docker/cli#1375 / docker/cli#1371
• LCOW: Add LinuxMetadata support by default on Windows moby/moby#37514
• LCOW: Mount to short container paths to avoid command-line length limit moby/moby#37659
• LCOW: Fix builder using wrong cache layer moby/moby#37356

Logging

• Add "local" log driver moby/moby#37092
• Amazon CloudWatch: add awslogs-endpoint logging option moby/moby#37374

• Pass log-level to containerd. moby/moby#37419

• Fix json-log file descriptors leaking when using --follow docker/engine#48 moby/moby#37576 moby/moby#37734
• Fix a possible deadlock on closing the watcher on kqueue moby/moby#37392
• Use poller based watcher to work around the file caching issue in Windows moby/moby#37412

Networking

• Add support for global default address pools moby/moby#37558 docker/cli#1233

• Use direct server return (DSR) in east-west overlay load balancing docker/engine#93 / docker/libnetwork#2270
• Builder: temporarily disable bridge networking when using buildkit. moby/moby#37691

• Handle systemd-resolved case by providing appropriate resolv.conf to networking layer moby/moby#37485

Runtime

• Configure containerd log-level to be the same as dockerd moby/moby#37419
• Add configuration option for cri-containerd moby/moby#37519
• Update containerd client to v1.2.0-rc.1 moby/moby#37664, docker/engine#75 / moby/moby#37710

Security

• Remove support for TLS < 1.2 moby/moby#37660
• Seccomp: Whitelist syscalls linked to CAP_SYS_NICE in default seccomp profile moby/moby#37242
• Seccomp: move the syslog syscall to be gated by CAP_SYS_ADMIN or CAP_SYSLOG docker/engine#64 / moby/moby#37929
• SELinux: Fix relabeling of local volumes specified via Mounts API on selinux-enabled systems [moby/moby#37739](https://githu...

18.09.0-beta5

Changelog

For more information on the list of deprecated flags and APIs, have a look at
https://docs.docker.com/engine/deprecated/ where you can find the target removal dates

18.09.0-ce (2018-MM-DD)

Builder

• -buildmode=pie is not supported on Linux on MIPS either. moby/moby#37489
• Build --secret with buildkit. docker/cli#1288
• Build: Remove API requirement for --progress as it is CLI only. docker/cli#1296
• Build: add -buildmode=pie. docker/cli#1242
• Build: change --console=[auto,false,true] to --progress=[auto,plain,tty]. docker/cli#1276
• Builder: Implement builder prune to prune build cache. docker/cli#1295
• Builder: do not cancel buildkit status request. moby/moby#37597
• Builder: implement PullParent option with buildkit. moby/moby#37613
• Buildkit: enable net modes and bridge. moby/moby#37620
• Import TestBuildIidFileSquash from moby to cli. docker/cli#990
• Re-add support for a custom .bashrc file in build env. moby/moby#37370
• Remove "experimental" annotations for buildkit. docker/cli#1303
• Remove experimental guard for buildkit. moby/moby#37686
• Set BuildKit's ExportedProduct variable to show useful errors in the future. moby/moby#37439
• Vendor: update buildkit to 9acf51e491. moby/moby#37385
• Vndr buildkit, containerd, console. docker/cli#1302
• Vndr containerd to a88b631, buildkit to e57eed4, and fsutil to b19464c. moby/moby#37582
• [enhancement] add optional fields in daemon.json to enable buildkit. moby/moby#37593
• [enhancement] enable buildkit from daemon side. docker/cli#1275

• Add osusergo build tar for static binaries. moby/moby#37500

Client

• Exposes compose loader.Transform function…. docker/cli#1244
• Extract StackConverter from the StackClient. docker/cli#1152
• Remove composefiles length check on k8s RunDeploy. docker/cli#1172

• Add a doc.go file so the compose/schema/data directory can be vendore…. docker/cli#1169
• Add a new ExtractVariables function to compose/template package. docker/cli#1249
• Add missing fields in compose/types. docker/cli#1235
• Add omitempty on compose config top-level types. docker/cli#1170

Logging

• Integration-cli: error logging improvements. moby/moby#37635
• Integration: fix log message. moby/moby#37542
• Loggerutils: fix a typo. moby/moby#37570
• Pass endpoint to the CloudWatch Logs logging driver. moby/moby#37374
• Pass log-level to containerd. moby/moby#37419

• Add "local" log driver. moby/moby#37092

• Fix logic when enabling buildkit. moby/moby#37688

Networking

• Builder: temporarily disable bridge networking when using buildkit. moby/moby#37691
• Move network conversions out of API router. moby/moby#37156
• Use sortorder library for sorting network list output. docker/cli#1266

• Fix faulty error type checking in removeNetwork(). moby/moby#37409

Runtime

• Disable TestExecWindowsOpenHandles on RS5 temporarily. moby/moby#37679
• LCOW: Ensure platform is populated on COPY/ADD. moby/moby#37563
• LCOW: Mount to short container paths to avoid command-line length limit. moby/moby#37659
• LCOW: lazycontext: Use correct lstat, fix archive check. moby/moby#37356
• Lcow: fix debug in startServiceVMIfNotRunning(). moby/moby#37446
• Revendor Microsoft/opengcs @ v0.3.8. moby/moby#37515
• Select polling based watcher for docker log file watcher on Windows. moby/moby#37412
• Updated the go-winio library to release 0.4.8 that has the fix for Windows Container. docker/cli#1157

• Add --chown flag support for ADD/COPY commands for Windows. moby/moby#35521
• Adds LinuxMetadata support by default on Windows. moby/moby#37514

Swarm Mode

• Propagate the provided external CA certificate to the external CA object in swarm. docker/cli#1178

18.09.0-beta3

Changelog

For more information on the list of deprecated flags and APIs, have a look at
https://docs.docker.com/engine/deprecated/ where you can find the target removal dates

18.09.0-ce (2018-MM-DD)

Builder

• -buildmode=pie is not supported on Linux on MIPS either. moby/moby#37489
• Build --secret with buildkit. docker/cli#1288
• Build: Remove API requirement for --progress as it is CLI only. docker/cli#1296
• Build: add -buildmode=pie. docker/cli#1242
• Build: change --console=[auto,false,true] to --progress=[auto,plain,tty]. docker/cli#1276
• Builder: Implement builder prune to prune build cache. docker/cli#1295
• Builder: do not cancel buildkit status request. moby/moby#37597
• Builder: implement PullParent option with buildkit. moby/moby#37613
• Buildkit: enable net modes and bridge. moby/moby#37620
• Import TestBuildIidFileSquash from moby to cli. docker/cli#990
• Re-add support for a custom .bashrc file in build env. moby/moby#37370
• Remove "experimental" annotations for buildkit. docker/cli#1303
• Remove experimental guard for buildkit. moby/moby#37686
• Set BuildKit's ExportedProduct variable to show useful errors in the future. moby/moby#37439
• Vendor: update buildkit to 9acf51e491. moby/moby#37385
• Vndr buildkit, containerd, console. docker/cli#1302
• Vndr containerd to a88b631, buildkit to e57eed4, and fsutil to b19464c. moby/moby#37582
• [enhancement] add optional fields in daemon.json to enable buildkit. moby/moby#37593
• [enhancement] enable buildkit from daemon side. docker/cli#1275

• Add osusergo build tar for static binaries. moby/moby#37500

Client

• Exposes compose loader.Transform function…. docker/cli#1244
• Extract StackConverter from the StackClient. docker/cli#1152
• Remove composefiles length check on k8s RunDeploy. docker/cli#1172

• Add a doc.go file so the compose/schema/data directory can be vendore…. docker/cli#1169
• Add a new ExtractVariables function to compose/template package. docker/cli#1249
• Add missing fields in compose/types. docker/cli#1235
• Add omitempty on compose config top-level types. docker/cli#1170

Logging

• Integration-cli: error logging improvements. moby/moby#37635
• Integration: fix log message. moby/moby#37542
• Loggerutils: fix a typo. moby/moby#37570
• Pass endpoint to the CloudWatch Logs logging driver. moby/moby#37374
• Pass log-level to containerd. moby/moby#37419

• Add "local" log driver. moby/moby#37092

• Fix logic when enabling buildkit. moby/moby#37688

Networking

• Builder: temporarily disable bridge networking when using buildkit. moby/moby#37691
• Move network conversions out of API router. moby/moby#37156
• Use sortorder library for sorting network list output. docker/cli#1266

• Fix faulty error type checking in removeNetwork(). moby/moby#37409

Runtime

• Disable TestExecWindowsOpenHandles on RS5 temporarily. moby/moby#37679
• LCOW: Ensure platform is populated on COPY/ADD. moby/moby#37563
• LCOW: Mount to short container paths to avoid command-line length limit. moby/moby#37659
• LCOW: lazycontext: Use correct lstat, fix archive check. moby/moby#37356
• Lcow: fix debug in startServiceVMIfNotRunning(). moby/moby#37446
• Revendor Microsoft/opengcs @ v0.3.8. moby/moby#37515
• Select polling based watcher for docker log file watcher on Windows. moby/moby#37412
• Updated the go-winio library to release 0.4.8 that has the fix for Windows Container. docker/cli#1157

• Add --chown flag support for ADD/COPY commands for Windows. moby/moby#35521
• Adds LinuxMetadata support by default on Windows. moby/moby#37514

Swarm Mode

• Propagate the provided external CA certificate to the external CA object in swarm. docker/cli#1178

18.09.0-ce-beta1

Changelog

For more information on the list of deprecated flags and APIs, have a look at
https://docs.docker.com/engine/deprecated/ where you can find the target removal dates

18.09.0-ce (2018-MM-DD)

Builder

• -buildmode=pie is not supported on Linux on MIPS either. moby/moby#37489
• Build --secret with buildkit. docker/cli#1288
• Build: Remove API requirement for --progress as it is CLI only. docker/cli#1296
• Build: add -buildmode=pie. docker/cli#1242
• Build: change --console=[auto,false,true] to --progress=[auto,plain,tty]. docker/cli#1276
• Builder: Implement builder prune to prune build cache. docker/cli#1295
• Builder: do not cancel buildkit status request. moby/moby#37597
• Builder: implement PullParent option with buildkit. moby/moby#37613
• Buildkit: enable net modes and bridge. moby/moby#37620
• Import TestBuildIidFileSquash from moby to cli. docker/cli#990
• Re-add support for a custom .bashrc file in build env. moby/moby#37370
• Remove "experimental" annotations for buildkit. docker/cli#1303
• Remove experimental guard for buildkit. moby/moby#37686
• Set BuildKit's ExportedProduct variable to show useful errors in the future. moby/moby#37439
• Vendor: update buildkit to 9acf51e491. moby/moby#37385
• Vndr buildkit, containerd, console. docker/cli#1302
• Vndr containerd to a88b631, buildkit to e57eed4, and fsutil to b19464c. moby/moby#37582
• [enhancement] add optional fields in daemon.json to enable buildkit. moby/moby#37593
• [enhancement] enable buildkit from daemon side. docker/cli#1275

• Add osusergo build tar for static binaries. moby/moby#37500

Client

• Exposes compose loader.Transform function…. docker/cli#1244
• Extract StackConverter from the StackClient. docker/cli#1152
• Remove composefiles length check on k8s RunDeploy. docker/cli#1172

• Add a doc.go file so the compose/schema/data directory can be vendore…. docker/cli#1169
• Add a new ExtractVariables function to compose/template package. docker/cli#1249
• Add missing fields in compose/types. docker/cli#1235
• Add omitempty on compose config top-level types. docker/cli#1170

Logging

• Integration-cli: error logging improvements. moby/moby#37635
• Integration: fix log message. moby/moby#37542
• Loggerutils: fix a typo. moby/moby#37570
• Pass endpoint to the CloudWatch Logs logging driver. moby/moby#37374
• Pass log-level to containerd. moby/moby#37419

• Add "local" log driver. moby/moby#37092

• Fix logic when enabling buildkit. moby/moby#37688

Networking

• Builder: temporarily disable bridge networking when using buildkit. moby/moby#37691
• Move network conversions out of API router. moby/moby#37156
• Use sortorder library for sorting network list output. docker/cli#1266

• Fix faulty error type checking in removeNetwork(). moby/moby#37409

Runtime

• Disable TestExecWindowsOpenHandles on RS5 temporarily. moby/moby#37679
• LCOW: Ensure platform is populated on COPY/ADD. moby/moby#37563
• LCOW: Mount to short container paths to avoid command-line length limit. moby/moby#37659
• LCOW: lazycontext: Use correct lstat, fix archive check. moby/moby#37356
• Lcow: fix debug in startServiceVMIfNotRunning(). moby/moby#37446
• Revendor Microsoft/opengcs @ v0.3.8. moby/moby#37515
• Select polling based watcher for docker log file watcher on Windows. moby/moby#37412
• Updated the go-winio library to release 0.4.8 that has the fix for Windows Container. docker/cli#1157

• Add --chown flag support for ADD/COPY commands for Windows. moby/moby#35521
• Adds LinuxMetadata support by default on Windows. moby/moby#37514

Swarm Mode

• Propagate the provided external CA certificate to the external CA object in swarm. docker/cli#1178

18.09.0-ce-tp6

Changelog

For more information on the list of deprecated flags and APIs, have a look at
https://docs.docker.com/engine/deprecated/ where you can find the target removal dates

18.09.0-ce (2018-MM-DD)