github.com/kimh/docker@v1.10.0/CHANGELOG.md (about) 1 # Changelog 2 3 Items starting with `DEPRECATE` are important deprecation notices. For more 4 information on the list of deprecated flags and APIs please have a look at 5 https://docs.docker.com/misc/deprecated/ where target removal dates can also 6 be found. 7 8 ## 1.10.0 (2016-02-04) 9 10 **IMPORTANT**: Docker 1.10 uses a new content-addressable storage for images and layers. 11 A migration is performed the first time docker is run, and can take a significant amount of time depending on the number of images present. 12 Refer to this page on the wiki for more information: https://github.com/docker/docker/wiki/Engine-v1.10.0-content-addressability-migration 13 We also released a cool migration utility that enables you to perform the migration before updating to reduce downtime. 14 Engine 1.10 migrator can be found on Docker Hub: https://hub.docker.com/r/docker/v1.10-migrator/ 15 16 ### Runtime 17 18 + New `docker update` command that allows updating resource constraints on running containers [#15078](https://github.com/docker/docker/pull/15078) 19 + Add `--tmpfs` flag to `docker run` to create a tmpfs mount in a container [#13587](https://github.com/docker/docker/pull/13587) 20 + Add `--format` flag to `docker images` command [#17692](https://github.com/docker/docker/pull/17692) 21 + Allow to set daemon configuration in a file and hot-reload it with the `SIGHUP` signal [#18587](https://github.com/docker/docker/pull/18587) 22 + Updated docker events to include more meta-data and event types [#18888](https://github.com/docker/docker/pull/18888) 23 This change is backward compatible in the API, but not on the CLI. 24 + Add `--blkio-weight-device` flag to `docker run` [#13959](https://github.com/docker/docker/pull/13959) 25 + Add `--device-read-bps` and `--device-write-bps` flags to `docker run` [#14466](https://github.com/docker/docker/pull/14466) 26 + Add `--device-read-iops` and `--device-write-iops` flags to `docker run` [#15879](https://github.com/docker/docker/pull/15879) 27 + Add `--oom-score-adj` flag to `docker run` [#16277](https://github.com/docker/docker/pull/16277) 28 + Add `--detach-keys` flag to `attach`, `run`, `start` and `exec` commands to override the default key sequence that detaches from a container [#15666](https://github.com/docker/docker/pull/15666) 29 + Add `--shm-size` flag to `run`, `create` and `build` to set the size of `/dev/shm` [#16168](https://github.com/docker/docker/pull/16168) 30 + Show the number of running, stopped, and paused containers in `docker info` [#19249](https://github.com/docker/docker/pull/19249) 31 + Show the `OSType` and `Architecture` in `docker info` [#17478](https://github.com/docker/docker/pull/17478) 32 + Add `--cgroup-parent` flag on `daemon` to set cgroup parent for all containers [#19062](https://github.com/docker/docker/pull/19062) 33 + Add `-L` flag to docker cp to follow symlinks [#16613](https://github.com/docker/docker/pull/16613) 34 + New `status=dead` filter for `docker ps` [#17908](https://github.com/docker/docker/pull/17908) 35 * Change `docker run` exit codes to distinguish between runtime and application errors [#14012](https://github.com/docker/docker/pull/14012) 36 * Enhance `docker events --since` and `--until` to support nanoseconds and timezones [#17495](https://github.com/docker/docker/pull/17495) 37 * Add `--all`/`-a` flag to `stats` to include both running and stopped containers [#16742](https://github.com/docker/docker/pull/16742) 38 * Change the default cgroup-driver to `cgroupfs` [#17704](https://github.com/docker/docker/pull/17704) 39 * Emit a "tag" event when tagging an image with `build -t` [#17115](https://github.com/docker/docker/pull/17115) 40 * Best effort for linked containers' start order when starting the daemon [#18208](https://github.com/docker/docker/pull/18208) 41 * Add ability to add multiple tags on `build` [#15780](https://github.com/docker/docker/pull/15780) 42 * Permit `OPTIONS` request against any url, thus fixing issue with CORS [#19569](https://github.com/docker/docker/pull/19569) 43 - Fix the `--quiet` flag on `docker build` to actually be quiet [#17428](https://github.com/docker/docker/pull/17428) 44 - Fix `docker images --filter dangling=false` to now show all non-dangling images [#19326](https://github.com/docker/docker/pull/19326) 45 - Fix race condition causing autorestart turning off on restart [#17629](https://github.com/docker/docker/pull/17629) 46 - Recognize GPFS filesystems [#19216](https://github.com/docker/docker/pull/19216) 47 - Fix obscure bug preventing to start containers [#19751](https://github.com/docker/docker/pull/19751) 48 - Forbid `exec` during container restart [#19722](https://github.com/docker/docker/pull/19722) 49 - devicemapper: Increasing `--storage-opt dm.basesize` will now increase the base device size on daemon restart [#19123](https://github.com/docker/docker/pull/19123) 50 51 ### Security 52 53 + Add `--userns-remap` flag to `daemon` to support user namespaces (previously in experimental) [#19187](https://github.com/docker/docker/pull/19187) 54 + Add support for custom seccomp profiles in `--security-opt` [#17989](https://github.com/docker/docker/pull/17989) 55 + Add default seccomp profile [#18780](https://github.com/docker/docker/pull/18780) 56 + Add `--authorization-plugin` flag to `daemon` to customize ACLs [#15365](https://github.com/docker/docker/pull/15365) 57 + Docker Content Trust now supports the ability to read and write user delegations [#18887](https://github.com/docker/docker/pull/18887) 58 This is an optional, opt-in feature that requires the explicit use of the Notary command-line utility in order to be enabled. 59 Enabling delegation support in a specific repository will break the ability of Docker 1.9 and 1.8 to pull from that repository, if content trust is enabled. 60 * Allow SELinux to run in a container when using the BTRFS storage driver [#16452](https://github.com/docker/docker/pull/16452) 61 62 ### Distribution 63 64 * Use content-addressable storage for images and layers [#17924](https://github.com/docker/docker/pull/17924) 65 Note that a migration is performed the first time docker is run; it can take a significant amount of time depending on the number of images and containers present. 66 Images no longer depend on the parent chain but contain a list of layer references. 67 `docker load`/`docker save` tarballs now also contain content-addressable image configurations. 68 For more information: https://github.com/docker/docker/wiki/Engine-v1.10.0-content-addressability-migration 69 * Add support for the new [manifest format ("schema2")](https://github.com/docker/distribution/blob/master/docs/spec/manifest-v2-2.md) [#18785](https://github.com/docker/docker/pull/18785) 70 * Lots of improvements for push and pull: performance++, retries on failed downloads, cancelling on client disconnect [#18353](https://github.com/docker/docker/pull/18353), [#18418](https://github.com/docker/docker/pull/18418), [#19109](https://github.com/docker/docker/pull/19109), [#18353](https://github.com/docker/docker/pull/18353) 71 * Limit v1 protocol fallbacks [#18590](https://github.com/docker/docker/pull/18590) 72 - Fix issue where docker could hang indefinitely waiting for a nonexistent process to pull an image [#19743](https://github.com/docker/docker/pull/19743) 73 74 ### Networking 75 76 + Use DNS-based discovery instead of `/etc/hosts` [#19198](https://github.com/docker/docker/pull/19198) 77 + Support for network-scoped alias using `--net-alias` on `run` and `--alias` on `network connect` [#19242](https://github.com/docker/docker/pull/19242) 78 + Add `--ip` and `--ip6` on `run` and `network connect` to support custom IP addresses for a container in a network [#19001](https://github.com/docker/docker/pull/19001) 79 + Add `--ipam-opt` to `network create` for passing custom IPAM options [#17316](https://github.com/docker/docker/pull/17316) 80 + Add `--internal` flag to `network create` to restrict external access to and from the network [#19276](https://github.com/docker/docker/pull/19276) 81 + Add `kv.path` option to `--cluster-store-opt` [#19167](https://github.com/docker/docker/pull/19167) 82 + Add `discovery.heartbeat` and `discovery.ttl` options to `--cluster-store-opt` to configure discovery TTL and heartbeat timer [#18204](https://github.com/docker/docker/pull/18204) 83 + Add `--format` flag to `network inspect` [#17481](https://github.com/docker/docker/pull/17481) 84 + Add `--link` to `network connect` to provide a container-local alias [#19229](https://github.com/docker/docker/pull/19229) 85 + Support for Capability exchange with remote IPAM plugins [#18775](https://github.com/docker/docker/pull/18775) 86 + Add `--force` to `network disconnect` to force container to be disconnected from network [#19317](https://github.com/docker/docker/pull/19317) 87 * Support for multi-host networking using built-in overlay driver for all engine supported kernels: 3.10+ [#18775](https://github.com/docker/docker/pull/18775) 88 * `--link` is now supported on `docker run` for containers in user-defined network [#19229](https://github.com/docker/docker/pull/19229) 89 * Enhance `docker network rm` to allow removing multiple networks [#17489](https://github.com/docker/docker/pull/17489) 90 * Include container names in `network inspect` [#17615](https://github.com/docker/docker/pull/17615) 91 * Include auto-generated subnets for user-defined networks in `network inspect` [#17316](https://github.com/docker/docker/pull/17316) 92 * Add `--filter` flag to `network ls` to hide predefined networks [#17782](https://github.com/docker/docker/pull/17782) 93 * Add support for network connect/disconnect to stopped containers [#18906](https://github.com/docker/docker/pull/18906) 94 * Add network ID to container inspect [#19323](https://github.com/docker/docker/pull/19323) 95 - Fix MTU issue where Docker would not start with two or more default routes [#18108](https://github.com/docker/docker/pull/18108) 96 - Fix duplicate IP address for containers [#18106](https://github.com/docker/docker/pull/18106) 97 - Fix issue preventing sometimes docker from creating the bridge network [#19338](https://github.com/docker/docker/pull/19338) 98 - Do not substitute 127.0.0.1 name server when using `--net=host` [#19573](https://github.com/docker/docker/pull/19573) 99 100 ### Logging 101 102 + New logging driver for Splunk [#16488](https://github.com/docker/docker/pull/16488) 103 + Add support for syslog over TCP+TLS [#18998](https://github.com/docker/docker/pull/18998) 104 * Enhance `docker logs --since` and `--until` to support nanoseconds and time [#17495](https://github.com/docker/docker/pull/17495) 105 * Enhance AWS logs to auto-detect region [#16640](https://github.com/docker/docker/pull/16640) 106 107 ### Volumes 108 109 + Add support to set the mount propagation mode for a volume [#17034](https://github.com/docker/docker/pull/17034) 110 * Add `ls` and `inspect` endpoints to volume plugin API [#16534](https://github.com/docker/docker/pull/16534) 111 Existing plugins need to make use of these new APIs to satisfy users' expectation 112 For that, please use the new MIME type `application/vnd.docker.plugins.v1.2+json` [#19549](https://github.com/docker/docker/pull/19549) 113 - Fix data not being copied to named volumes [#19175](https://github.com/docker/docker/pull/19175) 114 - Fix issues preventing volume drivers from being containerized [#19500](https://github.com/docker/docker/pull/19500) 115 - Fix `docker volumes ls --dangling=false` to now show all non-dangling volumes [#19671](https://github.com/docker/docker/pull/19671) 116 - Do not remove named volumes on container removal [#19568](https://github.com/docker/docker/pull/19568) 117 - Allow external volume drivers to host anonymous volumes [#19190](https://github.com/docker/docker/pull/19190) 118 119 ### Builder 120 121 + Add support for `**` in `.dockerignore` to wildcard multiple levels of directories [#17090](https://github.com/docker/docker/pull/17090) 122 - Fix handling of UTF-8 characters in Dockerfiles [#17055](https://github.com/docker/docker/pull/17055) 123 - Fix permissions problem when reading from STDIN [#19283](https://github.com/docker/docker/pull/19283) 124 125 ### Client 126 127 + Add support for overriding the API version to use via an `DOCKER_API_VERSION` environment-variable [#15964](https://github.com/docker/docker/pull/15964) 128 - Fix a bug preventing Windows clients to log in to Docker Hub [#19891](https://github.com/docker/docker/pull/19891) 129 130 ### Misc 131 132 * systemd: Set TasksMax in addition to LimitNPROC in systemd service file [#19391](https://github.com/docker/docker/pull/19391) 133 134 ### Deprecations 135 136 * Remove LXC support. The LXC driver was deprecated in Docker 1.8, and has now been removed [#17700](https://github.com/docker/docker/pull/17700) 137 * Remove `--exec-driver` daemon flag, because it is no longer in use [#17700](https://github.com/docker/docker/pull/17700) 138 * Remove old deprecated single-dashed long CLI flags (such as `-rm`; use `--rm` instead) [#17724](https://github.com/docker/docker/pull/17724) 139 * Deprecate HostConfig at API container start [#17799](https://github.com/docker/docker/pull/17799) 140 * Deprecate docker packages for newly EOL'd Linux distributions: Fedora 21 and Ubuntu 15.04 (Vivid) [#18794](https://github.com/docker/docker/pull/18794), [#18809](https://github.com/docker/docker/pull/18809) 141 * Deprecate `-f` flag for docker tag [#18350](https://github.com/docker/docker/pull/18350) 142 143 ## 1.9.1 (2015-11-21) 144 145 ### Runtime 146 147 - Do not prevent daemon from booting if images could not be restored (#17695) 148 - Force IPC mount to unmount on daemon shutdown/init (#17539) 149 - Turn IPC unmount errors into warnings (#17554) 150 - Fix `docker stats` performance regression (#17638) 151 - Clarify cryptic error message upon `docker logs` if `--log-driver=none` (#17767) 152 - Fix seldom panics (#17639, #17634, #17703) 153 - Fix opq whiteouts problems for files with dot prefix (#17819) 154 - devicemapper: try defaulting to xfs instead of ext4 for performance reasons (#17903, #17918) 155 - devicemapper: fix displayed fs in docker info (#17974) 156 - selinux: only relabel if user requested so with the `z` option (#17450, #17834) 157 - Do not make network calls when normalizing names (#18014) 158 159 ### Client 160 161 - Fix `docker login` on windows (#17738) 162 - Fix bug with `docker inspect` output when not connected to daemon (#17715) 163 - Fix `docker inspect -f {{.HostConfig.Dns}} somecontainer` (#17680) 164 165 ### Builder 166 167 - Fix regression with symlink behavior in ADD/COPY (#17710) 168 169 ### Networking 170 171 - Allow passing a network ID as an argument for `--net` (#17558) 172 - Fix connect to host and prevent disconnect from host for `host` network (#17476) 173 - Fix `--fixed-cidr` issue when gateway ip falls in ip-range and ip-range is 174 not the first block in the network (#17853) 175 - Restore deterministic `IPv6` generation from `MAC` address on default `bridge` network (#17890) 176 - Allow port-mapping only for endpoints created on docker run (#17858) 177 - Fixed an endpoint delete issue with a possible stale sbox (#18102) 178 179 ### Distribution 180 181 - Correct parent chain in v2 push when v1Compatibility files on the disk are inconsistent (#18047) 182 183 ## 1.9.0 (2015-11-03) 184 185 ### Runtime 186 187 + `docker stats` now returns block IO metrics (#15005) 188 + `docker stats` now details network stats per interface (#15786) 189 + Add `ancestor=<image>` filter to `docker ps --filter` flag to filter 190 containers based on their ancestor images (#14570) 191 + Add `label=<somelabel>` filter to `docker ps --filter` to filter containers 192 based on label (#16530) 193 + Add `--kernel-memory` flag to `docker run` (#14006) 194 + Add `--message` flag to `docker import` allowing to specify an optional 195 message (#15711) 196 + Add `--privileged` flag to `docker exec` (#14113) 197 + Add `--stop-signal` flag to `docker run` allowing to replace the container 198 process stopping signal (#15307) 199 + Add a new `unless-stopped` restart policy (#15348) 200 + Inspecting an image now returns tags (#13185) 201 + Add container size information to `docker inspect` (#15796) 202 + Add `RepoTags` and `RepoDigests` field to `/images/{name:.*}/json` (#17275) 203 - Remove the deprecated `/container/ps` endpoint from the API (#15972) 204 - Send and document correct HTTP codes for `/exec/<name>/start` (#16250) 205 - Share shm and mqueue between containers sharing IPC namespace (#15862) 206 - Event stream now shows OOM status when `--oom-kill-disable` is set (#16235) 207 - Ensure special network files (/etc/hosts etc.) are read-only if bind-mounted 208 with `ro` option (#14965) 209 - Improve `rmi` performance (#16890) 210 - Do not update /etc/hosts for the default bridge network, except for links (#17325) 211 - Fix conflict with duplicate container names (#17389) 212 - Fix an issue with incorrect template execution in `docker inspect` (#17284) 213 - DEPRECATE `-c` short flag variant for `--cpu-shares` in docker run (#16271) 214 215 ### Client 216 217 + Allow `docker import` to import from local files (#11907) 218 219 ### Builder 220 221 + Add a `STOPSIGNAL` Dockerfile instruction allowing to set a different 222 stop-signal for the container process (#15307) 223 + Add an `ARG` Dockerfile instruction and a `--build-arg` flag to `docker build` 224 that allows to add build-time environment variables (#15182) 225 - Improve cache miss performance (#16890) 226 227 ### Storage 228 229 - devicemapper: Implement deferred deletion capability (#16381) 230 231 ## Networking 232 233 + `docker network` exits experimental and is part of standard release (#16645) 234 + New network top-level concept, with associated subcommands and API (#16645) 235 WARNING: the API is different from the experimental API 236 + Support for multiple isolated/micro-segmented networks (#16645) 237 + Built-in multihost networking using VXLAN based overlay driver (#14071) 238 + Support for third-party network plugins (#13424) 239 + Ability to dynamically connect containers to multiple networks (#16645) 240 + Support for user-defined IP address management via pluggable IPAM drivers (#16910) 241 + Add daemon flags `--cluster-store` and `--cluster-advertise` for built-in nodes discovery (#16229) 242 + Add `--cluster-store-opt` for setting up TLS settings (#16644) 243 + Add `--dns-opt` to the daemon (#16031) 244 - DEPRECATE following container `NetworkSettings` fields in API v1.21: `EndpointID`, `Gateway`, 245 `GlobalIPv6Address`, `GlobalIPv6PrefixLen`, `IPAddress`, `IPPrefixLen`, `IPv6Gateway` and `MacAddress`. 246 Those are now specific to the `bridge` network. Use `NetworkSettings.Networks` to inspect 247 the networking settings of a container per network. 248 249 ### Volumes 250 251 + New top-level `volume` subcommand and API (#14242) 252 - Move API volume driver settings to host-specific config (#15798) 253 - Print an error message if volume name is not unique (#16009) 254 - Ensure volumes created from Dockerfiles always use the local volume driver 255 (#15507) 256 - DEPRECATE auto-creating missing host paths for bind mounts (#16349) 257 258 ### Logging 259 260 + Add `awslogs` logging driver for Amazon CloudWatch (#15495) 261 + Add generic `tag` log option to allow customizing container/image 262 information passed to driver (e.g. show container names) (#15384) 263 - Implement the `docker logs` endpoint for the journald driver (#13707) 264 - DEPRECATE driver-specific log tags (e.g. `syslog-tag`, etc.) (#15384) 265 266 ### Distribution 267 268 + `docker search` now works with partial names (#16509) 269 - Push optimization: avoid buffering to file (#15493) 270 - The daemon will display progress for images that were already being pulled 271 by another client (#15489) 272 - Only permissions required for the current action being performed are requested (#) 273 + Renaming trust keys (and respective environment variables) from `offline` to 274 `root` and `tagging` to `repository` (#16894) 275 - DEPRECATE trust key environment variables 276 `DOCKER_CONTENT_TRUST_OFFLINE_PASSPHRASE` and 277 `DOCKER_CONTENT_TRUST_TAGGING_PASSPHRASE` (#16894) 278 279 ### Security 280 281 + Add SELinux profiles to the rpm package (#15832) 282 - Fix various issues with AppArmor profiles provided in the deb package 283 (#14609) 284 - Add AppArmor policy that prevents writing to /proc (#15571) 285 286 ## 1.8.3 (2015-10-12) 287 288 ### Distribution 289 290 - Fix layer IDs lead to local graph poisoning (CVE-2014-8178) 291 - Fix manifest validation and parsing logic errors allow pull-by-digest validation bypass (CVE-2014-8179) 292 + Add `--disable-legacy-registry` to prevent a daemon from using a v1 registry 293 294 ## 1.8.2 (2015-09-10) 295 296 ### Distribution 297 298 - Fixes rare edge case of handling GNU LongLink and LongName entries. 299 - Fix ^C on docker pull. 300 - Fix docker pull issues on client disconnection. 301 - Fix issue that caused the daemon to panic when loggers weren't configured properly. 302 - Fix goroutine leak pulling images from registry V2. 303 304 ### Runtime 305 306 - Fix a bug mounting cgroups for docker daemons running inside docker containers. 307 - Initialize log configuration properly. 308 309 ### Client: 310 311 - Handle `-q` flag in `docker ps` properly when there is a default format. 312 313 ### Networking 314 315 - Fix several corner cases with netlink. 316 317 ### Contrib 318 319 - Fix several issues with bash completion. 320 321 ## 1.8.1 (2015-08-12) 322 323 ### Distribution 324 325 * Fix a bug where pushing multiple tags would result in invalid images 326 327 ## 1.8.0 (2015-08-11) 328 329 ### Distribution 330 331 + Trusted pull, push and build, disabled by default 332 * Make tar layers deterministic between registries 333 * Don't allow deleting the image of running containers 334 * Check if a tag name to load is a valid digest 335 * Allow one character repository names 336 * Add a more accurate error description for invalid tag name 337 * Make build cache ignore mtime 338 339 ### Cli 340 341 + Add support for DOCKER_CONFIG/--config to specify config file dir 342 + Add --type flag for docker inspect command 343 + Add formatting options to `docker ps` with `--format` 344 + Replace `docker -d` with new subcommand `docker daemon` 345 * Zsh completion updates and improvements 346 * Add some missing events to bash completion 347 * Support daemon urls with base paths in `docker -H` 348 * Validate status= filter to docker ps 349 * Display when a container is in --net=host in docker ps 350 * Extend docker inspect to export image metadata related to graph driver 351 * Restore --default-gateway{,-v6} daemon options 352 * Add missing unpublished ports in docker ps 353 * Allow duration strings in `docker events` as --since/--until 354 * Expose more mounts information in `docker inspect` 355 356 ### Runtime 357 358 + Add new Fluentd logging driver 359 + Allow `docker import` to load from local files 360 + Add logging driver for GELF via UDP 361 + Allow to copy files from host to containers with `docker cp` 362 + Promote volume drivers from experimental to master 363 + Add rollover options to json-file log driver, and --log-driver-opts flag 364 + Add memory swappiness tuning options 365 * Remove cgroup read-only flag when privileged 366 * Make /proc, /sys, & /dev readonly for readonly containers 367 * Add cgroup bind mount by default 368 * Overlay: Export metadata for container and image in `docker inspect` 369 * Devicemapper: external device activation 370 * Devicemapper: Compare uuid of base device on startup 371 * Remove RC4 from the list of registry cipher suites 372 * Add syslog-facility option 373 * LXC execdriver compatibility with recent LXC versions 374 * Mark LXC execriver as deprecated (to be removed with the migration to runc) 375 376 ### Plugins 377 378 * Separate plugin sockets and specs locations 379 * Allow TLS connections to plugins 380 381 ### Bug fixes 382 383 - Add missing 'Names' field to /containers/json API output 384 - Make `docker rmi` of dangling images safe while pulling 385 - Devicemapper: Change default basesize to 100G 386 - Go Scheduler issue with sync.Mutex and gcc 387 - Fix issue where Search API endpoint would panic due to empty AuthConfig 388 - Set image canonical names correctly 389 - Check dockerinit only if lxc driver is used 390 - Fix ulimit usage of nproc 391 - Always attach STDIN if -i,--interactive is specified 392 - Show error messages when saving container state fails 393 - Fixed incorrect assumption on --bridge=none treated as disable network 394 - Check for invalid port specifications in host configuration 395 - Fix endpoint leave failure for --net=host mode 396 - Fix goroutine leak in the stats API if the container is not running 397 - Check for apparmor file before reading it 398 - Fix DOCKER_TLS_VERIFY being ignored 399 - Set umask to the default on startup 400 - Correct the message of pause and unpause a non-running container 401 - Adjust disallowed CpuShares in container creation 402 - ZFS: correctly apply selinux context 403 - Display empty string instead of <nil> when IP opt is nil 404 - `docker kill` returns error when container is not running 405 - Fix COPY/ADD quoted/json form 406 - Fix goroutine leak on logs -f with no output 407 - Remove panic in nat package on invalid hostport 408 - Fix container linking in Fedora 22 409 - Fix error caused using default gateways outside of the allocated range 410 - Format times in inspect command with a template as RFC3339Nano 411 - Make registry client to accept 2xx and 3xx http status responses as successful 412 - Fix race issue that caused the daemon to crash with certain layer downloads failed in a specific order. 413 - Fix error when the docker ps format was not valid. 414 - Remove redundant ip forward check. 415 - Fix issue trying to push images to repository mirrors. 416 - Fix error cleaning up network entrypoints when there is an initialization issue. 417 418 ## 1.7.1 (2015-07-14) 419 420 #### Runtime 421 422 - Fix default user spawning exec process with `docker exec` 423 - Make `--bridge=none` not to configure the network bridge 424 - Publish networking stats properly 425 - Fix implicit devicemapper selection with static binaries 426 - Fix socket connections that hung intermittently 427 - Fix bridge interface creation on CentOS/RHEL 6.6 428 - Fix local dns lookups added to resolv.conf 429 - Fix copy command mounting volumes 430 - Fix read/write privileges in volumes mounted with --volumes-from 431 432 #### Remote API 433 434 - Fix unmarshalling of Command and Entrypoint 435 - Set limit for minimum client version supported 436 - Validate port specification 437 - Return proper errors when attach/reattach fail 438 439 #### Distribution 440 441 - Fix pulling private images 442 - Fix fallback between registry V2 and V1 443 444 ## 1.7.0 (2015-06-16) 445 446 #### Runtime 447 + Experimental feature: support for out-of-process volume plugins 448 * The userland proxy can be disabled in favor of hairpin NAT using the daemon’s `--userland-proxy=false` flag 449 * The `exec` command supports the `-u|--user` flag to specify the new process owner 450 + Default gateway for containers can be specified daemon-wide using the `--default-gateway` and `--default-gateway-v6` flags 451 + The CPU CFS (Completely Fair Scheduler) quota can be set in `docker run` using `--cpu-quota` 452 + Container block IO can be controlled in `docker run` using`--blkio-weight` 453 + ZFS support 454 + The `docker logs` command supports a `--since` argument 455 + UTS namespace can be shared with the host with `docker run --uts=host` 456 457 #### Quality 458 * Networking stack was entirely rewritten as part of the libnetwork effort 459 * Engine internals refactoring 460 * Volumes code was entirely rewritten to support the plugins effort 461 + Sending SIGUSR1 to a daemon will dump all goroutines stacks without exiting 462 463 #### Build 464 + Support ${variable:-value} and ${variable:+value} syntax for environment variables 465 + Support resource management flags `--cgroup-parent`, `--cpu-period`, `--cpu-quota`, `--cpuset-cpus`, `--cpuset-mems` 466 + git context changes with branches and directories 467 * The .dockerignore file support exclusion rules 468 469 #### Distribution 470 + Client support for v2 mirroring support for the official registry 471 472 #### Bugfixes 473 * Firewalld is now supported and will automatically be used when available 474 * mounting --device recursively 475 476 ## 1.6.2 (2015-05-13) 477 478 #### Runtime 479 - Revert change prohibiting mounting into /sys 480 481 ## 1.6.1 (2015-05-07) 482 483 #### Security 484 - Fix read/write /proc paths (CVE-2015-3630) 485 - Prohibit VOLUME /proc and VOLUME / (CVE-2015-3631) 486 - Fix opening of file-descriptor 1 (CVE-2015-3627) 487 - Fix symlink traversal on container respawn allowing local privilege escalation (CVE-2015-3629) 488 - Prohibit mount of /sys 489 490 #### Runtime 491 - Update AppArmor policy to not allow mounts 492 493 ## 1.6.0 (2015-04-07) 494 495 #### Builder 496 + Building images from an image ID 497 + Build containers with resource constraints, ie `docker build --cpu-shares=100 --memory=1024m...` 498 + `commit --change` to apply specified Dockerfile instructions while committing the image 499 + `import --change` to apply specified Dockerfile instructions while importing the image 500 + Builds no longer continue in the background when canceled with CTRL-C 501 502 #### Client 503 + Windows Support 504 505 #### Runtime 506 + Container and image Labels 507 + `--cgroup-parent` for specifying a parent cgroup to place container cgroup within 508 + Logging drivers, `json-file`, `syslog`, or `none` 509 + Pulling images by ID 510 + `--ulimit` to set the ulimit on a container 511 + `--default-ulimit` option on the daemon which applies to all created containers (and overwritten by `--ulimit` on run) 512 513 ## 1.5.0 (2015-02-10) 514 515 #### Builder 516 + Dockerfile to use for a given `docker build` can be specified with the `-f` flag 517 * Dockerfile and .dockerignore files can be themselves excluded as part of the .dockerignore file, thus preventing modifications to these files invalidating ADD or COPY instructions cache 518 * ADD and COPY instructions accept relative paths 519 * Dockerfile `FROM scratch` instruction is now interpreted as a no-base specifier 520 * Improve performance when exposing a large number of ports 521 522 #### Hack 523 + Allow client-side only integration tests for Windows 524 * Include docker-py integration tests against Docker daemon as part of our test suites 525 526 #### Packaging 527 + Support for the new version of the registry HTTP API 528 * Speed up `docker push` for images with a majority of already existing layers 529 - Fixed contacting a private registry through a proxy 530 531 #### Remote API 532 + A new endpoint will stream live container resource metrics and can be accessed with the `docker stats` command 533 + Containers can be renamed using the new `rename` endpoint and the associated `docker rename` command 534 * Container `inspect` endpoint show the ID of `exec` commands running in this container 535 * Container `inspect` endpoint show the number of times Docker auto-restarted the container 536 * New types of event can be streamed by the `events` endpoint: ‘OOM’ (container died with out of memory), ‘exec_create’, and ‘exec_start' 537 - Fixed returned string fields which hold numeric characters incorrectly omitting surrounding double quotes 538 539 #### Runtime 540 + Docker daemon has full IPv6 support 541 + The `docker run` command can take the `--pid=host` flag to use the host PID namespace, which makes it possible for example to debug host processes using containerized debugging tools 542 + The `docker run` command can take the `--read-only` flag to make the container’s root filesystem mounted as readonly, which can be used in combination with volumes to force a container’s processes to only write to locations that will be persisted 543 + Container total memory usage can be limited for `docker run` using the `--memory-swap` flag 544 * Major stability improvements for devicemapper storage driver 545 * Better integration with host system: containers will reflect changes to the host's `/etc/resolv.conf` file when restarted 546 * Better integration with host system: per-container iptable rules are moved to the DOCKER chain 547 - Fixed container exiting on out of memory to return an invalid exit code 548 549 #### Other 550 * The HTTP_PROXY, HTTPS_PROXY, and NO_PROXY environment variables are properly taken into account by the client when connecting to the Docker daemon 551 552 ## 1.4.1 (2014-12-15) 553 554 #### Runtime 555 - Fix issue with volumes-from and bind mounts not being honored after create 556 557 ## 1.4.0 (2014-12-11) 558 559 #### Notable Features since 1.3.0 560 + Set key=value labels to the daemon (displayed in `docker info`), applied with 561 new `-label` daemon flag 562 + Add support for `ENV` in Dockerfile of the form: 563 `ENV name=value name2=value2...` 564 + New Overlayfs Storage Driver 565 + `docker info` now returns an `ID` and `Name` field 566 + Filter events by event name, container, or image 567 + `docker cp` now supports copying from container volumes 568 - Fixed `docker tag`, so it honors `--force` when overriding a tag for existing 569 image. 570 571 ## 1.3.3 (2014-12-11) 572 573 #### Security 574 - Fix path traversal vulnerability in processing of absolute symbolic links (CVE-2014-9356) 575 - Fix decompression of xz image archives, preventing privilege escalation (CVE-2014-9357) 576 - Validate image IDs (CVE-2014-9358) 577 578 #### Runtime 579 - Fix an issue when image archives are being read slowly 580 581 #### Client 582 - Fix a regression related to stdin redirection 583 - Fix a regression with `docker cp` when destination is the current directory 584 585 ## 1.3.2 (2014-11-20) 586 587 #### Security 588 - Fix tar breakout vulnerability 589 * Extractions are now sandboxed chroot 590 - Security options are no longer committed to images 591 592 #### Runtime 593 - Fix deadlock in `docker ps -f exited=1` 594 - Fix a bug when `--volumes-from` references a container that failed to start 595 596 #### Registry 597 + `--insecure-registry` now accepts CIDR notation such as 10.1.0.0/16 598 * Private registries whose IPs fall in the 127.0.0.0/8 range do no need the `--insecure-registry` flag 599 - Skip the experimental registry v2 API when mirroring is enabled 600 601 ## 1.3.1 (2014-10-28) 602 603 #### Security 604 * Prevent fallback to SSL protocols < TLS 1.0 for client, daemon and registry 605 + Secure HTTPS connection to registries with certificate verification and without HTTP fallback unless `--insecure-registry` is specified 606 607 #### Runtime 608 - Fix issue where volumes would not be shared 609 610 #### Client 611 - Fix issue with `--iptables=false` not automatically setting `--ip-masq=false` 612 - Fix docker run output to non-TTY stdout 613 614 #### Builder 615 - Fix escaping `$` for environment variables 616 - Fix issue with lowercase `onbuild` Dockerfile instruction 617 - Restrict environment variable expansion to `ENV`, `ADD`, `COPY`, `WORKDIR`, `EXPOSE`, `VOLUME` and `USER` 618 619 ## 1.3.0 (2014-10-14) 620 621 #### Notable features since 1.2.0 622 + Docker `exec` allows you to run additional processes inside existing containers 623 + Docker `create` gives you the ability to create a container via the CLI without executing a process 624 + `--security-opts` options to allow user to customize container labels and apparmor profiles 625 + Docker `ps` filters 626 - Wildcard support to COPY/ADD 627 + Move production URLs to get.docker.com from get.docker.io 628 + Allocate IP address on the bridge inside a valid CIDR 629 + Use drone.io for PR and CI testing 630 + Ability to setup an official registry mirror 631 + Ability to save multiple images with docker `save` 632 633 ## 1.2.0 (2014-08-20) 634 635 #### Runtime 636 + Make /etc/hosts /etc/resolv.conf and /etc/hostname editable at runtime 637 + Auto-restart containers using policies 638 + Use /var/lib/docker/tmp for large temporary files 639 + `--cap-add` and `--cap-drop` to tweak what linux capability you want 640 + `--device` to use devices in containers 641 642 #### Client 643 + `docker search` on private registries 644 + Add `exited` filter to `docker ps --filter` 645 * `docker rm -f` now kills instead of stop 646 + Support for IPv6 addresses in `--dns` flag 647 648 #### Proxy 649 + Proxy instances in separate processes 650 * Small bug fix on UDP proxy 651 652 ## 1.1.2 (2014-07-23) 653 654 #### Runtime 655 + Fix port allocation for existing containers 656 + Fix containers restart on daemon restart 657 658 #### Packaging 659 + Fix /etc/init.d/docker issue on Debian 660 661 ## 1.1.1 (2014-07-09) 662 663 #### Builder 664 * Fix issue with ADD 665 666 ## 1.1.0 (2014-07-03) 667 668 #### Notable features since 1.0.1 669 + Add `.dockerignore` support 670 + Pause containers during `docker commit` 671 + Add `--tail` to `docker logs` 672 673 #### Builder 674 + Allow a tar file as context for `docker build` 675 * Fix issue with white-spaces and multi-lines in `Dockerfiles` 676 677 #### Runtime 678 * Overall performance improvements 679 * Allow `/` as source of `docker run -v` 680 * Fix port allocation 681 * Fix bug in `docker save` 682 * Add links information to `docker inspect` 683 684 #### Client 685 * Improve command line parsing for `docker commit` 686 687 #### Remote API 688 * Improve status code for the `start` and `stop` endpoints 689 690 ## 1.0.1 (2014-06-19) 691 692 #### Notable features since 1.0.0 693 * Enhance security for the LXC driver 694 695 #### Builder 696 * Fix `ONBUILD` instruction passed to grandchildren 697 698 #### Runtime 699 * Fix events subscription 700 * Fix /etc/hostname file with host networking 701 * Allow `-h` and `--net=none` 702 * Fix issue with hotplug devices in `--privileged` 703 704 #### Client 705 * Fix artifacts with events 706 * Fix a panic with empty flags 707 * Fix `docker cp` on Mac OS X 708 709 #### Miscellaneous 710 * Fix compilation on Mac OS X 711 * Fix several races 712 713 ## 1.0.0 (2014-06-09) 714 715 #### Notable features since 0.12.0 716 * Production support 717 718 ## 0.12.0 (2014-06-05) 719 720 #### Notable features since 0.11.0 721 * 40+ various improvements to stability, performance and usability 722 * New `COPY` Dockerfile instruction to allow copying a local file from the context into the container without ever extracting if the file is a tar file 723 * Inherit file permissions from the host on `ADD` 724 * New `pause` and `unpause` commands to allow pausing and unpausing of containers using cgroup freezer 725 * The `images` command has a `-f`/`--filter` option to filter the list of images 726 * Add `--force-rm` to clean up after a failed build 727 * Standardize JSON keys in Remote API to CamelCase 728 * Pull from a docker run now assumes `latest` tag if not specified 729 * Enhance security on Linux capabilities and device nodes 730 731 ## 0.11.1 (2014-05-07) 732 733 #### Registry 734 - Fix push and pull to private registry 735 736 ## 0.11.0 (2014-05-07) 737 738 #### Notable features since 0.10.0 739 740 * SELinux support for mount and process labels 741 * Linked containers can be accessed by hostname 742 * Use the net `--net` flag to allow advanced network configuration such as host networking so that containers can use the host's network interfaces 743 * Add a ping endpoint to the Remote API to do healthchecks of your docker daemon 744 * Logs can now be returned with an optional timestamp 745 * Docker now works with registries that support SHA-512 746 * Multiple registry endpoints are supported to allow registry mirrors 747 748 ## 0.10.0 (2014-04-08) 749 750 #### Builder 751 - Fix printing multiple messages on a single line. Fixes broken output during builds. 752 - Follow symlinks inside container's root for ADD build instructions. 753 - Fix EXPOSE caching. 754 755 #### Documentation 756 - Add the new options of `docker ps` to the documentation. 757 - Add the options of `docker restart` to the documentation. 758 - Update daemon docs and help messages for --iptables and --ip-forward. 759 - Updated apt-cacher-ng docs example. 760 - Remove duplicate description of --mtu from docs. 761 - Add missing -t and -v for `docker images` to the docs. 762 - Add fixes to the cli docs. 763 - Update libcontainer docs. 764 - Update images in docs to remove references to AUFS and LXC. 765 - Update the nodejs_web_app in the docs to use the new epel RPM address. 766 - Fix external link on security of containers. 767 - Update remote API docs. 768 - Add image size to history docs. 769 - Be explicit about binding to all interfaces in redis example. 770 - Document DisableNetwork flag in the 1.10 remote api. 771 - Document that `--lxc-conf` is lxc only. 772 - Add chef usage documentation. 773 - Add example for an image with multiple for `docker load`. 774 - Explain what `docker run -a` does in the docs. 775 776 #### Contrib 777 - Add variable for DOCKER_LOGFILE to sysvinit and use append instead of overwrite in opening the logfile. 778 - Fix init script cgroup mounting workarounds to be more similar to cgroupfs-mount and thus work properly. 779 - Remove inotifywait hack from the upstart host-integration example because it's not necessary any more. 780 - Add check-config script to contrib. 781 - Fix fish shell completion. 782 783 #### Hack 784 * Clean up "go test" output from "make test" to be much more readable/scannable. 785 * Exclude more "definitely not unit tested Go source code" directories from hack/make/test. 786 + Generate md5 and sha256 hashes when building, and upload them via hack/release.sh. 787 - Include contributed completions in Ubuntu PPA. 788 + Add cli integration tests. 789 * Add tweaks to the hack scripts to make them simpler. 790 791 #### Remote API 792 + Add TLS auth support for API. 793 * Move git clone from daemon to client. 794 - Fix content-type detection in docker cp. 795 * Split API into 2 go packages. 796 797 #### Runtime 798 * Support hairpin NAT without going through Docker server. 799 - devicemapper: succeed immediately when removing non-existing devices. 800 - devicemapper: improve handling of devicemapper devices (add per device lock, increase sleep time and unlock while sleeping). 801 - devicemapper: increase timeout in waitClose to 10 seconds. 802 - devicemapper: ensure we shut down thin pool cleanly. 803 - devicemapper: pass info, rather than hash to activateDeviceIfNeeded, deactivateDevice, setInitialized, deleteDevice. 804 - devicemapper: avoid AB-BA deadlock. 805 - devicemapper: make shutdown better/faster. 806 - improve alpha sorting in mflag. 807 - Remove manual http cookie management because the cookiejar is being used. 808 - Use BSD raw mode on Darwin. Fixes nano, tmux and others. 809 - Add FreeBSD support for the client. 810 - Merge auth package into registry. 811 - Add deprecation warning for -t on `docker pull`. 812 - Remove goroutine leak on error. 813 - Update parseLxcInfo to comply with new lxc1.0 format. 814 - Fix attach exit on darwin. 815 - Improve deprecation message. 816 - Retry to retrieve the layer metadata up to 5 times for `docker pull`. 817 - Only unshare the mount namespace for execin. 818 - Merge existing config when committing. 819 - Disable daemon startup timeout. 820 - Fix issue #4681: add loopback interface when networking is disabled. 821 - Add failing test case for issue #4681. 822 - Send SIGTERM to child, instead of SIGKILL. 823 - Show the driver and the kernel version in `docker info` even when not in debug mode. 824 - Always symlink /dev/ptmx for libcontainer. This fixes console related problems. 825 - Fix issue caused by the absence of /etc/apparmor.d. 826 - Don't leave empty cidFile behind when failing to create the container. 827 - Mount cgroups automatically if they're not mounted already. 828 - Use mock for search tests. 829 - Update to double-dash everywhere. 830 - Move .dockerenv parsing to lxc driver. 831 - Move all bind-mounts in the container inside the namespace. 832 - Don't use separate bind mount for container. 833 - Always symlink /dev/ptmx for libcontainer. 834 - Don't kill by pid for other drivers. 835 - Add initial logging to libcontainer. 836 * Sort by port in `docker ps`. 837 - Move networking drivers into runtime top level package. 838 + Add --no-prune to `docker rmi`. 839 + Add time since exit in `docker ps`. 840 - graphdriver: add build tags. 841 - Prevent allocation of previously allocated ports & prevent improve port allocation. 842 * Add support for --since/--before in `docker ps`. 843 - Clean up container stop. 844 + Add support for configurable dns search domains. 845 - Add support for relative WORKDIR instructions. 846 - Add --output flag for docker save. 847 - Remove duplication of DNS entries in config merging. 848 - Add cpuset.cpus to cgroups and native driver options. 849 - Remove docker-ci. 850 - Promote btrfs. btrfs is no longer considered experimental. 851 - Add --input flag to `docker load`. 852 - Return error when existing bridge doesn't match IP address. 853 - Strip comments before parsing line continuations to avoid interpreting instructions as comments. 854 - Fix TestOnlyLoopbackExistsWhenUsingDisableNetworkOption to ignore "DOWN" interfaces. 855 - Add systemd implementation of cgroups and make containers show up as systemd units. 856 - Fix commit and import when no repository is specified. 857 - Remount /var/lib/docker as --private to fix scaling issue. 858 - Use the environment's proxy when pinging the remote registry. 859 - Reduce error level from harmless errors. 860 * Allow --volumes-from to be individual files. 861 - Fix expanding buffer in StdCopy. 862 - Set error regardless of attach or stdin. This fixes #3364. 863 - Add support for --env-file to load environment variables from files. 864 - Symlink /etc/mtab and /proc/mounts. 865 - Allow pushing a single tag. 866 - Shut down containers cleanly at shutdown and wait forever for the containers to shut down. This makes container shutdown on daemon shutdown work properly via SIGTERM. 867 - Don't throw error when starting an already running container. 868 - Fix dynamic port allocation limit. 869 - remove setupDev from libcontainer. 870 - Add API version to `docker version`. 871 - Return correct exit code when receiving signal and make SIGQUIT quit without cleanup. 872 - Fix --volumes-from mount failure. 873 - Allow non-privileged containers to create device nodes. 874 - Skip login tests because of external dependency on a hosted service. 875 - Deprecate `docker images --tree` and `docker images --viz`. 876 - Deprecate `docker insert`. 877 - Include base abstraction for apparmor. This fixes some apparmor related problems on Ubuntu 14.04. 878 - Add specific error message when hitting 401 over HTTP on push. 879 - Fix absolute volume check. 880 - Remove volumes-from from the config. 881 - Move DNS options to hostconfig. 882 - Update the apparmor profile for libcontainer. 883 - Add deprecation notice for `docker commit -run`. 884 885 ## 0.9.1 (2014-03-24) 886 887 #### Builder 888 - Fix printing multiple messages on a single line. Fixes broken output during builds. 889 890 #### Documentation 891 - Fix external link on security of containers. 892 893 #### Contrib 894 - Fix init script cgroup mounting workarounds to be more similar to cgroupfs-mount and thus work properly. 895 - Add variable for DOCKER_LOGFILE to sysvinit and use append instead of overwrite in opening the logfile. 896 897 #### Hack 898 - Generate md5 and sha256 hashes when building, and upload them via hack/release.sh. 899 900 #### Remote API 901 - Fix content-type detection in `docker cp`. 902 903 #### Runtime 904 - Use BSD raw mode on Darwin. Fixes nano, tmux and others. 905 - Only unshare the mount namespace for execin. 906 - Retry to retrieve the layer metadata up to 5 times for `docker pull`. 907 - Merge existing config when committing. 908 - Fix panic in monitor. 909 - Disable daemon startup timeout. 910 - Fix issue #4681: add loopback interface when networking is disabled. 911 - Add failing test case for issue #4681. 912 - Send SIGTERM to child, instead of SIGKILL. 913 - Show the driver and the kernel version in `docker info` even when not in debug mode. 914 - Always symlink /dev/ptmx for libcontainer. This fixes console related problems. 915 - Fix issue caused by the absence of /etc/apparmor.d. 916 - Don't leave empty cidFile behind when failing to create the container. 917 - Improve deprecation message. 918 - Fix attach exit on darwin. 919 - devicemapper: improve handling of devicemapper devices (add per device lock, increase sleep time, unlock while sleeping). 920 - devicemapper: succeed immediately when removing non-existing devices. 921 - devicemapper: increase timeout in waitClose to 10 seconds. 922 - Remove goroutine leak on error. 923 - Update parseLxcInfo to comply with new lxc1.0 format. 924 925 ## 0.9.0 (2014-03-10) 926 927 #### Builder 928 - Avoid extra mount/unmount during build. This fixes mount/unmount related errors during build. 929 - Add error to docker build --rm. This adds missing error handling. 930 - Forbid chained onbuild, `onbuild from` and `onbuild maintainer` triggers. 931 - Make `--rm` the default for `docker build`. 932 933 #### Documentation 934 - Download the docker client binary for Mac over https. 935 - Update the titles of the install instructions & descriptions. 936 * Add instructions for upgrading boot2docker. 937 * Add port forwarding example in OS X install docs. 938 - Attempt to disentangle repository and registry. 939 - Update docs to explain more about `docker ps`. 940 - Update sshd example to use a Dockerfile. 941 - Rework some examples, including the Python examples. 942 - Update docs to include instructions for a container's lifecycle. 943 - Update docs documentation to discuss the docs branch. 944 - Don't skip cert check for an example & use HTTPS. 945 - Bring back the memory and swap accounting section which was lost when the kernel page was removed. 946 - Explain DNS warnings and how to fix them on systems running and using a local nameserver. 947 948 #### Contrib 949 - Add Tanglu support for mkimage-debootstrap. 950 - Add SteamOS support for mkimage-debootstrap. 951 952 #### Hack 953 - Get package coverage when running integration tests. 954 - Remove the Vagrantfile. This is being replaced with boot2docker. 955 - Fix tests on systems where aufs isn't available. 956 - Update packaging instructions and remove the dependency on lxc. 957 958 #### Remote API 959 * Move code specific to the API to the api package. 960 - Fix header content type for the API. Makes all endpoints use proper content type. 961 - Fix registry auth & remove ping calls from CmdPush and CmdPull. 962 - Add newlines to the JSON stream functions. 963 964 #### Runtime 965 * Do not ping the registry from the CLI. All requests to registries flow through the daemon. 966 - Check for nil information return in the lxc driver. This fixes panics with older lxc versions. 967 - Devicemapper: cleanups and fix for unmount. Fixes two problems which were causing unmount to fail intermittently. 968 - Devicemapper: remove directory when removing device. Directories don't get left behind when removing the device. 969 * Devicemapper: enable skip_block_zeroing. Improves performance by not zeroing blocks. 970 - Devicemapper: fix shutdown warnings. Fixes shutdown warnings concerning pool device removal. 971 - Ensure docker cp stream is closed properly. Fixes problems with files not being copied by `docker cp`. 972 - Stop making `tcp://` default to `127.0.0.1:4243` and remove the default port for tcp. 973 - Fix `--run` in `docker commit`. This makes `docker commit --run` work again. 974 - Fix custom bridge related options. This makes custom bridges work again. 975 + Mount-bind the PTY as container console. This allows tmux/screen to run. 976 + Add the pure Go libcontainer library to make it possible to run containers using only features of the Linux kernel. 977 + Add native exec driver which uses libcontainer and make it the default exec driver. 978 - Add support for handling extended attributes in archives. 979 * Set the container MTU to be the same as the host MTU. 980 + Add simple sha256 checksums for layers to speed up `docker push`. 981 * Improve kernel version parsing. 982 * Allow flag grouping (`docker run -it`). 983 - Remove chroot exec driver. 984 - Fix divide by zero to fix panic. 985 - Rewrite `docker rmi`. 986 - Fix docker info with lxc 1.0.0. 987 - Fix fedora tty with apparmor. 988 * Don't always append env vars, replace defaults with vars from config. 989 * Fix a goroutine leak. 990 * Switch to Go 1.2.1. 991 - Fix unique constraint error checks. 992 * Handle symlinks for Docker's data directory and for TMPDIR. 993 - Add deprecation warnings for flags (-flag is deprecated in favor of --flag) 994 - Add apparmor profile for the native execution driver. 995 * Move system specific code from archive to pkg/system. 996 - Fix duplicate signal for `docker run -i -t` (issue #3336). 997 - Return correct process pid for lxc. 998 - Add a -G option to specify the group which unix sockets belong to. 999 + Add `-f` flag to `docker rm` to force removal of running containers. 1000 + Kill ghost containers and restart all ghost containers when the docker daemon restarts. 1001 + Add `DOCKER_RAMDISK` environment variable to make Docker work when the root is on a ramdisk. 1002 1003 ## 0.8.1 (2014-02-18) 1004 1005 #### Builder 1006 1007 - Avoid extra mount/unmount during build. This removes an unneeded mount/unmount operation which was causing problems with devicemapper 1008 - Fix regression with ADD of tar files. This stops Docker from decompressing tarballs added via ADD from the local file system 1009 - Add error to `docker build --rm`. This adds a missing error check to ensure failures to remove containers are detected and reported 1010 1011 #### Documentation 1012 1013 * Update issue filing instructions 1014 * Warn against the use of symlinks for Docker's storage folder 1015 * Replace the Firefox example with an IceWeasel example 1016 * Rewrite the PostgresSQL example using a Dockerfile and add more details to it 1017 * Improve the OS X documentation 1018 1019 #### Remote API 1020 1021 - Fix broken images API for version less than 1.7 1022 - Use the right encoding for all API endpoints which return JSON 1023 - Move remote api client to api/ 1024 - Queue calls to the API using generic socket wait 1025 1026 #### Runtime 1027 1028 - Fix the use of custom settings for bridges and custom bridges 1029 - Refactor the devicemapper code to avoid many mount/unmount race conditions and failures 1030 - Remove two panics which could make Docker crash in some situations 1031 - Don't ping registry from the CLI client 1032 - Enable skip_block_zeroing for devicemapper. This stops devicemapper from always zeroing entire blocks 1033 - Fix --run in `docker commit`. This makes docker commit store `--run` in the image configuration 1034 - Remove directory when removing devicemapper device. This cleans up leftover mount directories 1035 - Drop NET_ADMIN capability for non-privileged containers. Unprivileged containers can't change their network configuration 1036 - Ensure `docker cp` stream is closed properly 1037 - Avoid extra mount/unmount during container registration. This removes an unneeded mount/unmount operation which was causing problems with devicemapper 1038 - Stop allowing tcp:// as a default tcp bin address which binds to 127.0.0.1:4243 and remove the default port 1039 + Mount-bind the PTY as container console. This allows tmux and screen to run in a container 1040 - Clean up archive closing. This fixes and improves archive handling 1041 - Fix engine tests on systems where temp directories are symlinked 1042 - Add test methods for save and load 1043 - Avoid temporarily unmounting the container when restarting it. This fixes a race for devicemapper during restart 1044 - Support submodules when building from a GitHub repository 1045 - Quote volume path to allow spaces 1046 - Fix remote tar ADD behavior. This fixes a regression which was causing Docker to extract tarballs 1047 1048 ## 0.8.0 (2014-02-04) 1049 1050 #### Notable features since 0.7.0 1051 1052 * Images and containers can be removed much faster 1053 * Building an image from source with docker build is now much faster 1054 * The Docker daemon starts and stops much faster 1055 * The memory footprint of many common operations has been reduced, by streaming files instead of buffering them in memory, fixing memory leaks, and fixing various suboptimal memory allocations 1056 * Several race conditions were fixed, making Docker more stable under very high concurrency load. This makes Docker more stable and less likely to crash and reduces the memory footprint of many common operations 1057 * All packaging operations are now built on the Go language’s standard tar implementation, which is bundled with Docker itself. This makes packaging more portable across host distributions, and solves several issues caused by quirks and incompatibilities between different distributions of tar 1058 * Docker can now create, remove and modify larger numbers of containers and images graciously thanks to more aggressive releasing of system resources. For example the storage driver API now allows Docker to do reference counting on mounts created by the drivers 1059 With the ongoing changes to the networking and execution subsystems of docker testing these areas have been a focus of the refactoring. By moving these subsystems into separate packages we can test, analyze, and monitor coverage and quality of these packages 1060 * Many components have been separated into smaller sub-packages, each with a dedicated test suite. As a result the code is better-tested, more readable and easier to change 1061 1062 * The ADD instruction now supports caching, which avoids unnecessarily re-uploading the same source content again and again when it hasn’t changed 1063 * The new ONBUILD instruction adds to your image a “trigger” instruction to be executed at a later time, when the image is used as the base for another build 1064 * Docker now ships with an experimental storage driver which uses the BTRFS filesystem for copy-on-write 1065 * Docker is officially supported on Mac OS X 1066 * The Docker daemon supports systemd socket activation 1067 1068 ## 0.7.6 (2014-01-14) 1069 1070 #### Builder 1071 1072 * Do not follow symlink outside of build context 1073 1074 #### Runtime 1075 1076 - Remount bind mounts when ro is specified 1077 * Use https for fetching docker version 1078 1079 #### Other 1080 1081 * Inline the test.docker.io fingerprint 1082 * Add ca-certificates to packaging documentation 1083 1084 ## 0.7.5 (2014-01-09) 1085 1086 #### Builder 1087 1088 * Disable compression for build. More space usage but a much faster upload 1089 - Fix ADD caching for certain paths 1090 - Do not compress archive from git build 1091 1092 #### Documentation 1093 1094 - Fix error in GROUP add example 1095 * Make sure the GPG fingerprint is inline in the documentation 1096 * Give more specific advice on setting up signing of commits for DCO 1097 1098 #### Runtime 1099 1100 - Fix misspelled container names 1101 - Do not add hostname when networking is disabled 1102 * Return most recent image from the cache by date 1103 - Return all errors from docker wait 1104 * Add Content-Type Header "application/json" to GET /version and /info responses 1105 1106 #### Other 1107 1108 * Update DCO to version 1.1 1109 + Update Makefile to use "docker:GIT_BRANCH" as the generated image name 1110 * Update Travis to check for new 1.1 DCO version 1111 1112 ## 0.7.4 (2014-01-07) 1113 1114 #### Builder 1115 1116 - Fix ADD caching issue with . prefixed path 1117 - Fix docker build on devicemapper by reverting sparse file tar option 1118 - Fix issue with file caching and prevent wrong cache hit 1119 * Use same error handling while unmarshalling CMD and ENTRYPOINT 1120 1121 #### Documentation 1122 1123 * Simplify and streamline Amazon Quickstart 1124 * Install instructions use unprefixed Fedora image 1125 * Update instructions for mtu flag for Docker on GCE 1126 + Add Ubuntu Saucy to installation 1127 - Fix for wrong version warning on master instead of latest 1128 1129 #### Runtime 1130 1131 - Only get the image's rootfs when we need to calculate the image size 1132 - Correctly handle unmapping UDP ports 1133 * Make CopyFileWithTar use a pipe instead of a buffer to save memory on docker build 1134 - Fix login message to say pull instead of push 1135 - Fix "docker load" help by removing "SOURCE" prompt and mentioning STDIN 1136 * Make blank -H option default to the same as no -H was sent 1137 * Extract cgroups utilities to own submodule 1138 1139 #### Other 1140 1141 + Add Travis CI configuration to validate DCO and gofmt requirements 1142 + Add Developer Certificate of Origin Text 1143 * Upgrade VBox Guest Additions 1144 * Check standalone header when pinging a registry server 1145 1146 ## 0.7.3 (2014-01-02) 1147 1148 #### Builder 1149 1150 + Update ADD to use the image cache, based on a hash of the added content 1151 * Add error message for empty Dockerfile 1152 1153 #### Documentation 1154 1155 - Fix outdated link to the "Introduction" on www.docker.io 1156 + Update the docs to get wider when the screen does 1157 - Add information about needing to install LXC when using raw binaries 1158 * Update Fedora documentation to disentangle the docker and docker.io conflict 1159 * Add a note about using the new `-mtu` flag in several GCE zones 1160 + Add FrugalWare installation instructions 1161 + Add a more complete example of `docker run` 1162 - Fix API documentation for creating and starting Privileged containers 1163 - Add missing "name" parameter documentation on "/containers/create" 1164 * Add a mention of `lxc-checkconfig` as a way to check for some of the necessary kernel configuration 1165 - Update the 1.8 API documentation with some additions that were added to the docs for 1.7 1166 1167 #### Hack 1168 1169 - Add missing libdevmapper dependency to the packagers documentation 1170 * Update minimum Go requirement to a hard line at Go 1.2+ 1171 * Many minor improvements to the Vagrantfile 1172 + Add ability to customize dockerinit search locations when compiling (to be used very sparingly only by packagers of platforms who require a nonstandard location) 1173 + Add coverprofile generation reporting 1174 - Add `-a` to our Go build flags, removing the need for recompiling the stdlib manually 1175 * Update Dockerfile to be more canonical and have less spurious warnings during build 1176 - Fix some miscellaneous `docker pull` progress bar display issues 1177 * Migrate more miscellaneous packages under the "pkg" folder 1178 * Update TextMate highlighting to automatically be enabled for files named "Dockerfile" 1179 * Reorganize syntax highlighting files under a common "contrib/syntax" directory 1180 * Update install.sh script (https://get.docker.io/) to not fail if busybox fails to download or run at the end of the Ubuntu/Debian installation 1181 * Add support for container names in bash completion 1182 1183 #### Packaging 1184 1185 + Add an official Docker client binary for Darwin (Mac OS X) 1186 * Remove empty "Vendor" string and added "License" on deb package 1187 + Add a stubbed version of "/etc/default/docker" in the deb package 1188 1189 #### Runtime 1190 1191 * Update layer application to extract tars in place, avoiding file churn while handling whiteouts 1192 - Fix permissiveness of mtime comparisons in tar handling (since GNU tar and Go tar do not yet support sub-second mtime precision) 1193 * Reimplement `docker top` in pure Go to work more consistently, and even inside Docker-in-Docker (thus removing the shell injection vulnerability present in some versions of `lxc-ps`) 1194 + Update `-H unix://` to work similarly to `-H tcp://` by inserting the default values for missing portions 1195 - Fix more edge cases regarding dockerinit and deleted or replaced docker or dockerinit files 1196 * Update container name validation to include '.' 1197 - Fix use of a symlink or non-absolute path as the argument to `-g` to work as expected 1198 * Update to handle external mounts outside of LXC, fixing many small mounting quirks and making future execution backends and other features simpler 1199 * Update to use proper box-drawing characters everywhere in `docker images -tree` 1200 * Move MTU setting from LXC configuration to directly use netlink 1201 * Add `-S` option to external tar invocation for more efficient spare file handling 1202 + Add arch/os info to User-Agent string, especially for registry requests 1203 + Add `-mtu` option to Docker daemon for configuring MTU 1204 - Fix `docker build` to exit with a non-zero exit code on error 1205 + Add `DOCKER_HOST` environment variable to configure the client `-H` flag without specifying it manually for every invocation 1206 1207 ## 0.7.2 (2013-12-16) 1208 1209 #### Runtime 1210 1211 + Validate container names on creation with standard regex 1212 * Increase maximum image depth to 127 from 42 1213 * Continue to move api endpoints to the job api 1214 + Add -bip flag to allow specification of dynamic bridge IP via CIDR 1215 - Allow bridge creation when ipv6 is not enabled on certain systems 1216 * Set hostname and IP address from within dockerinit 1217 * Drop capabilities from within dockerinit 1218 - Fix volumes on host when symlink is present the image 1219 - Prevent deletion of image if ANY container is depending on it even if the container is not running 1220 * Update docker push to use new progress display 1221 * Use os.Lstat to allow mounting unix sockets when inspecting volumes 1222 - Adjust handling of inactive user login 1223 - Add missing defines in devicemapper for older kernels 1224 - Allow untag operations with no container validation 1225 - Add auth config to docker build 1226 1227 #### Documentation 1228 1229 * Add more information about Docker logging 1230 + Add RHEL documentation 1231 * Add a direct example for changing the CMD that is run in a container 1232 * Update Arch installation documentation 1233 + Add section on Trusted Builds 1234 + Add Network documentation page 1235 1236 #### Other 1237 1238 + Add new cover bundle for providing code coverage reporting 1239 * Separate integration tests in bundles 1240 * Make Tianon the hack maintainer 1241 * Update mkimage-debootstrap with more tweaks for keeping images small 1242 * Use https to get the install script 1243 * Remove vendored dotcloud/tar now that Go 1.2 has been released 1244 1245 ## 0.7.1 (2013-12-05) 1246 1247 #### Documentation 1248 1249 + Add @SvenDowideit as documentation maintainer 1250 + Add links example 1251 + Add documentation regarding ambassador pattern 1252 + Add Google Cloud Platform docs 1253 + Add dockerfile best practices 1254 * Update doc for RHEL 1255 * Update doc for registry 1256 * Update Postgres examples 1257 * Update doc for Ubuntu install 1258 * Improve remote api doc 1259 1260 #### Runtime 1261 1262 + Add hostconfig to docker inspect 1263 + Implement `docker log -f` to stream logs 1264 + Add env variable to disable kernel version warning 1265 + Add -format to `docker inspect` 1266 + Support bind-mount for files 1267 - Fix bridge creation on RHEL 1268 - Fix image size calculation 1269 - Make sure iptables are called even if the bridge already exists 1270 - Fix issue with stderr only attach 1271 - Remove init layer when destroying a container 1272 - Fix same port binding on different interfaces 1273 - `docker build` now returns the correct exit code 1274 - Fix `docker port` to display correct port 1275 - `docker build` now check that the dockerfile exists client side 1276 - `docker attach` now returns the correct exit code 1277 - Remove the name entry when the container does not exist 1278 1279 #### Registry 1280 1281 * Improve progress bars, add ETA for downloads 1282 * Simultaneous pulls now waits for the first to finish instead of failing 1283 - Tag only the top-layer image when pushing to registry 1284 - Fix issue with offline image transfer 1285 - Fix issue preventing using ':' in password for registry 1286 1287 #### Other 1288 1289 + Add pprof handler for debug 1290 + Create a Makefile 1291 * Use stdlib tar that now includes fix 1292 * Improve make.sh test script 1293 * Handle SIGQUIT on the daemon 1294 * Disable verbose during tests 1295 * Upgrade to go1.2 for official build 1296 * Improve unit tests 1297 * The test suite now runs all tests even if one fails 1298 * Refactor C in Go (Devmapper) 1299 - Fix OS X compilation 1300 1301 ## 0.7.0 (2013-11-25) 1302 1303 #### Notable features since 0.6.0 1304 1305 * Storage drivers: choose from aufs, device-mapper, or vfs. 1306 * Standard Linux support: docker now runs on unmodified Linux kernels and all major distributions. 1307 * Links: compose complex software stacks by connecting containers to each other. 1308 * Container naming: organize your containers by giving them memorable names. 1309 * Advanced port redirects: specify port redirects per interface, or keep sensitive ports private. 1310 * Offline transfer: push and pull images to the filesystem without losing information. 1311 * Quality: numerous bugfixes and small usability improvements. Significant increase in test coverage. 1312 1313 ## 0.6.7 (2013-11-21) 1314 1315 #### Runtime 1316 1317 * Improve stability, fixes some race conditions 1318 * Skip the volumes mounted when deleting the volumes of container. 1319 * Fix layer size computation: handle hard links correctly 1320 * Use the work Path for docker cp CONTAINER:PATH 1321 * Fix tmp dir never cleanup 1322 * Speedup docker ps 1323 * More informative error message on name collisions 1324 * Fix nameserver regex 1325 * Always return long id's 1326 * Fix container restart race condition 1327 * Keep published ports on docker stop;docker start 1328 * Fix container networking on Fedora 1329 * Correctly express "any address" to iptables 1330 * Fix network setup when reconnecting to ghost container 1331 * Prevent deletion if image is used by a running container 1332 * Lock around read operations in graph 1333 1334 #### RemoteAPI 1335 1336 * Return full ID on docker rmi 1337 1338 #### Client 1339 1340 + Add -tree option to images 1341 + Offline image transfer 1342 * Exit with status 2 on usage error and display usage on stderr 1343 * Do not forward SIGCHLD to container 1344 * Use string timestamp for docker events -since 1345 1346 #### Other 1347 1348 * Update to go 1.2rc5 1349 + Add /etc/default/docker support to upstart 1350 1351 ## 0.6.6 (2013-11-06) 1352 1353 #### Runtime 1354 1355 * Ensure container name on register 1356 * Fix regression in /etc/hosts 1357 + Add lock around write operations in graph 1358 * Check if port is valid 1359 * Fix restart runtime error with ghost container networking 1360 + Add some more colors and animals to increase the pool of generated names 1361 * Fix issues in docker inspect 1362 + Escape apparmor confinement 1363 + Set environment variables using a file. 1364 * Prevent docker insert to erase something 1365 + Prevent DNS server conflicts in CreateBridgeIface 1366 + Validate bind mounts on the server side 1367 + Use parent image config in docker build 1368 * Fix regression in /etc/hosts 1369 1370 #### Client 1371 1372 + Add -P flag to publish all exposed ports 1373 + Add -notrunc and -q flags to docker history 1374 * Fix docker commit, tag and import usage 1375 + Add stars, trusted builds and library flags in docker search 1376 * Fix docker logs with tty 1377 1378 #### RemoteAPI 1379 1380 * Make /events API send headers immediately 1381 * Do not split last column docker top 1382 + Add size to history 1383 1384 #### Other 1385 1386 + Contrib: Desktop integration. Firefox usecase. 1387 + Dockerfile: bump to go1.2rc3 1388 1389 ## 0.6.5 (2013-10-29) 1390 1391 #### Runtime 1392 1393 + Containers can now be named 1394 + Containers can now be linked together for service discovery 1395 + 'run -a', 'start -a' and 'attach' can forward signals to the container for better integration with process supervisors 1396 + Automatically start crashed containers after a reboot 1397 + Expose IP, port, and proto as separate environment vars for container links 1398 * Allow ports to be published to specific ips 1399 * Prohibit inter-container communication by default 1400 - Ignore ErrClosedPipe for stdin in Container.Attach 1401 - Remove unused field kernelVersion 1402 * Fix issue when mounting subdirectories of /mnt in container 1403 - Fix untag during removal of images 1404 * Check return value of syscall.Chdir when changing working directory inside dockerinit 1405 1406 #### Client 1407 1408 - Only pass stdin to hijack when needed to avoid closed pipe errors 1409 * Use less reflection in command-line method invocation 1410 - Monitor the tty size after starting the container, not prior 1411 - Remove useless os.Exit() calls after log.Fatal 1412 1413 #### Hack 1414 1415 + Add initial init scripts library and a safer Ubuntu packaging script that works for Debian 1416 * Add -p option to invoke debootstrap with http_proxy 1417 - Update install.sh with $sh_c to get sudo/su for modprobe 1418 * Update all the mkimage scripts to use --numeric-owner as a tar argument 1419 * Update hack/release.sh process to automatically invoke hack/make.sh and bail on build and test issues 1420 1421 #### Other 1422 1423 * Documentation: Fix the flags for nc in example 1424 * Testing: Remove warnings and prevent mount issues 1425 - Testing: Change logic for tty resize to avoid warning in tests 1426 - Builder: Fix race condition in docker build with verbose output 1427 - Registry: Fix content-type for PushImageJSONIndex method 1428 * Contrib: Improve helper tools to generate debian and Arch linux server images 1429 1430 ## 0.6.4 (2013-10-16) 1431 1432 #### Runtime 1433 1434 - Add cleanup of container when Start() fails 1435 * Add better comments to utils/stdcopy.go 1436 * Add utils.Errorf for error logging 1437 + Add -rm to docker run for removing a container on exit 1438 - Remove error messages which are not actually errors 1439 - Fix `docker rm` with volumes 1440 - Fix some error cases where a HTTP body might not be closed 1441 - Fix panic with wrong dockercfg file 1442 - Fix the attach behavior with -i 1443 * Record termination time in state. 1444 - Use empty string so TempDir uses the OS's temp dir automatically 1445 - Make sure to close the network allocators 1446 + Autorestart containers by default 1447 * Bump vendor kr/pty to commit 3b1f6487b `(syscall.O_NOCTTY)` 1448 * lxc: Allow set_file_cap capability in container 1449 - Move run -rm to the cli only 1450 * Split stdout stderr 1451 * Always create a new session for the container 1452 1453 #### Testing 1454 1455 - Add aggregated docker-ci email report 1456 - Add cleanup to remove leftover containers 1457 * Add nightly release to docker-ci 1458 * Add more tests around auth.ResolveAuthConfig 1459 - Remove a few errors in tests 1460 - Catch errClosing error when TCP and UDP proxies are terminated 1461 * Only run certain tests with TESTFLAGS='-run TestName' make.sh 1462 * Prevent docker-ci to test closing PRs 1463 * Replace panic by log.Fatal in tests 1464 - Increase TestRunDetach timeout 1465 1466 #### Documentation 1467 1468 * Add initial draft of the Docker infrastructure doc 1469 * Add devenvironment link to CONTRIBUTING.md 1470 * Add `apt-get install curl` to Ubuntu docs 1471 * Add explanation for export restrictions 1472 * Add .dockercfg doc 1473 * Remove Gentoo install notes about #1422 workaround 1474 * Fix help text for -v option 1475 * Fix Ping endpoint documentation 1476 - Fix parameter names in docs for ADD command 1477 - Fix ironic typo in changelog 1478 * Various command fixes in postgres example 1479 * Document how to edit and release docs 1480 - Minor updates to `postgresql_service.rst` 1481 * Clarify LGTM process to contributors 1482 - Corrected error in the package name 1483 * Document what `vagrant up` is actually doing 1484 + improve doc search results 1485 * Cleanup whitespace in API 1.5 docs 1486 * use angle brackets in MAINTAINER example email 1487 * Update archlinux.rst 1488 + Changes to a new style for the docs. Includes version switcher. 1489 * Formatting, add information about multiline json 1490 * Improve registry and index REST API documentation 1491 - Replace deprecated upgrading reference to docker-latest.tgz, which hasn't been updated since 0.5.3 1492 * Update Gentoo installation documentation now that we're in the portage tree proper 1493 * Cleanup and reorganize docs and tooling for contributors and maintainers 1494 - Minor spelling correction of protocoll -> protocol 1495 1496 #### Contrib 1497 1498 * Add vim syntax highlighting for Dockerfiles from @honza 1499 * Add mkimage-arch.sh 1500 * Reorganize contributed completion scripts to add zsh completion 1501 1502 #### Hack 1503 1504 * Add vagrant user to the docker group 1505 * Add proper bash completion for "docker push" 1506 * Add xz utils as a runtime dep 1507 * Add cleanup/refactor portion of #2010 for hack and Dockerfile updates 1508 + Add contrib/mkimage-centos.sh back (from #1621), and associated documentation link 1509 * Add several of the small make.sh fixes from #1920, and make the output more consistent and contributor-friendly 1510 + Add @tianon to hack/MAINTAINERS 1511 * Improve network performance for VirtualBox 1512 * Revamp install.sh to be usable by more people, and to use official install methods whenever possible (apt repo, portage tree, etc.) 1513 - Fix contrib/mkimage-debian.sh apt caching prevention 1514 + Add Dockerfile.tmLanguage to contrib 1515 * Configured FPM to make /etc/init/docker.conf a config file 1516 * Enable SSH Agent forwarding in Vagrant VM 1517 * Several small tweaks/fixes for contrib/mkimage-debian.sh 1518 1519 #### Other 1520 1521 - Builder: Abort build if mergeConfig returns an error and fix duplicate error message 1522 - Packaging: Remove deprecated packaging directory 1523 - Registry: Use correct auth config when logging in. 1524 - Registry: Fix the error message so it is the same as the regex 1525 1526 ## 0.6.3 (2013-09-23) 1527 1528 #### Packaging 1529 1530 * Add 'docker' group on install for ubuntu package 1531 * Update tar vendor dependency 1532 * Download apt key over HTTPS 1533 1534 #### Runtime 1535 1536 - Only copy and change permissions on non-bindmount volumes 1537 * Allow multiple volumes-from 1538 - Fix HTTP imports from STDIN 1539 1540 #### Documentation 1541 1542 * Update section on extracting the docker binary after build 1543 * Update development environment docs for new build process 1544 * Remove 'base' image from documentation 1545 1546 #### Other 1547 1548 - Client: Fix detach issue 1549 - Registry: Update regular expression to match index 1550 1551 ## 0.6.2 (2013-09-17) 1552 1553 #### Runtime 1554 1555 + Add domainname support 1556 + Implement image filtering with path.Match 1557 * Remove unnecessary warnings 1558 * Remove os/user dependency 1559 * Only mount the hostname file when the config exists 1560 * Handle signals within the `docker login` command 1561 - UID and GID are now also applied to volumes 1562 - `docker start` set error code upon error 1563 - `docker run` set the same error code as the process started 1564 1565 #### Builder 1566 1567 + Add -rm option in order to remove intermediate containers 1568 * Allow multiline for the RUN instruction 1569 1570 #### Registry 1571 1572 * Implement login with private registry 1573 - Fix push issues 1574 1575 #### Other 1576 1577 + Hack: Vendor all dependencies 1578 * Remote API: Bump to v1.5 1579 * Packaging: Break down hack/make.sh into small scripts, one per 'bundle': test, binary, ubuntu etc. 1580 * Documentation: General improvements 1581 1582 ## 0.6.1 (2013-08-23) 1583 1584 #### Registry 1585 1586 * Pass "meta" headers in API calls to the registry 1587 1588 #### Packaging 1589 1590 - Use correct upstart script with new build tool 1591 - Use libffi-dev, don`t build it from sources 1592 - Remove duplicate mercurial install command 1593 1594 ## 0.6.0 (2013-08-22) 1595 1596 #### Runtime 1597 1598 + Add lxc-conf flag to allow custom lxc options 1599 + Add an option to set the working directory 1600 * Add Image name to LogEvent tests 1601 + Add -privileged flag and relevant tests, docs, and examples 1602 * Add websocket support to /container/<name>/attach/ws 1603 * Add warning when net.ipv4.ip_forwarding = 0 1604 * Add hostname to environment 1605 * Add last stable version in `docker version` 1606 - Fix race conditions in parallel pull 1607 - Fix Graph ByParent() to generate list of child images per parent image. 1608 - Fix typo: fmt.Sprint -> fmt.Sprintf 1609 - Fix small \n error un docker build 1610 * Fix to "Inject dockerinit at /.dockerinit" 1611 * Fix #910. print user name to docker info output 1612 * Use Go 1.1.2 for dockerbuilder 1613 * Use ranged for loop on channels 1614 - Use utils.ParseRepositoryTag instead of strings.Split(name, ":") in server.ImageDelete 1615 - Improve CMD, ENTRYPOINT, and attach docs. 1616 - Improve connect message with socket error 1617 - Load authConfig only when needed and fix useless WARNING 1618 - Show tag used when image is missing 1619 * Apply volumes-from before creating volumes 1620 - Make docker run handle SIGINT/SIGTERM 1621 - Prevent crash when .dockercfg not readable 1622 - Install script should be fetched over https, not http. 1623 * API, issue 1471: Use groups for socket permissions 1624 - Correctly detect IPv4 forwarding 1625 * Mount /dev/shm as a tmpfs 1626 - Switch from http to https for get.docker.io 1627 * Let userland proxy handle container-bound traffic 1628 * Update the Docker CLI to specify a value for the "Host" header. 1629 - Change network range to avoid conflict with EC2 DNS 1630 - Reduce connect and read timeout when pinging the registry 1631 * Parallel pull 1632 - Handle ip route showing mask-less IP addresses 1633 * Allow ENTRYPOINT without CMD 1634 - Always consider localhost as a domain name when parsing the FQN repos name 1635 * Refactor checksum 1636 1637 #### Documentation 1638 1639 * Add MongoDB image example 1640 * Add instructions for creating and using the docker group 1641 * Add sudo to examples and installation to documentation 1642 * Add ufw doc 1643 * Add a reference to ps -a 1644 * Add information about Docker`s high level tools over LXC. 1645 * Fix typo in docs for docker run -dns 1646 * Fix a typo in the ubuntu installation guide 1647 * Fix to docs regarding adding docker groups 1648 * Update default -H docs 1649 * Update readme with dependencies for building 1650 * Update amazon.rst to explain that Vagrant is not necessary for running Docker on ec2 1651 * PostgreSQL service example in documentation 1652 * Suggest installing linux-headers by default. 1653 * Change the twitter handle 1654 * Clarify Amazon EC2 installation 1655 * 'Base' image is deprecated and should no longer be referenced in the docs. 1656 * Move note about officially supported kernel 1657 - Solved the logo being squished in Safari 1658 1659 #### Builder 1660 1661 + Add USER instruction do Dockerfile 1662 + Add workdir support for the Buildfile 1663 * Add no cache for docker build 1664 - Fix docker build and docker events output 1665 - Only count known instructions as build steps 1666 - Make sure ENV instruction within build perform a commit each time 1667 - Forbid certain paths within docker build ADD 1668 - Repository name (and optionally a tag) in build usage 1669 - Make sure ADD will create everything in 0755 1670 1671 #### Remote API 1672 1673 * Sort Images by most recent creation date. 1674 * Reworking opaque requests in registry module 1675 * Add image name in /events 1676 * Use mime pkg to parse Content-Type 1677 * 650 http utils and user agent field 1678 1679 #### Hack 1680 1681 + Bash Completion: Limit commands to containers of a relevant state 1682 * Add docker dependencies coverage testing into docker-ci 1683 1684 #### Packaging 1685 1686 + Docker-brew 0.5.2 support and memory footprint reduction 1687 * Add new docker dependencies into docker-ci 1688 - Revert "docker.upstart: avoid spawning a `sh` process" 1689 + Docker-brew and Docker standard library 1690 + Release docker with docker 1691 * Fix the upstart script generated by get.docker.io 1692 * Enabled the docs to generate manpages. 1693 * Revert Bind daemon to 0.0.0.0 in Vagrant. 1694 1695 #### Register 1696 1697 * Improve auth push 1698 * Registry unit tests + mock registry 1699 1700 #### Tests 1701 1702 * Improve TestKillDifferentUser to prevent timeout on buildbot 1703 - Fix typo in TestBindMounts (runContainer called without image) 1704 * Improve TestGetContainersTop so it does not rely on sleep 1705 * Relax the lo interface test to allow iface index != 1 1706 * Add registry functional test to docker-ci 1707 * Add some tests in server and utils 1708 1709 #### Other 1710 1711 * Contrib: bash completion script 1712 * Client: Add docker cp command and copy api endpoint to copy container files/folders to the host 1713 * Don`t read from stdout when only attached to stdin 1714 1715 ## 0.5.3 (2013-08-13) 1716 1717 #### Runtime 1718 1719 * Use docker group for socket permissions 1720 - Spawn shell within upstart script 1721 - Handle ip route showing mask-less IP addresses 1722 - Add hostname to environment 1723 1724 #### Builder 1725 1726 - Make sure ENV instruction within build perform a commit each time 1727 1728 ## 0.5.2 (2013-08-08) 1729 1730 * Builder: Forbid certain paths within docker build ADD 1731 - Runtime: Change network range to avoid conflict with EC2 DNS 1732 * API: Change daemon to listen on unix socket by default 1733 1734 ## 0.5.1 (2013-07-30) 1735 1736 #### Runtime 1737 1738 + Add `ps` args to `docker top` 1739 + Add support for container ID files (pidfile like) 1740 + Add container=lxc in default env 1741 + Support networkless containers with `docker run -n` and `docker -d -b=none` 1742 * Stdout/stderr logs are now stored in the same file as JSON 1743 * Allocate a /16 IP range by default, with fallback to /24. Try 12 ranges instead of 3. 1744 * Change .dockercfg format to json and support multiple auth remote 1745 - Do not override volumes from config 1746 - Fix issue with EXPOSE override 1747 1748 #### API 1749 1750 + Docker client now sets useragent (RFC 2616) 1751 + Add /events endpoint 1752 1753 #### Builder 1754 1755 + ADD command now understands URLs 1756 + CmdAdd and CmdEnv now respect Dockerfile-set ENV variables 1757 - Create directories with 755 instead of 700 within ADD instruction 1758 1759 #### Hack 1760 1761 * Simplify unit tests with helpers 1762 * Improve docker.upstart event 1763 * Add coverage testing into docker-ci 1764 1765 ## 0.5.0 (2013-07-17) 1766 1767 #### Runtime 1768 1769 + List all processes running inside a container with 'docker top' 1770 + Host directories can be mounted as volumes with 'docker run -v' 1771 + Containers can expose public UDP ports (eg, '-p 123/udp') 1772 + Optionally specify an exact public port (eg. '-p 80:4500') 1773 * 'docker login' supports additional options 1774 - Dont save a container`s hostname when committing an image. 1775 1776 #### Registry 1777 1778 + New image naming scheme inspired by Go packaging convention allows arbitrary combinations of registries 1779 - Fix issues when uploading images to a private registry 1780 1781 #### Builder 1782 1783 + ENTRYPOINT instruction sets a default binary entry point to a container 1784 + VOLUME instruction marks a part of the container as persistent data 1785 * 'docker build' displays the full output of a build by default 1786 1787 ## 0.4.8 (2013-07-01) 1788 1789 + Builder: New build operation ENTRYPOINT adds an executable entry point to the container. - Runtime: Fix a bug which caused 'docker run -d' to no longer print the container ID. 1790 - Tests: Fix issues in the test suite 1791 1792 ## 0.4.7 (2013-06-28) 1793 1794 #### Remote API 1795 1796 * The progress bar updates faster when downloading and uploading large files 1797 - Fix a bug in the optional unix socket transport 1798 1799 #### Runtime 1800 1801 * Improve detection of kernel version 1802 + Host directories can be mounted as volumes with 'docker run -b' 1803 - fix an issue when only attaching to stdin 1804 * Use 'tar --numeric-owner' to avoid uid mismatch across multiple hosts 1805 1806 #### Hack 1807 1808 * Improve test suite and dev environment 1809 * Remove dependency on unit tests on 'os/user' 1810 1811 #### Other 1812 1813 * Registry: easier push/pull to a custom registry 1814 + Documentation: add terminology section 1815 1816 ## 0.4.6 (2013-06-22) 1817 1818 - Runtime: fix a bug which caused creation of empty images (and volumes) to crash. 1819 1820 ## 0.4.5 (2013-06-21) 1821 1822 + Builder: 'docker build git://URL' fetches and builds a remote git repository 1823 * Runtime: 'docker ps -s' optionally prints container size 1824 * Tests: improved and simplified 1825 - Runtime: fix a regression introduced in 0.4.3 which caused the logs command to fail. 1826 - Builder: fix a regression when using ADD with single regular file. 1827 1828 ## 0.4.4 (2013-06-19) 1829 1830 - Builder: fix a regression introduced in 0.4.3 which caused builds to fail on new clients. 1831 1832 ## 0.4.3 (2013-06-19) 1833 1834 #### Builder 1835 1836 + ADD of a local file will detect tar archives and unpack them 1837 * ADD improvements: use tar for copy + automatically unpack local archives 1838 * ADD uses tar/untar for copies instead of calling 'cp -ar' 1839 * Fix the behavior of ADD to be (mostly) reverse-compatible, predictable and well-documented. 1840 - Fix a bug which caused builds to fail if ADD was the first command 1841 * Nicer output for 'docker build' 1842 1843 #### Runtime 1844 1845 * Remove bsdtar dependency 1846 * Add unix socket and multiple -H support 1847 * Prevent rm of running containers 1848 * Use go1.1 cookiejar 1849 - Fix issue detaching from running TTY container 1850 - Forbid parallel push/pull for a single image/repo. Fixes #311 1851 - Fix race condition within Run command when attaching. 1852 1853 #### Client 1854 1855 * HumanReadable ProgressBar sizes in pull 1856 * Fix docker version`s git commit output 1857 1858 #### API 1859 1860 * Send all tags on History API call 1861 * Add tag lookup to history command. Fixes #882 1862 1863 #### Documentation 1864 1865 - Fix missing command in irc bouncer example 1866 1867 ## 0.4.2 (2013-06-17) 1868 1869 - Packaging: Bumped version to work around an Ubuntu bug 1870 1871 ## 0.4.1 (2013-06-17) 1872 1873 #### Remote Api 1874 1875 + Add flag to enable cross domain requests 1876 + Add images and containers sizes in docker ps and docker images 1877 1878 #### Runtime 1879 1880 + Configure dns configuration host-wide with 'docker -d -dns' 1881 + Detect faulty DNS configuration and replace it with a public default 1882 + Allow docker run <name>:<id> 1883 + You can now specify public port (ex: -p 80:4500) 1884 * Improve image removal to garbage-collect unreferenced parents 1885 1886 #### Client 1887 1888 * Allow multiple params in inspect 1889 * Print the container id before the hijack in `docker run` 1890 1891 #### Registry 1892 1893 * Add regexp check on repo`s name 1894 * Move auth to the client 1895 - Remove login check on pull 1896 1897 #### Other 1898 1899 * Vagrantfile: Add the rest api port to vagrantfile`s port_forward 1900 * Upgrade to Go 1.1 1901 - Builder: don`t ignore last line in Dockerfile when it doesn`t end with \n 1902 1903 ## 0.4.0 (2013-06-03) 1904 1905 #### Builder 1906 1907 + Introducing Builder 1908 + 'docker build' builds a container, layer by layer, from a source repository containing a Dockerfile 1909 1910 #### Remote API 1911 1912 + Introducing Remote API 1913 + control Docker programmatically using a simple HTTP/json API 1914 1915 #### Runtime 1916 1917 * Various reliability and usability improvements 1918 1919 ## 0.3.4 (2013-05-30) 1920 1921 #### Builder 1922 1923 + 'docker build' builds a container, layer by layer, from a source repository containing a Dockerfile 1924 + 'docker build -t FOO' applies the tag FOO to the newly built container. 1925 1926 #### Runtime 1927 1928 + Interactive TTYs correctly handle window resize 1929 * Fix how configuration is merged between layers 1930 1931 #### Remote API 1932 1933 + Split stdout and stderr on 'docker run' 1934 + Optionally listen on a different IP and port (use at your own risk) 1935 1936 #### Documentation 1937 1938 * Improve install instructions. 1939 1940 ## 0.3.3 (2013-05-23) 1941 1942 - Registry: Fix push regression 1943 - Various bugfixes 1944 1945 ## 0.3.2 (2013-05-09) 1946 1947 #### Registry 1948 1949 * Improve the checksum process 1950 * Use the size to have a good progress bar while pushing 1951 * Use the actual archive if it exists in order to speed up the push 1952 - Fix error 400 on push 1953 1954 #### Runtime 1955 1956 * Store the actual archive on commit 1957 1958 ## 0.3.1 (2013-05-08) 1959 1960 #### Builder 1961 1962 + Implement the autorun capability within docker builder 1963 + Add caching to docker builder 1964 + Add support for docker builder with native API as top level command 1965 + Implement ENV within docker builder 1966 - Check the command existence prior create and add Unit tests for the case 1967 * use any whitespaces instead of tabs 1968 1969 #### Runtime 1970 1971 + Add go version to debug infos 1972 * Kernel version - don`t show the dash if flavor is empty 1973 1974 #### Registry 1975 1976 + Add docker search top level command in order to search a repository 1977 - Fix pull for official images with specific tag 1978 - Fix issue when login in with a different user and trying to push 1979 * Improve checksum - async calculation 1980 1981 #### Images 1982 1983 + Output graph of images to dot (graphviz) 1984 - Fix ByParent function 1985 1986 #### Documentation 1987 1988 + New introduction and high-level overview 1989 + Add the documentation for docker builder 1990 - CSS fix for docker documentation to make REST API docs look better. 1991 - Fix CouchDB example page header mistake 1992 - Fix README formatting 1993 * Update www.docker.io website. 1994 1995 #### Other 1996 1997 + Website: new high-level overview 1998 - Makefile: Swap "go get" for "go get -d", especially to compile on go1.1rc 1999 * Packaging: packaging ubuntu; issue #510: Use goland-stable PPA package to build docker 2000 2001 ## 0.3.0 (2013-05-06) 2002 2003 #### Runtime 2004 2005 - Fix the command existence check 2006 - strings.Split may return an empty string on no match 2007 - Fix an index out of range crash if cgroup memory is not 2008 2009 #### Documentation 2010 2011 * Various improvements 2012 + New example: sharing data between 2 couchdb databases 2013 2014 #### Other 2015 2016 * Vagrant: Use only one deb line in /etc/apt 2017 + Registry: Implement the new registry 2018 2019 ## 0.2.2 (2013-05-03) 2020 2021 + Support for data volumes ('docker run -v=PATH') 2022 + Share data volumes between containers ('docker run -volumes-from') 2023 + Improve documentation 2024 * Upgrade to Go 1.0.3 2025 * Various upgrades to the dev environment for contributors 2026 2027 ## 0.2.1 (2013-05-01) 2028 2029 + 'docker commit -run' bundles a layer with default runtime options: command, ports etc. 2030 * Improve install process on Vagrant 2031 + New Dockerfile operation: "maintainer" 2032 + New Dockerfile operation: "expose" 2033 + New Dockerfile operation: "cmd" 2034 + Contrib script to build a Debian base layer 2035 + 'docker -d -r': restart crashed containers at daemon startup 2036 * Runtime: improve test coverage 2037 2038 ## 0.2.0 (2013-04-23) 2039 2040 - Runtime: ghost containers can be killed and waited for 2041 * Documentation: update install instructions 2042 - Packaging: fix Vagrantfile 2043 - Development: automate releasing binaries and ubuntu packages 2044 + Add a changelog 2045 - Various bugfixes 2046 2047 ## 0.1.8 (2013-04-22) 2048 2049 - Dynamically detect cgroup capabilities 2050 - Issue stability warning on kernels <3.8 2051 - 'docker push' buffers on disk instead of memory 2052 - Fix 'docker diff' for removed files 2053 - Fix 'docker stop' for ghost containers 2054 - Fix handling of pidfile 2055 - Various bugfixes and stability improvements 2056 2057 ## 0.1.7 (2013-04-18) 2058 2059 - Container ports are available on localhost 2060 - 'docker ps' shows allocated TCP ports 2061 - Contributors can run 'make hack' to start a continuous integration VM 2062 - Streamline ubuntu packaging & uploading 2063 - Various bugfixes and stability improvements 2064 2065 ## 0.1.6 (2013-04-17) 2066 2067 - Record the author an image with 'docker commit -author' 2068 2069 ## 0.1.5 (2013-04-17) 2070 2071 - Disable standalone mode 2072 - Use a custom DNS resolver with 'docker -d -dns' 2073 - Detect ghost containers 2074 - Improve diagnosis of missing system capabilities 2075 - Allow disabling memory limits at compile time 2076 - Add debian packaging 2077 - Documentation: installing on Arch Linux 2078 - Documentation: running Redis on docker 2079 - Fix lxc 0.9 compatibility 2080 - Automatically load aufs module 2081 - Various bugfixes and stability improvements 2082 2083 ## 0.1.4 (2013-04-09) 2084 2085 - Full support for TTY emulation 2086 - Detach from a TTY session with the escape sequence `C-p C-q` 2087 - Various bugfixes and stability improvements 2088 - Minor UI improvements 2089 - Automatically create our own bridge interface 'docker0' 2090 2091 ## 0.1.3 (2013-04-04) 2092 2093 - Choose TCP frontend port with '-p :PORT' 2094 - Layer format is versioned 2095 - Major reliability improvements to the process manager 2096 - Various bugfixes and stability improvements 2097 2098 ## 0.1.2 (2013-04-03) 2099 2100 - Set container hostname with 'docker run -h' 2101 - Selective attach at run with 'docker run -a [stdin[,stdout[,stderr]]]' 2102 - Various bugfixes and stability improvements 2103 - UI polish 2104 - Progress bar on push/pull 2105 - Use XZ compression by default 2106 - Make IP allocator lazy 2107 2108 ## 0.1.1 (2013-03-31) 2109 2110 - Display shorthand IDs for convenience 2111 - Stabilize process management 2112 - Layers can include a commit message 2113 - Simplified 'docker attach' 2114 - Fix support for re-attaching 2115 - Various bugfixes and stability improvements 2116 - Auto-download at run 2117 - Auto-login on push 2118 - Beefed up documentation 2119 2120 ## 0.1.0 (2013-03-23) 2121 2122 Initial public release 2123 2124 - Implement registry in order to push/pull images 2125 - TCP port allocation 2126 - Fix termcaps on Linux 2127 - Add documentation 2128 - Add Vagrant support with Vagrantfile 2129 - Add unit tests 2130 - Add repository/tags to ease image management 2131 - Improve the layer implementation