Docker Engine 17.09 release notes
17.09.1-ce
2017-12-07
Builder
- Fix config leakage on shared parent stage moby/moby#33753open_in_new
- Warn on empty continuation lines only, not on comment-only lines moby/moby#35004open_in_new
Client
- Set API version on Client even when Ping fails docker/cli#546open_in_new
Networking
- Overlay fix for transient IP reuse docker/libnetwork#2016open_in_new
- Fix reapTime logic in NetworkDB and handle DNS cleanup for attachable container docker/libnetwork#2017open_in_new
- Disable hostname lookup on chain exists check docker/libnetwork#2019open_in_new
- Fix lint issues docker/libnetwork#2020open_in_new
- Restore error type in FindNetwork moby/moby#35634open_in_new
Runtime
- Protect
health monitor
Go channel moby/moby#35482open_in_new - Fix leaking container/exec state moby/moby#35484open_in_new
- Add /proc/scsi to masked paths (patch to work around CVE-2017-16539open_in_new moby/moby/#35399open_in_new
- Vendor tar-split: fix to prevent memory exhaustion issue that could crash Docker daemon moby/moby/#35424open_in_new Fixes CVE-2017-14992open_in_new
- Fix P/Z HubPullSuite tests moby/moby#34837open_in_new
- Windows: Add support for version filtering on pull moby/moby#35090open_in_new
- Windows: Stop filtering Windows manifest lists by version moby/moby#35117open_in_new
- Use rslave instead of rprivate in chroot archive moby/moby/#35217open_in_new
- Remove container rootfs mountPath after unmount moby/moby#34573open_in_new
- Fix honoring tmpfs size of user /dev/shm mount moby/moby#35316open_in_new
- Don't abort when setting may_detach_mounts (log the error instead) moby/moby#35172open_in_new
- Fix version comparison when negotiating the API version moby/moby#35008open_in_new
Swarm mode
- Increase gRPC request timeout when sending snapshots docker/swarmkit#2404open_in_new
- Fix node filtering when there is no log driver docker/swarmkit#2442open_in_new
- Add an error on attempt to change cluster name docker/swarmkit/#2454open_in_new
- Delete node attachments when node is removed docker/swarmkit/#2456open_in_new
- Provide custom gRPC dialer to override default proxy dialer docker/swarmkit/#2457open_in_new
- Avoids recursive readlock on swarm info moby/moby#35388open_in_new
17.09.0-ce
2017-09-26
Builder
- Add
--chown
flag toADD/COPY
commands in Dockerfile moby/moby#34263open_in_new
- Fix cloning unneeded files while building from git repositories moby/moby#33704open_in_new
Client
- Allow extension fields in the v3.4 version of the compose format docker/cli#452open_in_new
- Make compose file allow to specify names for non-external volume docker/cli#306open_in_new
- Support
--compose-file -
as stdin docker/cli#347open_in_new - Support
start_period
for healthcheck in Docker Compose docker/cli#475open_in_new
- Add support for
stop-signal
in docker stack commands docker/cli#388open_in_new - Add support for update order in compose deployments docker/cli#360open_in_new
- Add ulimits to unsupported compose fields docker/cli#482open_in_new
- Add
--format
todocker-search
docker/cli#440open_in_new
- Show images digests when
{{.Digest}}
is in format docker/cli#439open_in_new - Print output of
docker stack rm
onstdout
instead ofstderr
docker/cli#491open_in_new
- Fix
docker history --format {{json .}}
printing human-readable timestamps instead of ISO8601 when--human=true
docker/cli#438open_in_new - Fix idempotence of
docker stack deploy
when secrets or configs are used docker/cli#509open_in_new - Fix presentation of random host ports docker/cli#404open_in_new
- Fix redundant service restarts when service created with multiple secrets moby/moby#34746open_in_new
Logging
- Fix Splunk logger not transmitting log data when tag is empty and raw-mode is used moby/moby#34520open_in_new
Networking
- Add the control plane MTU option in the daemon config moby/moby#34103open_in_new
- Add service virtual IP to sandbox's loopback address docker/libnetwork#1877open_in_new
Runtime
- Graphdriver: promote overlay2 over aufs moby/moby#34430open_in_new
- LCOW: Additional flags for VHD boot moby/moby#34451open_in_new
- LCOW: Don't block export moby/moby#34448open_in_new
- LCOW: Dynamic sandbox management moby/moby#34170open_in_new
- LCOW: Force Hyper-V Isolation moby/moby#34468open_in_new
- LCOW: Move toolsScratchPath to /tmp moby/moby#34396open_in_new
- LCOW: Remove hard-coding moby/moby#34398open_in_new
- LCOW: WORKDIR correct handling moby/moby#34405open_in_new
- Windows: named pipe mounts moby/moby#33852open_in_new
- Fix "permission denied" errors when accessing volume with SELinux enforcing mode moby/moby#34684open_in_new
- Fix layers size reported as
0
indocker system df
moby/moby#34826open_in_new - Fix some "device or resource busy" errors when removing containers on RHEL 7.4 based kernels moby/moby#34886open_in_new
Swarm mode
- Include whether the managers in the swarm are autolocked as part of
docker info
docker/cli#471open_in_new
- Add 'docker service rollback' subcommand docker/cli#205open_in_new
- Fix managers failing to join if the gRPC snapshot is larger than 4MB docker/swarmkit#2375open_in_new
- Fix "permission denied" errors for configuration file in SELinux-enabled containers moby/moby#34732open_in_new
- Fix services failing to deploy on ARM nodes moby/moby#34021open_in_new
Packaging
- Build scripts for ppc64el on Ubuntu docker/docker-ce-packaging#43open_in_new
Deprecation
- Remove deprecated
--enable-api-cors
daemon flag moby/moby#34821open_in_new