github.com/portworx/docker@v1.12.1/CHANGELOG.md (about) 1 # Changelog 2 3 Items starting with `DEPRECATE` are important deprecation notices. For more 4 information on the list of deprecated flags and APIs please have a look at 5 https://docs.docker.com/engine/deprecated/ where target removal dates can also 6 be found. 7 8 ## 1.12.1 (2016-08-18) 9 10 **IMPORTANT**: Docker 1.12 ships with an updated systemd unit file for rpm 11 based installs (which includes RHEL, Fedora, CentOS, and Oracle Linux 7). When 12 upgrading from an older version of docker, the upgrade process may not 13 automatically install the updated version of the unit file, or fail to start 14 the docker service if; 15 16 - the systemd unit file (`/usr/lib/systemd/system/docker.service`) contains local changes, or 17 - a systemd drop-in file is present, and contains `-H fd://` in the `ExecStart` directive 18 19 Starting the docker service will produce an error: 20 21 Failed to start docker.service: Unit docker.socket failed to load: No such file or directory. 22 23 or 24 25 no sockets found via socket activation: make sure the service was started by systemd. 26 27 To resolve this: 28 29 - Backup the current version of the unit file, and replace the file with the 30 [version that ships with docker 1.12](https://raw.githubusercontent.com/docker/docker/v1.12.0/contrib/init/systemd/docker.service.rpm) 31 - Remove the `Requires=docker.socket` directive from the `/usr/lib/systemd/system/docker.service` file if present 32 - Remove `-H fd://` from the `ExecStart` directive (both in the main unit file, and in any drop-in files present). 33 34 After making those changes, run `sudo systemctl daemon-reload`, and `sudo 35 systemctl restart docker` to reload changes and (re)start the docker daemon. 36 37 38 ### Client 39 40 * Add `Joined at` information in `node inspect --pretty` [#25512](https://github.com/docker/docker/pull/25512) 41 - Fix a crash on `service inspect` [#25454](https://github.com/docker/docker/pull/25454) 42 - Fix issue preventing `service update --env-add` to work as intended [#25427](https://github.com/docker/docker/pull/25427) 43 - Fix issue preventing `service update --publish-add` to work as intended [#25428](https://github.com/docker/docker/pull/25428) 44 - Remove `service update --network-add` and `service update --network-rm` flags 45 because this feature is not yet implemented in 1.12, but was inadvertently added 46 to the client in 1.12.0 [#25646](https://github.com/docker/docker/pull/25646) 47 48 ### Contrib 49 50 + Official ARM installation for Debian Jessie, Ubuntu Trusty, and Raspbian Jessie [#24815](https://github.com/docker/docker/pull/24815) [#25591](https://github.com/docker/docker/pull/25637) 51 - Add selinux policy per distro/version, fixing issue preventing successful installation on Fedora 24, and Oracle Linux [#25334](https://github.com/docker/docker/pull/25334) [#25593](https://github.com/docker/docker/pull/25593) 52 53 ### Networking 54 55 - Fix issue that prevented containers to be accessed by hostname with Docker overlay driver in Swarm Mode [#25603](https://github.com/docker/docker/pull/25603) [#25648](https://github.com/docker/docker/pull/25648) 56 - Fix random network issues on service with published port [#25603](https://github.com/docker/docker/pull/25603) 57 - Fix unreliable inter-service communication after scaling down and up [#25603](https://github.com/docker/docker/pull/25603) 58 - Fix issue where removing all tasks on a node and adding them back breaks connectivity with other services [#25603](https://github.com/docker/docker/pull/25603) 59 - Fix issue where a task that fails to start results in a race, causing a `network xxx not found` error that masks the actual error [#25550](https://github.com/docker/docker/pull/25550) 60 - Relax validation of SRV records for external services that use SRV records not formatted according to RFC 2782 [#25739](https://github.com/docker/docker/pull/25739) 61 62 ### Plugins (experimental) 63 64 * Make daemon events listen for plugin lifecycle events [#24760](https://github.com/docker/docker/pull/24760) 65 * Check for plugin state before enabling plugin [#25033](https://github.com/docker/docker/pull/25033) 66 - Remove plugin root from filesystem on `plugin rm` [#25187](https://github.com/docker/docker/pull/25187) 67 - Prevent deadlock when more than one plugin is installed [#25384](https://github.com/docker/docker/pull/25384) 68 69 ### Runtime 70 71 * Mask join tokens in daemon logs [#25346](https://github.com/docker/docker/pull/25346) 72 - Fix `docker ps --filter` causing the results to no longer be sorted by creation time [#25387](https://github.com/docker/docker/pull/25387) 73 - Fix various crashes [#25053](https://github.com/docker/docker/pull/25053) 74 75 ### Security 76 77 * Add `/proc/timer_list` to the masked paths list to prevent information leak from the host [#25630](https://github.com/docker/docker/pull/25630) 78 * Allow systemd to run with only `--cap-add SYS_ADMIN` rather than having to also add `--cap-add DAC_READ_SEARCH` or disabling seccomp filtering [#25567](https://github.com/docker/docker/pull/25567) 79 80 ### Swarm 81 82 - Fix an issue where the swarm can get stuck electing a new leader after quorum is lost [#25055](https://github.com/docker/docker/issues/25055) 83 - Fix unwanted rescheduling of containers after a leader failover [#25017](https://github.com/docker/docker/issues/25017) 84 - Change swarm root CA key to P256 curve [swarmkit#1376](https://github.com/docker/swarmkit/pull/1376) 85 - Allow forced removal of a node from a swarm [#25159](https://github.com/docker/docker/pull/25159) 86 - Fix connection leak when a node leaves a swarm [swarmkit/#1277](https://github.com/docker/swarmkit/pull/1277) 87 - Backdate swarm certificates by one hour to tolerate more clock skew [swarmkit/#1243](https://github.com/docker/swarmkit/pull/1243) 88 - Avoid high CPU use with many unschedulable tasks [swarmkit/#1287](https://github.com/docker/swarmkit/pull/1287) 89 - Fix issue with global tasks not starting up [swarmkit/#1295](https://github.com/docker/swarmkit/pull/1295) 90 - Garbage collect raft logs [swarmkit/#1327](https://github.com/docker/swarmkit/pull/1327) 91 92 ### Volume 93 94 - Persist local volume options after a daemon restart [#25316](https://github.com/docker/docker/pull/25316) 95 - Fix an issue where the mount ID was not returned on volume unmount [#25333](https://github.com/docker/docker/pull/25333) 96 - Fix an issue where a volume mount could inadvertently create a bind mount [#25309](https://github.com/docker/docker/pull/25309) 97 - `docker service create --mount type=bind,...` now correctly validates if the source path exists, instead of creating it [#25494](https://github.com/docker/docker/pull/25494) 98 99 ## 1.12.0 (2016-07-28) 100 101 102 **IMPORTANT**: Docker 1.12.0 ships with an updated systemd unit file for rpm 103 based installs (which includes RHEL, Fedora, CentOS, and Oracle Linux 7). When 104 upgrading from an older version of docker, the upgrade process may not 105 automatically install the updated version of the unit file, or fail to start 106 the docker service if; 107 108 - the systemd unit file (`/usr/lib/systemd/system/docker.service`) contains local changes, or 109 - a systemd drop-in file is present, and contains `-H fd://` in the `ExecStart` directive 110 111 Starting the docker service will produce an error: 112 113 Failed to start docker.service: Unit docker.socket failed to load: No such file or directory. 114 115 or 116 117 no sockets found via socket activation: make sure the service was started by systemd. 118 119 To resolve this: 120 121 - Backup the current version of the unit file, and replace the file with the 122 [version that ships with docker 1.12](https://raw.githubusercontent.com/docker/docker/v1.12.0/contrib/init/systemd/docker.service.rpm) 123 - Remove the `Requires=docker.socket` directive from the `/usr/lib/systemd/system/docker.service` file if present 124 - Remove `-H fd://` from the `ExecStart` directive (both in the main unit file, and in any drop-in files present). 125 126 After making those changes, run `sudo systemctl daemon-reload`, and `sudo 127 systemctl restart docker` to reload changes and (re)start the docker daemon. 128 129 **IMPORTANT**: With Docker 1.12, a Linux docker installation now has two 130 additional binaries; `dockerd`, and `docker-proxy`. If you have scripts for 131 installing docker, please make sure to update them accordingly. 132 133 ### Builder 134 135 + New `HEALTHCHECK` Dockerfile instruction to support user-defined healthchecks [#23218](https://github.com/docker/docker/pull/23218) 136 + New `SHELL` Dockerfile instruction to specify the default shell when using the shell form for commands in a Dockerfile [#22489](https://github.com/docker/docker/pull/22489) 137 + Add `#escape=` Dockerfile directive to support platform-specific parsing of file paths in Dockerfile [#22268](https://github.com/docker/docker/pull/22268) 138 + Add support for comments in `.dockerignore` [#23111](https://github.com/docker/docker/pull/23111) 139 * Support for UTF-8 in Dockerfiles [#23372](https://github.com/docker/docker/pull/23372) 140 * Skip UTF-8 BOM bytes from `Dockerfile` and `.dockerignore` if exist [#23234](https://github.com/docker/docker/pull/23234) 141 * Windows: support for `ARG` to match Linux [#22508](https://github.com/docker/docker/pull/22508) 142 - Fix error message when building using a daemon with the bridge network disabled [#22932](https://github.com/docker/docker/pull/22932) 143 144 ### Contrib 145 146 * Enable seccomp for Centos 7 and Oracle Linux 7 [#22344](https://github.com/docker/docker/pull/22344) 147 - Remove MountFlags in systemd unit to allow shared mount propagation [#22806](https://github.com/docker/docker/pull/22806) 148 149 ### Distribution 150 151 + Add `--max-concurrent-downloads` and `--max-concurrent-uploads` daemon flags useful for situations where network connections don't support multiple downloads/uploads [#22445](https://github.com/docker/docker/pull/22445) 152 * Registry operations now honor the `ALL_PROXY` environment variable [#22316](https://github.com/docker/docker/pull/22316) 153 * Provide more information to the user on `docker load` [#23377](https://github.com/docker/docker/pull/23377) 154 * Always save registry digest metadata about images pushed and pulled [#23996](https://github.com/docker/docker/pull/23996) 155 156 ### Logging 157 158 + Syslog logging driver now supports DGRAM sockets [#21613](https://github.com/docker/docker/pull/21613) 159 + Add `--details` option to `docker logs` to also display log tags [#21889](https://github.com/docker/docker/pull/21889) 160 + Enable syslog logger to have access to env and labels [#21724](https://github.com/docker/docker/pull/21724) 161 + An additional syslog-format option `rfc5424micro` to allow microsecond resolution in syslog timestamp [#21844](https://github.com/docker/docker/pull/21844) 162 * Inherit the daemon log options when creating containers [#21153](https://github.com/docker/docker/pull/21153) 163 * Remove `docker/` prefix from log messages tag and replace it with `{{.DaemonName}}` so that users have the option of changing the prefix [#22384](https://github.com/docker/docker/pull/22384) 164 165 ### Networking 166 167 + Built-in Virtual-IP based internal and ingress load-balancing using IPVS [#23361](https://github.com/docker/docker/pull/23361) 168 + Routing Mesh using ingress overlay network [#23361](https://github.com/docker/docker/pull/23361) 169 + Secured multi-host overlay networking using encrypted control-plane and Data-plane [#23361](https://github.com/docker/docker/pull/23361) 170 + MacVlan driver is out of experimental [#23524](https://github.com/docker/docker/pull/23524) 171 + Add `driver` filter to `network ls` [#22319](https://github.com/docker/docker/pull/22319) 172 + Adding `network` filter to `docker ps --filter` [#23300](https://github.com/docker/docker/pull/23300) 173 + Add `--link-local-ip` flag to `create`, `run` and `network connect` to specify a container's link-local address [#23415](https://github.com/docker/docker/pull/23415) 174 + Add network label filter support [#21495](https://github.com/docker/docker/pull/21495) 175 * Removed dependency on external KV-Store for Overlay networking in Swarm-Mode [#23361](https://github.com/docker/docker/pull/23361) 176 * Add container's short-id as default network alias [#21901](https://github.com/docker/docker/pull/21901) 177 * `run` options `--dns` and `--net=host` are no longer mutually exclusive [#22408](https://github.com/docker/docker/pull/22408) 178 - Fix DNS issue when renaming containers with generated names [#22716](https://github.com/docker/docker/pull/22716) 179 - Allow both `network inspect -f {{.Id}}` and `network inspect -f {{.ID}}` to address inconsistency with inspect output [#23226](https://github.com/docker/docker/pull/23226) 180 181 ### Plugins (experimental) 182 183 + New `plugin` command to manager plugins with `install`, `enable`, `disable`, `rm`, `inspect`, `set` subcommands [#23446](https://github.com/docker/docker/pull/23446) 184 185 ### Remote API (v1.24) & Client 186 187 + Split the binary into two: `docker` (client) and `dockerd` (daemon) [#20639](https://github.com/docker/docker/pull/20639) 188 + Add `before` and `since` filters to `docker images --filter` [#22908](https://github.com/docker/docker/pull/22908) 189 + Add `--limit` option to `docker search` [#23107](https://github.com/docker/docker/pull/23107) 190 + Add `--filter` option to `docker search` [#22369](https://github.com/docker/docker/pull/22369) 191 + Add security options to `docker info` output [#21172](https://github.com/docker/docker/pull/21172) [#23520](https://github.com/docker/docker/pull/23520) 192 + Add insecure registries to `docker info` output [#20410](https://github.com/docker/docker/pull/20410) 193 + Extend Docker authorization with TLS user information [#21556](https://github.com/docker/docker/pull/21556) 194 + devicemapper: expose Mininum Thin Pool Free Space through `docker info` [#21945](https://github.com/docker/docker/pull/21945) 195 * API now returns a JSON object when an error occurs making it more consistent [#22880](https://github.com/docker/docker/pull/22880) 196 - Prevent `docker run -i --restart` from hanging on exit [#22777](https://github.com/docker/docker/pull/22777) 197 - Fix API/CLI discrepancy on hostname validation [#21641](https://github.com/docker/docker/pull/21641) 198 - Fix discrepancy in the format of sizes in `stats` from HumanSize to BytesSize [#21773](https://github.com/docker/docker/pull/21773) 199 - authz: when request is denied return forbbiden exit code (403) [#22448](https://github.com/docker/docker/pull/22448) 200 - Windows: fix tty-related displaying issues [#23878](https://github.com/docker/docker/pull/23878) 201 202 ### Runtime 203 204 + Split the userland proxy to a separate binary (`docker-proxy`) [#23312](https://github.com/docker/docker/pull/23312) 205 + Add `--live-restore` daemon flag to keep containers running when daemon shuts down, and regain control on startup [#23213](https://github.com/docker/docker/pull/23213) 206 + Ability to add OCI-compatible runtimes (via `--add-runtime` daemon flag) and select one with `--runtime` on `create` and `run` [#22983](https://github.com/docker/docker/pull/22983) 207 + New `overlay2` graphdriver for Linux 4.0+ with multiple lower directory support [#22126](https://github.com/docker/docker/pull/22126) 208 + New load/save image events [#22137](https://github.com/docker/docker/pull/22137) 209 + Add support for reloading daemon configuration through systemd [#22446](https://github.com/docker/docker/pull/22446) 210 + Add disk quota support for btrfs [#19651](https://github.com/docker/docker/pull/19651) 211 + Add disk quota support for zfs [#21946](https://github.com/docker/docker/pull/21946) 212 + Add support for `docker run --pid=container:<id>` [#22481](https://github.com/docker/docker/pull/22481) 213 + Align default seccomp profile with selected capabilities [#22554](https://github.com/docker/docker/pull/22554) 214 + Add a `daemon reload` event when the daemon reloads its configuration [#22590](https://github.com/docker/docker/pull/22590) 215 + Add `trace` capability in the pprof profiler to show execution traces in binary form [#22715](https://github.com/docker/docker/pull/22715) 216 + Add a `detach` event [#22898](https://github.com/docker/docker/pull/22898) 217 + Add support for setting sysctls with `--sysctl` [#19265](https://github.com/docker/docker/pull/19265) 218 + Add `--storage-opt` flag to `create` and `run` allowing to set `size` on devicemapper [#19367](https://github.com/docker/docker/pull/19367) 219 + Add `--oom-score-adjust` daemon flag with a default value of `-500` making the daemon less likely to be killed before containers [#24516](https://github.com/docker/docker/pull/24516) 220 * Undeprecate the `-c` short alias of `--cpu-shares` on `run`, `build`, `create`, `update` [#22621](https://github.com/docker/docker/pull/22621) 221 * Prevent from using aufs and overlay graphdrivers on an eCryptfs mount [#23121](https://github.com/docker/docker/pull/23121) 222 - Fix issues with tmpfs mount ordering [#22329](https://github.com/docker/docker/pull/22329) 223 - Created containers are no longer listed on `docker ps -a -f exited=0` [#21947](https://github.com/docker/docker/pull/21947) 224 - Fix an issue where containers are stuck in a "Removal In Progress" state [#22423](https://github.com/docker/docker/pull/22423) 225 - Fix bug that was returning an HTTP 500 instead of a 400 when not specifying a command on run/create [#22762](https://github.com/docker/docker/pull/22762) 226 - Fix bug with `--detach-keys` whereby input matching a prefix of the detach key was not preserved [#22943](https://github.com/docker/docker/pull/22943) 227 - SELinux labeling is now disabled when using `--privileged` mode [#22993](https://github.com/docker/docker/pull/22993) 228 - If volume-mounted into a container, `/etc/hosts`, `/etc/resolv.conf`, `/etc/hostname` are no longer SELinux-relabeled [#22993](https://github.com/docker/docker/pull/22993) 229 - Fix inconsistency in `--tmpfs` behavior regarding mount options [#22438](https://github.com/docker/docker/pull/22438) 230 - Fix an issue where daemon hangs at startup [#23148](https://github.com/docker/docker/pull/23148) 231 - Ignore SIGPIPE events to prevent journald restarts to crash docker in some cases [#22460](https://github.com/docker/docker/pull/22460) 232 - Containers are not removed from stats list on error [#20835](https://github.com/docker/docker/pull/20835) 233 - Fix `on-failure` restart policy when daemon restarts [#20853](https://github.com/docker/docker/pull/20853) 234 - Fix an issue with `stats` when a container is using another container's network [#21904](https://github.com/docker/docker/pull/21904) 235 236 ### Swarm Mode 237 238 + New `swarm` command to manage swarms with `init`, `join`, `join-token`, `leave`, `update` subcommands [#23361](https://github.com/docker/docker/pull/23361) [#24823](https://github.com/docker/docker/pull/24823) 239 + New `service` command to manage swarm-wide services with `create`, `inspect`, `update`, `rm`, `ps` subcommands [#23361](https://github.com/docker/docker/pull/23361) [#25140](https://github.com/docker/docker/pull/25140) 240 + New `node` command to manage nodes with `accept`, `promote`, `demote`, `inspect`, `update`, `ps`, `ls` and `rm` subcommands [#23361](https://github.com/docker/docker/pull/23361) [#25140](https://github.com/docker/docker/pull/25140) 241 + (experimental) New `stack` and `deploy` commands to manage and deploy multi-service applications [#23522](https://github.com/docker/docker/pull/23522) [#25140](https://github.com/docker/docker/pull/25140) 242 243 ### Volume 244 245 + Add support for local and global volume scopes (analogous to network scopes) [#22077](https://github.com/docker/docker/pull/22077) 246 + Allow volume drivers to provide a `Status` field [#21006](https://github.com/docker/docker/pull/21006) 247 + Add name/driver filter support for volume [#21361](https://github.com/docker/docker/pull/21361) 248 * Mount/Unmount operations now receives an opaque ID to allow volume drivers to differentiate between two callers [#21015](https://github.com/docker/docker/pull/21015) 249 - Fix issue preventing to remove a volume in a corner case [#22103](https://github.com/docker/docker/pull/22103) 250 - Windows: Enable auto-creation of host-path to match Linux [#22094](https://github.com/docker/docker/pull/22094) 251 252 253 ### DEPRECATION 254 * Environment variables `DOCKER_CONTENT_TRUST_OFFLINE_PASSPHRASE` and `DOCKER_CONTENT_TRUST_TAGGING_PASSPHRASE` have been renamed 255 to `DOCKER_CONTENT_TRUST_ROOT_PASSPHRASE` and `DOCKER_CONTENT_TRUST_REPOSITORY_PASSPHRASE` respectively [#22574](https://github.com/docker/docker/pull/22574) 256 * Remove deprecated `syslog-tag`, `gelf-tag`, `fluentd-tag` log option in favor of the more generic `tag` one [#22620](https://github.com/docker/docker/pull/22620) 257 * Remove deprecated feature of passing HostConfig at API container start [#22570](https://github.com/docker/docker/pull/22570) 258 * Remove deprecated `-f`/`--force` flag on docker tag [#23090](https://github.com/docker/docker/pull/23090) 259 * Remove deprecated `/containers/<id|name>/copy` endpoint [#22149](https://github.com/docker/docker/pull/22149) 260 * Remove deprecated `docker ps` flags `--since` and `--before` [#22138](https://github.com/docker/docker/pull/22138) 261 * Deprecate the old 3-args form of `docker import` [#23273](https://github.com/docker/docker/pull/23273) 262 263 ## 1.11.2 (2016-05-31) 264 265 ### Networking 266 267 - Fix a stale endpoint issue on overlay networks during ungraceful restart ([#23015](https://github.com/docker/docker/pull/23015)) 268 - Fix an issue where the wrong port could be reported by `docker inspect/ps/port` ([#22997](https://github.com/docker/docker/pull/22997)) 269 270 ### Runtime 271 272 - Fix a potential panic when running `docker build` ([#23032](https://github.com/docker/docker/pull/23032)) 273 - Fix interpretation of `--user` parameter ([#22998](https://github.com/docker/docker/pull/22998)) 274 - Fix a bug preventing container statistics to be correctly reported ([#22955](https://github.com/docker/docker/pull/22955)) 275 - Fix an issue preventing container to be restarted after daemon restart ([#22947](https://github.com/docker/docker/pull/22947)) 276 - Fix issues when running 32 bit binaries on Ubuntu 16.04 ([#22922](https://github.com/docker/docker/pull/22922)) 277 - Fix a possible deadlock on image deletion and container attach ([#22918](https://github.com/docker/docker/pull/22918)) 278 - Fix an issue where containers fail to start after a daemon restart if they depend on a containerized cluster store ([#22561](https://github.com/docker/docker/pull/22561)) 279 - Fix an issue causing `docker ps` to hang on CentOS when using devicemapper ([#22168](https://github.com/docker/docker/pull/22168), [#23067](https://github.com/docker/docker/pull/23067)) 280 - Fix a bug preventing to `docker exec` into a container when using devicemapper ([#22168](https://github.com/docker/docker/pull/22168), [#23067](https://github.com/docker/docker/pull/23067)) 281 282 283 ## 1.11.1 (2016-04-26) 284 285 ### Distribution 286 287 - Fix schema2 manifest media type to be of type `application/vnd.docker.container.image.v1+json` ([#21949](https://github.com/docker/docker/pull/21949)) 288 289 ### Documentation 290 291 + Add missing API documentation for changes introduced with 1.11.0 ([#22048](https://github.com/docker/docker/pull/22048)) 292 293 ### Builder 294 295 * Append label passed to `docker build` as arguments as an implicit `LABEL` command at the end of the processed `Dockerfile` ([#22184](https://github.com/docker/docker/pull/22184)) 296 297 ### Networking 298 299 - Fix a panic that would occur when forwarding DNS query ([#22261](https://github.com/docker/docker/pull/22261)) 300 - Fix an issue where OS threads could end up within an incorrect network namespace when using user defined networks ([#22261](https://github.com/docker/docker/pull/22261)) 301 302 ### Runtime 303 304 - Fix a bug preventing labels configuration to be reloaded via the config file ([#22299](https://github.com/docker/docker/pull/22299)) 305 - Fix a regression where container mounting `/var/run` would prevent other containers from being removed ([#22256](https://github.com/docker/docker/pull/22256)) 306 - Fix an issue where it would be impossible to update both `memory-swap` and `memory` value together ([#22255](https://github.com/docker/docker/pull/22255)) 307 - Fix a regression from 1.11.0 where the `/auth` endpoint would not initialize `serveraddress` if it is not provided ([#22254](https://github.com/docker/docker/pull/22254)) 308 - Add missing cleanup of container temporary files when cancelling a schedule restart ([#22237](https://github.com/docker/docker/pull/22237)) 309 - Remove scary error message when no restart policy is specified ([#21993](https://github.com/docker/docker/pull/21993)) 310 - Fix a panic that would occur when the plugins were activated via the json spec ([#22191](https://github.com/docker/docker/pull/22191)) 311 - Fix restart backoff logic to correctly reset delay if container ran for at least 10secs ([#22125](https://github.com/docker/docker/pull/22125)) 312 - Remove error message when a container restart get cancelled ([#22123](https://github.com/docker/docker/pull/22123)) 313 - Fix an issue where `docker` would not correctly clean up after `docker exec` ([#22121](https://github.com/docker/docker/pull/22121)) 314 - Fix a panic that could occur when serving concurrent `docker stats` commands ([#22120](https://github.com/docker/docker/pull/22120))` 315 - Revert deprecation of non-existent host directories auto-creation ([#22065](https://github.com/docker/docker/pull/22065)) 316 - Hide misleading rpc error on daemon shutdown ([#22058](https://github.com/docker/docker/pull/22058)) 317 318 ## 1.11.0 (2016-04-13) 319 320 **IMPORTANT**: With Docker 1.11, a Linux docker installation is now made of 4 binaries (`docker`, [`docker-containerd`](https://github.com/docker/containerd), [`docker-containerd-shim`](https://github.com/docker/containerd) and [`docker-runc`](https://github.com/opencontainers/runc)). If you have scripts relying on docker being a single static binaries, please make sure to update them. Interaction with the daemon stay the same otherwise, the usage of the other binaries should be transparent. A Windows docker installation remains a single binary, `docker.exe`. 321 322 ### Builder 323 324 - Fix a bug where Docker would not use the correct uid/gid when processing the `WORKDIR` command ([#21033](https://github.com/docker/docker/pull/21033)) 325 - Fix a bug where copy operations with userns would not use the proper uid/gid ([#20782](https://github.com/docker/docker/pull/20782), [#21162](https://github.com/docker/docker/pull/21162)) 326 327 ### Client 328 329 * Usage of the `:` separator for security option has been deprecated. `=` should be used instead ([#21232](https://github.com/docker/docker/pull/21232)) 330 + The client user agent is now passed to the registry on `pull`, `build`, `push`, `login` and `search` operations ([#21306](https://github.com/docker/docker/pull/21306), [#21373](https://github.com/docker/docker/pull/21373)) 331 * Allow setting the Domainname and Hostname separately through the API ([#20200](https://github.com/docker/docker/pull/20200)) 332 * Docker info will now warn users if it can not detect the kernel version or the operating system ([#21128](https://github.com/docker/docker/pull/21128)) 333 - Fix an issue where `docker stats --no-stream` output could be all 0s ([#20803](https://github.com/docker/docker/pull/20803)) 334 - Fix a bug where some newly started container would not appear in a running `docker stats` command ([#20792](https://github.com/docker/docker/pull/20792)) 335 * Post processing is no longer enabled for linux-cgo terminals ([#20587](https://github.com/docker/docker/pull/20587)) 336 - Values to `--hostname` are now refused if they do not comply with [RFC1123](https://tools.ietf.org/html/rfc1123) ([#20566](https://github.com/docker/docker/pull/20566)) 337 + Docker learned how to use a SOCKS proxy ([#20366](https://github.com/docker/docker/pull/20366), [#18373](https://github.com/docker/docker/pull/18373)) 338 + Docker now supports external credential stores ([#20107](https://github.com/docker/docker/pull/20107)) 339 * `docker ps` now supports displaying the list of volumes mounted inside a container ([#20017](https://github.com/docker/docker/pull/20017)) 340 * `docker info` now also reports Docker's root directory location ([#19986](https://github.com/docker/docker/pull/19986)) 341 - Docker now prohibits login in with an empty username (spaces are trimmed) ([#19806](https://github.com/docker/docker/pull/19806)) 342 * Docker events attributes are now sorted by key ([#19761](https://github.com/docker/docker/pull/19761)) 343 * `docker ps` no longer shows exported port for stopped containers ([#19483](https://github.com/docker/docker/pull/19483)) 344 - Docker now cleans after itself if a save/export command fails ([#17849](https://github.com/docker/docker/pull/17849)) 345 * Docker load learned how to display a progress bar ([#17329](https://github.com/docker/docker/pull/17329), [#120078](https://github.com/docker/docker/pull/20078)) 346 347 ### Distribution 348 349 - Fix a panic that occurred when pulling an image with 0 layers ([#21222](https://github.com/docker/docker/pull/21222)) 350 - Fix a panic that could occur on error while pushing to a registry with a misconfigured token service ([#21212](https://github.com/docker/docker/pull/21212)) 351 + All first-level delegation roles are now signed when doing a trusted push ([#21046](https://github.com/docker/docker/pull/21046)) 352 + OAuth support for registries was added ([#20970](https://github.com/docker/docker/pull/20970)) 353 * `docker login` now handles token using the implementation found in [docker/distribution](https://github.com/docker/distribution) ([#20832](https://github.com/docker/docker/pull/20832)) 354 * `docker login` will no longer prompt for an email ([#20565](https://github.com/docker/docker/pull/20565)) 355 * Docker will now fallback to registry V1 if no basic auth credentials are available ([#20241](https://github.com/docker/docker/pull/20241)) 356 * Docker will now try to resume layer download where it left off after a network error/timeout ([#19840](https://github.com/docker/docker/pull/19840)) 357 - Fix generated manifest mediaType when pushing cross-repository ([#19509](https://github.com/docker/docker/pull/19509)) 358 - Fix docker requesting additional push credentials when pulling an image if Content Trust is enabled ([#20382](https://github.com/docker/docker/pull/20382)) 359 360 ### Logging 361 362 - Fix a race in the journald log driver ([#21311](https://github.com/docker/docker/pull/21311)) 363 * Docker syslog driver now uses the RFC-5424 format when emitting logs ([#20121](https://github.com/docker/docker/pull/20121)) 364 * Docker GELF log driver now allows to specify the compression algorithm and level via the `gelf-compression-type` and `gelf-compression-level` options ([#19831](https://github.com/docker/docker/pull/19831)) 365 * Docker daemon learned to output uncolorized logs via the `--raw-logs` options ([#19794](https://github.com/docker/docker/pull/19794)) 366 + Docker, on Windows platform, now includes an ETW (Event Tracing in Windows) logging driver named `etwlogs` ([#19689](https://github.com/docker/docker/pull/19689)) 367 * Journald log driver learned how to handle tags ([#19564](https://github.com/docker/docker/pull/19564)) 368 + The fluentd log driver learned the following options: `fluentd-address`, `fluentd-buffer-limit`, `fluentd-retry-wait`, `fluentd-max-retries` and `fluentd-async-connect` ([#19439](https://github.com/docker/docker/pull/19439)) 369 + Docker learned to send log to Google Cloud via the new `gcplogs` logging driver. ([#18766](https://github.com/docker/docker/pull/18766)) 370 371 372 ### Misc 373 374 + When saving linked images together with `docker save` a subsequent `docker load` will correctly restore their parent/child relationship ([#21385](https://github.com/docker/docker/pull/21385)) 375 + Support for building the Docker cli for OpenBSD was added ([#21325](https://github.com/docker/docker/pull/21325)) 376 + Labels can now be applied at network, volume and image creation ([#21270](https://github.com/docker/docker/pull/21270)) 377 * The `dockremap` is now created as a system user ([#21266](https://github.com/docker/docker/pull/21266)) 378 - Fix a few response body leaks ([#21258](https://github.com/docker/docker/pull/21258)) 379 - Docker, when run as a service with systemd, will now properly manage its processes cgroups ([#20633](https://github.com/docker/docker/pull/20633)) 380 * `docker info` now reports the value of cgroup KernelMemory or emits a warning if it is not supported ([#20863](https://github.com/docker/docker/pull/20863)) 381 * `docker info` now also reports the cgroup driver in use ([#20388](https://github.com/docker/docker/pull/20388)) 382 * Docker completion is now available on PowerShell ([#19894](https://github.com/docker/docker/pull/19894)) 383 * `dockerinit` is no more ([#19490](https://github.com/docker/docker/pull/19490),[#19851](https://github.com/docker/docker/pull/19851)) 384 + Support for building Docker on arm64 was added ([#19013](https://github.com/docker/docker/pull/19013)) 385 + Experimental support for building docker.exe in a native Windows Docker installation ([#18348](https://github.com/docker/docker/pull/18348)) 386 387 ### Networking 388 389 - Fix panic if a node is forcibly removed from the cluster ([#21671](https://github.com/docker/docker/pull/21671)) 390 - Fix "error creating vxlan interface" when starting a container in a Swarm cluster ([#21671](https://github.com/docker/docker/pull/21671)) 391 * `docker network inspect` will now report all endpoints whether they have an active container or not ([#21160](https://github.com/docker/docker/pull/21160)) 392 + Experimental support for the MacVlan and IPVlan network drivers has been added ([#21122](https://github.com/docker/docker/pull/21122)) 393 * Output of `docker network ls` is now sorted by network name ([#20383](https://github.com/docker/docker/pull/20383)) 394 - Fix a bug where Docker would allow a network to be created with the reserved `default` name ([#19431](https://github.com/docker/docker/pull/19431)) 395 * `docker network inspect` returns whether a network is internal or not ([#19357](https://github.com/docker/docker/pull/19357)) 396 + Control IPv6 via explicit option when creating a network (`docker network create --ipv6`). This shows up as a new `EnableIPv6` field in `docker network inspect` ([#17513](https://github.com/docker/docker/pull/17513)) 397 * Support for AAAA Records (aka IPv6 Service Discovery) in embedded DNS Server ([#21396](https://github.com/docker/docker/pull/21396)) 398 - Fix to not forward docker domain IPv6 queries to external servers ([#21396](https://github.com/docker/docker/pull/21396)) 399 * Multiple A/AAAA records from embedded DNS Server for DNS Round robin ([#21019](https://github.com/docker/docker/pull/21019)) 400 - Fix endpoint count inconsistency after an ungraceful dameon restart ([#21261](https://github.com/docker/docker/pull/21261)) 401 - Move the ownership of exposed ports and port-mapping options from Endpoint to Sandbox ([#21019](https://github.com/docker/docker/pull/21019)) 402 - Fixed a bug which prevents docker reload when host is configured with ipv6.disable=1 ([#21019](https://github.com/docker/docker/pull/21019)) 403 - Added inbuilt nil IPAM driver ([#21019](https://github.com/docker/docker/pull/21019)) 404 - Fixed bug in iptables.Exists() logic [#21019](https://github.com/docker/docker/pull/21019) 405 - Fixed a Veth interface leak when using overlay network ([#21019](https://github.com/docker/docker/pull/21019)) 406 - Fixed a bug which prevents docker reload after a network delete during shutdown ([#20214](https://github.com/docker/docker/pull/20214)) 407 - Make sure iptables chains are recreated on firewalld reload ([#20419](https://github.com/docker/docker/pull/20419)) 408 - Allow to pass global datastore during config reload ([#20419](https://github.com/docker/docker/pull/20419)) 409 - For anonymous containers use the alias name for IP to name mapping, ie:DNS PTR record ([#21019](https://github.com/docker/docker/pull/21019)) 410 - Fix a panic when deleting an entry from /etc/hosts file ([#21019](https://github.com/docker/docker/pull/21019)) 411 - Source the forwarded DNS queries from the container net namespace ([#21019](https://github.com/docker/docker/pull/21019)) 412 - Fix to retain the network internal mode config for bridge networks on daemon reload ([#21780] (https://github.com/docker/docker/pull/21780)) 413 - Fix to retain IPAM driver option configs on daemon reload ([#21914] (https://github.com/docker/docker/pull/21914)) 414 415 ### Plugins 416 417 - Fix a file descriptor leak that would occur every time plugins were enumerated ([#20686](https://github.com/docker/docker/pull/20686)) 418 - Fix an issue where Authz plugin would corrupt the payload body when faced with a large amount of data ([#20602](https://github.com/docker/docker/pull/20602)) 419 420 ### Runtime 421 422 - Fix a panic that could occur when cleanup after a container started with invalid parameters ([#21716](https://github.com/docker/docker/pull/21716)) 423 - Fix a race with event timers stopping early ([#21692](https://github.com/docker/docker/pull/21692)) 424 - Fix race conditions in the layer store, potentially corrupting the map and crashing the process ([#21677](https://github.com/docker/docker/pull/21677)) 425 - Un-deprecate auto-creation of host directories for mounts. This feature was marked deprecated in ([#21666](https://github.com/docker/docker/pull/21666)) 426 Docker 1.9, but was decided to be too much of a backward-incompatible change, so it was decided to keep the feature. 427 + It is now possible for containers to share the NET and IPC namespaces when `userns` is enabled ([#21383](https://github.com/docker/docker/pull/21383)) 428 + `docker inspect <image-id>` will now expose the rootfs layers ([#21370](https://github.com/docker/docker/pull/21370)) 429 + Docker Windows gained a minimal `top` implementation ([#21354](https://github.com/docker/docker/pull/21354)) 430 * Docker learned to report the faulty exe when a container cannot be started due to its condition ([#21345](https://github.com/docker/docker/pull/21345)) 431 * Docker with device mapper will now refuse to run if `udev sync` is not available ([#21097](https://github.com/docker/docker/pull/21097)) 432 - Fix a bug where Docker would not validate the config file upon configuration reload ([#21089](https://github.com/docker/docker/pull/21089)) 433 - Fix a hang that would happen on attach if initial start was to fail ([#21048](https://github.com/docker/docker/pull/21048)) 434 - Fix an issue where registry service options in the daemon configuration file were not properly taken into account ([#21045](https://github.com/docker/docker/pull/21045)) 435 - Fix a race between the exec and resize operations ([#21022](https://github.com/docker/docker/pull/21022)) 436 - Fix an issue where nanoseconds were not correctly taken in account when filtering Docker events ([#21013](https://github.com/docker/docker/pull/21013)) 437 - Fix the handling of Docker command when passed a 64 bytes id ([#21002](https://github.com/docker/docker/pull/21002)) 438 * Docker will now return a `204` (i.e http.StatusNoContent) code when it successfully deleted a network ([#20977](https://github.com/docker/docker/pull/20977)) 439 - Fix a bug where the daemon would wait indefinitely in case the process it was about to killed had already exited on its own ([#20967](https://github.com/docker/docker/pull/20967) 440 * The devmapper driver learned the `dm.min_free_space` option. If the mapped device free space reaches the passed value, new device creation will be prohibited. ([#20786](https://github.com/docker/docker/pull/20786)) 441 + Docker can now prevent processes in container to gain new privileges via the `--security-opt=no-new-privileges` flag ([#20727](https://github.com/docker/docker/pull/20727)) 442 - Starting a container with the `--device` option will now correctly resolves symlinks ([#20684](https://github.com/docker/docker/pull/20684)) 443 + Docker now relies on [`containerd`](https://github.com/docker/containerd) and [`runc`](https://github.com/opencontainers/runc) to spawn containers. ([#20662](https://github.com/docker/docker/pull/20662)) 444 - Fix docker configuration reloading to only alter value present in the given config file ([#20604](https://github.com/docker/docker/pull/20604)) 445 + Docker now allows setting a container hostname via the `--hostname` flag when `--net=host` ([#20177](https://github.com/docker/docker/pull/20177)) 446 + Docker now allows executing privileged container while running with `--userns-remap` if both `--privileged` and the new `--userns=host` flag are specified ([#20111](https://github.com/docker/docker/pull/20111)) 447 - Fix Docker not cleaning up correctly old containers upon restarting after a crash ([#19679](https://github.com/docker/docker/pull/19679)) 448 * Docker will now error out if it doesn't recognize a configuration key within the config file ([#19517](https://github.com/docker/docker/pull/19517)) 449 - Fix container loading, on daemon startup, when they depends on a plugin running within a container ([#19500](https://github.com/docker/docker/pull/19500)) 450 * `docker update` learned how to change a container restart policy ([#19116](https://github.com/docker/docker/pull/19116)) 451 * `docker inspect` now also returns a new `State` field containing the container state in a human readable way (i.e. one of `created`, `restarting`, `running`, `paused`, `exited` or `dead`)([#18966](https://github.com/docker/docker/pull/18966)) 452 + Docker learned to limit the number of active pids (i.e. processes) within the container via the `pids-limit` flags. NOTE: This requires `CGROUP_PIDS=y` to be in the kernel configuration. ([#18697](https://github.com/docker/docker/pull/18697)) 453 - `docker load` now has a `--quiet` option to suppress the load output ([#20078](https://github.com/docker/docker/pull/20078)) 454 - Fix a bug in neighbor discovery for IPv6 peers ([#20842](https://github.com/docker/docker/pull/20842)) 455 - Fix a panic during cleanup if a container was started with invalid options ([#21802](https://github.com/docker/docker/pull/21802)) 456 - Fix a situation where a container cannot be stopped if the terminal is closed ([#21840](https://github.com/docker/docker/pull/21840)) 457 458 ### Security 459 460 * Object with the `pcp_pmcd_t` selinux type were given management access to `/var/lib/docker(/.*)?` ([#21370](https://github.com/docker/docker/pull/21370)) 461 * `restart_syscall`, `copy_file_range`, `mlock2` joined the list of allowed calls in the default seccomp profile ([#21117](https://github.com/docker/docker/pull/21117), [#21262](https://github.com/docker/docker/pull/21262)) 462 * `send`, `recv` and `x32` were added to the list of allowed syscalls and arch in the default seccomp profile ([#19432](https://github.com/docker/docker/pull/19432)) 463 * Docker Content Trust now requests the server to perform snapshot signing ([#21046](https://github.com/docker/docker/pull/21046)) 464 * Support for using YubiKeys for Content Trust signing has been moved out of experimental ([#21591](https://github.com/docker/docker/pull/21591)) 465 466 ### Volumes 467 468 * Output of `docker volume ls` is now sorted by volume name ([#20389](https://github.com/docker/docker/pull/20389)) 469 * Local volumes can now accept options similar to the unix `mount` tool ([#20262](https://github.com/docker/docker/pull/20262)) 470 - Fix an issue where one letter directory name could not be used as source for volumes ([#21106](https://github.com/docker/docker/pull/21106)) 471 + `docker run -v` now accepts a new flag `nocopy`. This tells the runtime not to copy the container path content into the volume (which is the default behavior) ([#21223](https://github.com/docker/docker/pull/21223)) 472 473 ## 1.10.3 (2016-03-10) 474 475 ### Runtime 476 477 - Fix Docker client exiting with an "Unrecognized input header" error [#20706](https://github.com/docker/docker/pull/20706) 478 - Fix Docker exiting if Exec is started with both `AttachStdin` and `Detach` [#20647](https://github.com/docker/docker/pull/20647) 479 480 ### Distribution 481 482 - Fix a crash when pushing multiple images sharing the same layers to the same repository in parallel [#20831](https://github.com/docker/docker/pull/20831) 483 - Fix a panic when pushing images to a registry which uses a misconfigured token service [#21030](https://github.com/docker/docker/pull/21030) 484 485 ### Plugin system 486 487 - Fix issue preventing volume plugins to start when SELinux is enabled [#20834](https://github.com/docker/docker/pull/20834) 488 - Prevent Docker from exiting if a volume plugin returns a null response for Get requests [#20682](https://github.com/docker/docker/pull/20682) 489 - Fix plugin system leaking file descriptors if a plugin has an error [#20680](https://github.com/docker/docker/pull/20680) 490 491 ### Security 492 493 - Fix linux32 emulation to fail during docker build [#20672](https://github.com/docker/docker/pull/20672) 494 It was due to the `personality` syscall being blocked by the default seccomp profile. 495 - Fix Oracle XE 10g failing to start in a container [#20981](https://github.com/docker/docker/pull/20981) 496 It was due to the `ipc` syscall being blocked by the default seccomp profile. 497 - Fix user namespaces not working on Linux From Scratch [#20685](https://github.com/docker/docker/pull/20685) 498 - Fix issue preventing daemon to start if userns is enabled and the `subuid` or `subgid` files contain comments [#20725](https://github.com/docker/docker/pull/20725) 499 500 ## 1.10.2 (2016-02-22) 501 502 ### Runtime 503 504 - Prevent systemd from deleting containers' cgroups when its configuration is reloaded [#20518](https://github.com/docker/docker/pull/20518) 505 - Fix SELinux issues by disregarding `--read-only` when mounting `/dev/mqueue` [#20333](https://github.com/docker/docker/pull/20333) 506 - Fix chown permissions used during `docker cp` when userns is used [#20446](https://github.com/docker/docker/pull/20446) 507 - Fix configuration loading issue with all booleans defaulting to `true` [#20471](https://github.com/docker/docker/pull/20471) 508 - Fix occasional panic with `docker logs -f` [#20522](https://github.com/docker/docker/pull/20522) 509 510 ### Distribution 511 512 - Keep layer reference if deletion failed to avoid a badly inconsistent state [#20513](https://github.com/docker/docker/pull/20513) 513 - Handle gracefully a corner case when canceling migration [#20372](https://github.com/docker/docker/pull/20372) 514 - Fix docker import on compressed data [#20367](https://github.com/docker/docker/pull/20367) 515 - Fix tar-split files corruption during migration that later cause docker push and docker save to fail [#20458](https://github.com/docker/docker/pull/20458) 516 517 ### Networking 518 519 - Fix daemon crash if embedded DNS is sent garbage [#20510](https://github.com/docker/docker/pull/20510) 520 521 ### Volumes 522 523 - Fix issue with multiple volume references with same name [#20381](https://github.com/docker/docker/pull/20381) 524 525 ### Security 526 527 - Fix potential cache corruption and delegation conflict issues [#20523](https://github.com/docker/docker/pull/20523) 528 529 ## 1.10.1 (2016-02-11) 530 531 ### Runtime 532 533 * Do not stop daemon on migration hard failure [#20156](https://github.com/docker/docker/pull/20156) 534 - Fix various issues with migration to content-addressable images [#20058](https://github.com/docker/docker/pull/20058) 535 - Fix ZFS permission bug with user namespaces [#20045](https://github.com/docker/docker/pull/20045) 536 - Do not leak /dev/mqueue from the host to all containers, keep it container-specific [#19876](https://github.com/docker/docker/pull/19876) [#20133](https://github.com/docker/docker/pull/20133) 537 - Fix `docker ps --filter before=...` to not show stopped containers without providing `-a` flag [#20135](https://github.com/docker/docker/pull/20135) 538 539 ### Security 540 541 - Fix issue preventing docker events to work properly with authorization plugin [#20002](https://github.com/docker/docker/pull/20002) 542 543 ### Distribution 544 545 * Add additional verifications and prevent from uploading invalid data to registries [#20164](https://github.com/docker/docker/pull/20164) 546 - Fix regression preventing uppercase characters in image reference hostname [#20175](https://github.com/docker/docker/pull/20175) 547 548 ### Networking 549 550 - Fix embedded DNS for user-defined networks in the presence of firewalld [#20060](https://github.com/docker/docker/pull/20060) 551 - Fix issue where removing a network during shutdown left Docker inoperable [#20181](https://github.com/docker/docker/issues/20181) [#20235](https://github.com/docker/docker/issues/20235) 552 - Embedded DNS is now able to return compressed results [#20181](https://github.com/docker/docker/issues/20181) 553 - Fix port-mapping issue with `userland-proxy=false` [#20181](https://github.com/docker/docker/issues/20181) 554 555 ### Logging 556 557 - Fix bug where tcp+tls protocol would be rejected [#20109](https://github.com/docker/docker/pull/20109) 558 559 ### Volumes 560 561 - Fix issue whereby older volume drivers would not receive volume options [#19983](https://github.com/docker/docker/pull/19983) 562 563 ### Misc 564 565 - Remove TasksMax from Docker systemd service [#20167](https://github.com/docker/docker/pull/20167) 566 567 ## 1.10.0 (2016-02-04) 568 569 **IMPORTANT**: Docker 1.10 uses a new content-addressable storage for images and layers. 570 A migration is performed the first time docker is run, and can take a significant amount of time depending on the number of images present. 571 Refer to this page on the wiki for more information: https://github.com/docker/docker/wiki/Engine-v1.10.0-content-addressability-migration 572 We also released a cool migration utility that enables you to perform the migration before updating to reduce downtime. 573 Engine 1.10 migrator can be found on Docker Hub: https://hub.docker.com/r/docker/v1.10-migrator/ 574 575 ### Runtime 576 577 + New `docker update` command that allows updating resource constraints on running containers [#15078](https://github.com/docker/docker/pull/15078) 578 + Add `--tmpfs` flag to `docker run` to create a tmpfs mount in a container [#13587](https://github.com/docker/docker/pull/13587) 579 + Add `--format` flag to `docker images` command [#17692](https://github.com/docker/docker/pull/17692) 580 + Allow to set daemon configuration in a file and hot-reload it with the `SIGHUP` signal [#18587](https://github.com/docker/docker/pull/18587) 581 + Updated docker events to include more meta-data and event types [#18888](https://github.com/docker/docker/pull/18888) 582 This change is backward compatible in the API, but not on the CLI. 583 + Add `--blkio-weight-device` flag to `docker run` [#13959](https://github.com/docker/docker/pull/13959) 584 + Add `--device-read-bps` and `--device-write-bps` flags to `docker run` [#14466](https://github.com/docker/docker/pull/14466) 585 + Add `--device-read-iops` and `--device-write-iops` flags to `docker run` [#15879](https://github.com/docker/docker/pull/15879) 586 + Add `--oom-score-adj` flag to `docker run` [#16277](https://github.com/docker/docker/pull/16277) 587 + Add `--detach-keys` flag to `attach`, `run`, `start` and `exec` commands to override the default key sequence that detaches from a container [#15666](https://github.com/docker/docker/pull/15666) 588 + Add `--shm-size` flag to `run`, `create` and `build` to set the size of `/dev/shm` [#16168](https://github.com/docker/docker/pull/16168) 589 + Show the number of running, stopped, and paused containers in `docker info` [#19249](https://github.com/docker/docker/pull/19249) 590 + Show the `OSType` and `Architecture` in `docker info` [#17478](https://github.com/docker/docker/pull/17478) 591 + Add `--cgroup-parent` flag on `daemon` to set cgroup parent for all containers [#19062](https://github.com/docker/docker/pull/19062) 592 + Add `-L` flag to docker cp to follow symlinks [#16613](https://github.com/docker/docker/pull/16613) 593 + New `status=dead` filter for `docker ps` [#17908](https://github.com/docker/docker/pull/17908) 594 * Change `docker run` exit codes to distinguish between runtime and application errors [#14012](https://github.com/docker/docker/pull/14012) 595 * Enhance `docker events --since` and `--until` to support nanoseconds and timezones [#17495](https://github.com/docker/docker/pull/17495) 596 * Add `--all`/`-a` flag to `stats` to include both running and stopped containers [#16742](https://github.com/docker/docker/pull/16742) 597 * Change the default cgroup-driver to `cgroupfs` [#17704](https://github.com/docker/docker/pull/17704) 598 * Emit a "tag" event when tagging an image with `build -t` [#17115](https://github.com/docker/docker/pull/17115) 599 * Best effort for linked containers' start order when starting the daemon [#18208](https://github.com/docker/docker/pull/18208) 600 * Add ability to add multiple tags on `build` [#15780](https://github.com/docker/docker/pull/15780) 601 * Permit `OPTIONS` request against any url, thus fixing issue with CORS [#19569](https://github.com/docker/docker/pull/19569) 602 - Fix the `--quiet` flag on `docker build` to actually be quiet [#17428](https://github.com/docker/docker/pull/17428) 603 - Fix `docker images --filter dangling=false` to now show all non-dangling images [#19326](https://github.com/docker/docker/pull/19326) 604 - Fix race condition causing autorestart turning off on restart [#17629](https://github.com/docker/docker/pull/17629) 605 - Recognize GPFS filesystems [#19216](https://github.com/docker/docker/pull/19216) 606 - Fix obscure bug preventing to start containers [#19751](https://github.com/docker/docker/pull/19751) 607 - Forbid `exec` during container restart [#19722](https://github.com/docker/docker/pull/19722) 608 - devicemapper: Increasing `--storage-opt dm.basesize` will now increase the base device size on daemon restart [#19123](https://github.com/docker/docker/pull/19123) 609 610 ### Security 611 612 + Add `--userns-remap` flag to `daemon` to support user namespaces (previously in experimental) [#19187](https://github.com/docker/docker/pull/19187) 613 + Add support for custom seccomp profiles in `--security-opt` [#17989](https://github.com/docker/docker/pull/17989) 614 + Add default seccomp profile [#18780](https://github.com/docker/docker/pull/18780) 615 + Add `--authorization-plugin` flag to `daemon` to customize ACLs [#15365](https://github.com/docker/docker/pull/15365) 616 + Docker Content Trust now supports the ability to read and write user delegations [#18887](https://github.com/docker/docker/pull/18887) 617 This is an optional, opt-in feature that requires the explicit use of the Notary command-line utility in order to be enabled. 618 Enabling delegation support in a specific repository will break the ability of Docker 1.9 and 1.8 to pull from that repository, if content trust is enabled. 619 * Allow SELinux to run in a container when using the BTRFS storage driver [#16452](https://github.com/docker/docker/pull/16452) 620 621 ### Distribution 622 623 * Use content-addressable storage for images and layers [#17924](https://github.com/docker/docker/pull/17924) 624 Note that a migration is performed the first time docker is run; it can take a significant amount of time depending on the number of images and containers present. 625 Images no longer depend on the parent chain but contain a list of layer references. 626 `docker load`/`docker save` tarballs now also contain content-addressable image configurations. 627 For more information: https://github.com/docker/docker/wiki/Engine-v1.10.0-content-addressability-migration 628 * Add support for the new [manifest format ("schema2")](https://github.com/docker/distribution/blob/master/docs/spec/manifest-v2-2.md) [#18785](https://github.com/docker/docker/pull/18785) 629 * Lots of improvements for push and pull: performance++, retries on failed downloads, cancelling on client disconnect [#18353](https://github.com/docker/docker/pull/18353), [#18418](https://github.com/docker/docker/pull/18418), [#19109](https://github.com/docker/docker/pull/19109), [#18353](https://github.com/docker/docker/pull/18353) 630 * Limit v1 protocol fallbacks [#18590](https://github.com/docker/docker/pull/18590) 631 - Fix issue where docker could hang indefinitely waiting for a nonexistent process to pull an image [#19743](https://github.com/docker/docker/pull/19743) 632 633 ### Networking 634 635 + Use DNS-based discovery instead of `/etc/hosts` [#19198](https://github.com/docker/docker/pull/19198) 636 + Support for network-scoped alias using `--net-alias` on `run` and `--alias` on `network connect` [#19242](https://github.com/docker/docker/pull/19242) 637 + Add `--ip` and `--ip6` on `run` and `network connect` to support custom IP addresses for a container in a network [#19001](https://github.com/docker/docker/pull/19001) 638 + Add `--ipam-opt` to `network create` for passing custom IPAM options [#17316](https://github.com/docker/docker/pull/17316) 639 + Add `--internal` flag to `network create` to restrict external access to and from the network [#19276](https://github.com/docker/docker/pull/19276) 640 + Add `kv.path` option to `--cluster-store-opt` [#19167](https://github.com/docker/docker/pull/19167) 641 + Add `discovery.heartbeat` and `discovery.ttl` options to `--cluster-store-opt` to configure discovery TTL and heartbeat timer [#18204](https://github.com/docker/docker/pull/18204) 642 + Add `--format` flag to `network inspect` [#17481](https://github.com/docker/docker/pull/17481) 643 + Add `--link` to `network connect` to provide a container-local alias [#19229](https://github.com/docker/docker/pull/19229) 644 + Support for Capability exchange with remote IPAM plugins [#18775](https://github.com/docker/docker/pull/18775) 645 + Add `--force` to `network disconnect` to force container to be disconnected from network [#19317](https://github.com/docker/docker/pull/19317) 646 * Support for multi-host networking using built-in overlay driver for all engine supported kernels: 3.10+ [#18775](https://github.com/docker/docker/pull/18775) 647 * `--link` is now supported on `docker run` for containers in user-defined network [#19229](https://github.com/docker/docker/pull/19229) 648 * Enhance `docker network rm` to allow removing multiple networks [#17489](https://github.com/docker/docker/pull/17489) 649 * Include container names in `network inspect` [#17615](https://github.com/docker/docker/pull/17615) 650 * Include auto-generated subnets for user-defined networks in `network inspect` [#17316](https://github.com/docker/docker/pull/17316) 651 * Add `--filter` flag to `network ls` to hide predefined networks [#17782](https://github.com/docker/docker/pull/17782) 652 * Add support for network connect/disconnect to stopped containers [#18906](https://github.com/docker/docker/pull/18906) 653 * Add network ID to container inspect [#19323](https://github.com/docker/docker/pull/19323) 654 - Fix MTU issue where Docker would not start with two or more default routes [#18108](https://github.com/docker/docker/pull/18108) 655 - Fix duplicate IP address for containers [#18106](https://github.com/docker/docker/pull/18106) 656 - Fix issue preventing sometimes docker from creating the bridge network [#19338](https://github.com/docker/docker/pull/19338) 657 - Do not substitute 127.0.0.1 name server when using `--net=host` [#19573](https://github.com/docker/docker/pull/19573) 658 659 ### Logging 660 661 + New logging driver for Splunk [#16488](https://github.com/docker/docker/pull/16488) 662 + Add support for syslog over TCP+TLS [#18998](https://github.com/docker/docker/pull/18998) 663 * Enhance `docker logs --since` and `--until` to support nanoseconds and time [#17495](https://github.com/docker/docker/pull/17495) 664 * Enhance AWS logs to auto-detect region [#16640](https://github.com/docker/docker/pull/16640) 665 666 ### Volumes 667 668 + Add support to set the mount propagation mode for a volume [#17034](https://github.com/docker/docker/pull/17034) 669 * Add `ls` and `inspect` endpoints to volume plugin API [#16534](https://github.com/docker/docker/pull/16534) 670 Existing plugins need to make use of these new APIs to satisfy users' expectation 671 For that, please use the new MIME type `application/vnd.docker.plugins.v1.2+json` [#19549](https://github.com/docker/docker/pull/19549) 672 - Fix data not being copied to named volumes [#19175](https://github.com/docker/docker/pull/19175) 673 - Fix issues preventing volume drivers from being containerized [#19500](https://github.com/docker/docker/pull/19500) 674 - Fix `docker volumes ls --dangling=false` to now show all non-dangling volumes [#19671](https://github.com/docker/docker/pull/19671) 675 - Do not remove named volumes on container removal [#19568](https://github.com/docker/docker/pull/19568) 676 - Allow external volume drivers to host anonymous volumes [#19190](https://github.com/docker/docker/pull/19190) 677 678 ### Builder 679 680 + Add support for `**` in `.dockerignore` to wildcard multiple levels of directories [#17090](https://github.com/docker/docker/pull/17090) 681 - Fix handling of UTF-8 characters in Dockerfiles [#17055](https://github.com/docker/docker/pull/17055) 682 - Fix permissions problem when reading from STDIN [#19283](https://github.com/docker/docker/pull/19283) 683 684 ### Client 685 686 + Add support for overriding the API version to use via an `DOCKER_API_VERSION` environment-variable [#15964](https://github.com/docker/docker/pull/15964) 687 - Fix a bug preventing Windows clients to log in to Docker Hub [#19891](https://github.com/docker/docker/pull/19891) 688 689 ### Misc 690 691 * systemd: Set TasksMax in addition to LimitNPROC in systemd service file [#19391](https://github.com/docker/docker/pull/19391) 692 693 ### Deprecations 694 695 * Remove LXC support. The LXC driver was deprecated in Docker 1.8, and has now been removed [#17700](https://github.com/docker/docker/pull/17700) 696 * Remove `--exec-driver` daemon flag, because it is no longer in use [#17700](https://github.com/docker/docker/pull/17700) 697 * Remove old deprecated single-dashed long CLI flags (such as `-rm`; use `--rm` instead) [#17724](https://github.com/docker/docker/pull/17724) 698 * Deprecate HostConfig at API container start [#17799](https://github.com/docker/docker/pull/17799) 699 * Deprecate docker packages for newly EOL'd Linux distributions: Fedora 21 and Ubuntu 15.04 (Vivid) [#18794](https://github.com/docker/docker/pull/18794), [#18809](https://github.com/docker/docker/pull/18809) 700 * Deprecate `-f` flag for docker tag [#18350](https://github.com/docker/docker/pull/18350) 701 702 ## 1.9.1 (2015-11-21) 703 704 ### Runtime 705 706 - Do not prevent daemon from booting if images could not be restored (#17695) 707 - Force IPC mount to unmount on daemon shutdown/init (#17539) 708 - Turn IPC unmount errors into warnings (#17554) 709 - Fix `docker stats` performance regression (#17638) 710 - Clarify cryptic error message upon `docker logs` if `--log-driver=none` (#17767) 711 - Fix seldom panics (#17639, #17634, #17703) 712 - Fix opq whiteouts problems for files with dot prefix (#17819) 713 - devicemapper: try defaulting to xfs instead of ext4 for performance reasons (#17903, #17918) 714 - devicemapper: fix displayed fs in docker info (#17974) 715 - selinux: only relabel if user requested so with the `z` option (#17450, #17834) 716 - Do not make network calls when normalizing names (#18014) 717 718 ### Client 719 720 - Fix `docker login` on windows (#17738) 721 - Fix bug with `docker inspect` output when not connected to daemon (#17715) 722 - Fix `docker inspect -f {{.HostConfig.Dns}} somecontainer` (#17680) 723 724 ### Builder 725 726 - Fix regression with symlink behavior in ADD/COPY (#17710) 727 728 ### Networking 729 730 - Allow passing a network ID as an argument for `--net` (#17558) 731 - Fix connect to host and prevent disconnect from host for `host` network (#17476) 732 - Fix `--fixed-cidr` issue when gateway ip falls in ip-range and ip-range is 733 not the first block in the network (#17853) 734 - Restore deterministic `IPv6` generation from `MAC` address on default `bridge` network (#17890) 735 - Allow port-mapping only for endpoints created on docker run (#17858) 736 - Fixed an endpoint delete issue with a possible stale sbox (#18102) 737 738 ### Distribution 739 740 - Correct parent chain in v2 push when v1Compatibility files on the disk are inconsistent (#18047) 741 742 ## 1.9.0 (2015-11-03) 743 744 ### Runtime 745 746 + `docker stats` now returns block IO metrics (#15005) 747 + `docker stats` now details network stats per interface (#15786) 748 + Add `ancestor=<image>` filter to `docker ps --filter` flag to filter 749 containers based on their ancestor images (#14570) 750 + Add `label=<somelabel>` filter to `docker ps --filter` to filter containers 751 based on label (#16530) 752 + Add `--kernel-memory` flag to `docker run` (#14006) 753 + Add `--message` flag to `docker import` allowing to specify an optional 754 message (#15711) 755 + Add `--privileged` flag to `docker exec` (#14113) 756 + Add `--stop-signal` flag to `docker run` allowing to replace the container 757 process stopping signal (#15307) 758 + Add a new `unless-stopped` restart policy (#15348) 759 + Inspecting an image now returns tags (#13185) 760 + Add container size information to `docker inspect` (#15796) 761 + Add `RepoTags` and `RepoDigests` field to `/images/{name:.*}/json` (#17275) 762 - Remove the deprecated `/container/ps` endpoint from the API (#15972) 763 - Send and document correct HTTP codes for `/exec/<name>/start` (#16250) 764 - Share shm and mqueue between containers sharing IPC namespace (#15862) 765 - Event stream now shows OOM status when `--oom-kill-disable` is set (#16235) 766 - Ensure special network files (/etc/hosts etc.) are read-only if bind-mounted 767 with `ro` option (#14965) 768 - Improve `rmi` performance (#16890) 769 - Do not update /etc/hosts for the default bridge network, except for links (#17325) 770 - Fix conflict with duplicate container names (#17389) 771 - Fix an issue with incorrect template execution in `docker inspect` (#17284) 772 - DEPRECATE `-c` short flag variant for `--cpu-shares` in docker run (#16271) 773 774 ### Client 775 776 + Allow `docker import` to import from local files (#11907) 777 778 ### Builder 779 780 + Add a `STOPSIGNAL` Dockerfile instruction allowing to set a different 781 stop-signal for the container process (#15307) 782 + Add an `ARG` Dockerfile instruction and a `--build-arg` flag to `docker build` 783 that allows to add build-time environment variables (#15182) 784 - Improve cache miss performance (#16890) 785 786 ### Storage 787 788 - devicemapper: Implement deferred deletion capability (#16381) 789 790 ## Networking 791 792 + `docker network` exits experimental and is part of standard release (#16645) 793 + New network top-level concept, with associated subcommands and API (#16645) 794 WARNING: the API is different from the experimental API 795 + Support for multiple isolated/micro-segmented networks (#16645) 796 + Built-in multihost networking using VXLAN based overlay driver (#14071) 797 + Support for third-party network plugins (#13424) 798 + Ability to dynamically connect containers to multiple networks (#16645) 799 + Support for user-defined IP address management via pluggable IPAM drivers (#16910) 800 + Add daemon flags `--cluster-store` and `--cluster-advertise` for built-in nodes discovery (#16229) 801 + Add `--cluster-store-opt` for setting up TLS settings (#16644) 802 + Add `--dns-opt` to the daemon (#16031) 803 - DEPRECATE following container `NetworkSettings` fields in API v1.21: `EndpointID`, `Gateway`, 804 `GlobalIPv6Address`, `GlobalIPv6PrefixLen`, `IPAddress`, `IPPrefixLen`, `IPv6Gateway` and `MacAddress`. 805 Those are now specific to the `bridge` network. Use `NetworkSettings.Networks` to inspect 806 the networking settings of a container per network. 807 808 ### Volumes 809 810 + New top-level `volume` subcommand and API (#14242) 811 - Move API volume driver settings to host-specific config (#15798) 812 - Print an error message if volume name is not unique (#16009) 813 - Ensure volumes created from Dockerfiles always use the local volume driver 814 (#15507) 815 - DEPRECATE auto-creating missing host paths for bind mounts (#16349) 816 817 ### Logging 818 819 + Add `awslogs` logging driver for Amazon CloudWatch (#15495) 820 + Add generic `tag` log option to allow customizing container/image 821 information passed to driver (e.g. show container names) (#15384) 822 - Implement the `docker logs` endpoint for the journald driver (#13707) 823 - DEPRECATE driver-specific log tags (e.g. `syslog-tag`, etc.) (#15384) 824 825 ### Distribution 826 827 + `docker search` now works with partial names (#16509) 828 - Push optimization: avoid buffering to file (#15493) 829 - The daemon will display progress for images that were already being pulled 830 by another client (#15489) 831 - Only permissions required for the current action being performed are requested (#) 832 + Renaming trust keys (and respective environment variables) from `offline` to 833 `root` and `tagging` to `repository` (#16894) 834 - DEPRECATE trust key environment variables 835 `DOCKER_CONTENT_TRUST_OFFLINE_PASSPHRASE` and 836 `DOCKER_CONTENT_TRUST_TAGGING_PASSPHRASE` (#16894) 837 838 ### Security 839 840 + Add SELinux profiles to the rpm package (#15832) 841 - Fix various issues with AppArmor profiles provided in the deb package 842 (#14609) 843 - Add AppArmor policy that prevents writing to /proc (#15571) 844 845 ## 1.8.3 (2015-10-12) 846 847 ### Distribution 848 849 - Fix layer IDs lead to local graph poisoning (CVE-2014-8178) 850 - Fix manifest validation and parsing logic errors allow pull-by-digest validation bypass (CVE-2014-8179) 851 + Add `--disable-legacy-registry` to prevent a daemon from using a v1 registry 852 853 ## 1.8.2 (2015-09-10) 854 855 ### Distribution 856 857 - Fixes rare edge case of handling GNU LongLink and LongName entries. 858 - Fix ^C on docker pull. 859 - Fix docker pull issues on client disconnection. 860 - Fix issue that caused the daemon to panic when loggers weren't configured properly. 861 - Fix goroutine leak pulling images from registry V2. 862 863 ### Runtime 864 865 - Fix a bug mounting cgroups for docker daemons running inside docker containers. 866 - Initialize log configuration properly. 867 868 ### Client: 869 870 - Handle `-q` flag in `docker ps` properly when there is a default format. 871 872 ### Networking 873 874 - Fix several corner cases with netlink. 875 876 ### Contrib 877 878 - Fix several issues with bash completion. 879 880 ## 1.8.1 (2015-08-12) 881 882 ### Distribution 883 884 * Fix a bug where pushing multiple tags would result in invalid images 885 886 ## 1.8.0 (2015-08-11) 887 888 ### Distribution 889 890 + Trusted pull, push and build, disabled by default 891 * Make tar layers deterministic between registries 892 * Don't allow deleting the image of running containers 893 * Check if a tag name to load is a valid digest 894 * Allow one character repository names 895 * Add a more accurate error description for invalid tag name 896 * Make build cache ignore mtime 897 898 ### Cli 899 900 + Add support for DOCKER_CONFIG/--config to specify config file dir 901 + Add --type flag for docker inspect command 902 + Add formatting options to `docker ps` with `--format` 903 + Replace `docker -d` with new subcommand `docker daemon` 904 * Zsh completion updates and improvements 905 * Add some missing events to bash completion 906 * Support daemon urls with base paths in `docker -H` 907 * Validate status= filter to docker ps 908 * Display when a container is in --net=host in docker ps 909 * Extend docker inspect to export image metadata related to graph driver 910 * Restore --default-gateway{,-v6} daemon options 911 * Add missing unpublished ports in docker ps 912 * Allow duration strings in `docker events` as --since/--until 913 * Expose more mounts information in `docker inspect` 914 915 ### Runtime 916 917 + Add new Fluentd logging driver 918 + Allow `docker import` to load from local files 919 + Add logging driver for GELF via UDP 920 + Allow to copy files from host to containers with `docker cp` 921 + Promote volume drivers from experimental to master 922 + Add rollover options to json-file log driver, and --log-driver-opts flag 923 + Add memory swappiness tuning options 924 * Remove cgroup read-only flag when privileged 925 * Make /proc, /sys, & /dev readonly for readonly containers 926 * Add cgroup bind mount by default 927 * Overlay: Export metadata for container and image in `docker inspect` 928 * Devicemapper: external device activation 929 * Devicemapper: Compare uuid of base device on startup 930 * Remove RC4 from the list of registry cipher suites 931 * Add syslog-facility option 932 * LXC execdriver compatibility with recent LXC versions 933 * Mark LXC execriver as deprecated (to be removed with the migration to runc) 934 935 ### Plugins 936 937 * Separate plugin sockets and specs locations 938 * Allow TLS connections to plugins 939 940 ### Bug fixes 941 942 - Add missing 'Names' field to /containers/json API output 943 - Make `docker rmi` of dangling images safe while pulling 944 - Devicemapper: Change default basesize to 100G 945 - Go Scheduler issue with sync.Mutex and gcc 946 - Fix issue where Search API endpoint would panic due to empty AuthConfig 947 - Set image canonical names correctly 948 - Check dockerinit only if lxc driver is used 949 - Fix ulimit usage of nproc 950 - Always attach STDIN if -i,--interactive is specified 951 - Show error messages when saving container state fails 952 - Fixed incorrect assumption on --bridge=none treated as disable network 953 - Check for invalid port specifications in host configuration 954 - Fix endpoint leave failure for --net=host mode 955 - Fix goroutine leak in the stats API if the container is not running 956 - Check for apparmor file before reading it 957 - Fix DOCKER_TLS_VERIFY being ignored 958 - Set umask to the default on startup 959 - Correct the message of pause and unpause a non-running container 960 - Adjust disallowed CpuShares in container creation 961 - ZFS: correctly apply selinux context 962 - Display empty string instead of <nil> when IP opt is nil 963 - `docker kill` returns error when container is not running 964 - Fix COPY/ADD quoted/json form 965 - Fix goroutine leak on logs -f with no output 966 - Remove panic in nat package on invalid hostport 967 - Fix container linking in Fedora 22 968 - Fix error caused using default gateways outside of the allocated range 969 - Format times in inspect command with a template as RFC3339Nano 970 - Make registry client to accept 2xx and 3xx http status responses as successful 971 - Fix race issue that caused the daemon to crash with certain layer downloads failed in a specific order. 972 - Fix error when the docker ps format was not valid. 973 - Remove redundant ip forward check. 974 - Fix issue trying to push images to repository mirrors. 975 - Fix error cleaning up network entrypoints when there is an initialization issue. 976 977 ## 1.7.1 (2015-07-14) 978 979 #### Runtime 980 981 - Fix default user spawning exec process with `docker exec` 982 - Make `--bridge=none` not to configure the network bridge 983 - Publish networking stats properly 984 - Fix implicit devicemapper selection with static binaries 985 - Fix socket connections that hung intermittently 986 - Fix bridge interface creation on CentOS/RHEL 6.6 987 - Fix local dns lookups added to resolv.conf 988 - Fix copy command mounting volumes 989 - Fix read/write privileges in volumes mounted with --volumes-from 990 991 #### Remote API 992 993 - Fix unmarshalling of Command and Entrypoint 994 - Set limit for minimum client version supported 995 - Validate port specification 996 - Return proper errors when attach/reattach fail 997 998 #### Distribution 999 1000 - Fix pulling private images 1001 - Fix fallback between registry V2 and V1 1002 1003 ## 1.7.0 (2015-06-16) 1004 1005 #### Runtime 1006 + Experimental feature: support for out-of-process volume plugins 1007 * The userland proxy can be disabled in favor of hairpin NAT using the daemon’s `--userland-proxy=false` flag 1008 * The `exec` command supports the `-u|--user` flag to specify the new process owner 1009 + Default gateway for containers can be specified daemon-wide using the `--default-gateway` and `--default-gateway-v6` flags 1010 + The CPU CFS (Completely Fair Scheduler) quota can be set in `docker run` using `--cpu-quota` 1011 + Container block IO can be controlled in `docker run` using`--blkio-weight` 1012 + ZFS support 1013 + The `docker logs` command supports a `--since` argument 1014 + UTS namespace can be shared with the host with `docker run --uts=host` 1015 1016 #### Quality 1017 * Networking stack was entirely rewritten as part of the libnetwork effort 1018 * Engine internals refactoring 1019 * Volumes code was entirely rewritten to support the plugins effort 1020 + Sending SIGUSR1 to a daemon will dump all goroutines stacks without exiting 1021 1022 #### Build 1023 + Support ${variable:-value} and ${variable:+value} syntax for environment variables 1024 + Support resource management flags `--cgroup-parent`, `--cpu-period`, `--cpu-quota`, `--cpuset-cpus`, `--cpuset-mems` 1025 + git context changes with branches and directories 1026 * The .dockerignore file support exclusion rules 1027 1028 #### Distribution 1029 + Client support for v2 mirroring support for the official registry 1030 1031 #### Bugfixes 1032 * Firewalld is now supported and will automatically be used when available 1033 * mounting --device recursively 1034 1035 ## 1.6.2 (2015-05-13) 1036 1037 #### Runtime 1038 - Revert change prohibiting mounting into /sys 1039 1040 ## 1.6.1 (2015-05-07) 1041 1042 #### Security 1043 - Fix read/write /proc paths (CVE-2015-3630) 1044 - Prohibit VOLUME /proc and VOLUME / (CVE-2015-3631) 1045 - Fix opening of file-descriptor 1 (CVE-2015-3627) 1046 - Fix symlink traversal on container respawn allowing local privilege escalation (CVE-2015-3629) 1047 - Prohibit mount of /sys 1048 1049 #### Runtime 1050 - Update AppArmor policy to not allow mounts 1051 1052 ## 1.6.0 (2015-04-07) 1053 1054 #### Builder 1055 + Building images from an image ID 1056 + Build containers with resource constraints, ie `docker build --cpu-shares=100 --memory=1024m...` 1057 + `commit --change` to apply specified Dockerfile instructions while committing the image 1058 + `import --change` to apply specified Dockerfile instructions while importing the image 1059 + Builds no longer continue in the background when canceled with CTRL-C 1060 1061 #### Client 1062 + Windows Support 1063 1064 #### Runtime 1065 + Container and image Labels 1066 + `--cgroup-parent` for specifying a parent cgroup to place container cgroup within 1067 + Logging drivers, `json-file`, `syslog`, or `none` 1068 + Pulling images by ID 1069 + `--ulimit` to set the ulimit on a container 1070 + `--default-ulimit` option on the daemon which applies to all created containers (and overwritten by `--ulimit` on run) 1071 1072 ## 1.5.0 (2015-02-10) 1073 1074 #### Builder 1075 + Dockerfile to use for a given `docker build` can be specified with the `-f` flag 1076 * Dockerfile and .dockerignore files can be themselves excluded as part of the .dockerignore file, thus preventing modifications to these files invalidating ADD or COPY instructions cache 1077 * ADD and COPY instructions accept relative paths 1078 * Dockerfile `FROM scratch` instruction is now interpreted as a no-base specifier 1079 * Improve performance when exposing a large number of ports 1080 1081 #### Hack 1082 + Allow client-side only integration tests for Windows 1083 * Include docker-py integration tests against Docker daemon as part of our test suites 1084 1085 #### Packaging 1086 + Support for the new version of the registry HTTP API 1087 * Speed up `docker push` for images with a majority of already existing layers 1088 - Fixed contacting a private registry through a proxy 1089 1090 #### Remote API 1091 + A new endpoint will stream live container resource metrics and can be accessed with the `docker stats` command 1092 + Containers can be renamed using the new `rename` endpoint and the associated `docker rename` command 1093 * Container `inspect` endpoint show the ID of `exec` commands running in this container 1094 * Container `inspect` endpoint show the number of times Docker auto-restarted the container 1095 * New types of event can be streamed by the `events` endpoint: ‘OOM’ (container died with out of memory), ‘exec_create’, and ‘exec_start' 1096 - Fixed returned string fields which hold numeric characters incorrectly omitting surrounding double quotes 1097 1098 #### Runtime 1099 + Docker daemon has full IPv6 support 1100 + The `docker run` command can take the `--pid=host` flag to use the host PID namespace, which makes it possible for example to debug host processes using containerized debugging tools 1101 + The `docker run` command can take the `--read-only` flag to make the container’s root filesystem mounted as readonly, which can be used in combination with volumes to force a container’s processes to only write to locations that will be persisted 1102 + Container total memory usage can be limited for `docker run` using the `--memory-swap` flag 1103 * Major stability improvements for devicemapper storage driver 1104 * Better integration with host system: containers will reflect changes to the host's `/etc/resolv.conf` file when restarted 1105 * Better integration with host system: per-container iptable rules are moved to the DOCKER chain 1106 - Fixed container exiting on out of memory to return an invalid exit code 1107 1108 #### Other 1109 * The HTTP_PROXY, HTTPS_PROXY, and NO_PROXY environment variables are properly taken into account by the client when connecting to the Docker daemon 1110 1111 ## 1.4.1 (2014-12-15) 1112 1113 #### Runtime 1114 - Fix issue with volumes-from and bind mounts not being honored after create 1115 1116 ## 1.4.0 (2014-12-11) 1117 1118 #### Notable Features since 1.3.0 1119 + Set key=value labels to the daemon (displayed in `docker info`), applied with 1120 new `-label` daemon flag 1121 + Add support for `ENV` in Dockerfile of the form: 1122 `ENV name=value name2=value2...` 1123 + New Overlayfs Storage Driver 1124 + `docker info` now returns an `ID` and `Name` field 1125 + Filter events by event name, container, or image 1126 + `docker cp` now supports copying from container volumes 1127 - Fixed `docker tag`, so it honors `--force` when overriding a tag for existing 1128 image. 1129 1130 ## 1.3.3 (2014-12-11) 1131 1132 #### Security 1133 - Fix path traversal vulnerability in processing of absolute symbolic links (CVE-2014-9356) 1134 - Fix decompression of xz image archives, preventing privilege escalation (CVE-2014-9357) 1135 - Validate image IDs (CVE-2014-9358) 1136 1137 #### Runtime 1138 - Fix an issue when image archives are being read slowly 1139 1140 #### Client 1141 - Fix a regression related to stdin redirection 1142 - Fix a regression with `docker cp` when destination is the current directory 1143 1144 ## 1.3.2 (2014-11-20) 1145 1146 #### Security 1147 - Fix tar breakout vulnerability 1148 * Extractions are now sandboxed chroot 1149 - Security options are no longer comitted to images 1150 1151 #### Runtime 1152 - Fix deadlock in `docker ps -f exited=1` 1153 - Fix a bug when `--volumes-from` references a container that failed to start 1154 1155 #### Registry 1156 + `--insecure-registry` now accepts CIDR notation such as 10.1.0.0/16 1157 * Private registries whose IPs fall in the 127.0.0.0/8 range do no need the `--insecure-registry` flag 1158 - Skip the experimental registry v2 API when mirroring is enabled 1159 1160 ## 1.3.1 (2014-10-28) 1161 1162 #### Security 1163 * Prevent fallback to SSL protocols < TLS 1.0 for client, daemon and registry 1164 + Secure HTTPS connection to registries with certificate verification and without HTTP fallback unless `--insecure-registry` is specified 1165 1166 #### Runtime 1167 - Fix issue where volumes would not be shared 1168 1169 #### Client 1170 - Fix issue with `--iptables=false` not automatically setting `--ip-masq=false` 1171 - Fix docker run output to non-TTY stdout 1172 1173 #### Builder 1174 - Fix escaping `$` for environment variables 1175 - Fix issue with lowercase `onbuild` Dockerfile instruction 1176 - Restrict environment variable expansion to `ENV`, `ADD`, `COPY`, `WORKDIR`, `EXPOSE`, `VOLUME` and `USER` 1177 1178 ## 1.3.0 (2014-10-14) 1179 1180 #### Notable features since 1.2.0 1181 + Docker `exec` allows you to run additional processes inside existing containers 1182 + Docker `create` gives you the ability to create a container via the CLI without executing a process 1183 + `--security-opts` options to allow user to customize container labels and apparmor profiles 1184 + Docker `ps` filters 1185 - Wildcard support to COPY/ADD 1186 + Move production URLs to get.docker.com from get.docker.io 1187 + Allocate IP address on the bridge inside a valid CIDR 1188 + Use drone.io for PR and CI testing 1189 + Ability to setup an official registry mirror 1190 + Ability to save multiple images with docker `save` 1191 1192 ## 1.2.0 (2014-08-20) 1193 1194 #### Runtime 1195 + Make /etc/hosts /etc/resolv.conf and /etc/hostname editable at runtime 1196 + Auto-restart containers using policies 1197 + Use /var/lib/docker/tmp for large temporary files 1198 + `--cap-add` and `--cap-drop` to tweak what linux capability you want 1199 + `--device` to use devices in containers 1200 1201 #### Client 1202 + `docker search` on private registries 1203 + Add `exited` filter to `docker ps --filter` 1204 * `docker rm -f` now kills instead of stop 1205 + Support for IPv6 addresses in `--dns` flag 1206 1207 #### Proxy 1208 + Proxy instances in separate processes 1209 * Small bug fix on UDP proxy 1210 1211 ## 1.1.2 (2014-07-23) 1212 1213 #### Runtime 1214 + Fix port allocation for existing containers 1215 + Fix containers restart on daemon restart 1216 1217 #### Packaging 1218 + Fix /etc/init.d/docker issue on Debian 1219 1220 ## 1.1.1 (2014-07-09) 1221 1222 #### Builder 1223 * Fix issue with ADD 1224 1225 ## 1.1.0 (2014-07-03) 1226 1227 #### Notable features since 1.0.1 1228 + Add `.dockerignore` support 1229 + Pause containers during `docker commit` 1230 + Add `--tail` to `docker logs` 1231 1232 #### Builder 1233 + Allow a tar file as context for `docker build` 1234 * Fix issue with white-spaces and multi-lines in `Dockerfiles` 1235 1236 #### Runtime 1237 * Overall performance improvements 1238 * Allow `/` as source of `docker run -v` 1239 * Fix port allocation 1240 * Fix bug in `docker save` 1241 * Add links information to `docker inspect` 1242 1243 #### Client 1244 * Improve command line parsing for `docker commit` 1245 1246 #### Remote API 1247 * Improve status code for the `start` and `stop` endpoints 1248 1249 ## 1.0.1 (2014-06-19) 1250 1251 #### Notable features since 1.0.0 1252 * Enhance security for the LXC driver 1253 1254 #### Builder 1255 * Fix `ONBUILD` instruction passed to grandchildren 1256 1257 #### Runtime 1258 * Fix events subscription 1259 * Fix /etc/hostname file with host networking 1260 * Allow `-h` and `--net=none` 1261 * Fix issue with hotplug devices in `--privileged` 1262 1263 #### Client 1264 * Fix artifacts with events 1265 * Fix a panic with empty flags 1266 * Fix `docker cp` on Mac OS X 1267 1268 #### Miscellaneous 1269 * Fix compilation on Mac OS X 1270 * Fix several races 1271 1272 ## 1.0.0 (2014-06-09) 1273 1274 #### Notable features since 0.12.0 1275 * Production support 1276 1277 ## 0.12.0 (2014-06-05) 1278 1279 #### Notable features since 0.11.0 1280 * 40+ various improvements to stability, performance and usability 1281 * New `COPY` Dockerfile instruction to allow copying a local file from the context into the container without ever extracting if the file is a tar file 1282 * Inherit file permissions from the host on `ADD` 1283 * New `pause` and `unpause` commands to allow pausing and unpausing of containers using cgroup freezer 1284 * The `images` command has a `-f`/`--filter` option to filter the list of images 1285 * Add `--force-rm` to clean up after a failed build 1286 * Standardize JSON keys in Remote API to CamelCase 1287 * Pull from a docker run now assumes `latest` tag if not specified 1288 * Enhance security on Linux capabilities and device nodes 1289 1290 ## 0.11.1 (2014-05-07) 1291 1292 #### Registry 1293 - Fix push and pull to private registry 1294 1295 ## 0.11.0 (2014-05-07) 1296 1297 #### Notable features since 0.10.0 1298 1299 * SELinux support for mount and process labels 1300 * Linked containers can be accessed by hostname 1301 * Use the net `--net` flag to allow advanced network configuration such as host networking so that containers can use the host's network interfaces 1302 * Add a ping endpoint to the Remote API to do healthchecks of your docker daemon 1303 * Logs can now be returned with an optional timestamp 1304 * Docker now works with registries that support SHA-512 1305 * Multiple registry endpoints are supported to allow registry mirrors 1306 1307 ## 0.10.0 (2014-04-08) 1308 1309 #### Builder 1310 - Fix printing multiple messages on a single line. Fixes broken output during builds. 1311 - Follow symlinks inside container's root for ADD build instructions. 1312 - Fix EXPOSE caching. 1313 1314 #### Documentation 1315 - Add the new options of `docker ps` to the documentation. 1316 - Add the options of `docker restart` to the documentation. 1317 - Update daemon docs and help messages for --iptables and --ip-forward. 1318 - Updated apt-cacher-ng docs example. 1319 - Remove duplicate description of --mtu from docs. 1320 - Add missing -t and -v for `docker images` to the docs. 1321 - Add fixes to the cli docs. 1322 - Update libcontainer docs. 1323 - Update images in docs to remove references to AUFS and LXC. 1324 - Update the nodejs_web_app in the docs to use the new epel RPM address. 1325 - Fix external link on security of containers. 1326 - Update remote API docs. 1327 - Add image size to history docs. 1328 - Be explicit about binding to all interfaces in redis example. 1329 - Document DisableNetwork flag in the 1.10 remote api. 1330 - Document that `--lxc-conf` is lxc only. 1331 - Add chef usage documentation. 1332 - Add example for an image with multiple for `docker load`. 1333 - Explain what `docker run -a` does in the docs. 1334 1335 #### Contrib 1336 - Add variable for DOCKER_LOGFILE to sysvinit and use append instead of overwrite in opening the logfile. 1337 - Fix init script cgroup mounting workarounds to be more similar to cgroupfs-mount and thus work properly. 1338 - Remove inotifywait hack from the upstart host-integration example because it's not necessary any more. 1339 - Add check-config script to contrib. 1340 - Fix fish shell completion. 1341 1342 #### Hack 1343 * Clean up "go test" output from "make test" to be much more readable/scannable. 1344 * Exclude more "definitely not unit tested Go source code" directories from hack/make/test. 1345 + Generate md5 and sha256 hashes when building, and upload them via hack/release.sh. 1346 - Include contributed completions in Ubuntu PPA. 1347 + Add cli integration tests. 1348 * Add tweaks to the hack scripts to make them simpler. 1349 1350 #### Remote API 1351 + Add TLS auth support for API. 1352 * Move git clone from daemon to client. 1353 - Fix content-type detection in docker cp. 1354 * Split API into 2 go packages. 1355 1356 #### Runtime 1357 * Support hairpin NAT without going through Docker server. 1358 - devicemapper: succeed immediately when removing non-existent devices. 1359 - devicemapper: improve handling of devicemapper devices (add per device lock, increase sleep time and unlock while sleeping). 1360 - devicemapper: increase timeout in waitClose to 10 seconds. 1361 - devicemapper: ensure we shut down thin pool cleanly. 1362 - devicemapper: pass info, rather than hash to activateDeviceIfNeeded, deactivateDevice, setInitialized, deleteDevice. 1363 - devicemapper: avoid AB-BA deadlock. 1364 - devicemapper: make shutdown better/faster. 1365 - improve alpha sorting in mflag. 1366 - Remove manual http cookie management because the cookiejar is being used. 1367 - Use BSD raw mode on Darwin. Fixes nano, tmux and others. 1368 - Add FreeBSD support for the client. 1369 - Merge auth package into registry. 1370 - Add deprecation warning for -t on `docker pull`. 1371 - Remove goroutine leak on error. 1372 - Update parseLxcInfo to comply with new lxc1.0 format. 1373 - Fix attach exit on darwin. 1374 - Improve deprecation message. 1375 - Retry to retrieve the layer metadata up to 5 times for `docker pull`. 1376 - Only unshare the mount namespace for execin. 1377 - Merge existing config when committing. 1378 - Disable daemon startup timeout. 1379 - Fix issue #4681: add loopback interface when networking is disabled. 1380 - Add failing test case for issue #4681. 1381 - Send SIGTERM to child, instead of SIGKILL. 1382 - Show the driver and the kernel version in `docker info` even when not in debug mode. 1383 - Always symlink /dev/ptmx for libcontainer. This fixes console related problems. 1384 - Fix issue caused by the absence of /etc/apparmor.d. 1385 - Don't leave empty cidFile behind when failing to create the container. 1386 - Mount cgroups automatically if they're not mounted already. 1387 - Use mock for search tests. 1388 - Update to double-dash everywhere. 1389 - Move .dockerenv parsing to lxc driver. 1390 - Move all bind-mounts in the container inside the namespace. 1391 - Don't use separate bind mount for container. 1392 - Always symlink /dev/ptmx for libcontainer. 1393 - Don't kill by pid for other drivers. 1394 - Add initial logging to libcontainer. 1395 * Sort by port in `docker ps`. 1396 - Move networking drivers into runtime top level package. 1397 + Add --no-prune to `docker rmi`. 1398 + Add time since exit in `docker ps`. 1399 - graphdriver: add build tags. 1400 - Prevent allocation of previously allocated ports & prevent improve port allocation. 1401 * Add support for --since/--before in `docker ps`. 1402 - Clean up container stop. 1403 + Add support for configurable dns search domains. 1404 - Add support for relative WORKDIR instructions. 1405 - Add --output flag for docker save. 1406 - Remove duplication of DNS entries in config merging. 1407 - Add cpuset.cpus to cgroups and native driver options. 1408 - Remove docker-ci. 1409 - Promote btrfs. btrfs is no longer considered experimental. 1410 - Add --input flag to `docker load`. 1411 - Return error when existing bridge doesn't match IP address. 1412 - Strip comments before parsing line continuations to avoid interpreting instructions as comments. 1413 - Fix TestOnlyLoopbackExistsWhenUsingDisableNetworkOption to ignore "DOWN" interfaces. 1414 - Add systemd implementation of cgroups and make containers show up as systemd units. 1415 - Fix commit and import when no repository is specified. 1416 - Remount /var/lib/docker as --private to fix scaling issue. 1417 - Use the environment's proxy when pinging the remote registry. 1418 - Reduce error level from harmless errors. 1419 * Allow --volumes-from to be individual files. 1420 - Fix expanding buffer in StdCopy. 1421 - Set error regardless of attach or stdin. This fixes #3364. 1422 - Add support for --env-file to load environment variables from files. 1423 - Symlink /etc/mtab and /proc/mounts. 1424 - Allow pushing a single tag. 1425 - Shut down containers cleanly at shutdown and wait forever for the containers to shut down. This makes container shutdown on daemon shutdown work properly via SIGTERM. 1426 - Don't throw error when starting an already running container. 1427 - Fix dynamic port allocation limit. 1428 - remove setupDev from libcontainer. 1429 - Add API version to `docker version`. 1430 - Return correct exit code when receiving signal and make SIGQUIT quit without cleanup. 1431 - Fix --volumes-from mount failure. 1432 - Allow non-privileged containers to create device nodes. 1433 - Skip login tests because of external dependency on a hosted service. 1434 - Deprecate `docker images --tree` and `docker images --viz`. 1435 - Deprecate `docker insert`. 1436 - Include base abstraction for apparmor. This fixes some apparmor related problems on Ubuntu 14.04. 1437 - Add specific error message when hitting 401 over HTTP on push. 1438 - Fix absolute volume check. 1439 - Remove volumes-from from the config. 1440 - Move DNS options to hostconfig. 1441 - Update the apparmor profile for libcontainer. 1442 - Add deprecation notice for `docker commit -run`. 1443 1444 ## 0.9.1 (2014-03-24) 1445 1446 #### Builder 1447 - Fix printing multiple messages on a single line. Fixes broken output during builds. 1448 1449 #### Documentation 1450 - Fix external link on security of containers. 1451 1452 #### Contrib 1453 - Fix init script cgroup mounting workarounds to be more similar to cgroupfs-mount and thus work properly. 1454 - Add variable for DOCKER_LOGFILE to sysvinit and use append instead of overwrite in opening the logfile. 1455 1456 #### Hack 1457 - Generate md5 and sha256 hashes when building, and upload them via hack/release.sh. 1458 1459 #### Remote API 1460 - Fix content-type detection in `docker cp`. 1461 1462 #### Runtime 1463 - Use BSD raw mode on Darwin. Fixes nano, tmux and others. 1464 - Only unshare the mount namespace for execin. 1465 - Retry to retrieve the layer metadata up to 5 times for `docker pull`. 1466 - Merge existing config when committing. 1467 - Fix panic in monitor. 1468 - Disable daemon startup timeout. 1469 - Fix issue #4681: add loopback interface when networking is disabled. 1470 - Add failing test case for issue #4681. 1471 - Send SIGTERM to child, instead of SIGKILL. 1472 - Show the driver and the kernel version in `docker info` even when not in debug mode. 1473 - Always symlink /dev/ptmx for libcontainer. This fixes console related problems. 1474 - Fix issue caused by the absence of /etc/apparmor.d. 1475 - Don't leave empty cidFile behind when failing to create the container. 1476 - Improve deprecation message. 1477 - Fix attach exit on darwin. 1478 - devicemapper: improve handling of devicemapper devices (add per device lock, increase sleep time, unlock while sleeping). 1479 - devicemapper: succeed immediately when removing non-existent devices. 1480 - devicemapper: increase timeout in waitClose to 10 seconds. 1481 - Remove goroutine leak on error. 1482 - Update parseLxcInfo to comply with new lxc1.0 format. 1483 1484 ## 0.9.0 (2014-03-10) 1485 1486 #### Builder 1487 - Avoid extra mount/unmount during build. This fixes mount/unmount related errors during build. 1488 - Add error to docker build --rm. This adds missing error handling. 1489 - Forbid chained onbuild, `onbuild from` and `onbuild maintainer` triggers. 1490 - Make `--rm` the default for `docker build`. 1491 1492 #### Documentation 1493 - Download the docker client binary for Mac over https. 1494 - Update the titles of the install instructions & descriptions. 1495 * Add instructions for upgrading boot2docker. 1496 * Add port forwarding example in OS X install docs. 1497 - Attempt to disentangle repository and registry. 1498 - Update docs to explain more about `docker ps`. 1499 - Update sshd example to use a Dockerfile. 1500 - Rework some examples, including the Python examples. 1501 - Update docs to include instructions for a container's lifecycle. 1502 - Update docs documentation to discuss the docs branch. 1503 - Don't skip cert check for an example & use HTTPS. 1504 - Bring back the memory and swap accounting section which was lost when the kernel page was removed. 1505 - Explain DNS warnings and how to fix them on systems running and using a local nameserver. 1506 1507 #### Contrib 1508 - Add Tanglu support for mkimage-debootstrap. 1509 - Add SteamOS support for mkimage-debootstrap. 1510 1511 #### Hack 1512 - Get package coverage when running integration tests. 1513 - Remove the Vagrantfile. This is being replaced with boot2docker. 1514 - Fix tests on systems where aufs isn't available. 1515 - Update packaging instructions and remove the dependency on lxc. 1516 1517 #### Remote API 1518 * Move code specific to the API to the api package. 1519 - Fix header content type for the API. Makes all endpoints use proper content type. 1520 - Fix registry auth & remove ping calls from CmdPush and CmdPull. 1521 - Add newlines to the JSON stream functions. 1522 1523 #### Runtime 1524 * Do not ping the registry from the CLI. All requests to registries flow through the daemon. 1525 - Check for nil information return in the lxc driver. This fixes panics with older lxc versions. 1526 - Devicemapper: cleanups and fix for unmount. Fixes two problems which were causing unmount to fail intermittently. 1527 - Devicemapper: remove directory when removing device. Directories don't get left behind when removing the device. 1528 * Devicemapper: enable skip_block_zeroing. Improves performance by not zeroing blocks. 1529 - Devicemapper: fix shutdown warnings. Fixes shutdown warnings concerning pool device removal. 1530 - Ensure docker cp stream is closed properly. Fixes problems with files not being copied by `docker cp`. 1531 - Stop making `tcp://` default to `127.0.0.1:4243` and remove the default port for tcp. 1532 - Fix `--run` in `docker commit`. This makes `docker commit --run` work again. 1533 - Fix custom bridge related options. This makes custom bridges work again. 1534 + Mount-bind the PTY as container console. This allows tmux/screen to run. 1535 + Add the pure Go libcontainer library to make it possible to run containers using only features of the Linux kernel. 1536 + Add native exec driver which uses libcontainer and make it the default exec driver. 1537 - Add support for handling extended attributes in archives. 1538 * Set the container MTU to be the same as the host MTU. 1539 + Add simple sha256 checksums for layers to speed up `docker push`. 1540 * Improve kernel version parsing. 1541 * Allow flag grouping (`docker run -it`). 1542 - Remove chroot exec driver. 1543 - Fix divide by zero to fix panic. 1544 - Rewrite `docker rmi`. 1545 - Fix docker info with lxc 1.0.0. 1546 - Fix fedora tty with apparmor. 1547 * Don't always append env vars, replace defaults with vars from config. 1548 * Fix a goroutine leak. 1549 * Switch to Go 1.2.1. 1550 - Fix unique constraint error checks. 1551 * Handle symlinks for Docker's data directory and for TMPDIR. 1552 - Add deprecation warnings for flags (-flag is deprecated in favor of --flag) 1553 - Add apparmor profile for the native execution driver. 1554 * Move system specific code from archive to pkg/system. 1555 - Fix duplicate signal for `docker run -i -t` (issue #3336). 1556 - Return correct process pid for lxc. 1557 - Add a -G option to specify the group which unix sockets belong to. 1558 + Add `-f` flag to `docker rm` to force removal of running containers. 1559 + Kill ghost containers and restart all ghost containers when the docker daemon restarts. 1560 + Add `DOCKER_RAMDISK` environment variable to make Docker work when the root is on a ramdisk. 1561 1562 ## 0.8.1 (2014-02-18) 1563 1564 #### Builder 1565 1566 - Avoid extra mount/unmount during build. This removes an unneeded mount/unmount operation which was causing problems with devicemapper 1567 - Fix regression with ADD of tar files. This stops Docker from decompressing tarballs added via ADD from the local file system 1568 - Add error to `docker build --rm`. This adds a missing error check to ensure failures to remove containers are detected and reported 1569 1570 #### Documentation 1571 1572 * Update issue filing instructions 1573 * Warn against the use of symlinks for Docker's storage folder 1574 * Replace the Firefox example with an IceWeasel example 1575 * Rewrite the PostgreSQL example using a Dockerfile and add more details to it 1576 * Improve the OS X documentation 1577 1578 #### Remote API 1579 1580 - Fix broken images API for version less than 1.7 1581 - Use the right encoding for all API endpoints which return JSON 1582 - Move remote api client to api/ 1583 - Queue calls to the API using generic socket wait 1584 1585 #### Runtime 1586 1587 - Fix the use of custom settings for bridges and custom bridges 1588 - Refactor the devicemapper code to avoid many mount/unmount race conditions and failures 1589 - Remove two panics which could make Docker crash in some situations 1590 - Don't ping registry from the CLI client 1591 - Enable skip_block_zeroing for devicemapper. This stops devicemapper from always zeroing entire blocks 1592 - Fix --run in `docker commit`. This makes docker commit store `--run` in the image configuration 1593 - Remove directory when removing devicemapper device. This cleans up leftover mount directories 1594 - Drop NET_ADMIN capability for non-privileged containers. Unprivileged containers can't change their network configuration 1595 - Ensure `docker cp` stream is closed properly 1596 - Avoid extra mount/unmount during container registration. This removes an unneeded mount/unmount operation which was causing problems with devicemapper 1597 - Stop allowing tcp:// as a default tcp bin address which binds to 127.0.0.1:4243 and remove the default port 1598 + Mount-bind the PTY as container console. This allows tmux and screen to run in a container 1599 - Clean up archive closing. This fixes and improves archive handling 1600 - Fix engine tests on systems where temp directories are symlinked 1601 - Add test methods for save and load 1602 - Avoid temporarily unmounting the container when restarting it. This fixes a race for devicemapper during restart 1603 - Support submodules when building from a GitHub repository 1604 - Quote volume path to allow spaces 1605 - Fix remote tar ADD behavior. This fixes a regression which was causing Docker to extract tarballs 1606 1607 ## 0.8.0 (2014-02-04) 1608 1609 #### Notable features since 0.7.0 1610 1611 * Images and containers can be removed much faster 1612 * Building an image from source with docker build is now much faster 1613 * The Docker daemon starts and stops much faster 1614 * The memory footprint of many common operations has been reduced, by streaming files instead of buffering them in memory, fixing memory leaks, and fixing various suboptimal memory allocations 1615 * Several race conditions were fixed, making Docker more stable under very high concurrency load. This makes Docker more stable and less likely to crash and reduces the memory footprint of many common operations 1616 * All packaging operations are now built on the Go language’s standard tar implementation, which is bundled with Docker itself. This makes packaging more portable across host distributions, and solves several issues caused by quirks and incompatibilities between different distributions of tar 1617 * Docker can now create, remove and modify larger numbers of containers and images graciously thanks to more aggressive releasing of system resources. For example the storage driver API now allows Docker to do reference counting on mounts created by the drivers 1618 With the ongoing changes to the networking and execution subsystems of docker testing these areas have been a focus of the refactoring. By moving these subsystems into separate packages we can test, analyze, and monitor coverage and quality of these packages 1619 * Many components have been separated into smaller sub-packages, each with a dedicated test suite. As a result the code is better-tested, more readable and easier to change 1620 1621 * The ADD instruction now supports caching, which avoids unnecessarily re-uploading the same source content again and again when it hasn’t changed 1622 * The new ONBUILD instruction adds to your image a “trigger” instruction to be executed at a later time, when the image is used as the base for another build 1623 * Docker now ships with an experimental storage driver which uses the BTRFS filesystem for copy-on-write 1624 * Docker is officially supported on Mac OS X 1625 * The Docker daemon supports systemd socket activation 1626 1627 ## 0.7.6 (2014-01-14) 1628 1629 #### Builder 1630 1631 * Do not follow symlink outside of build context 1632 1633 #### Runtime 1634 1635 - Remount bind mounts when ro is specified 1636 * Use https for fetching docker version 1637 1638 #### Other 1639 1640 * Inline the test.docker.io fingerprint 1641 * Add ca-certificates to packaging documentation 1642 1643 ## 0.7.5 (2014-01-09) 1644 1645 #### Builder 1646 1647 * Disable compression for build. More space usage but a much faster upload 1648 - Fix ADD caching for certain paths 1649 - Do not compress archive from git build 1650 1651 #### Documentation 1652 1653 - Fix error in GROUP add example 1654 * Make sure the GPG fingerprint is inline in the documentation 1655 * Give more specific advice on setting up signing of commits for DCO 1656 1657 #### Runtime 1658 1659 - Fix misspelled container names 1660 - Do not add hostname when networking is disabled 1661 * Return most recent image from the cache by date 1662 - Return all errors from docker wait 1663 * Add Content-Type Header "application/json" to GET /version and /info responses 1664 1665 #### Other 1666 1667 * Update DCO to version 1.1 1668 + Update Makefile to use "docker:GIT_BRANCH" as the generated image name 1669 * Update Travis to check for new 1.1 DCO version 1670 1671 ## 0.7.4 (2014-01-07) 1672 1673 #### Builder 1674 1675 - Fix ADD caching issue with . prefixed path 1676 - Fix docker build on devicemapper by reverting sparse file tar option 1677 - Fix issue with file caching and prevent wrong cache hit 1678 * Use same error handling while unmarshalling CMD and ENTRYPOINT 1679 1680 #### Documentation 1681 1682 * Simplify and streamline Amazon Quickstart 1683 * Install instructions use unprefixed Fedora image 1684 * Update instructions for mtu flag for Docker on GCE 1685 + Add Ubuntu Saucy to installation 1686 - Fix for wrong version warning on master instead of latest 1687 1688 #### Runtime 1689 1690 - Only get the image's rootfs when we need to calculate the image size 1691 - Correctly handle unmapping UDP ports 1692 * Make CopyFileWithTar use a pipe instead of a buffer to save memory on docker build 1693 - Fix login message to say pull instead of push 1694 - Fix "docker load" help by removing "SOURCE" prompt and mentioning STDIN 1695 * Make blank -H option default to the same as no -H was sent 1696 * Extract cgroups utilities to own submodule 1697 1698 #### Other 1699 1700 + Add Travis CI configuration to validate DCO and gofmt requirements 1701 + Add Developer Certificate of Origin Text 1702 * Upgrade VBox Guest Additions 1703 * Check standalone header when pinging a registry server 1704 1705 ## 0.7.3 (2014-01-02) 1706 1707 #### Builder 1708 1709 + Update ADD to use the image cache, based on a hash of the added content 1710 * Add error message for empty Dockerfile 1711 1712 #### Documentation 1713 1714 - Fix outdated link to the "Introduction" on www.docker.io 1715 + Update the docs to get wider when the screen does 1716 - Add information about needing to install LXC when using raw binaries 1717 * Update Fedora documentation to disentangle the docker and docker.io conflict 1718 * Add a note about using the new `-mtu` flag in several GCE zones 1719 + Add FrugalWare installation instructions 1720 + Add a more complete example of `docker run` 1721 - Fix API documentation for creating and starting Privileged containers 1722 - Add missing "name" parameter documentation on "/containers/create" 1723 * Add a mention of `lxc-checkconfig` as a way to check for some of the necessary kernel configuration 1724 - Update the 1.8 API documentation with some additions that were added to the docs for 1.7 1725 1726 #### Hack 1727 1728 - Add missing libdevmapper dependency to the packagers documentation 1729 * Update minimum Go requirement to a hard line at Go 1.2+ 1730 * Many minor improvements to the Vagrantfile 1731 + Add ability to customize dockerinit search locations when compiling (to be used very sparingly only by packagers of platforms who require a nonstandard location) 1732 + Add coverprofile generation reporting 1733 - Add `-a` to our Go build flags, removing the need for recompiling the stdlib manually 1734 * Update Dockerfile to be more canonical and have less spurious warnings during build 1735 - Fix some miscellaneous `docker pull` progress bar display issues 1736 * Migrate more miscellaneous packages under the "pkg" folder 1737 * Update TextMate highlighting to automatically be enabled for files named "Dockerfile" 1738 * Reorganize syntax highlighting files under a common "contrib/syntax" directory 1739 * Update install.sh script (https://get.docker.io/) to not fail if busybox fails to download or run at the end of the Ubuntu/Debian installation 1740 * Add support for container names in bash completion 1741 1742 #### Packaging 1743 1744 + Add an official Docker client binary for Darwin (Mac OS X) 1745 * Remove empty "Vendor" string and added "License" on deb package 1746 + Add a stubbed version of "/etc/default/docker" in the deb package 1747 1748 #### Runtime 1749 1750 * Update layer application to extract tars in place, avoiding file churn while handling whiteouts 1751 - Fix permissiveness of mtime comparisons in tar handling (since GNU tar and Go tar do not yet support sub-second mtime precision) 1752 * Reimplement `docker top` in pure Go to work more consistently, and even inside Docker-in-Docker (thus removing the shell injection vulnerability present in some versions of `lxc-ps`) 1753 + Update `-H unix://` to work similarly to `-H tcp://` by inserting the default values for missing portions 1754 - Fix more edge cases regarding dockerinit and deleted or replaced docker or dockerinit files 1755 * Update container name validation to include '.' 1756 - Fix use of a symlink or non-absolute path as the argument to `-g` to work as expected 1757 * Update to handle external mounts outside of LXC, fixing many small mounting quirks and making future execution backends and other features simpler 1758 * Update to use proper box-drawing characters everywhere in `docker images -tree` 1759 * Move MTU setting from LXC configuration to directly use netlink 1760 * Add `-S` option to external tar invocation for more efficient spare file handling 1761 + Add arch/os info to User-Agent string, especially for registry requests 1762 + Add `-mtu` option to Docker daemon for configuring MTU 1763 - Fix `docker build` to exit with a non-zero exit code on error 1764 + Add `DOCKER_HOST` environment variable to configure the client `-H` flag without specifying it manually for every invocation 1765 1766 ## 0.7.2 (2013-12-16) 1767 1768 #### Runtime 1769 1770 + Validate container names on creation with standard regex 1771 * Increase maximum image depth to 127 from 42 1772 * Continue to move api endpoints to the job api 1773 + Add -bip flag to allow specification of dynamic bridge IP via CIDR 1774 - Allow bridge creation when ipv6 is not enabled on certain systems 1775 * Set hostname and IP address from within dockerinit 1776 * Drop capabilities from within dockerinit 1777 - Fix volumes on host when symlink is present the image 1778 - Prevent deletion of image if ANY container is depending on it even if the container is not running 1779 * Update docker push to use new progress display 1780 * Use os.Lstat to allow mounting unix sockets when inspecting volumes 1781 - Adjust handling of inactive user login 1782 - Add missing defines in devicemapper for older kernels 1783 - Allow untag operations with no container validation 1784 - Add auth config to docker build 1785 1786 #### Documentation 1787 1788 * Add more information about Docker logging 1789 + Add RHEL documentation 1790 * Add a direct example for changing the CMD that is run in a container 1791 * Update Arch installation documentation 1792 + Add section on Trusted Builds 1793 + Add Network documentation page 1794 1795 #### Other 1796 1797 + Add new cover bundle for providing code coverage reporting 1798 * Separate integration tests in bundles 1799 * Make Tianon the hack maintainer 1800 * Update mkimage-debootstrap with more tweaks for keeping images small 1801 * Use https to get the install script 1802 * Remove vendored dotcloud/tar now that Go 1.2 has been released 1803 1804 ## 0.7.1 (2013-12-05) 1805 1806 #### Documentation 1807 1808 + Add @SvenDowideit as documentation maintainer 1809 + Add links example 1810 + Add documentation regarding ambassador pattern 1811 + Add Google Cloud Platform docs 1812 + Add dockerfile best practices 1813 * Update doc for RHEL 1814 * Update doc for registry 1815 * Update Postgres examples 1816 * Update doc for Ubuntu install 1817 * Improve remote api doc 1818 1819 #### Runtime 1820 1821 + Add hostconfig to docker inspect 1822 + Implement `docker log -f` to stream logs 1823 + Add env variable to disable kernel version warning 1824 + Add -format to `docker inspect` 1825 + Support bind-mount for files 1826 - Fix bridge creation on RHEL 1827 - Fix image size calculation 1828 - Make sure iptables are called even if the bridge already exists 1829 - Fix issue with stderr only attach 1830 - Remove init layer when destroying a container 1831 - Fix same port binding on different interfaces 1832 - `docker build` now returns the correct exit code 1833 - Fix `docker port` to display correct port 1834 - `docker build` now check that the dockerfile exists client side 1835 - `docker attach` now returns the correct exit code 1836 - Remove the name entry when the container does not exist 1837 1838 #### Registry 1839 1840 * Improve progress bars, add ETA for downloads 1841 * Simultaneous pulls now waits for the first to finish instead of failing 1842 - Tag only the top-layer image when pushing to registry 1843 - Fix issue with offline image transfer 1844 - Fix issue preventing using ':' in password for registry 1845 1846 #### Other 1847 1848 + Add pprof handler for debug 1849 + Create a Makefile 1850 * Use stdlib tar that now includes fix 1851 * Improve make.sh test script 1852 * Handle SIGQUIT on the daemon 1853 * Disable verbose during tests 1854 * Upgrade to go1.2 for official build 1855 * Improve unit tests 1856 * The test suite now runs all tests even if one fails 1857 * Refactor C in Go (Devmapper) 1858 - Fix OS X compilation 1859 1860 ## 0.7.0 (2013-11-25) 1861 1862 #### Notable features since 0.6.0 1863 1864 * Storage drivers: choose from aufs, device-mapper, or vfs. 1865 * Standard Linux support: docker now runs on unmodified Linux kernels and all major distributions. 1866 * Links: compose complex software stacks by connecting containers to each other. 1867 * Container naming: organize your containers by giving them memorable names. 1868 * Advanced port redirects: specify port redirects per interface, or keep sensitive ports private. 1869 * Offline transfer: push and pull images to the filesystem without losing information. 1870 * Quality: numerous bugfixes and small usability improvements. Significant increase in test coverage. 1871 1872 ## 0.6.7 (2013-11-21) 1873 1874 #### Runtime 1875 1876 * Improve stability, fixes some race conditions 1877 * Skip the volumes mounted when deleting the volumes of container. 1878 * Fix layer size computation: handle hard links correctly 1879 * Use the work Path for docker cp CONTAINER:PATH 1880 * Fix tmp dir never cleanup 1881 * Speedup docker ps 1882 * More informative error message on name collisions 1883 * Fix nameserver regex 1884 * Always return long id's 1885 * Fix container restart race condition 1886 * Keep published ports on docker stop;docker start 1887 * Fix container networking on Fedora 1888 * Correctly express "any address" to iptables 1889 * Fix network setup when reconnecting to ghost container 1890 * Prevent deletion if image is used by a running container 1891 * Lock around read operations in graph 1892 1893 #### RemoteAPI 1894 1895 * Return full ID on docker rmi 1896 1897 #### Client 1898 1899 + Add -tree option to images 1900 + Offline image transfer 1901 * Exit with status 2 on usage error and display usage on stderr 1902 * Do not forward SIGCHLD to container 1903 * Use string timestamp for docker events -since 1904 1905 #### Other 1906 1907 * Update to go 1.2rc5 1908 + Add /etc/default/docker support to upstart 1909 1910 ## 0.6.6 (2013-11-06) 1911 1912 #### Runtime 1913 1914 * Ensure container name on register 1915 * Fix regression in /etc/hosts 1916 + Add lock around write operations in graph 1917 * Check if port is valid 1918 * Fix restart runtime error with ghost container networking 1919 + Add some more colors and animals to increase the pool of generated names 1920 * Fix issues in docker inspect 1921 + Escape apparmor confinement 1922 + Set environment variables using a file. 1923 * Prevent docker insert to erase something 1924 + Prevent DNS server conflicts in CreateBridgeIface 1925 + Validate bind mounts on the server side 1926 + Use parent image config in docker build 1927 * Fix regression in /etc/hosts 1928 1929 #### Client 1930 1931 + Add -P flag to publish all exposed ports 1932 + Add -notrunc and -q flags to docker history 1933 * Fix docker commit, tag and import usage 1934 + Add stars, trusted builds and library flags in docker search 1935 * Fix docker logs with tty 1936 1937 #### RemoteAPI 1938 1939 * Make /events API send headers immediately 1940 * Do not split last column docker top 1941 + Add size to history 1942 1943 #### Other 1944 1945 + Contrib: Desktop integration. Firefox usecase. 1946 + Dockerfile: bump to go1.2rc3 1947 1948 ## 0.6.5 (2013-10-29) 1949 1950 #### Runtime 1951 1952 + Containers can now be named 1953 + Containers can now be linked together for service discovery 1954 + 'run -a', 'start -a' and 'attach' can forward signals to the container for better integration with process supervisors 1955 + Automatically start crashed containers after a reboot 1956 + Expose IP, port, and proto as separate environment vars for container links 1957 * Allow ports to be published to specific ips 1958 * Prohibit inter-container communication by default 1959 - Ignore ErrClosedPipe for stdin in Container.Attach 1960 - Remove unused field kernelVersion 1961 * Fix issue when mounting subdirectories of /mnt in container 1962 - Fix untag during removal of images 1963 * Check return value of syscall.Chdir when changing working directory inside dockerinit 1964 1965 #### Client 1966 1967 - Only pass stdin to hijack when needed to avoid closed pipe errors 1968 * Use less reflection in command-line method invocation 1969 - Monitor the tty size after starting the container, not prior 1970 - Remove useless os.Exit() calls after log.Fatal 1971 1972 #### Hack 1973 1974 + Add initial init scripts library and a safer Ubuntu packaging script that works for Debian 1975 * Add -p option to invoke debootstrap with http_proxy 1976 - Update install.sh with $sh_c to get sudo/su for modprobe 1977 * Update all the mkimage scripts to use --numeric-owner as a tar argument 1978 * Update hack/release.sh process to automatically invoke hack/make.sh and bail on build and test issues 1979 1980 #### Other 1981 1982 * Documentation: Fix the flags for nc in example 1983 * Testing: Remove warnings and prevent mount issues 1984 - Testing: Change logic for tty resize to avoid warning in tests 1985 - Builder: Fix race condition in docker build with verbose output 1986 - Registry: Fix content-type for PushImageJSONIndex method 1987 * Contrib: Improve helper tools to generate debian and Arch linux server images 1988 1989 ## 0.6.4 (2013-10-16) 1990 1991 #### Runtime 1992 1993 - Add cleanup of container when Start() fails 1994 * Add better comments to utils/stdcopy.go 1995 * Add utils.Errorf for error logging 1996 + Add -rm to docker run for removing a container on exit 1997 - Remove error messages which are not actually errors 1998 - Fix `docker rm` with volumes 1999 - Fix some error cases where an HTTP body might not be closed 2000 - Fix panic with wrong dockercfg file 2001 - Fix the attach behavior with -i 2002 * Record termination time in state. 2003 - Use empty string so TempDir uses the OS's temp dir automatically 2004 - Make sure to close the network allocators 2005 + Autorestart containers by default 2006 * Bump vendor kr/pty to commit 3b1f6487b `(syscall.O_NOCTTY)` 2007 * lxc: Allow set_file_cap capability in container 2008 - Move run -rm to the cli only 2009 * Split stdout stderr 2010 * Always create a new session for the container 2011 2012 #### Testing 2013 2014 - Add aggregated docker-ci email report 2015 - Add cleanup to remove leftover containers 2016 * Add nightly release to docker-ci 2017 * Add more tests around auth.ResolveAuthConfig 2018 - Remove a few errors in tests 2019 - Catch errClosing error when TCP and UDP proxies are terminated 2020 * Only run certain tests with TESTFLAGS='-run TestName' make.sh 2021 * Prevent docker-ci to test closing PRs 2022 * Replace panic by log.Fatal in tests 2023 - Increase TestRunDetach timeout 2024 2025 #### Documentation 2026 2027 * Add initial draft of the Docker infrastructure doc 2028 * Add devenvironment link to CONTRIBUTING.md 2029 * Add `apt-get install curl` to Ubuntu docs 2030 * Add explanation for export restrictions 2031 * Add .dockercfg doc 2032 * Remove Gentoo install notes about #1422 workaround 2033 * Fix help text for -v option 2034 * Fix Ping endpoint documentation 2035 - Fix parameter names in docs for ADD command 2036 - Fix ironic typo in changelog 2037 * Various command fixes in postgres example 2038 * Document how to edit and release docs 2039 - Minor updates to `postgresql_service.rst` 2040 * Clarify LGTM process to contributors 2041 - Corrected error in the package name 2042 * Document what `vagrant up` is actually doing 2043 + improve doc search results 2044 * Cleanup whitespace in API 1.5 docs 2045 * use angle brackets in MAINTAINER example email 2046 * Update archlinux.rst 2047 + Changes to a new style for the docs. Includes version switcher. 2048 * Formatting, add information about multiline json 2049 * Improve registry and index REST API documentation 2050 - Replace deprecated upgrading reference to docker-latest.tgz, which hasn't been updated since 0.5.3 2051 * Update Gentoo installation documentation now that we're in the portage tree proper 2052 * Cleanup and reorganize docs and tooling for contributors and maintainers 2053 - Minor spelling correction of protocoll -> protocol 2054 2055 #### Contrib 2056 2057 * Add vim syntax highlighting for Dockerfiles from @honza 2058 * Add mkimage-arch.sh 2059 * Reorganize contributed completion scripts to add zsh completion 2060 2061 #### Hack 2062 2063 * Add vagrant user to the docker group 2064 * Add proper bash completion for "docker push" 2065 * Add xz utils as a runtime dep 2066 * Add cleanup/refactor portion of #2010 for hack and Dockerfile updates 2067 + Add contrib/mkimage-centos.sh back (from #1621), and associated documentation link 2068 * Add several of the small make.sh fixes from #1920, and make the output more consistent and contributor-friendly 2069 + Add @tianon to hack/MAINTAINERS 2070 * Improve network performance for VirtualBox 2071 * Revamp install.sh to be usable by more people, and to use official install methods whenever possible (apt repo, portage tree, etc.) 2072 - Fix contrib/mkimage-debian.sh apt caching prevention 2073 + Add Dockerfile.tmLanguage to contrib 2074 * Configured FPM to make /etc/init/docker.conf a config file 2075 * Enable SSH Agent forwarding in Vagrant VM 2076 * Several small tweaks/fixes for contrib/mkimage-debian.sh 2077 2078 #### Other 2079 2080 - Builder: Abort build if mergeConfig returns an error and fix duplicate error message 2081 - Packaging: Remove deprecated packaging directory 2082 - Registry: Use correct auth config when logging in. 2083 - Registry: Fix the error message so it is the same as the regex 2084 2085 ## 0.6.3 (2013-09-23) 2086 2087 #### Packaging 2088 2089 * Add 'docker' group on install for ubuntu package 2090 * Update tar vendor dependency 2091 * Download apt key over HTTPS 2092 2093 #### Runtime 2094 2095 - Only copy and change permissions on non-bindmount volumes 2096 * Allow multiple volumes-from 2097 - Fix HTTP imports from STDIN 2098 2099 #### Documentation 2100 2101 * Update section on extracting the docker binary after build 2102 * Update development environment docs for new build process 2103 * Remove 'base' image from documentation 2104 2105 #### Other 2106 2107 - Client: Fix detach issue 2108 - Registry: Update regular expression to match index 2109 2110 ## 0.6.2 (2013-09-17) 2111 2112 #### Runtime 2113 2114 + Add domainname support 2115 + Implement image filtering with path.Match 2116 * Remove unnecessary warnings 2117 * Remove os/user dependency 2118 * Only mount the hostname file when the config exists 2119 * Handle signals within the `docker login` command 2120 - UID and GID are now also applied to volumes 2121 - `docker start` set error code upon error 2122 - `docker run` set the same error code as the process started 2123 2124 #### Builder 2125 2126 + Add -rm option in order to remove intermediate containers 2127 * Allow multiline for the RUN instruction 2128 2129 #### Registry 2130 2131 * Implement login with private registry 2132 - Fix push issues 2133 2134 #### Other 2135 2136 + Hack: Vendor all dependencies 2137 * Remote API: Bump to v1.5 2138 * Packaging: Break down hack/make.sh into small scripts, one per 'bundle': test, binary, ubuntu etc. 2139 * Documentation: General improvements 2140 2141 ## 0.6.1 (2013-08-23) 2142 2143 #### Registry 2144 2145 * Pass "meta" headers in API calls to the registry 2146 2147 #### Packaging 2148 2149 - Use correct upstart script with new build tool 2150 - Use libffi-dev, don`t build it from sources 2151 - Remove duplicate mercurial install command 2152 2153 ## 0.6.0 (2013-08-22) 2154 2155 #### Runtime 2156 2157 + Add lxc-conf flag to allow custom lxc options 2158 + Add an option to set the working directory 2159 * Add Image name to LogEvent tests 2160 + Add -privileged flag and relevant tests, docs, and examples 2161 * Add websocket support to /container/<name>/attach/ws 2162 * Add warning when net.ipv4.ip_forwarding = 0 2163 * Add hostname to environment 2164 * Add last stable version in `docker version` 2165 - Fix race conditions in parallel pull 2166 - Fix Graph ByParent() to generate list of child images per parent image. 2167 - Fix typo: fmt.Sprint -> fmt.Sprintf 2168 - Fix small \n error un docker build 2169 * Fix to "Inject dockerinit at /.dockerinit" 2170 * Fix #910. print user name to docker info output 2171 * Use Go 1.1.2 for dockerbuilder 2172 * Use ranged for loop on channels 2173 - Use utils.ParseRepositoryTag instead of strings.Split(name, ":") in server.ImageDelete 2174 - Improve CMD, ENTRYPOINT, and attach docs. 2175 - Improve connect message with socket error 2176 - Load authConfig only when needed and fix useless WARNING 2177 - Show tag used when image is missing 2178 * Apply volumes-from before creating volumes 2179 - Make docker run handle SIGINT/SIGTERM 2180 - Prevent crash when .dockercfg not readable 2181 - Install script should be fetched over https, not http. 2182 * API, issue 1471: Use groups for socket permissions 2183 - Correctly detect IPv4 forwarding 2184 * Mount /dev/shm as a tmpfs 2185 - Switch from http to https for get.docker.io 2186 * Let userland proxy handle container-bound traffic 2187 * Update the Docker CLI to specify a value for the "Host" header. 2188 - Change network range to avoid conflict with EC2 DNS 2189 - Reduce connect and read timeout when pinging the registry 2190 * Parallel pull 2191 - Handle ip route showing mask-less IP addresses 2192 * Allow ENTRYPOINT without CMD 2193 - Always consider localhost as a domain name when parsing the FQN repos name 2194 * Refactor checksum 2195 2196 #### Documentation 2197 2198 * Add MongoDB image example 2199 * Add instructions for creating and using the docker group 2200 * Add sudo to examples and installation to documentation 2201 * Add ufw doc 2202 * Add a reference to ps -a 2203 * Add information about Docker`s high level tools over LXC. 2204 * Fix typo in docs for docker run -dns 2205 * Fix a typo in the ubuntu installation guide 2206 * Fix to docs regarding adding docker groups 2207 * Update default -H docs 2208 * Update readme with dependencies for building 2209 * Update amazon.rst to explain that Vagrant is not necessary for running Docker on ec2 2210 * PostgreSQL service example in documentation 2211 * Suggest installing linux-headers by default. 2212 * Change the twitter handle 2213 * Clarify Amazon EC2 installation 2214 * 'Base' image is deprecated and should no longer be referenced in the docs. 2215 * Move note about officially supported kernel 2216 - Solved the logo being squished in Safari 2217 2218 #### Builder 2219 2220 + Add USER instruction do Dockerfile 2221 + Add workdir support for the Buildfile 2222 * Add no cache for docker build 2223 - Fix docker build and docker events output 2224 - Only count known instructions as build steps 2225 - Make sure ENV instruction within build perform a commit each time 2226 - Forbid certain paths within docker build ADD 2227 - Repository name (and optionally a tag) in build usage 2228 - Make sure ADD will create everything in 0755 2229 2230 #### Remote API 2231 2232 * Sort Images by most recent creation date. 2233 * Reworking opaque requests in registry module 2234 * Add image name in /events 2235 * Use mime pkg to parse Content-Type 2236 * 650 http utils and user agent field 2237 2238 #### Hack 2239 2240 + Bash Completion: Limit commands to containers of a relevant state 2241 * Add docker dependencies coverage testing into docker-ci 2242 2243 #### Packaging 2244 2245 + Docker-brew 0.5.2 support and memory footprint reduction 2246 * Add new docker dependencies into docker-ci 2247 - Revert "docker.upstart: avoid spawning a `sh` process" 2248 + Docker-brew and Docker standard library 2249 + Release docker with docker 2250 * Fix the upstart script generated by get.docker.io 2251 * Enabled the docs to generate manpages. 2252 * Revert Bind daemon to 0.0.0.0 in Vagrant. 2253 2254 #### Register 2255 2256 * Improve auth push 2257 * Registry unit tests + mock registry 2258 2259 #### Tests 2260 2261 * Improve TestKillDifferentUser to prevent timeout on buildbot 2262 - Fix typo in TestBindMounts (runContainer called without image) 2263 * Improve TestGetContainersTop so it does not rely on sleep 2264 * Relax the lo interface test to allow iface index != 1 2265 * Add registry functional test to docker-ci 2266 * Add some tests in server and utils 2267 2268 #### Other 2269 2270 * Contrib: bash completion script 2271 * Client: Add docker cp command and copy api endpoint to copy container files/folders to the host 2272 * Don`t read from stdout when only attached to stdin 2273 2274 ## 0.5.3 (2013-08-13) 2275 2276 #### Runtime 2277 2278 * Use docker group for socket permissions 2279 - Spawn shell within upstart script 2280 - Handle ip route showing mask-less IP addresses 2281 - Add hostname to environment 2282 2283 #### Builder 2284 2285 - Make sure ENV instruction within build perform a commit each time 2286 2287 ## 0.5.2 (2013-08-08) 2288 2289 * Builder: Forbid certain paths within docker build ADD 2290 - Runtime: Change network range to avoid conflict with EC2 DNS 2291 * API: Change daemon to listen on unix socket by default 2292 2293 ## 0.5.1 (2013-07-30) 2294 2295 #### Runtime 2296 2297 + Add `ps` args to `docker top` 2298 + Add support for container ID files (pidfile like) 2299 + Add container=lxc in default env 2300 + Support networkless containers with `docker run -n` and `docker -d -b=none` 2301 * Stdout/stderr logs are now stored in the same file as JSON 2302 * Allocate a /16 IP range by default, with fallback to /24. Try 12 ranges instead of 3. 2303 * Change .dockercfg format to json and support multiple auth remote 2304 - Do not override volumes from config 2305 - Fix issue with EXPOSE override 2306 2307 #### API 2308 2309 + Docker client now sets useragent (RFC 2616) 2310 + Add /events endpoint 2311 2312 #### Builder 2313 2314 + ADD command now understands URLs 2315 + CmdAdd and CmdEnv now respect Dockerfile-set ENV variables 2316 - Create directories with 755 instead of 700 within ADD instruction 2317 2318 #### Hack 2319 2320 * Simplify unit tests with helpers 2321 * Improve docker.upstart event 2322 * Add coverage testing into docker-ci 2323 2324 ## 0.5.0 (2013-07-17) 2325 2326 #### Runtime 2327 2328 + List all processes running inside a container with 'docker top' 2329 + Host directories can be mounted as volumes with 'docker run -v' 2330 + Containers can expose public UDP ports (eg, '-p 123/udp') 2331 + Optionally specify an exact public port (eg. '-p 80:4500') 2332 * 'docker login' supports additional options 2333 - Don't save a container`s hostname when committing an image. 2334 2335 #### Registry 2336 2337 + New image naming scheme inspired by Go packaging convention allows arbitrary combinations of registries 2338 - Fix issues when uploading images to a private registry 2339 2340 #### Builder 2341 2342 + ENTRYPOINT instruction sets a default binary entry point to a container 2343 + VOLUME instruction marks a part of the container as persistent data 2344 * 'docker build' displays the full output of a build by default 2345 2346 ## 0.4.8 (2013-07-01) 2347 2348 + Builder: New build operation ENTRYPOINT adds an executable entry point to the container. - Runtime: Fix a bug which caused 'docker run -d' to no longer print the container ID. 2349 - Tests: Fix issues in the test suite 2350 2351 ## 0.4.7 (2013-06-28) 2352 2353 #### Remote API 2354 2355 * The progress bar updates faster when downloading and uploading large files 2356 - Fix a bug in the optional unix socket transport 2357 2358 #### Runtime 2359 2360 * Improve detection of kernel version 2361 + Host directories can be mounted as volumes with 'docker run -b' 2362 - fix an issue when only attaching to stdin 2363 * Use 'tar --numeric-owner' to avoid uid mismatch across multiple hosts 2364 2365 #### Hack 2366 2367 * Improve test suite and dev environment 2368 * Remove dependency on unit tests on 'os/user' 2369 2370 #### Other 2371 2372 * Registry: easier push/pull to a custom registry 2373 + Documentation: add terminology section 2374 2375 ## 0.4.6 (2013-06-22) 2376 2377 - Runtime: fix a bug which caused creation of empty images (and volumes) to crash. 2378 2379 ## 0.4.5 (2013-06-21) 2380 2381 + Builder: 'docker build git://URL' fetches and builds a remote git repository 2382 * Runtime: 'docker ps -s' optionally prints container size 2383 * Tests: improved and simplified 2384 - Runtime: fix a regression introduced in 0.4.3 which caused the logs command to fail. 2385 - Builder: fix a regression when using ADD with single regular file. 2386 2387 ## 0.4.4 (2013-06-19) 2388 2389 - Builder: fix a regression introduced in 0.4.3 which caused builds to fail on new clients. 2390 2391 ## 0.4.3 (2013-06-19) 2392 2393 #### Builder 2394 2395 + ADD of a local file will detect tar archives and unpack them 2396 * ADD improvements: use tar for copy + automatically unpack local archives 2397 * ADD uses tar/untar for copies instead of calling 'cp -ar' 2398 * Fix the behavior of ADD to be (mostly) reverse-compatible, predictable and well-documented. 2399 - Fix a bug which caused builds to fail if ADD was the first command 2400 * Nicer output for 'docker build' 2401 2402 #### Runtime 2403 2404 * Remove bsdtar dependency 2405 * Add unix socket and multiple -H support 2406 * Prevent rm of running containers 2407 * Use go1.1 cookiejar 2408 - Fix issue detaching from running TTY container 2409 - Forbid parallel push/pull for a single image/repo. Fixes #311 2410 - Fix race condition within Run command when attaching. 2411 2412 #### Client 2413 2414 * HumanReadable ProgressBar sizes in pull 2415 * Fix docker version`s git commit output 2416 2417 #### API 2418 2419 * Send all tags on History API call 2420 * Add tag lookup to history command. Fixes #882 2421 2422 #### Documentation 2423 2424 - Fix missing command in irc bouncer example 2425 2426 ## 0.4.2 (2013-06-17) 2427 2428 - Packaging: Bumped version to work around an Ubuntu bug 2429 2430 ## 0.4.1 (2013-06-17) 2431 2432 #### Remote Api 2433 2434 + Add flag to enable cross domain requests 2435 + Add images and containers sizes in docker ps and docker images 2436 2437 #### Runtime 2438 2439 + Configure dns configuration host-wide with 'docker -d -dns' 2440 + Detect faulty DNS configuration and replace it with a public default 2441 + Allow docker run <name>:<id> 2442 + You can now specify public port (ex: -p 80:4500) 2443 * Improve image removal to garbage-collect unreferenced parents 2444 2445 #### Client 2446 2447 * Allow multiple params in inspect 2448 * Print the container id before the hijack in `docker run` 2449 2450 #### Registry 2451 2452 * Add regexp check on repo`s name 2453 * Move auth to the client 2454 - Remove login check on pull 2455 2456 #### Other 2457 2458 * Vagrantfile: Add the rest api port to vagrantfile`s port_forward 2459 * Upgrade to Go 1.1 2460 - Builder: don`t ignore last line in Dockerfile when it doesn`t end with \n 2461 2462 ## 0.4.0 (2013-06-03) 2463 2464 #### Builder 2465 2466 + Introducing Builder 2467 + 'docker build' builds a container, layer by layer, from a source repository containing a Dockerfile 2468 2469 #### Remote API 2470 2471 + Introducing Remote API 2472 + control Docker programmatically using a simple HTTP/json API 2473 2474 #### Runtime 2475 2476 * Various reliability and usability improvements 2477 2478 ## 0.3.4 (2013-05-30) 2479 2480 #### Builder 2481 2482 + 'docker build' builds a container, layer by layer, from a source repository containing a Dockerfile 2483 + 'docker build -t FOO' applies the tag FOO to the newly built container. 2484 2485 #### Runtime 2486 2487 + Interactive TTYs correctly handle window resize 2488 * Fix how configuration is merged between layers 2489 2490 #### Remote API 2491 2492 + Split stdout and stderr on 'docker run' 2493 + Optionally listen on a different IP and port (use at your own risk) 2494 2495 #### Documentation 2496 2497 * Improve install instructions. 2498 2499 ## 0.3.3 (2013-05-23) 2500 2501 - Registry: Fix push regression 2502 - Various bugfixes 2503 2504 ## 0.3.2 (2013-05-09) 2505 2506 #### Registry 2507 2508 * Improve the checksum process 2509 * Use the size to have a good progress bar while pushing 2510 * Use the actual archive if it exists in order to speed up the push 2511 - Fix error 400 on push 2512 2513 #### Runtime 2514 2515 * Store the actual archive on commit 2516 2517 ## 0.3.1 (2013-05-08) 2518 2519 #### Builder 2520 2521 + Implement the autorun capability within docker builder 2522 + Add caching to docker builder 2523 + Add support for docker builder with native API as top level command 2524 + Implement ENV within docker builder 2525 - Check the command existence prior create and add Unit tests for the case 2526 * use any whitespaces instead of tabs 2527 2528 #### Runtime 2529 2530 + Add go version to debug infos 2531 * Kernel version - don`t show the dash if flavor is empty 2532 2533 #### Registry 2534 2535 + Add docker search top level command in order to search a repository 2536 - Fix pull for official images with specific tag 2537 - Fix issue when login in with a different user and trying to push 2538 * Improve checksum - async calculation 2539 2540 #### Images 2541 2542 + Output graph of images to dot (graphviz) 2543 - Fix ByParent function 2544 2545 #### Documentation 2546 2547 + New introduction and high-level overview 2548 + Add the documentation for docker builder 2549 - CSS fix for docker documentation to make REST API docs look better. 2550 - Fix CouchDB example page header mistake 2551 - Fix README formatting 2552 * Update www.docker.io website. 2553 2554 #### Other 2555 2556 + Website: new high-level overview 2557 - Makefile: Swap "go get" for "go get -d", especially to compile on go1.1rc 2558 * Packaging: packaging ubuntu; issue #510: Use goland-stable PPA package to build docker 2559 2560 ## 0.3.0 (2013-05-06) 2561 2562 #### Runtime 2563 2564 - Fix the command existence check 2565 - strings.Split may return an empty string on no match 2566 - Fix an index out of range crash if cgroup memory is not 2567 2568 #### Documentation 2569 2570 * Various improvements 2571 + New example: sharing data between 2 couchdb databases 2572 2573 #### Other 2574 2575 * Vagrant: Use only one deb line in /etc/apt 2576 + Registry: Implement the new registry 2577 2578 ## 0.2.2 (2013-05-03) 2579 2580 + Support for data volumes ('docker run -v=PATH') 2581 + Share data volumes between containers ('docker run -volumes-from') 2582 + Improve documentation 2583 * Upgrade to Go 1.0.3 2584 * Various upgrades to the dev environment for contributors 2585 2586 ## 0.2.1 (2013-05-01) 2587 2588 + 'docker commit -run' bundles a layer with default runtime options: command, ports etc. 2589 * Improve install process on Vagrant 2590 + New Dockerfile operation: "maintainer" 2591 + New Dockerfile operation: "expose" 2592 + New Dockerfile operation: "cmd" 2593 + Contrib script to build a Debian base layer 2594 + 'docker -d -r': restart crashed containers at daemon startup 2595 * Runtime: improve test coverage 2596 2597 ## 0.2.0 (2013-04-23) 2598 2599 - Runtime: ghost containers can be killed and waited for 2600 * Documentation: update install instructions 2601 - Packaging: fix Vagrantfile 2602 - Development: automate releasing binaries and ubuntu packages 2603 + Add a changelog 2604 - Various bugfixes 2605 2606 ## 0.1.8 (2013-04-22) 2607 2608 - Dynamically detect cgroup capabilities 2609 - Issue stability warning on kernels <3.8 2610 - 'docker push' buffers on disk instead of memory 2611 - Fix 'docker diff' for removed files 2612 - Fix 'docker stop' for ghost containers 2613 - Fix handling of pidfile 2614 - Various bugfixes and stability improvements 2615 2616 ## 0.1.7 (2013-04-18) 2617 2618 - Container ports are available on localhost 2619 - 'docker ps' shows allocated TCP ports 2620 - Contributors can run 'make hack' to start a continuous integration VM 2621 - Streamline ubuntu packaging & uploading 2622 - Various bugfixes and stability improvements 2623 2624 ## 0.1.6 (2013-04-17) 2625 2626 - Record the author an image with 'docker commit -author' 2627 2628 ## 0.1.5 (2013-04-17) 2629 2630 - Disable standalone mode 2631 - Use a custom DNS resolver with 'docker -d -dns' 2632 - Detect ghost containers 2633 - Improve diagnosis of missing system capabilities 2634 - Allow disabling memory limits at compile time 2635 - Add debian packaging 2636 - Documentation: installing on Arch Linux 2637 - Documentation: running Redis on docker 2638 - Fix lxc 0.9 compatibility 2639 - Automatically load aufs module 2640 - Various bugfixes and stability improvements 2641 2642 ## 0.1.4 (2013-04-09) 2643 2644 - Full support for TTY emulation 2645 - Detach from a TTY session with the escape sequence `C-p C-q` 2646 - Various bugfixes and stability improvements 2647 - Minor UI improvements 2648 - Automatically create our own bridge interface 'docker0' 2649 2650 ## 0.1.3 (2013-04-04) 2651 2652 - Choose TCP frontend port with '-p :PORT' 2653 - Layer format is versioned 2654 - Major reliability improvements to the process manager 2655 - Various bugfixes and stability improvements 2656 2657 ## 0.1.2 (2013-04-03) 2658 2659 - Set container hostname with 'docker run -h' 2660 - Selective attach at run with 'docker run -a [stdin[,stdout[,stderr]]]' 2661 - Various bugfixes and stability improvements 2662 - UI polish 2663 - Progress bar on push/pull 2664 - Use XZ compression by default 2665 - Make IP allocator lazy 2666 2667 ## 0.1.1 (2013-03-31) 2668 2669 - Display shorthand IDs for convenience 2670 - Stabilize process management 2671 - Layers can include a commit message 2672 - Simplified 'docker attach' 2673 - Fix support for re-attaching 2674 - Various bugfixes and stability improvements 2675 - Auto-download at run 2676 - Auto-login on push 2677 - Beefed up documentation 2678 2679 ## 0.1.0 (2013-03-23) 2680 2681 Initial public release 2682 2683 - Implement registry in order to push/pull images 2684 - TCP port allocation 2685 - Fix termcaps on Linux 2686 - Add documentation 2687 - Add Vagrant support with Vagrantfile 2688 - Add unit tests 2689 - Add repository/tags to ease image management 2690 - Improve the layer implementation