19.03.6

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
release notes page.

19.03.6 (2020-02-12)

Builder

• builder-next: Allow modern sign hashes for ssh forwarding. docker/engine#453
• builder-next: Clear onbuild rules after triggering. docker/engine#453
• builder-next: Fix issue with directory permissions when usernamespaces is enabled. moby/moby#40440
• Bump hcsshim to fix docker build failing on Windows 1903. docker/engine#429

Networking

• Shorten controller ID in exec-root to not hit UNIX_PATH_MAX. docker/engine#424
• Fix panic in drivers/overlay/encryption.go. docker/engine#424
• Fix hwaddr set race between us and udev. docker/engine#439

Runtime

• Bump Golang 1.12.16. moby/moby#40433
• Update containerd binary to v1.2.12. moby/moby#40433
• Update to runc v1.0.0-rc10. moby/moby#40433

• Fix possible runtime panic in Lgetxattr. docker/engine#454
• rootless: fix proxying UDP packets. docker/engine#434

19.03.5 (2019-11-13)

Builder

• builder-next: Added entitlements in builder config. docker/engine#412

• Fix builder-next: permission errors on using build secrets or ssh forwarding with userns-remap. docker/engine#420
• Fix builder-next: copying a symlink inside an already copied directory. docker/engine#420
• Fix builder-next: fatal error: concurrent map writes. docker/engine#422

Runtime

• Bump Golang to 1.12.12. docker/engine#418
• Update to RootlessKit to v0.7.0 to harden slirp4netns with mount namespace and seccomp. docker/engine#397

• Fix to propagate GetContainer error from event processor. docker/engine#407
• Fix push of OCI image. docker/engine#405

19.03.4 (2019-10-17)

Networking

• Rollback libnetwork changes so DOCKER-USER iptables chain is back. docker/engine#404

19.03.3 (2019-10-07)

Known Issues

• DOCKER-USER iptables chain is missing docker/for-linux#810. Users cannot perform additional container network traffic filtering on top of this iptables chain. You are not affected by this issue if you are not customizing iptables chains on top of DOCKER-USER.

  Workaround is to insert the iptables chain after docker daemon starts.

  iptables -N DOCKER-USER
  iptables -I FORWARD -j DOCKER-USER
  iptables -A DOCKER-USER -j RETURN
  

Builder

• Fix builder-next: resolve digest for third party registries. docker/engine#339
• Fix builder-next: user namespace builds when daemon started with socket activation. docker/engine#373
• Fix builder-next: session: release forwarded ssh socket connection per connection. docker/engine#373
• Fix builder-next: llbsolver: error on multiple cache importers. docker/engine#373

Networking

• Fix various libnetwork issues for iptables, DNS queries, and more. docker/engine#330

Runtime

• Bump Golang to 1.12.10. docker/engine#387
• Bump containerd to 1.2.10. docker/engine#385
• Distribution: modify warning logic when pulling v2 schema1 manifests. docker/engine#368

• Fix POST /images/create returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix POST /build returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix panic on 32-bit ARMv7 caused by misaligned struct member. docker/engine#363
• Fix to return "invalid parameter" when linking to non-existing container. docker/engine#352
• Fix overlay2: busy error on mount when using kernel >= 5.2. docker/engine#332
• Fix docker rmi stuck in certain misconfigured systems, e.g. dead NFS share. docker/engine#335
• Fix handling of blocked I/O of exec'd processes. docker/engine#296
• Fix jsonfile logger: follow logs stuck when max-size is set and max-file=1. docker/engine#378

Client

• Mitigate against YAML files that have excessive aliasing. docker/cli#2119

19.03.2 (2019-08-29)

Builder

• Fix "COPY --from" to non-existing directory on Windows. moby/moby#39695
• Fix builder-next: metadata commands not having created time in history. moby/moby#39456
• Fix builder-next: close progress on layer export error. moby/moby#39782

• Update buildkit to 588c73e1e4. moby/moby#39781

Client

• Fix Windows absolute path detection on non-Windows. docker/cli#1990
• Fix to zsh completion script for docker login --username.
• Fix context: produce consistent output on context create. docker/cli#1985
• Fix support for HTTP proxy env variable. docker/cli#2059

Logging

• Fix for reading journald logs. moby/moby#37819 moby/moby#38859

Networking

• Prevent panic on network attach to a container with disabled networking. moby/moby#39589

Runtime

• Bump Golang to 1.12.8.

• Fix a potential engine panic when using XFS disk quota for containers. moby/moby#39644

Swarm

• Fix an issue where nodes with lots of tasks could not be removed. docker/swarmkit#2867

19.03.1 (2019-07-25)

Runtime

• Fix CVE-2019-14271 loading of nsswitch based config inside chroot under Glibc.

19.03.0 (2019-07-22)

Deprecation

• Deprecate image manifest v2 schema1 in favor of v2 schema2. Future version of Docker will remove support for v2 schema1 altogether. moby/moby#39365
• Remove v1.10 migrator. moby/moby#38265
• Skip deprecated storage-drivers in auto-selection. moby/moby#38019
• Deprecate aufs storage driver and add warning. moby/moby#38090

Client

• Add --pids-limit flag to docker update. docker/cli#1765
• Add systctl support for services. docker/cli#1754
• Add support for template_driver in composefiles. docker/cli#1746
• Add --device support for Windows. docker/cli#1606
• Data Path Port configuration support. docker/cli#1509
• Fast context switch: commands. docker/cli#1501
• Support --mount type=bind,bind-nonrecursive,... docker/cli#1430
• Add maximum replicas per node. docker/cli#1410 docker/cli#1612
• Add option to pull images quietly. docker/cli#882
• Add a separate --domainname flag. docker/cli#1130
• Add support for secret drivers in docker stack deploy. docker/cli#1783
• Add ability to use swarm Configs as CredentialSpecs on services. docker/cli#1781
• Add --security-opt systempaths=unconfined support. docker/cli#1808
• Basic framework for writing and running CLI plugins. docker/cli#1564 docker/cli#1898
• Docker App v0.8.0. docker/docker-ce-packaging#341
• Docker buildx. docker/docker-ce-packaging#336

• Bump google.golang.org/grpc to v1.20.1. docker/cli#1884
• Cli change to pass driver specific options to docker run. docker/cli#1767
• Bump Golang 1.12.5. docker/cli#1875
• The `docker...

19.03.6-rc2

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
release notes page.

19.03.6 (2020-02-05)

Builder

• builder-next: Allow modern sign hashes for ssh forwarding. docker/engine#453
• builder-next: Clear onbuild rules after triggering. docker/engine#453
• builder-next: Fix issue with directory permissions when usernamespaces is enabled. moby/moby#40440
• Bump hcsshim to fix docker build failing on Windows 1903. docker/engine#429

Networking

• Shorten controller ID in exec-root to not hit UNIX_PATH_MAX. docker/engine#424
• Fix panic in drivers/overlay/encryption.go. docker/engine#424
• Fix hwaddr set race between us and udev. docker/engine#439

Runtime

• Bump Golang 1.12.16. moby/moby#40433
• Update containerd binary to v1.2.12. moby/moby#40433
• Update to runc v1.0.0-rc10. moby/moby#40433

• Fix possible runtime panic in Lgetxattr. docker/engine#454
• rootless: fix proxying UDP packets. docker/engine#434

19.03.5 (2019-11-13)

Builder

• builder-next: Added entitlements in builder config. docker/engine#412

• Fix builder-next: permission errors on using build secrets or ssh forwarding with userns-remap. docker/engine#420
• Fix builder-next: copying a symlink inside an already copied directory. docker/engine#420
• Fix builder-next: fatal error: concurrent map writes. docker/engine#422

Runtime

• Bump Golang to 1.12.12. docker/engine#418
• Update to RootlessKit to v0.7.0 to harden slirp4netns with mount namespace and seccomp. docker/engine#397

• Fix to propagate GetContainer error from event processor. docker/engine#407
• Fix push of OCI image. docker/engine#405

19.03.4 (2019-10-17)

Networking

• Rollback libnetwork changes so DOCKER-USER iptables chain is back. docker/engine#404

19.03.3 (2019-10-07)

Known Issues

• DOCKER-USER iptables chain is missing docker/for-linux#810. Users cannot perform additional container network traffic filtering on top of this iptables chain. You are not affected by this issue if you are not customizing iptables chains on top of DOCKER-USER.

  Workaround is to insert the iptables chain after docker daemon starts.

  iptables -N DOCKER-USER
  iptables -I FORWARD -j DOCKER-USER
  iptables -A DOCKER-USER -j RETURN
  

Builder

• Fix builder-next: resolve digest for third party registries. docker/engine#339
• Fix builder-next: user namespace builds when daemon started with socket activation. docker/engine#373
• Fix builder-next: session: release forwarded ssh socket connection per connection. docker/engine#373
• Fix builder-next: llbsolver: error on multiple cache importers. docker/engine#373

Networking

• Fix various libnetwork issues for iptables, DNS queries, and more. docker/engine#330

Runtime

• Bump Golang to 1.12.10. docker/engine#387
• Bump containerd to 1.2.10. docker/engine#385
• Distribution: modify warning logic when pulling v2 schema1 manifests. docker/engine#368

• Fix POST /images/create returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix POST /build returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix panic on 32-bit ARMv7 caused by misaligned struct member. docker/engine#363
• Fix to return "invalid parameter" when linking to non-existing container. docker/engine#352
• Fix overlay2: busy error on mount when using kernel >= 5.2. docker/engine#332
• Fix docker rmi stuck in certain misconfigured systems, e.g. dead NFS share. docker/engine#335
• Fix handling of blocked I/O of exec'd processes. docker/engine#296
• Fix jsonfile logger: follow logs stuck when max-size is set and max-file=1. docker/engine#378

Client

• Mitigate against YAML files that have excessive aliasing. docker/cli#2119

19.03.2 (2019-08-29)

Builder

• Fix "COPY --from" to non-existing directory on Windows. moby/moby#39695
• Fix builder-next: metadata commands not having created time in history. moby/moby#39456
• Fix builder-next: close progress on layer export error. moby/moby#39782

• Update buildkit to 588c73e1e4. moby/moby#39781

Client

• Fix Windows absolute path detection on non-Windows. docker/cli#1990
• Fix to zsh completion script for docker login --username.
• Fix context: produce consistent output on context create. docker/cli#1985
• Fix support for HTTP proxy env variable. docker/cli#2059

Logging

• Fix for reading journald logs. moby/moby#37819 moby/moby#38859

Networking

• Prevent panic on network attach to a container with disabled networking. moby/moby#39589

Runtime

• Bump Golang to 1.12.8.

• Fix a potential engine panic when using XFS disk quota for containers. moby/moby#39644

Swarm

• Fix an issue where nodes with lots of tasks could not be removed. docker/swarmkit#2867

19.03.1 (2019-07-25)

Runtime

• Fix CVE-2019-14271 loading of nsswitch based config inside chroot under Glibc.

19.03.0 (2019-07-22)

Deprecation

• Deprecate image manifest v2 schema1 in favor of v2 schema2. Future version of Docker will remove support for v2 schema1 altogether. moby/moby#39365
• Remove v1.10 migrator. moby/moby#38265
• Skip deprecated storage-drivers in auto-selection. moby/moby#38019
• Deprecate aufs storage driver and add warning. moby/moby#38090

Client

• Add --pids-limit flag to docker update. docker/cli#1765
• Add systctl support for services. docker/cli#1754
• Add support for template_driver in composefiles. docker/cli#1746
• Add --device support for Windows. docker/cli#1606
• Data Path Port configuration support. docker/cli#1509
• Fast context switch: commands. docker/cli#1501
• Support --mount type=bind,bind-nonrecursive,... docker/cli#1430
• Add maximum replicas per node. docker/cli#1410 docker/cli#1612
• Add option to pull images quietly. docker/cli#882
• Add a separate --domainname flag. docker/cli#1130
• Add support for secret drivers in docker stack deploy. docker/cli#1783
• Add ability to use swarm Configs as CredentialSpecs on services. docker/cli#1781
• Add --security-opt systempaths=unconfined support. docker/cli#1808
• Basic framework for writing and running CLI plugins. docker/cli#1564 docker/cli#1898
• Docker App v0.8.0. docker/docker-ce-packaging#341
• Docker buildx. docker/docker-ce-packaging#336

• Bump google.golang.org/grpc to v1.20.1. docker/cli#1884
• Cli change to pass driver specific options to docker run. docker/cli#1767
• Bump Golang 1.12.5. docker/cli#1875
• The `docker...

19.03.6-rc1

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
release notes page.

19.03.6 (2020-01-23)

Builder

• builder-next: Allow modern sign hashes for ssh forwarding. docker/engine#453
• builder-next: Clear onbuild rules after triggering. docker/engine#453
• bump hcsshim to fix docker build failing on Windows 1903. docker/engine#429

Networking

• Shorten controller ID in exec-root to not hit UNIX_PATH_MAX. docker/engine#424
• Fix panic in drivers/overlay/encryption.go. docker/engine#424
• Fix hwaddr set race between us and udev. docker/engine#439

Runtime

• Bump Golang 1.12.15. docker/engine#452
• Update containerd binary to v1.2.11. docker/engine#428
• Update to runc v1.0.0-rc9. docker/engine#428

• Fix possible runtime panic in Lgetxattr. docker/engine#454
• rootless: fix proxying UDP packets. docker/engine#434

19.03.5 (2019-11-13)

Builder

• builder-next: Added entitlements in builder config. docker/engine#412

• Fix builder-next: permission errors on using build secrets or ssh forwarding with userns-remap. docker/engine#420
• Fix builder-next: copying a symlink inside an already copied directory. docker/engine#420
• Fix builder-next: fatal error: concurrent map writes. docker/engine#422

Runtime

• Bump Golang to 1.12.12. docker/engine#418
• Update to RootlessKit to v0.7.0 to harden slirp4netns with mount namespace and seccomp. docker/engine#397

• Fix to propagate GetContainer error from event processor. docker/engine#407
• Fix push of OCI image. docker/engine#405

19.03.4 (2019-10-17)

Networking

• Rollback libnetwork changes so DOCKER-USER iptables chain is back. docker/engine#404

19.03.3 (2019-10-07)

Known Issues

• DOCKER-USER iptables chain is missing docker/for-linux#810. Users cannot perform additional container network traffic filtering on top of this iptables chain. You are not affected by this issue if you are not customizing iptables chains on top of DOCKER-USER.

  Workaround is to insert the iptables chain after docker daemon starts.

  iptables -N DOCKER-USER
  iptables -I FORWARD -j DOCKER-USER
  iptables -A DOCKER-USER -j RETURN
  

Builder

• Fix builder-next: resolve digest for third party registries. docker/engine#339
• Fix builder-next: user namespace builds when daemon started with socket activation. docker/engine#373
• Fix builder-next: session: release forwarded ssh socket connection per connection. docker/engine#373
• Fix builder-next: llbsolver: error on multiple cache importers. docker/engine#373

Networking

• Fix various libnetwork issues for iptables, DNS queries, and more. docker/engine#330

Runtime

• Bump Golang to 1.12.10. docker/engine#387
• Bump containerd to 1.2.10. docker/engine#385
• Distribution: modify warning logic when pulling v2 schema1 manifests. docker/engine#368

• Fix POST /images/create returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix POST /build returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix panic on 32-bit ARMv7 caused by misaligned struct member. docker/engine#363
• Fix to return "invalid parameter" when linking to non-existing container. docker/engine#352
• Fix overlay2: busy error on mount when using kernel >= 5.2. docker/engine#332
• Fix docker rmi stuck in certain misconfigured systems, e.g. dead NFS share. docker/engine#335
• Fix handling of blocked I/O of exec'd processes. docker/engine#296
• Fix jsonfile logger: follow logs stuck when max-size is set and max-file=1. docker/engine#378

Client

• Mitigate against YAML files that have excessive aliasing. docker/cli#2119

19.03.2 (2019-08-29)

Builder

• Fix "COPY --from" to non-existing directory on Windows. moby/moby#39695
• Fix builder-next: metadata commands not having created time in history. moby/moby#39456
• Fix builder-next: close progress on layer export error. moby/moby#39782

• Update buildkit to 588c73e1e4. moby/moby#39781

Client

• Fix Windows absolute path detection on non-Windows. docker/cli#1990
• Fix to zsh completion script for docker login --username.
• Fix context: produce consistent output on context create. docker/cli#1985
• Fix support for HTTP proxy env variable. docker/cli#2059

Logging

• Fix for reading journald logs. moby/moby#37819 moby/moby#38859

Networking

• Prevent panic on network attach to a container with disabled networking. moby/moby#39589

Runtime

• Bump Golang to 1.12.8.

• Fix a potential engine panic when using XFS disk quota for containers. moby/moby#39644

Swarm

• Fix an issue where nodes with lots of tasks could not be removed. docker/swarmkit#2867

19.03.1 (2019-07-25)

Runtime

• Fix CVE-2019-14271 loading of nsswitch based config inside chroot under Glibc.

19.03.0 (2019-07-22)

Deprecation

• Deprecate image manifest v2 schema1 in favor of v2 schema2. Future version of Docker will remove support for v2 schema1 altogether. moby/moby#39365
• Remove v1.10 migrator. moby/moby#38265
• Skip deprecated storage-drivers in auto-selection. moby/moby#38019
• Deprecate aufs storage driver and add warning. moby/moby#38090

Client

• Add --pids-limit flag to docker update. docker/cli#1765
• Add systctl support for services. docker/cli#1754
• Add support for template_driver in composefiles. docker/cli#1746
• Add --device support for Windows. docker/cli#1606
• Data Path Port configuration support. docker/cli#1509
• Fast context switch: commands. docker/cli#1501
• Support --mount type=bind,bind-nonrecursive,... docker/cli#1430
• Add maximum replicas per node. docker/cli#1410 docker/cli#1612
• Add option to pull images quietly. docker/cli#882
• Add a separate --domainname flag. docker/cli#1130
• Add support for secret drivers in docker stack deploy. docker/cli#1783
• Add ability to use swarm Configs as CredentialSpecs on services. docker/cli#1781
• Add --security-opt systempaths=unconfined support. docker/cli#1808
• Basic framework for writing and running CLI plugins. docker/cli#1564 docker/cli#1898
• Docker App v0.8.0. docker/docker-ce-packaging#341
• Docker buildx. docker/docker-ce-packaging#336

• Bump google.golang.org/grpc to v1.20.1. docker/cli#1884
• Cli change to pass driver specific options to docker run. docker/cli#1767
• Bump Golang 1.12.5. docker/cli#1875
• The docker system info output now segregates information relevant to the client and daemon. [docker/cli#1638](https://github.com/docker/cli/pu...

19.03.5

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
release notes page.

19.03.5 (2019-11-13)

Builder

• builder-next: Added entitlements in builder config. docker/engine#412

• Fix builder-next: permission errors on using build secrets or ssh forwarding with userns-remap. docker/engine#420
• Fix builder-next: copying a symlink inside an already copied directory. docker/engine#420
• Fix builder-next: fatal error: concurrent map writes. docker/engine#422

Runtime

• Bump Golang to 1.12.12. docker/engine#418
• Update to RootlessKit to v0.7.0 to harden slirp4netns with mount namespace and seccomp. docker/engine#397

• Fix to propagate GetContainer error from event processor. docker/engine#407
• Fix push of OCI image. docker/engine#405

19.03.4 (2019-10-17)

Networking

• Rollback libnetwork changes so DOCKER-USER iptables chain is back. docker/engine#404

19.03.3 (2019-10-07)

Known Issues

• DOCKER-USER iptables chain is missing docker/for-linux#810. Users cannot perform additional container network traffic filtering on top of this iptables chain. You are not affected by this issue if you are not customizing iptables chains on top of DOCKER-USER.

  Workaround is to insert the iptables chain after docker daemon starts.

  iptables -N DOCKER-USER
  iptables -I FORWARD -j DOCKER-USER
  iptables -A DOCKER-USER -j RETURN
  

Builder

• Fix builder-next: resolve digest for third party registries. docker/engine#339
• Fix builder-next: user namespace builds when daemon started with socket activation. docker/engine#373
• Fix builder-next: session: release forwarded ssh socket connection per connection. docker/engine#373
• Fix builder-next: llbsolver: error on multiple cache importers. docker/engine#373

Networking

• Fix various libnetwork issues for iptables, DNS queries, and more. docker/engine#330

Runtime

• Bump Golang to 1.12.10. docker/engine#387
• Bump containerd to 1.2.10. docker/engine#385
• Distribution: modify warning logic when pulling v2 schema1 manifests. docker/engine#368

• Fix POST /images/create returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix POST /build returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix panic on 32-bit ARMv7 caused by misaligned struct member. docker/engine#363
• Fix to return "invalid parameter" when linking to non-existing container. docker/engine#352
• Fix overlay2: busy error on mount when using kernel >= 5.2. docker/engine#332
• Fix docker rmi stuck in certain misconfigured systems, e.g. dead NFS share. docker/engine#335
• Fix handling of blocked I/O of exec'd processes. docker/engine#296
• Fix jsonfile logger: follow logs stuck when max-size is set and max-file=1. docker/engine#378

Client

• Mitigate against YAML files that have excessive aliasing. docker/cli#2119

19.03.2 (2019-08-29)

Builder

• Fix "COPY --from" to non-existing directory on Windows. moby/moby#39695
• Fix builder-next: metadata commands not having created time in history. moby/moby#39456
• Fix builder-next: close progress on layer export error. moby/moby#39782

• Update buildkit to 588c73e1e4. moby/moby#39781

Client

• Fix Windows absolute path detection on non-Windows. docker/cli#1990
• Fix to zsh completion script for docker login --username.
• Fix context: produce consistent output on context create. docker/cli#1985
• Fix support for HTTP proxy env variable. docker/cli#2059

Logging

• Fix for reading journald logs. moby/moby#37819 moby/moby#38859

Networking

• Prevent panic on network attach to a container with disabled networking. moby/moby#39589

Runtime

• Bump Golang to 1.12.8.

• Fix a potential engine panic when using XFS disk quota for containers. moby/moby#39644

Swarm

• Fix an issue where nodes with lots of tasks could not be removed. docker/swarmkit#2867

19.03.1 (2019-07-25)

Runtime

• Fix CVE-2019-14271 loading of nsswitch based config inside chroot under Glibc.

19.03.0 (2019-07-22)

Deprecation

• Deprecate image manifest v2 schema1 in favor of v2 schema2. Future version of Docker will remove support for v2 schema1 altogether. moby/moby#39365
• Remove v1.10 migrator. moby/moby#38265
• Skip deprecated storage-drivers in auto-selection. moby/moby#38019
• Deprecate aufs storage driver and add warning. moby/moby#38090

Client

• Add --pids-limit flag to docker update. docker/cli#1765
• Add systctl support for services. docker/cli#1754
• Add support for template_driver in composefiles. docker/cli#1746
• Add --device support for Windows. docker/cli#1606
• Data Path Port configuration support. docker/cli#1509
• Fast context switch: commands. docker/cli#1501
• Support --mount type=bind,bind-nonrecursive,... docker/cli#1430
• Add maximum replicas per node. docker/cli#1410 docker/cli#1612
• Add option to pull images quietly. docker/cli#882
• Add a separate --domainname flag. docker/cli#1130
• Add support for secret drivers in docker stack deploy. docker/cli#1783
• Add ability to use swarm Configs as CredentialSpecs on services. docker/cli#1781
• Add --security-opt systempaths=unconfined support. docker/cli#1808
• Basic framework for writing and running CLI plugins. docker/cli#1564 docker/cli#1898
• Docker App v0.8.0. docker/docker-ce-packaging#341
• Docker buildx. docker/docker-ce-packaging#336

• Bump google.golang.org/grpc to v1.20.1. docker/cli#1884
• Cli change to pass driver specific options to docker run. docker/cli#1767
• Bump Golang 1.12.5. docker/cli#1875
• The docker system info output now segregates information relevant to the client and daemon. docker/cli#1638
• (Experimental) When targetting Kubernetes, add support for x-pull-secret: some-pull-secret in compose-files service configs. docker/cli#1617
• (Experimental) When targetting Kubernetes, add support for x-pull-policy: <Never|Always|IfNotPresent> in compose-files service configs. docker/cli#1617
• cp, save, export: Prevent overwriting irregular files. docker/cli#1515
• Allow npipe volume type on stack file. docker/cli#1195

• Fix tty initial size error. docker/cli#1529
• Fix labels copying value from environment variables. docker/cli#1671

API

• Update API version to v1.40. moby/moby#38089
• Add warnings to /info endpoint, and move detection to the daemon. moby/moby#37502
• Add HEAD support for /_ping endpoint. moby/moby#38570
• Add Cache-Control headers to disable caching /_ping endpoint. [moby/moby#38569](https://github.com/moby/moby/pu...

19.03.5-rc1

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
release notes page.

19.03.5 (2019-11-12)

Builder

• builder-next: Added entitlements in builder config. docker/engine#412

• Fix builder-next: permission errors on using build secrets or ssh forwarding with userns-remap. docker/engine#420
• Fix builder-next: copying a symlink inside an already copied directory. docker/engine#420

Runtime

• Bump Golang to 1.12.12. docker/engine#418
• Update to RootlessKit to v0.7.0 to harden slirp4netns with mount namespace and seccomp. docker/engine#397

• Fix to propagate GetContainer error from event processor. docker/engine#407
• Fix push of OCI image. docker/engine#405

19.03.4 (2019-10-17)

Networking

• Rollback libnetwork changes so DOCKER-USER iptables chain is back. docker/engine#404

19.03.3 (2019-10-07)

Known Issues

• DOCKER-USER iptables chain is missing docker/for-linux#810. Users cannot perform additional container network traffic filtering on top of this iptables chain. You are not affected by this issue if you are not customizing iptables chains on top of DOCKER-USER.

  Workaround is to insert the iptables chain after docker daemon starts.

  iptables -N DOCKER-USER
  iptables -I FORWARD -j DOCKER-USER
  iptables -A DOCKER-USER -j RETURN
  

Builder

• Fix builder-next: resolve digest for third party registries. docker/engine#339
• Fix builder-next: user namespace builds when daemon started with socket activation. docker/engine#373
• Fix builder-next: session: release forwarded ssh socket connection per connection. docker/engine#373
• Fix builder-next: llbsolver: error on multiple cache importers. docker/engine#373

Networking

• Fix various libnetwork issues for iptables, DNS queries, and more. docker/engine#330

Runtime

• Bump Golang to 1.12.10. docker/engine#387
• Bump containerd to 1.2.10. docker/engine#385
• Distribution: modify warning logic when pulling v2 schema1 manifests. docker/engine#368

• Fix POST /images/create returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix POST /build returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix panic on 32-bit ARMv7 caused by misaligned struct member. docker/engine#363
• Fix to return "invalid parameter" when linking to non-existing container. docker/engine#352
• Fix overlay2: busy error on mount when using kernel >= 5.2. docker/engine#332
• Fix docker rmi stuck in certain misconfigured systems, e.g. dead NFS share. docker/engine#335
• Fix handling of blocked I/O of exec'd processes. docker/engine#296
• Fix jsonfile logger: follow logs stuck when max-size is set and max-file=1. docker/engine#378

Client

• Mitigate against YAML files that have excessive aliasing. docker/cli#2119

19.03.2 (2019-08-29)

Builder

• Fix "COPY --from" to non-existing directory on Windows. moby/moby#39695
• Fix builder-next: metadata commands not having created time in history. moby/moby#39456
• Fix builder-next: close progress on layer export error. moby/moby#39782

• Update buildkit to 588c73e1e4. moby/moby#39781

Client

• Fix Windows absolute path detection on non-Windows. docker/cli#1990
• Fix to zsh completion script for docker login --username.
• Fix context: produce consistent output on context create. docker/cli#1985
• Fix support for HTTP proxy env variable. docker/cli#2059

Logging

• Fix for reading journald logs. moby/moby#37819 moby/moby#38859

Networking

• Prevent panic on network attach to a container with disabled networking. moby/moby#39589

Runtime

• Bump Golang to 1.12.8.

• Fix a potential engine panic when using XFS disk quota for containers. moby/moby#39644

Swarm

• Fix an issue where nodes with lots of tasks could not be removed. docker/swarmkit#2867

19.03.1 (2019-07-25)

Runtime

• Fix CVE-2019-14271 loading of nsswitch based config inside chroot under Glibc.

19.03.0 (2019-07-22)

Deprecation

• Deprecate image manifest v2 schema1 in favor of v2 schema2. Future version of Docker will remove support for v2 schema1 altogether. moby/moby#39365
• Remove v1.10 migrator. moby/moby#38265
• Skip deprecated storage-drivers in auto-selection. moby/moby#38019
• Deprecate aufs storage driver and add warning. moby/moby#38090

Client

• Add --pids-limit flag to docker update. docker/cli#1765
• Add systctl support for services. docker/cli#1754
• Add support for template_driver in composefiles. docker/cli#1746
• Add --device support for Windows. docker/cli#1606
• Data Path Port configuration support. docker/cli#1509
• Fast context switch: commands. docker/cli#1501
• Support --mount type=bind,bind-nonrecursive,... docker/cli#1430
• Add maximum replicas per node. docker/cli#1410 docker/cli#1612
• Add option to pull images quietly. docker/cli#882
• Add a separate --domainname flag. docker/cli#1130
• Add support for secret drivers in docker stack deploy. docker/cli#1783
• Add ability to use swarm Configs as CredentialSpecs on services. docker/cli#1781
• Add --security-opt systempaths=unconfined support. docker/cli#1808
• Basic framework for writing and running CLI plugins. docker/cli#1564 docker/cli#1898
• Docker App v0.8.0. docker/docker-ce-packaging#341
• Docker buildx. docker/docker-ce-packaging#336

• Bump google.golang.org/grpc to v1.20.1. docker/cli#1884
• Cli change to pass driver specific options to docker run. docker/cli#1767
• Bump Golang 1.12.5. docker/cli#1875
• The docker system info output now segregates information relevant to the client and daemon. docker/cli#1638
• (Experimental) When targetting Kubernetes, add support for x-pull-secret: some-pull-secret in compose-files service configs. docker/cli#1617
• (Experimental) When targetting Kubernetes, add support for x-pull-policy: <Never|Always|IfNotPresent> in compose-files service configs. docker/cli#1617
• cp, save, export: Prevent overwriting irregular files. docker/cli#1515
• Allow npipe volume type on stack file. docker/cli#1195

• Fix tty initial size error. docker/cli#1529
• Fix labels copying value from environment variables. docker/cli#1671

API

• Update API version to v1.40. moby/moby#38089
• Add warnings to /info endpoint, and move detection to the daemon. moby/moby#37502
• Add HEAD support for /_ping endpoint. moby/moby#38570
• Add Cache-Control headers to disable caching /_ping endpoint. moby/moby#38569
• Add containerd, runc, and docker-init versions to /version. [moby/moby#37974](https://github.com/moby/moby/...

19.03.5-beta2

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
release notes page.

19.03.5 (2019-11-12)

Builder

• builder-next: Added entitlements in builder config. docker/engine#412

• Fix builder-next: permission errors on using build secrets or ssh forwarding with userns-remap. docker/engine#420
• Fix builder-next: copying a symlink inside an already copied directory. docker/engine#420

Runtime

• Update to RootlessKit to v0.7.0 to harden slirp4netns with mount namespace and seccomp. docker/engine#397

• Fix to propagate GetContainer error from event processor. docker/engine#407
• Fix push of OCI image. docker/engine#405

19.03.4 (2019-10-17)

Networking

• Rollback libnetwork changes so DOCKER-USER iptables chain is back. docker/engine#404

19.03.3 (2019-10-07)

Known Issues

• DOCKER-USER iptables chain is missing docker/for-linux#810. Users cannot perform additional container network traffic filtering on top of this iptables chain. You are not affected by this issue if you are not customizing iptables chains on top of DOCKER-USER.

  Workaround is to insert the iptables chain after docker daemon starts.

  iptables -N DOCKER-USER
  iptables -I FORWARD -j DOCKER-USER
  iptables -A DOCKER-USER -j RETURN
  

Builder

• Fix builder-next: resolve digest for third party registries. docker/engine#339
• Fix builder-next: user namespace builds when daemon started with socket activation. docker/engine#373
• Fix builder-next: session: release forwarded ssh socket connection per connection. docker/engine#373
• Fix builder-next: llbsolver: error on multiple cache importers. docker/engine#373

Networking

• Fix various libnetwork issues for iptables, DNS queries, and more. docker/engine#330

Runtime

• Bump Golang to 1.12.10. docker/engine#387
• Bump containerd to 1.2.10. docker/engine#385
• Distribution: modify warning logic when pulling v2 schema1 manifests. docker/engine#368

• Fix POST /images/create returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix POST /build returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix panic on 32-bit ARMv7 caused by misaligned struct member. docker/engine#363
• Fix to return "invalid parameter" when linking to non-existing container. docker/engine#352
• Fix overlay2: busy error on mount when using kernel >= 5.2. docker/engine#332
• Fix docker rmi stuck in certain misconfigured systems, e.g. dead NFS share. docker/engine#335
• Fix handling of blocked I/O of exec'd processes. docker/engine#296
• Fix jsonfile logger: follow logs stuck when max-size is set and max-file=1. docker/engine#378

Client

• Mitigate against YAML files that have excessive aliasing. docker/cli#2119

19.03.2 (2019-08-29)

Builder

• Fix "COPY --from" to non-existing directory on Windows. moby/moby#39695
• Fix builder-next: metadata commands not having created time in history. moby/moby#39456
• Fix builder-next: close progress on layer export error. moby/moby#39782

• Update buildkit to 588c73e1e4. moby/moby#39781

Client

• Fix Windows absolute path detection on non-Windows. docker/cli#1990
• Fix to zsh completion script for docker login --username.
• Fix context: produce consistent output on context create. docker/cli#1985
• Fix support for HTTP proxy env variable. docker/cli#2059

Logging

• Fix for reading journald logs. moby/moby#37819 moby/moby#38859

Networking

• Prevent panic on network attach to a container with disabled networking. moby/moby#39589

Runtime

• Bump Golang to 1.12.8.

• Fix a potential engine panic when using XFS disk quota for containers. moby/moby#39644

Swarm

• Fix an issue where nodes with lots of tasks could not be removed. docker/swarmkit#2867

19.03.1 (2019-07-25)

Runtime

• Fix CVE-2019-14271 loading of nsswitch based config inside chroot under Glibc.

19.03.0 (2019-07-22)

Deprecation

• Deprecate image manifest v2 schema1 in favor of v2 schema2. Future version of Docker will remove support for v2 schema1 altogether. moby/moby#39365
• Remove v1.10 migrator. moby/moby#38265
• Skip deprecated storage-drivers in auto-selection. moby/moby#38019
• Deprecate aufs storage driver and add warning. moby/moby#38090

Client

• Add --pids-limit flag to docker update. docker/cli#1765
• Add systctl support for services. docker/cli#1754
• Add support for template_driver in composefiles. docker/cli#1746
• Add --device support for Windows. docker/cli#1606
• Data Path Port configuration support. docker/cli#1509
• Fast context switch: commands. docker/cli#1501
• Support --mount type=bind,bind-nonrecursive,... docker/cli#1430
• Add maximum replicas per node. docker/cli#1410 docker/cli#1612
• Add option to pull images quietly. docker/cli#882
• Add a separate --domainname flag. docker/cli#1130
• Add support for secret drivers in docker stack deploy. docker/cli#1783
• Add ability to use swarm Configs as CredentialSpecs on services. docker/cli#1781
• Add --security-opt systempaths=unconfined support. docker/cli#1808
• Basic framework for writing and running CLI plugins. docker/cli#1564 docker/cli#1898
• Docker App v0.8.0. docker/docker-ce-packaging#341
• Docker buildx. docker/docker-ce-packaging#336

• Bump google.golang.org/grpc to v1.20.1. docker/cli#1884
• Cli change to pass driver specific options to docker run. docker/cli#1767
• Bump Golang 1.12.5. docker/cli#1875
• The docker system info output now segregates information relevant to the client and daemon. docker/cli#1638
• (Experimental) When targetting Kubernetes, add support for x-pull-secret: some-pull-secret in compose-files service configs. docker/cli#1617
• (Experimental) When targetting Kubernetes, add support for x-pull-policy: <Never|Always|IfNotPresent> in compose-files service configs. docker/cli#1617
• cp, save, export: Prevent overwriting irregular files. docker/cli#1515
• Allow npipe volume type on stack file. docker/cli#1195

• Fix tty initial size error. docker/cli#1529
• Fix labels copying value from environment variables. docker/cli#1671

API

• Update API version to v1.40. moby/moby#38089
• Add warnings to /info endpoint, and move detection to the daemon. moby/moby#37502
• Add HEAD support for /_ping endpoint. moby/moby#38570
• Add Cache-Control headers to disable caching /_ping endpoint. moby/moby#38569
• Add containerd, runc, and docker-init versions to /version. moby/moby#37974

• Add undocumented /grpc endpoint and register BuildKit's controller. [moby...

19.03.5-beta1

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
release notes page.

19.03.5 (2019-11-12)

Builder

• builder-next: Added entitlements in builder config. docker/engine#412

Runtime

• Update to RootlessKit to v0.7.0 to harden slirp4netns with mount namespace and seccomp. docker/engine#397

• Fix to propagate GetContainer error from event processor. docker/engine#407
• Fix push of OCI image. docker/engine#405

19.03.4 (2019-10-17)

Networking

• Rollback libnetwork changes so DOCKER-USER iptables chain is back. docker/engine#404

19.03.3 (2019-10-07)

Known Issues

• DOCKER-USER iptables chain is missing docker/for-linux#810. Users cannot perform additional container network traffic filtering on top of this iptables chain. You are not affected by this issue if you are not customizing iptables chains on top of DOCKER-USER.

  Workaround is to insert the iptables chain after docker daemon starts.

  iptables -N DOCKER-USER
  iptables -I FORWARD -j DOCKER-USER
  iptables -A DOCKER-USER -j RETURN
  

Builder

• Fix builder-next: resolve digest for third party registries. docker/engine#339
• Fix builder-next: user namespace builds when daemon started with socket activation. docker/engine#373
• Fix builder-next: session: release forwarded ssh socket connection per connection. docker/engine#373
• Fix builder-next: llbsolver: error on multiple cache importers. docker/engine#373

Networking

• Fix various libnetwork issues for iptables, DNS queries, and more. docker/engine#330

Runtime

• Bump Golang to 1.12.10. docker/engine#387
• Bump containerd to 1.2.10. docker/engine#385
• Distribution: modify warning logic when pulling v2 schema1 manifests. docker/engine#368

• Fix POST /images/create returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix POST /build returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix panic on 32-bit ARMv7 caused by misaligned struct member. docker/engine#363
• Fix to return "invalid parameter" when linking to non-existing container. docker/engine#352
• Fix overlay2: busy error on mount when using kernel >= 5.2. docker/engine#332
• Fix docker rmi stuck in certain misconfigured systems, e.g. dead NFS share. docker/engine#335
• Fix handling of blocked I/O of exec'd processes. docker/engine#296
• Fix jsonfile logger: follow logs stuck when max-size is set and max-file=1. docker/engine#378

Client

• Mitigate against YAML files that have excessive aliasing. docker/cli#2119

19.03.2 (2019-08-29)

Builder

• Fix "COPY --from" to non-existing directory on Windows. moby/moby#39695
• Fix builder-next: metadata commands not having created time in history. moby/moby#39456
• Fix builder-next: close progress on layer export error. moby/moby#39782

• Update buildkit to 588c73e1e4. moby/moby#39781

Client

• Fix Windows absolute path detection on non-Windows. docker/cli#1990
• Fix to zsh completion script for docker login --username.
• Fix context: produce consistent output on context create. docker/cli#1985
• Fix support for HTTP proxy env variable. docker/cli#2059

Logging

• Fix for reading journald logs. moby/moby#37819 moby/moby#38859

Networking

• Prevent panic on network attach to a container with disabled networking. moby/moby#39589

Runtime

• Bump Golang to 1.12.8.

• Fix a potential engine panic when using XFS disk quota for containers. moby/moby#39644

Swarm

• Fix an issue where nodes with lots of tasks could not be removed. docker/swarmkit#2867

19.03.1 (2019-07-25)

Runtime

• Fix CVE-2019-14271 loading of nsswitch based config inside chroot under Glibc.

19.03.0 (2019-07-22)

Deprecation

• Deprecate image manifest v2 schema1 in favor of v2 schema2. Future version of Docker will remove support for v2 schema1 altogether. moby/moby#39365
• Remove v1.10 migrator. moby/moby#38265
• Skip deprecated storage-drivers in auto-selection. moby/moby#38019
• Deprecate aufs storage driver and add warning. moby/moby#38090

Client

• Add --pids-limit flag to docker update. docker/cli#1765
• Add systctl support for services. docker/cli#1754
• Add support for template_driver in composefiles. docker/cli#1746
• Add --device support for Windows. docker/cli#1606
• Data Path Port configuration support. docker/cli#1509
• Fast context switch: commands. docker/cli#1501
• Support --mount type=bind,bind-nonrecursive,... docker/cli#1430
• Add maximum replicas per node. docker/cli#1410 docker/cli#1612
• Add option to pull images quietly. docker/cli#882
• Add a separate --domainname flag. docker/cli#1130
• Add support for secret drivers in docker stack deploy. docker/cli#1783
• Add ability to use swarm Configs as CredentialSpecs on services. docker/cli#1781
• Add --security-opt systempaths=unconfined support. docker/cli#1808
• Basic framework for writing and running CLI plugins. docker/cli#1564 docker/cli#1898
• Docker App v0.8.0. docker/docker-ce-packaging#341
• Docker buildx. docker/docker-ce-packaging#336

• Bump google.golang.org/grpc to v1.20.1. docker/cli#1884
• Cli change to pass driver specific options to docker run. docker/cli#1767
• Bump Golang 1.12.5. docker/cli#1875
• The docker system info output now segregates information relevant to the client and daemon. docker/cli#1638
• (Experimental) When targetting Kubernetes, add support for x-pull-secret: some-pull-secret in compose-files service configs. docker/cli#1617
• (Experimental) When targetting Kubernetes, add support for x-pull-policy: <Never|Always|IfNotPresent> in compose-files service configs. docker/cli#1617
• cp, save, export: Prevent overwriting irregular files. docker/cli#1515
• Allow npipe volume type on stack file. docker/cli#1195

• Fix tty initial size error. docker/cli#1529
• Fix labels copying value from environment variables. docker/cli#1671

API

• Update API version to v1.40. moby/moby#38089
• Add warnings to /info endpoint, and move detection to the daemon. moby/moby#37502
• Add HEAD support for /_ping endpoint. moby/moby#38570
• Add Cache-Control headers to disable caching /_ping endpoint. moby/moby#38569
• Add containerd, runc, and docker-init versions to /version. moby/moby#37974

• Add undocumented /grpc endpoint and register BuildKit's controller. moby/moby#38990

Builder

• builder-next: allow setting buildkit outputs. docker/cli#1766
• builder-next: look for a Dockerfile specific dockerignore file (eg. Dockerfile.dockerignore) for ignored paths. [docker/e...

19.03.4

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
release notes page.

19.03.4 (2019-10-17)

Networking

• Rollback libnetwork changes so DOCKER-USER iptables chain is back. docker/engine#404

19.03.3 (2019-10-07)

Known Issues

• DOCKER-USER iptables chain is missing docker/for-linux#810. Users cannot perform additional container network traffic filtering on top of this iptables chain. You are not affected by this issue if you are not customizing iptables chains on top of DOCKER-USER.

  Workaround is to insert the iptables chain after docker daemon starts.

  iptables -N DOCKER-USER
  iptables -I FORWARD -j DOCKER-USER
  iptables -A DOCKER-USER -j RETURN
  

Builder

• Fix builder-next: resolve digest for third party registries. docker/engine#339
• Fix builder-next: user namespace builds when daemon started with socket activation. docker/engine#373
• Fix builder-next: session: release forwarded ssh socket connection per connection. docker/engine#373
• Fix builder-next: llbsolver: error on multiple cache importers. docker/engine#373

Networking

• Fix various libnetwork issues for iptables, DNS queries, and more. docker/engine#330

Runtime

• Bump Golang to 1.12.10. docker/engine#387
• Bump containerd to 1.2.10. docker/engine#385
• Distribution: modify warning logic when pulling v2 schema1 manifests. docker/engine#368

• Fix POST /images/create returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix POST /build returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix panic on 32-bit ARMv7 caused by misaligned struct member. docker/engine#363
• Fix to return "invalid parameter" when linking to non-existing container. docker/engine#352
• Fix overlay2: busy error on mount when using kernel >= 5.2. docker/engine#332
• Fix docker rmi stuck in certain misconfigured systems, e.g. dead NFS share. docker/engine#335
• Fix handling of blocked I/O of exec'd processes. docker/engine#296
• Fix jsonfile logger: follow logs stuck when max-size is set and max-file=1. docker/engine#378

Client

• Mitigate against YAML files that have excessive aliasing. docker/cli#2119

19.03.2 (2019-08-29)

Builder

• Fix "COPY --from" to non-existing directory on Windows. moby/moby#39695
• Fix builder-next: metadata commands not having created time in history. moby/moby#39456
• Fix builder-next: close progress on layer export error. moby/moby#39782

• Update buildkit to 588c73e1e4. moby/moby#39781

Client

• Fix Windows absolute path detection on non-Windows. docker/cli#1990
• Fix to zsh completion script for docker login --username.
• Fix context: produce consistent output on context create. docker/cli#1985
• Fix support for HTTP proxy env variable. docker/cli#2059

Logging

• Fix for reading journald logs. moby/moby#37819 moby/moby#38859

Networking

• Prevent panic on network attach to a container with disabled networking. moby/moby#39589

Runtime

• Bump Golang to 1.12.8.

• Fix a potential engine panic when using XFS disk quota for containers. moby/moby#39644

Swarm

• Fix an issue where nodes with lots of tasks could not be removed. docker/swarmkit#2867

19.03.1 (2019-07-25)

Runtime

• Fix CVE-2019-14271 loading of nsswitch based config inside chroot under Glibc.

19.03.0 (2019-07-22)

Deprecation

• Deprecate image manifest v2 schema1 in favor of v2 schema2. Future version of Docker will remove support for v2 schema1 altogether. moby/moby#39365
• Remove v1.10 migrator. moby/moby#38265
• Skip deprecated storage-drivers in auto-selection. moby/moby#38019
• Deprecate aufs storage driver and add warning. moby/moby#38090

Client

• Add --pids-limit flag to docker update. docker/cli#1765
• Add systctl support for services. docker/cli#1754
• Add support for template_driver in composefiles. docker/cli#1746
• Add --device support for Windows. docker/cli#1606
• Data Path Port configuration support. docker/cli#1509
• Fast context switch: commands. docker/cli#1501
• Support --mount type=bind,bind-nonrecursive,... docker/cli#1430
• Add maximum replicas per node. docker/cli#1410 docker/cli#1612
• Add option to pull images quietly. docker/cli#882
• Add a separate --domainname flag. docker/cli#1130
• Add support for secret drivers in docker stack deploy. docker/cli#1783
• Add ability to use swarm Configs as CredentialSpecs on services. docker/cli#1781
• Add --security-opt systempaths=unconfined support. docker/cli#1808
• Basic framework for writing and running CLI plugins. docker/cli#1564 docker/cli#1898
• Docker App v0.8.0. docker/docker-ce-packaging#341
• Docker buildx. docker/docker-ce-packaging#336

• Bump google.golang.org/grpc to v1.20.1. docker/cli#1884
• Cli change to pass driver specific options to docker run. docker/cli#1767
• Bump Golang 1.12.5. docker/cli#1875
• The docker system info output now segregates information relevant to the client and daemon. docker/cli#1638
• (Experimental) When targetting Kubernetes, add support for x-pull-secret: some-pull-secret in compose-files service configs. docker/cli#1617
• (Experimental) When targetting Kubernetes, add support for x-pull-policy: <Never|Always|IfNotPresent> in compose-files service configs. docker/cli#1617
• cp, save, export: Prevent overwriting irregular files. docker/cli#1515
• Allow npipe volume type on stack file. docker/cli#1195

• Fix tty initial size error. docker/cli#1529
• Fix labels copying value from environment variables. docker/cli#1671

API

• Update API version to v1.40. moby/moby#38089
• Add warnings to /info endpoint, and move detection to the daemon. moby/moby#37502
• Add HEAD support for /_ping endpoint. moby/moby#38570
• Add Cache-Control headers to disable caching /_ping endpoint. moby/moby#38569
• Add containerd, runc, and docker-init versions to /version. moby/moby#37974

• Add undocumented /grpc endpoint and register BuildKit's controller. moby/moby#38990

Builder

• builder-next: allow setting buildkit outputs. docker/cli#1766
• builder-next: look for a Dockerfile specific dockerignore file (eg. Dockerfile.dockerignore) for ignored paths. docker/engine#215
• builder-next: automatically detect if process execution is possible for x86, arm and arm64 binaries. docker/engine#215
• builder-next: added inline cache support --cache-from. docker/engine#215
• builder-next: allow outputs configuration. moby/moby#38898

• builder-next: update buildkit to 1f89ec1. [docker-archive/engine#260](https://github.com/docker/...

19.03.4-rc1

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
release notes page.

19.03.4 (2019-10-DD)

Networking

• Rollback libnetwork changes so DOCKER-USER iptables chain is back. docker/engine#404

19.03.3 (2019-10-07)

Known Issues

• DOCKER-USER iptables chain is missing docker/for-linux#810. Users cannot perform additional container network traffic filtering on top of this iptables chain. You are not affected by this issue if you are not customizing iptables chains on top of DOCKER-USER.

  Workaround is to insert the iptables chain after docker daemon starts.

  iptables -N DOCKER-USER
  iptables -I FORWARD -j DOCKER-USER
  iptables -A DOCKER-USER -j RETURN
  

Builder

• Fix builder-next: resolve digest for third party registries. docker/engine#339
• Fix builder-next: user namespace builds when daemon started with socket activation. docker/engine#373
• Fix builder-next: session: release forwarded ssh socket connection per connection. docker/engine#373
• Fix builder-next: llbsolver: error on multiple cache importers. docker/engine#373

Networking

• Fix various libnetwork issues for iptables, DNS queries, and more. docker/engine#330

Runtime

• Bump Golang to 1.12.10. docker/engine#387
• Bump containerd to 1.2.10. docker/engine#385
• Distribution: modify warning logic when pulling v2 schema1 manifests. docker/engine#368

• Fix POST /images/create returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix POST /build returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix panic on 32-bit ARMv7 caused by misaligned struct member. docker/engine#363
• Fix to return "invalid parameter" when linking to non-existing container. docker/engine#352
• Fix overlay2: busy error on mount when using kernel >= 5.2. docker/engine#332
• Fix docker rmi stuck in certain misconfigured systems, e.g. dead NFS share. docker/engine#335
• Fix handling of blocked I/O of exec'd processes. docker/engine#296
• Fix jsonfile logger: follow logs stuck when max-size is set and max-file=1. docker/engine#378

Client

• Mitigate against YAML files that have excessive aliasing. docker/cli#2119

19.03.2 (2019-08-29)

Builder

• Fix "COPY --from" to non-existing directory on Windows. moby/moby#39695
• Fix builder-next: metadata commands not having created time in history. moby/moby#39456
• Fix builder-next: close progress on layer export error. moby/moby#39782

• Update buildkit to 588c73e1e4. moby/moby#39781

Client

• Fix Windows absolute path detection on non-Windows. docker/cli#1990
• Fix to zsh completion script for docker login --username.
• Fix context: produce consistent output on context create. docker/cli#1985
• Fix support for HTTP proxy env variable. docker/cli#2059

Logging

• Fix for reading journald logs. moby/moby#37819 moby/moby#38859

Networking

• Prevent panic on network attach to a container with disabled networking. moby/moby#39589

Runtime

• Bump Golang to 1.12.8.

• Fix a potential engine panic when using XFS disk quota for containers. moby/moby#39644

Swarm

• Fix an issue where nodes with lots of tasks could not be removed. docker/swarmkit#2867

19.03.1 (2019-07-25)

Runtime

• Fix CVE-2019-14271 loading of nsswitch based config inside chroot under Glibc.

19.03.0 (2019-07-22)

Deprecation

• Deprecate image manifest v2 schema1 in favor of v2 schema2. Future version of Docker will remove support for v2 schema1 altogether. moby/moby#39365
• Remove v1.10 migrator. moby/moby#38265
• Skip deprecated storage-drivers in auto-selection. moby/moby#38019
• Deprecate aufs storage driver and add warning. moby/moby#38090

Client

• Add --pids-limit flag to docker update. docker/cli#1765
• Add systctl support for services. docker/cli#1754
• Add support for template_driver in composefiles. docker/cli#1746
• Add --device support for Windows. docker/cli#1606
• Data Path Port configuration support. docker/cli#1509
• Fast context switch: commands. docker/cli#1501
• Support --mount type=bind,bind-nonrecursive,... docker/cli#1430
• Add maximum replicas per node. docker/cli#1410 docker/cli#1612
• Add option to pull images quietly. docker/cli#882
• Add a separate --domainname flag. docker/cli#1130
• Add support for secret drivers in docker stack deploy. docker/cli#1783
• Add ability to use swarm Configs as CredentialSpecs on services. docker/cli#1781
• Add --security-opt systempaths=unconfined support. docker/cli#1808
• Basic framework for writing and running CLI plugins. docker/cli#1564 docker/cli#1898
• Docker App v0.8.0. docker/docker-ce-packaging#341
• Docker buildx. docker/docker-ce-packaging#336

• Bump google.golang.org/grpc to v1.20.1. docker/cli#1884
• Cli change to pass driver specific options to docker run. docker/cli#1767
• Bump Golang 1.12.5. docker/cli#1875
• The docker system info output now segregates information relevant to the client and daemon. docker/cli#1638
• (Experimental) When targetting Kubernetes, add support for x-pull-secret: some-pull-secret in compose-files service configs. docker/cli#1617
• (Experimental) When targetting Kubernetes, add support for x-pull-policy: <Never|Always|IfNotPresent> in compose-files service configs. docker/cli#1617
• cp, save, export: Prevent overwriting irregular files. docker/cli#1515
• Allow npipe volume type on stack file. docker/cli#1195

• Fix tty initial size error. docker/cli#1529
• Fix labels copying value from environment variables. docker/cli#1671

API

• Update API version to v1.40. moby/moby#38089
• Add warnings to /info endpoint, and move detection to the daemon. moby/moby#37502
• Add HEAD support for /_ping endpoint. moby/moby#38570
• Add Cache-Control headers to disable caching /_ping endpoint. moby/moby#38569
• Add containerd, runc, and docker-init versions to /version. moby/moby#37974

• Add undocumented /grpc endpoint and register BuildKit's controller. moby/moby#38990

Builder

• builder-next: allow setting buildkit outputs. docker/cli#1766
• builder-next: look for a Dockerfile specific dockerignore file (eg. Dockerfile.dockerignore) for ignored paths. docker/engine#215
• builder-next: automatically detect if process execution is possible for x86, arm and arm64 binaries. docker/engine#215
• builder-next: added inline cache support --cache-from. docker/engine#215
• builder-next: allow outputs configuration. moby/moby#38898

• builder-next: update buildkit to 1f89ec1. [docker-archive/engine#260](https://github.com/docker/...

19.03.3

Changelog

For official release notes for Docker Engine CE and Docker Engine EE, visit the
release notes page.

19.03.3 (2019-10-07)

Known Issues

• DOCKER-USER iptables chain is missing docker/for-linux#810. Users cannot perform additional container network traffic filtering on top of this iptables chain. You are not affected by this issue if you are not customizing iptables chains on top of DOCKER-USER.

  Workaround is to insert the iptables chain after docker daemon starts.

  iptables -N DOCKER-USER
  iptables -I FORWARD -j DOCKER-USER
  iptables -A DOCKER-USER -j RETURN 
  

Builder

• Fix builder-next: resolve digest for third party registries. docker/engine#339
• Fix builder-next: user namespace builds when daemon started with socket activation. docker/engine#373
• Fix builder-next: session: release forwarded ssh socket connection per connection. docker/engine#373
• Fix builder-next: llbsolver: error on multiple cache importers. docker/engine#373

Networking

• Fix various libnetwork issues for iptables, DNS queries, and more. docker/engine#330

Runtime

• Bump Golang to 1.12.10. docker/engine#387
• Bump containerd to 1.2.10. docker/engine#385
• Distribution: modify warning logic when pulling v2 schema1 manifests. docker/engine#368

• Fix POST /images/create returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix POST /build returning a 500 status code when providing an incorrect platform option. docker/engine#365
• Fix panic on 32-bit ARMv7 caused by misaligned struct member. docker/engine#363
• Fix to return "invalid parameter" when linking to non-existing container. docker/engine#352
• Fix overlay2: busy error on mount when using kernel >= 5.2. docker/engine#332
• Fix docker rmi stuck in certain misconfigured systems, e.g. dead NFS share. docker/engine#335
• Fix handling of blocked I/O of exec'd processes. docker/engine#296
• Fix jsonfile logger: follow logs stuck when max-size is set and max-file=1. docker/engine#378

Client

• Mitigate against YAML files that have excessive aliasing. docker/cli#2119

19.03.2 (2019-08-29)

Builder

• Fix "COPY --from" to non-existing directory on Windows. moby/moby#39695
• Fix builder-next: metadata commands not having created time in history. moby/moby#39456
• Fix builder-next: close progress on layer export error. moby/moby#39782

• Update buildkit to 588c73e1e4. moby/moby#39781

Client

• Fix Windows absolute path detection on non-Windows. docker/cli#1990
• Fix to zsh completion script for docker login --username.
• Fix context: produce consistent output on context create. docker/cli#1985
• Fix support for HTTP proxy env variable. docker/cli#2059

Logging

• Fix for reading journald logs. moby/moby#37819 moby/moby#38859

Networking

• Prevent panic on network attach to a container with disabled networking. moby/moby#39589

Runtime

• Bump Golang to 1.12.8.

• Fix a potential engine panic when using XFS disk quota for containers. moby/moby#39644

Swarm

• Fix an issue where nodes with lots of tasks could not be removed. docker/swarmkit#2867

19.03.1 (2019-07-25)

Runtime

• Fix CVE-2019-14271 loading of nsswitch based config inside chroot under Glibc.

19.03.0 (2019-07-22)

Deprecation

• Deprecate image manifest v2 schema1 in favor of v2 schema2. Future version of Docker will remove support for v2 schema1 altogether. moby/moby#39365
• Remove v1.10 migrator. moby/moby#38265
• Skip deprecated storage-drivers in auto-selection. moby/moby#38019
• Deprecate aufs storage driver and add warning. moby/moby#38090

Client

• Add --pids-limit flag to docker update. docker/cli#1765
• Add systctl support for services. docker/cli#1754
• Add support for template_driver in composefiles. docker/cli#1746
• Add --device support for Windows. docker/cli#1606
• Data Path Port configuration support. docker/cli#1509
• Fast context switch: commands. docker/cli#1501
• Support --mount type=bind,bind-nonrecursive,... docker/cli#1430
• Add maximum replicas per node. docker/cli#1410 docker/cli#1612
• Add option to pull images quietly. docker/cli#882
• Add a separate --domainname flag. docker/cli#1130
• Add support for secret drivers in docker stack deploy. docker/cli#1783
• Add ability to use swarm Configs as CredentialSpecs on services. docker/cli#1781
• Add --security-opt systempaths=unconfined support. docker/cli#1808
• Basic framework for writing and running CLI plugins. docker/cli#1564 docker/cli#1898
• Docker App v0.8.0. docker/docker-ce-packaging#341
• Docker buildx. docker/docker-ce-packaging#336

• Bump google.golang.org/grpc to v1.20.1. docker/cli#1884
• Cli change to pass driver specific options to docker run. docker/cli#1767
• Bump Golang 1.12.5. docker/cli#1875
• The docker system info output now segregates information relevant to the client and daemon. docker/cli#1638
• (Experimental) When targetting Kubernetes, add support for x-pull-secret: some-pull-secret in compose-files service configs. docker/cli#1617
• (Experimental) When targetting Kubernetes, add support for x-pull-policy: <Never|Always|IfNotPresent> in compose-files service configs. docker/cli#1617
• cp, save, export: Prevent overwriting irregular files. docker/cli#1515
• Allow npipe volume type on stack file. docker/cli#1195

• Fix tty initial size error. docker/cli#1529
• Fix labels copying value from environment variables. docker/cli#1671

API

• Update API version to v1.40. moby/moby#38089
• Add warnings to /info endpoint, and move detection to the daemon. moby/moby#37502
• Add HEAD support for /_ping endpoint. moby/moby#38570
• Add Cache-Control headers to disable caching /_ping endpoint. moby/moby#38569
• Add containerd, runc, and docker-init versions to /version. moby/moby#37974

• Add undocumented /grpc endpoint and register BuildKit's controller. moby/moby#38990

Builder

• builder-next: allow setting buildkit outputs. docker/cli#1766
• builder-next: look for a Dockerfile specific dockerignore file (eg. Dockerfile.dockerignore) for ignored paths. docker/engine#215
• builder-next: automatically detect if process execution is possible for x86, arm and arm64 binaries. docker/engine#215
• builder-next: added inline cache support --cache-from. docker/engine#215
• builder-next: allow outputs configuration. moby/moby#38898

• builder-next: update buildkit to 1f89ec1. docker/engine#260
• builder-next:...