Docker Engine 18.03 release notes

18.03.1-ce

2018-04-26

Client

• Fix error with merge compose file with networks docker/cli#983

• Fix docker stack deploy re-deploying services after the service was updated with --force docker/cli#963
• Fix docker version output alignment docker/cli#965

Runtime

• Fix AppArmor profiles not being applied to docker exec processes moby/moby#36466
• Don't sort plugin mount slice moby/moby#36711
• Daemon/cluster: handle partial attachment entries during configure moby/moby#36769

• Bump Golang to 1.9.5 moby/moby#36779 docker/cli#986

• Daemon/stats: more resilient cpu sampling moby/moby#36519

• Containerd: update to 1.0.3 release moby/moby#36749

• Fix Windows layer leak when write fails moby/moby#36728

• Don't make container mount unbindable moby/moby#36768

• Fix Daemon panics on container export after a daemon restart moby/moby/36586
• Fix digest cache being removed on autherrors moby/moby#36509
• Make sure plugin container is removed on failure moby/moby#36715
• Copy: avoid using all system memory with authz plugins moby/moby#36595
• Relax some libcontainerd client locking moby/moby#36848
• Update hcsshim to v0.6.10 to address CVE-2018-8115

Swarm Mode

• Increase raft Election tick to 10 times Heartbeat tick moby/moby#36672

Networking

• Gracefully remove LB endpoints from services docker/libnetwork#2112
• Retry other external DNS servers on ServFail docker/libnetwork#2121
• Improve scalability of bridge network isolation rules docker/libnetwork#2117
• Allow for larger preset property values, do not override docker/libnetwork#2124
• Prevent panics on concurrent reads/writes when calling changeNodeState docker/libnetwork#2136

18.03.0-ce

2018-03-21

Builder

• Switch to -buildmode=pie moby/moby#34369
• Allow Dockerfile to be outside of build-context docker/cli#886
• Builder: fix wrong cache hits building from tars moby/moby#36329

• Fixes files leaking to other images in a multi-stage build moby/moby#36338

Client

• Simplify the marshaling of compose types.Config docker/cli#895

• Add support for multiple composefile when deploying docker/cli#569

• Fix broken Kubernetes stack flags docker/cli#831
• Fix stack marshaling for Kubernetes docker/cli#890
• Fix and simplify bash completion for service env, mounts and labels docker/cli#682
• Fix before and since filter for docker ps moby/moby#35938
• Fix --label-file weird behavior docker/cli#838
• Fix compilation of defaultCredentialStore() on unsupported platforms docker/cli#872

• Improve and fix bash completion for images docker/cli#717

• Added check for empty source in bind mount docker/cli#824

• Fix TLS from environment variables in client moby/moby#36270

• docker build now runs faster when registry-specific credential helper(s) are configured docker/cli#840
• Update event filter zsh completion with disable, enable, install and remove docker/cli#372
• Produce errors when empty ids are passed into inspect calls moby/moby#36144
• Marshall version for the k8s controller docker/cli#891
• Set a non-zero timeout for HTTP client communication with plugin backend docker/cli#883

• Add DOCKER_TLS environment variable for --tls option docker/cli#863
• Add --template-driver option for secrets/configs docker/cli#896
• Move docker trust commands out of experimental docker/cli#934 docker/cli#935 docker/cli#944

Logging

• AWS logs - don't add new lines to maximum sized events moby/moby#36078
• Move log validator logic after plugins are loaded moby/moby#36306
• Support a proxy in Splunk log driver moby/moby#36220

• Fix log tail with empty logs moby/moby#36305

Networking

• Libnetwork revendoring moby/moby#36137

• Fix for deadlock on exit with Memberlist revendor docker/libnetwork#2040

• Fix user specified ndots option docker/libnetwork#2065

• Fix to use ContainerID for Windows instead of SandboxID docker/libnetwork#2010

• Verify NetworkingConfig to make sure EndpointSettings is not nil moby/moby#36077

• Fix DockerNetworkInternalMode issue moby/moby#36298
• Fix race in attachable network attachment moby/moby#36191
• Fix timeout issue of InspectNetwork on AArch64 moby/moby#36257

• Verbose info is missing for partial overlay ID moby/moby#35989
• Update FindNetwork to address network name duplications moby/moby#30897
• Disallow attaching ingress network docker/swarmkit#2523

• Prevent implicit removal of the ingress network moby/moby#36538
• Fix stale HNS endpoints on Windows moby/moby#36603
• IPAM fixes for duplicate IP addresses docker/libnetwork#2104 docker/libnetwork#2105

Runtime

• Enable HotAdd for Windows moby/moby#35414
• LCOW: Graphdriver fix deadlock in hotRemoveVHDs moby/moby#36114
• LCOW: Regular mount if only one layer moby/moby#36052
• Remove interim env var LCOW_API_PLATFORM_IF_OMITTED moby/moby#36269
• Revendor Microsoft/opengcs @ v0.3.6 moby/moby#36108

• Fix issue of ExitCode and PID not show up in Task.Status.ContainerStatus moby/moby#36150
• Fix issue with plugin scanner going too deep moby/moby#36119

• Do not make graphdriver homes private mounts moby/moby#36047
• Do not recursive unmount on cleanup of zfs/btrfs moby/moby#36237
• Don't restore image if layer does not exist moby/moby#36304
• Adjust minimum API version for templated configs/secrets moby/moby#36366
• Bump containerd to 1.0.2 (cfd04396dc68220d1cecbe686a6cc3aa5ce3667c) moby/moby#36308
• Bump Golang to 1.9.4 moby/moby#36243
• Ensure daemon root is unmounted on shutdown moby/moby#36107
• Update runc to 6c55f98695e902427906eed2c799e566e3d3dfb5 moby/moby#36222

• Fix container cleanup on daemon restart moby/moby#36249

• Support SCTP port mapping (bump up API to v1.37) moby/moby#33922
• Support SCTP port mapping docker/cli#278

• Fix Volumes property definition in ContainerConfig moby/moby#35946

• Bump moby and dependencies docker/cli#829
• C.RWLayer: check for nil before use moby/moby#36242

• Add REMOVE and ORPHANED to TaskState moby/moby#36146

• Fixed error detection using IsErrNotFound and IsErrNotImplemented for ContainerStatPath, CopyFromContainer, and CopyToContainer methods moby/moby#35979

• Add an integration/internal/container helper package moby/moby#36266
• Add canonical import path moby/moby#36194
• Add/use container.Exec() to integration moby/moby#36326

• Fix "--node-generic-resource" singular/plural moby/moby#36125

• Daemon.cleanupContainer: nullify container RWLayer upon release moby/moby#36160
• Daemon: passdown the --oom-kill-disable option to containerd moby/moby#36201
• Display a warn message when there is binding ports and net mode is host moby/moby#35510
• Refresh containerd remotes on containerd restarted moby/moby#36173
• Set daemon root to use shared propagation moby/moby#36096
• Optimizations for recursive unmount moby/moby#34379
• Perform plugin mounts in the runtime moby/moby#35829
• Graphdriver: Fix RefCounter memory leak moby/moby#36256
• Use continuity fs package for volume copy moby/moby#36290
• Use proc/exe for reexec moby/moby#36124

• Add API support for templated secrets and configs moby/moby#33702 and moby/moby#36366

• Use rslave propagation for mounts from daemon root moby/moby#36055

• Add /proc/keys to masked paths moby/moby#36368

• Bump Runc to 1.0.0-rc5 moby/moby#36449

• Fixes runc exec on big-endian architectures moby/moby#36449

• Use chroot when mount namespaces aren't provided moby/moby#36449

• Fix systemd slice expansion so that it could be consumed by cAdvisor moby/moby#36449
• Fix devices mounted with wrong uid/gid moby/moby#36449
• Fix read-only containers with IPC private mounts /dev/shm read-only moby/moby#36526

Swarm Mode

• Replace EC Private Key with PKCS#8 PEMs docker/swarmkit#2246
• Fix IP overlap with empty EndpointSpec docker/swarmkit #2505
• Add support for Support SCTP port mapping docker/swarmkit#2298
• Do not reschedule tasks if only placement constraints change and are satisfied by the assigned node docker/swarmkit#2496
• Ensure task reaper stopChan is closed no more than once docker/swarmkit #2491
• Synchronization fixes docker/swarmkit#2495
• Add log message to indicate message send retry if streaming unimplemented docker/swarmkit#2483
• Debug logs for session, node events on dispatcher, heartbeats docker/swarmkit#2486

• Add swarm types to bash completion event type filter docker/cli#888

• Fix issue where network inspect does not show Created time for networks in swarm scope moby/moby#36095