Docker Engine 17.03 release notes

17.03.3-ce

2018-08-30

Runtime

• Update go-connections to d217f8e #28open_in_new

17.03.2-ce

2017-05-29

Networking

• Fix a concurrency issue preventing network creation #33273open_in_new

Runtime

• Relabel secrets path to avoid a Permission Denied on selinux enabled systems #33236open_in_new (ref #32529open_in_new
• Fix cases where local volume were not properly relabeled if needed #33236open_in_new (ref #29428open_in_new)
• Fix an issue while upgrading if a plugin rootfs was still mounted #33236open_in_new (ref #32525open_in_new)
• Fix an issue where volume wouldn't default to the rprivate propagation mode #33236open_in_new (ref #32851open_in_new)
• Fix a panic that could occur when a volume driver could not be retrieved #33236open_in_new (ref #32347open_in_new)

• Add a warning in docker info when the overlay or overlay2 graphdriver is used on a filesystem without d_type support #33236open_in_new (ref #31290open_in_new)

• Fix an issue with backporting mount spec to older volumes #33207open_in_new
• Fix issue where a failed unmount can lead to data loss on local volume remove #33120open_in_new

Swarm Mode

• Fix a case where tasks could get killed unexpectedly #33118open_in_new
• Fix an issue preventing to deploy services if the registry cannot be reached despite the needed images being locally present #33117open_in_new

17.03.1-ce

2017-03-27

Remote API (v1.27) & Client

• Fix autoremove on older api #31692open_in_new
• Fix default network customization for a stack #31258open_in_new
• Correct CPU usage calculation in presence of offline CPUs and newer Linux #31802open_in_new
• Fix issue where service healthcheck is {} in remote API #30197open_in_new

Runtime

• Update runc to 54296cf40ad8143b62dbcaa1d90e520a2136ddfe #31666open_in_new
• Ignore cgroup2 mountpoints opencontainers/runc#1266open_in_new
• Update containerd to 4ab9917febca54791c5f071a9d1f404867857fcc #31662open_in_new #31852open_in_new
• Register healtcheck service before calling restore() docker/containerd#609open_in_new
• Fix docker exec not working after unattended upgrades that reload apparmor profiles #31773open_in_new
• Fix unmounting layer without merge dir with Overlay2 #31069open_in_new
• Do not ignore "volume in use" errors when force-delete #31450open_in_new

Swarm Mode

• Update swarmkit to 17756457ad6dc4d8a639a1f0b7a85d1b65a617bb #31807open_in_new
• Scheduler now correctly considers tasks which have been assigned to a node but aren't yet running docker/swarmkit#1980open_in_new
• Allow removal of a network when only dead tasks reference it docker/swarmkit#2018open_in_new
• Retry failed network allocations less aggressively docker/swarmkit#2021open_in_new
• Avoid network allocation for tasks that are no longer running docker/swarmkit#2017open_in_new
• Bookkeeping fixes inside network allocator allocator docker/swarmkit#2019open_in_new docker/swarmkit#2020open_in_new

Windows

• Cleanup HCS on restore #31503open_in_new

17.03.0-ce

2017-03-01

IMPORTANT: Starting with this release, Docker is on a monthly release cycle and uses a new YY.MM versioning scheme to reflect this. Two channels are available: monthly and quarterly. Any given monthly release will only receive security and bugfixes until the next monthly release is available. Quarterly releases receive security and bugfixes for 4 months after initial release. This release includes bugfixes for 1.13.1 but there are no major feature additions and the API version stays the same. Upgrading from Docker 1.13.1 to 17.03.0 is expected to be simple and low-risk.

Client

• Fix panic in docker stats --format #30776open_in_new

Contrib

• Update various bash and zsh completion scripts #30823open_in_new, #30945open_in_new and more...
• Block obsolete socket families in default seccomp profile - mitigates unpatched kernels' CVE-2017-6074 #29076open_in_new

Networking

• Fix bug on overlay encryption keys rotation in cross-datacenter swarm #30727open_in_new
• Fix side effect panic in overlay encryption and network control plane communication failure ("No installed keys could decrypt the message") on frequent swarm leader re-election #25608open_in_new
• Several fixes around system responsiveness and datapath programming when using overlay network with external kv-store docker/libnetwork#1639open_in_new, docker/libnetwork#1632open_in_new and more...
• Discard incoming plain vxlan packets for encrypted overlay network #31170open_in_new
• Release the network attachment on allocation failure #31073open_in_new
• Fix port allocation when multiple published ports map to the same target port docker/swarmkit#1835open_in_new

Runtime

• Fix a deadlock in docker logs #30223open_in_new
• Fix CPU spin waiting for log write events #31070open_in_new
• Fix a possible crash when using journald #31231open_in_new #31263open_in_new
• Fix a panic on close of nil channel #31274open_in_new
• Fix duplicate mount point for --volumes-from in docker run #29563open_in_new
• Fix --cache-from does not cache last step #31189open_in_new

Swarm Mode

• Shutdown leaks an error when the container was never started #31279open_in_new
• Fix possibility of tasks getting stuck in the "NEW" state during a leader failover docker/swarmkit#1938open_in_new
• Fix extraneous task creations for global services that led to confusing replica counts in docker service ls docker/swarmkit#1957open_in_new
• Fix problem that made rolling updates slow when task-history-limit was set to 1 docker/swarmkit#1948open_in_new
• Restart tasks elsewhere, if appropriate, when they are shut down as a result of nodes no longer satisfying constraints docker/swarmkit#1958open_in_new
• (experimental)