Docker Engine 17.09 release notes

17.09.1-ce

2017-12-07

Builder

• Fix config leakage on shared parent stage moby/moby#33753
• Warn on empty continuation lines only, not on comment-only lines moby/moby#35004

Client

• Set API version on Client even when Ping fails docker/cli#546

Networking

• Overlay fix for transient IP reuse docker/libnetwork#2016
• Fix reapTime logic in NetworkDB and handle DNS cleanup for attachable container docker/libnetwork#2017
• Disable hostname lookup on chain exists check docker/libnetwork#2019
• Fix lint issues docker/libnetwork#2020
• Restore error type in FindNetwork moby/moby#35634

Runtime

• Protect health monitor Go channel moby/moby#35482
• Fix leaking container/exec state moby/moby#35484
• Add /proc/scsi to masked paths (patch to work around CVE-2017-16539 moby/moby/#35399
• Vendor tar-split: fix to prevent memory exhaustion issue that could crash Docker daemon moby/moby/#35424 Fixes CVE-2017-14992
• Fix P/Z HubPullSuite tests moby/moby#34837

• Windows: Add support for version filtering on pull moby/moby#35090

• Windows: Stop filtering Windows manifest lists by version moby/moby#35117
• Use rslave instead of rprivate in chroot archive moby/moby/#35217
• Remove container rootfs mountPath after unmount moby/moby#34573
• Fix honoring tmpfs size of user /dev/shm mount moby/moby#35316
• Don't abort when setting may_detach_mounts (log the error instead) moby/moby#35172
• Fix version comparison when negotiating the API version moby/moby#35008

Swarm mode

• Increase gRPC request timeout when sending snapshots docker/swarmkit#2404

• Fix node filtering when there is no log driver docker/swarmkit#2442
• Add an error on attempt to change cluster name docker/swarmkit/#2454
• Delete node attachments when node is removed docker/swarmkit/#2456
• Provide custom gRPC dialer to override default proxy dialer docker/swarmkit/#2457
• Avoids recursive readlock on swarm info moby/moby#35388

17.09.0-ce

2017-09-26

Builder

• Add --chown flag to ADD/COPY commands in Dockerfile moby/moby#34263

• Fix cloning unneeded files while building from git repositories moby/moby#33704

Client

• Allow extension fields in the v3.4 version of the compose format docker/cli#452
• Make compose file allow to specify names for non-external volume docker/cli#306
• Support --compose-file - as stdin docker/cli#347
• Support start_period for healthcheck in Docker Compose docker/cli#475

• Add support for stop-signal in docker stack commands docker/cli#388
• Add support for update order in compose deployments docker/cli#360
• Add ulimits to unsupported compose fields docker/cli#482
• Add --format to docker-search docker/cli#440

• Show images digests when {{.Digest}} is in format docker/cli#439
• Print output of docker stack rm on stdout instead of stderr docker/cli#491

• Fix docker history --format {{json .}} printing human-readable timestamps instead of ISO8601 when --human=true docker/cli#438
• Fix idempotence of docker stack deploy when secrets or configs are used docker/cli#509
• Fix presentation of random host ports docker/cli#404
• Fix redundant service restarts when service created with multiple secrets moby/moby#34746

Logging

• Fix Splunk logger not transmitting log data when tag is empty and raw-mode is used moby/moby#34520

Networking

• Add the control plane MTU option in the daemon config moby/moby#34103
• Add service virtual IP to sandbox's loopback address docker/libnetwork#1877

Runtime

• Graphdriver: promote overlay2 over aufs moby/moby#34430
• LCOW: Additional flags for VHD boot moby/moby#34451
• LCOW: Don't block export moby/moby#34448
• LCOW: Dynamic sandbox management moby/moby#34170
• LCOW: Force Hyper-V Isolation moby/moby#34468
• LCOW: Move toolsScratchPath to /tmp moby/moby#34396
• LCOW: Remove hard-coding moby/moby#34398
• LCOW: WORKDIR correct handling moby/moby#34405
• Windows: named pipe mounts moby/moby#33852

• Fix "permission denied" errors when accessing volume with SELinux enforcing mode moby/moby#34684
• Fix layers size reported as 0 in docker system df moby/moby#34826
• Fix some "device or resource busy" errors when removing containers on RHEL 7.4 based kernels moby/moby#34886

Swarm mode

• Include whether the managers in the swarm are autolocked as part of docker info docker/cli#471

• Add 'docker service rollback' subcommand docker/cli#205

• Fix managers failing to join if the gRPC snapshot is larger than 4MB docker/swarmkit#2375
• Fix "permission denied" errors for configuration file in SELinux-enabled containers moby/moby#34732
• Fix services failing to deploy on ARM nodes moby/moby#34021

Packaging

• Build scripts for ppc64el on Ubuntu docker/docker-ce-packaging#43

Deprecation

• Remove deprecated --enable-api-cors daemon flag moby/moby#34821