1# Changelog
2
3Items starting with `DEPRECATE` are important deprecation notices. For more
4information on the list of deprecated flags and APIs please have a look at
5https://docs.docker.com/engine/deprecated/ where target removal dates can also
6be found.
7
8## 17.03.2-ce (2017-05-29)
9
10### Networking
11
12- Fix a concurrency issue preventing network creation [#33273](https://github.com/moby/moby/pull/33273)
13
14### Runtime
15
16- Relabel secrets path to avoid a Permission Denied on selinux enabled systems [#33236](https://github.com/moby/moby/pull/33236) (ref [#32529](https://github.com/moby/moby/pull/32529)
17- Fix cases where local volume were not properly relabeled if needed [#33236](https://github.com/moby/moby/pull/33236) (ref [#29428](https://github.com/moby/moby/pull/29428))
18- Fix an issue while upgrading if a plugin rootfs was still mounted [#33236](https://github.com/moby/moby/pull/33236) (ref [#32525](https://github.com/moby/moby/pull/32525))
19- Fix an issue where volume wouldn't default to the `rprivate` propagation mode [#33236](https://github.com/moby/moby/pull/33236) (ref [#32851](https://github.com/moby/moby/pull/32851))
20- Fix a panic that could occur when a volume driver could not be retrieved [#33236](https://github.com/moby/moby/pull/33236) (ref [#32347](https://github.com/moby/moby/pull/32347))
21+ Add a warning in `docker info` when the `overlay` or `overlay2` graphdriver is used on a filesystem without `d_type` support [#33236](https://github.com/moby/moby/pull/33236) (ref [#31290](https://github.com/moby/moby/pull/31290))
22- Fix an issue with backporting mount spec to older volumes [#33207](https://github.com/moby/moby/pull/33207)
23- Fix issue where a failed unmount can lead to data loss on local volume remove [#33120](https://github.com/moby/moby/pull/33120)
24
25### Swarm Mode
26
27- Fix a case where tasks could get killed unexpectedly [#33118](https://github.com/moby/moby/pull/33118)
28- Fix an issue preventing to deploy services if the registry cannot be reached despite the needed images being locally present [#33117](https://github.com/moby/moby/pull/33117)
29
30## 17.05.0-ce (2017-05-04)
31
32### Builder
33
34+ Add multi-stage build support [#31257](https://github.com/docker/docker/pull/31257) [#32063](https://github.com/docker/docker/pull/32063)
35+ Allow using build-time args (`ARG`) in `FROM` [#31352](https://github.com/docker/docker/pull/31352)
36+ Add an option for specifying build target [#32496](https://github.com/docker/docker/pull/32496)
37* Accept `-f -` to read Dockerfile from `stdin`, but use local context for building [#31236](https://github.com/docker/docker/pull/31236)
38* The values of default build time arguments (e.g `HTTP_PROXY`) are no longer displayed in docker image history unless a corresponding `ARG` instruction is written in the Dockerfile. [#31584](https://github.com/docker/docker/pull/31584)
39- Fix setting command if a custom shell is used in a parent image [#32236](https://github.com/docker/docker/pull/32236)
40- Fix `docker build --label` when the label includes single quotes and a space [#31750](https://github.com/docker/docker/pull/31750)
41
42### Client
43
44* Add `--mount` flag to `docker run` and `docker create` [#32251](https://github.com/docker/docker/pull/32251)
45* Add `--type=secret` to `docker inspect` [#32124](https://github.com/docker/docker/pull/32124)
46* Add `--format` option to `docker secret ls` [#31552](https://github.com/docker/docker/pull/31552)
47* Add `--filter` option to `docker secret ls` [#30810](https://github.com/docker/docker/pull/30810)
48* Add `--filter scope=<swarm|local>` to `docker network ls` [#31529](https://github.com/docker/docker/pull/31529)
49* Add `--cpus` support to `docker update` [#31148](https://github.com/docker/docker/pull/31148)
50* Add label filter to `docker system prune` and other `prune` commands [#30740](https://github.com/docker/docker/pull/30740)
51* `docker stack rm` now accepts multiple stacks as input [#32110](https://github.com/docker/docker/pull/32110)
52* Improve `docker version --format` option when the client has downgraded the API version [#31022](https://github.com/docker/docker/pull/31022)
53* Prompt when using an encrypted client certificate to connect to a docker daemon [#31364](https://github.com/docker/docker/pull/31364)
54* Display created tags on successful `docker build` [#32077](https://github.com/docker/docker/pull/32077)
55* Cleanup compose convert error messages [#32087](https://github.com/moby/moby/pull/32087)
56
57### Contrib
58
59+ Add support for building docker debs for Ubuntu 17.04 Zesty on amd64 [#32435](https://github.com/docker/docker/pull/32435)
60
61### Daemon
62
63- Fix `--api-cors-header` being ignored if `--api-enable-cors` is not set [#32174](https://github.com/docker/docker/pull/32174)
64- Cleanup docker tmp dir on start [#31741](https://github.com/docker/docker/pull/31741)
65- Deprecate `--graph` flag in favor or `--data-root`  [#28696](https://github.com/docker/docker/pull/28696)
66
67### Logging
68
69+ Add support for logging driver plugins [#28403](https://github.com/docker/docker/pull/28403)
70* Add support for showing logs of individual tasks to `docker service logs`, and add `/task/{id}/logs` REST endpoint [#32015](https://github.com/docker/docker/pull/32015)
71* Add `--log-opt env-regex` option to match environment variables using a regular expression [#27565](https://github.com/docker/docker/pull/27565)
72
73### Networking
74
75+ Allow user to replace, and customize the ingress network [#31714](https://github.com/docker/docker/pull/31714)
76- Fix UDP traffic in containers not working after the container is restarted [#32505](https://github.com/docker/docker/pull/32505)
77- Fix files being written to `/var/lib/docker` if a different data-root is set [#32505](https://github.com/docker/docker/pull/32505)
78
79### Runtime
80
81- Ensure health probe is stopped when a container exits [#32274](https://github.com/docker/docker/pull/32274)
82
83### Swarm Mode
84
85+ Add update/rollback order for services (`--update-order` / `--rollback-order`) [#30261](https://github.com/docker/docker/pull/30261)
86+ Add support for synchronous `service create` and `service update` [#31144](https://github.com/docker/docker/pull/31144)
87+ Add support for "grace periods" on healthchecks through the `HEALTHCHECK --start-period` and `--health-start-period` flag to
88  `docker service create`, `docker service update`, `docker create`, and `docker run` to support containers with an initial startup
89  time [#28938](https://github.com/docker/docker/pull/28938)
90* `docker service create` now omits fields that are not specified by the user, when possible. This will allow defaults to be applied inside the manager [#32284](https://github.com/docker/docker/pull/32284)
91* `docker service inspect` now shows default values for fields that are not specified by the user [#32284](https://github.com/docker/docker/pull/32284)
92* Move `docker service logs` out of experimental [#32462](https://github.com/docker/docker/pull/32462)
93* Add support for Credential Spec and SELinux to services to the API [#32339](https://github.com/docker/docker/pull/32339)
94* Add `--entrypoint` flag to `docker service create` and `docker service update` [#29228](https://github.com/docker/docker/pull/29228)
95* Add `--network-add` and `--network-rm` to `docker service update` [#32062](https://github.com/docker/docker/pull/32062)
96* Add `--credential-spec` flag to `docker service create` and `docker service update` [#32339](https://github.com/docker/docker/pull/32339)
97* Add `--filter mode=<global|replicated>` to `docker service ls` [#31538](https://github.com/docker/docker/pull/31538)
98* Resolve network IDs on the client side, instead of in the daemon when creating services [#32062](https://github.com/docker/docker/pull/32062)
99* Add `--format` option to `docker node ls` [#30424](https://github.com/docker/docker/pull/30424)
100* Add `--prune` option to `docker stack deploy` to remove services that are no longer defined in the docker-compose file [#31302](https://github.com/docker/docker/pull/31302)
101* Add `PORTS` column for `docker service ls` when using `ingress` mode [#30813](https://github.com/docker/docker/pull/30813)
102- Fix unnecessary re-deploying of tasks when environment-variables are used [#32364](https://github.com/docker/docker/pull/32364)
103- Fix `docker stack deploy` not supporting `endpoint_mode` when deploying from a docker compose file  [#32333](https://github.com/docker/docker/pull/32333)
104- Proceed with startup if cluster component cannot be created to allow recovering from a broken swarm setup [#31631](https://github.com/docker/docker/pull/31631)
105
106### Security
107
108* Allow setting SELinux type or MCS labels when using `--ipc=container:` or `--ipc=host` [#30652](https://github.com/docker/docker/pull/30652)
109
110
111### Deprecation
112
113- Deprecate `--api-enable-cors` daemon flag. This flag was marked deprecated in Docker 1.6.0 but not listed in deprecated features [#32352](https://github.com/docker/docker/pull/32352)
114- Remove Ubuntu 12.04 (Precise Pangolin) as supported platform. Ubuntu 12.04 is EOL, and no longer receives updates [#32520](https://github.com/docker/docker/pull/32520)
115
116## 17.04.0-ce (2017-04-05)
117
118### Builder
119
120* Disable container logging for build containers [#29552](https://github.com/docker/docker/pull/29552)
121* Fix use of `**/` in `.dockerignore` [#29043](https://github.com/docker/docker/pull/29043)
122
123### Client
124
125+ Sort `docker stack ls` by name [#31085](https://github.com/docker/docker/pull/31085)
126+ Flags for specifying bind mount consistency [#31047](https://github.com/docker/docker/pull/31047)
127* Output of docker CLI --help is now wrapped to the terminal width [#28751](https://github.com/docker/docker/pull/28751)
128* Suppress image digest in docker ps [#30848](https://github.com/docker/docker/pull/30848)
129* Hide command options that are related to Windows [#30788](https://github.com/docker/docker/pull/30788)
130* Fix `docker plugin install` prompt to accept "enter" for the "N" default [#30769](https://github.com/docker/docker/pull/30769)
131+ Add `truncate` function for Go templates [#30484](https://github.com/docker/docker/pull/30484)
132* Support expanded syntax of ports in `stack deploy` [#30476](https://github.com/docker/docker/pull/30476)
133* Support expanded syntax of mounts in `stack deploy` [#30597](https://github.com/docker/docker/pull/30597) [#31795](https://github.com/docker/docker/pull/31795)
134+ Add `--add-host` for docker build [#30383](https://github.com/docker/docker/pull/30383)
135+ Add `.CreatedAt` placeholder for `docker network ls --format` [#29900](https://github.com/docker/docker/pull/29900)
136* Update order of `--secret-rm` and `--secret-add` [#29802](https://github.com/docker/docker/pull/29802)
137+ Add `--filter enabled=true` for `docker plugin ls` [#28627](https://github.com/docker/docker/pull/28627)
138+ Add `--format` to `docker service ls` [#28199](https://github.com/docker/docker/pull/28199)
139+ Add `publish` and `expose` filter for `docker ps --filter` [#27557](https://github.com/docker/docker/pull/27557)
140* Support multiple service IDs on `docker service ps` [#25234](https://github.com/docker/docker/pull/25234)
141+ Allow swarm join with `--availability=drain` [#24993](https://github.com/docker/docker/pull/24993)
142* Docker inspect now shows "docker-default" when AppArmor is enabled and no other profile was defined [#27083](https://github.com/docker/docker/pull/27083)
143
144### Logging
145
146+ Implement optional ring buffer for container logs [#28762](https://github.com/docker/docker/pull/28762)
147+ Add `--log-opt awslogs-create-group=<true|false>` for awslogs (CloudWatch) to support creation of log groups as needed [#29504](https://github.com/docker/docker/pull/29504)
148- Fix segfault when using the gcplogs logging driver with a "static" binary [#29478](https://github.com/docker/docker/pull/29478)
149
150
151### Networking
152
153* Check parameter `--ip`, `--ip6` and `--link-local-ip` in `docker network connect` [#30807](https://github.com/docker/docker/pull/30807)
154+ Added support for `dns-search` [#30117](https://github.com/docker/docker/pull/30117)
155+ Added --verbose option for docker network inspect to show task details from all swarm nodes [#31710](https://github.com/docker/docker/pull/31710)
156* Clear stale datapath encryption states when joining the cluster [docker/libnetwork#1354](https://github.com/docker/libnetwork/pull/1354)
157+ Ensure iptables initialization only happens once [docker/libnetwork#1676](https://github.com/docker/libnetwork/pull/1676)
158* Fix bad order of iptables filter rules [docker/libnetwork#961](https://github.com/docker/libnetwork/pull/961)
159+ Add anonymous container alias to service record on attachable network [docker/libnetwork#1651](https://github.com/docker/libnetwork/pull/1651)
160+ Support for `com.docker.network.container_interface_prefix` driver label [docker/libnetwork#1667](https://github.com/docker/libnetwork/pull/1667)
161+ Improve network list performance by omitting network details that are not used [#30673](https://github.com/docker/docker/pull/30673)
162
163### Runtime
164
165* Handle paused container when restoring without live-restore set [#31704](https://github.com/docker/docker/pull/31704)
166- Do not allow sub second in healthcheck options in Dockerfile [#31177](https://github.com/docker/docker/pull/31177)
167* Support name and id prefix in  `secret update` [#30856](https://github.com/docker/docker/pull/30856)
168* Use binary frame for websocket attach endpoint [#30460](https://github.com/docker/docker/pull/30460)
169* Fix linux mount calls not applying propagation type changes [#30416](https://github.com/docker/docker/pull/30416)
170* Fix ExecIds leak on failed `exec -i` [#30340](https://github.com/docker/docker/pull/30340)
171* Prune named but untagged images if `danglingOnly=true` [#30330](https://github.com/docker/docker/pull/30330)
172+ Add daemon flag to set `no_new_priv` as default for unprivileged containers [#29984](https://github.com/docker/docker/pull/29984)
173+ Add daemon option `--default-shm-size` [#29692](https://github.com/docker/docker/pull/29692)
174+ Support registry mirror config reload [#29650](https://github.com/docker/docker/pull/29650)
175- Ignore the daemon log config when building images [#29552](https://github.com/docker/docker/pull/29552)
176* Move secret name or ID prefix resolving from client to daemon [#29218](https://github.com/docker/docker/pull/29218)
177+ Allow adding rules to `cgroup devices.allow` on container create/run [#22563](https://github.com/docker/docker/pull/22563)
178- Fix `cpu.cfs_quota_us` being reset when running `systemd daemon-reload` [#31736](https://github.com/docker/docker/pull/31736)
179
180### Swarm Mode
181
182+ Topology-aware scheduling [#30725](https://github.com/docker/docker/pull/30725)
183+ Automatic service rollback on failure [#31108](https://github.com/docker/docker/pull/31108)
184+ Worker and manager on the same node are now connected through a UNIX socket [docker/swarmkit#1828](https://github.com/docker/swarmkit/pull/1828), [docker/swarmkit#1850](https://github.com/docker/swarmkit/pull/1850), [docker/swarmkit#1851](https://github.com/docker/swarmkit/pull/1851)
185* Improve raft transport package [docker/swarmkit#1748](https://github.com/docker/swarmkit/pull/1748)
186* No automatic manager shutdown on demotion/removal [docker/swarmkit#1829](https://github.com/docker/swarmkit/pull/1829)
187* Use TransferLeadership to make leader demotion safer [docker/swarmkit#1939](https://github.com/docker/swarmkit/pull/1939)
188* Decrease default monitoring period [docker/swarmkit#1967](https://github.com/docker/swarmkit/pull/1967)
189+ Add Service logs formatting [#31672](https://github.com/docker/docker/pull/31672)
190* Fix service logs API to be able to specify stream [#31313](https://github.com/docker/docker/pull/31313)
191+ Add `--stop-signal` for `service create` and `service update` [#30754](https://github.com/docker/docker/pull/30754)
192+ Add `--read-only` for `service create` and `service update` [#30162](https://github.com/docker/docker/pull/30162)
193+ Renew the context after communicating with the registry [#31586](https://github.com/docker/docker/pull/31586)
194+ (experimental) Add `--tail` and `--since` options to `docker service logs` [#31500](https://github.com/docker/docker/pull/31500)
195+ (experimental) Add `--no-task-ids` and `--no-trunc` options to `docker service logs` [#31672](https://github.com/docker/docker/pull/31672)
196
197### Windows
198
199* Block pulling Windows images on non-Windows daemons [#29001](https://github.com/docker/docker/pull/29001)
200
201## 17.03.1-ce (2017-03-27)
202
203### Remote API (v1.27) & Client
204
205* Fix autoremove on older api [#31692](https://github.com/docker/docker/pull/31692)
206* Fix default network customization for a stack [#31258](https://github.com/docker/docker/pull/31258/)
207* Correct CPU usage calculation in presence of offline CPUs and newer Linux [#31802](https://github.com/docker/docker/pull/31802)
208* Fix issue where service healthcheck is `{}` in remote API [#30197](https://github.com/docker/docker/pull/30197)
209
210### Runtime
211
212* Update runc to 54296cf40ad8143b62dbcaa1d90e520a2136ddfe [#31666](https://github.com/docker/docker/pull/31666)
213 * Ignore cgroup2 mountpoints [opencontainers/runc#1266](https://github.com/opencontainers/runc/pull/1266)
214* Update containerd to 4ab9917febca54791c5f071a9d1f404867857fcc [#31662](https://github.com/docker/docker/pull/31662) [#31852](https://github.com/docker/docker/pull/31852)
215 * Register healthcheck service before calling restore() [docker/containerd#609](https://github.com/docker/containerd/pull/609)
216* Fix `docker exec` not working after unattended upgrades that reload apparmor profiles [#31773](https://github.com/docker/docker/pull/31773)
217* Fix unmounting layer without merge dir with Overlay2 [#31069](https://github.com/docker/docker/pull/31069)
218* Do not ignore "volume in use" errors when force-delete [#31450](https://github.com/docker/docker/pull/31450)
219
220### Swarm Mode
221
222* Update swarmkit to 17756457ad6dc4d8a639a1f0b7a85d1b65a617bb [#31807](https://github.com/docker/docker/pull/31807)
223 * Scheduler now correctly considers tasks which have been assigned to a node but aren't yet running [docker/swarmkit#1980](https://github.com/docker/swarmkit/pull/1980)
224 * Allow removal of a network when only dead tasks reference it [docker/swarmkit#2018](https://github.com/docker/swarmkit/pull/2018)
225 * Retry failed network allocations less aggressively [docker/swarmkit#2021](https://github.com/docker/swarmkit/pull/2021)
226 * Avoid network allocation for tasks that are no longer running [docker/swarmkit#2017](https://github.com/docker/swarmkit/pull/2017)
227 * Bookkeeping fixes inside network allocator allocator [docker/swarmkit#2019](https://github.com/docker/swarmkit/pull/2019) [docker/swarmkit#2020](https://github.com/docker/swarmkit/pull/2020)
228
229### Windows
230
231* Cleanup HCS on restore [#31503](https://github.com/docker/docker/pull/31503)
232
233## 17.03.0-ce (2017-03-01)
234
235**IMPORTANT**: Starting with this release, Docker is on a monthly release cycle and uses a
236new YY.MM versioning scheme to reflect this. Two channels are available: monthly and quarterly.
237Any given monthly release will only receive security and bugfixes until the next monthly
238release is available. Quarterly releases receive security and bugfixes for 4 months after
239initial release. This release includes bugfixes for 1.13.1 but
240there are no major feature additions and the API version stays the same.
241Upgrading from Docker 1.13.1 to 17.03.0 is expected to be simple and low-risk.
242
243### Client
244
245* Fix panic in `docker stats --format` [#30776](https://github.com/docker/docker/pull/30776)
246
247### Contrib
248
249* Update various `bash` and `zsh` completion scripts [#30823](https://github.com/docker/docker/pull/30823), [#30945](https://github.com/docker/docker/pull/30945) and more...
250* Block obsolete socket families in default seccomp profile - mitigates unpatched kernels' CVE-2017-6074 [#29076](https://github.com/docker/docker/pull/29076)
251
252### Networking
253
254* Fix bug on overlay encryption keys rotation in cross-datacenter swarm [#30727](https://github.com/docker/docker/pull/30727)
255* Fix side effect panic in overlay encryption and network control plane communication failure ("No installed keys could decrypt the message") on frequent swarm leader re-election [#25608](https://github.com/docker/docker/pull/25608)
256* Several fixes around system responsiveness and datapath programming when using overlay network with external kv-store [docker/libnetwork#1639](https://github.com/docker/libnetwork/pull/1639), [docker/libnetwork#1632](https://github.com/docker/libnetwork/pull/1632) and more...
257* Discard incoming plain vxlan packets for encrypted overlay network [#31170](https://github.com/docker/docker/pull/31170)
258* Release the network attachment on allocation failure [#31073](https://github.com/docker/docker/pull/31073)
259* Fix port allocation when multiple published ports map to the same target port [docker/swarmkit#1835](https://github.com/docker/swarmkit/pull/1835)
260
261### Runtime
262
263* Fix a deadlock in docker logs [#30223](https://github.com/docker/docker/pull/30223)
264* Fix cpu spin waiting for log write events [#31070](https://github.com/docker/docker/pull/31070)
265* Fix a possible crash when using journald [#31231](https://github.com/docker/docker/pull/31231) [#31263](https://github.com/docker/docker/pull/31263)
266* Fix a panic on close of nil channel [#31274](https://github.com/docker/docker/pull/31274)
267* Fix duplicate mount point for `--volumes-from` in `docker run` [#29563](https://github.com/docker/docker/pull/29563)
268* Fix `--cache-from` does not cache last step [#31189](https://github.com/docker/docker/pull/31189)
269
270### Swarm Mode
271
272* Shutdown leaks an error when the container was never started [#31279](https://github.com/docker/docker/pull/31279)
273* Fix possibility of tasks getting stuck in the "NEW" state during a leader failover [docker/swarmkit#1938](https://github.com/docker/swarmkit/pull/1938)
274* Fix extraneous task creations for global services that led to confusing replica counts in `docker service ls` [docker/swarmkit#1957](https://github.com/docker/swarmkit/pull/1957)
275* Fix problem that made rolling updates slow when `task-history-limit` was set to 1 [docker/swarmkit#1948](https://github.com/docker/swarmkit/pull/1948)
276* Restart tasks elsewhere, if appropriate, when they are shut down as a result of nodes no longer satisfying constraints [docker/swarmkit#1958](https://github.com/docker/swarmkit/pull/1958)
277* (experimental)
278
279## 1.13.1 (2017-02-08)
280
281**IMPORTANT**: On Linux distributions where `devicemapper` was the default storage driver,
282the `overlay2`, or `overlay` is now used by default (if the kernel supports it).
283To use devicemapper, you can manually configure the storage driver to use through
284the `--storage-driver` daemon option, or by setting "storage-driver" in the `daemon.json`
285configuration file.
286
287**IMPORTANT**: In Docker 1.13, the managed plugin api changed, as compared to the experimental
288version introduced in Docker 1.12. You must **uninstall** plugins which you installed with Docker 1.12
289_before_ upgrading to Docker 1.13. You can uninstall plugins using the `docker plugin rm` command.
290
291If you have already upgraded to Docker 1.13 without uninstalling
292previously-installed plugins, you may see this message when the Docker daemon
293starts:
294
295    Error starting daemon: json: cannot unmarshal string into Go value of type types.PluginEnv
296
297To manually remove all plugins and resolve this problem, take the following steps:
298
2991. Remove plugins.json from: `/var/lib/docker/plugins/`.
3002. Restart Docker. Verify that the Docker daemon starts with no errors.
3013. Reinstall your plugins.
302
303### Contrib
304
305* Do not require a custom build of tini [#28454](https://github.com/docker/docker/pull/28454)
306* Upgrade to Go 1.7.5 [#30489](https://github.com/docker/docker/pull/30489)
307
308### Remote API (v1.26) & Client
309
310+ Support secrets in docker stack deploy with compose file [#30144](https://github.com/docker/docker/pull/30144)
311
312### Runtime
313
314* Fix size issue in `docker system df` [#30378](https://github.com/docker/docker/pull/30378)
315* Fix error on `docker inspect` when Swarm certificates were expired. [#29246](https://github.com/docker/docker/pull/29246)
316* Fix deadlock on v1 plugin with activate error [#30408](https://github.com/docker/docker/pull/30408)
317* Fix SELinux regression [#30649](https://github.com/docker/docker/pull/30649)
318
319### Plugins
320
321* Support global scoped network plugins (v2) in swarm mode [#30332](https://github.com/docker/docker/pull/30332)
322+ Add `docker plugin upgrade` [#29414](https://github.com/docker/docker/pull/29414)
323
324### Windows
325
326* Fix small regression with old plugins in Windows [#30150](https://github.com/docker/docker/pull/30150)
327* Fix warning on Windows [#30730](https://github.com/docker/docker/pull/30730)
328
329## 1.13.0 (2017-01-18)
330
331**IMPORTANT**: On Linux distributions where `devicemapper` was the default storage driver,
332the `overlay2`, or `overlay` is now used by default (if the kernel supports it).
333To use devicemapper, you can manually configure the storage driver to use through
334the `--storage-driver` daemon option, or by setting "storage-driver" in the `daemon.json`
335configuration file.
336
337**IMPORTANT**: In Docker 1.13, the managed plugin api changed, as compared to the experimental
338version introduced in Docker 1.12. You must **uninstall** plugins which you installed with Docker 1.12
339_before_ upgrading to Docker 1.13. You can uninstall plugins using the `docker plugin rm` command.
340
341If you have already upgraded to Docker 1.13 without uninstalling
342previously-installed plugins, you may see this message when the Docker daemon
343starts:
344
345    Error starting daemon: json: cannot unmarshal string into Go value of type types.PluginEnv
346
347To manually remove all plugins and resolve this problem, take the following steps:
348
3491. Remove plugins.json from: `/var/lib/docker/plugins/`.
3502. Restart Docker. Verify that the Docker daemon starts with no errors.
3513. Reinstall your plugins.
352
353### Builder
354
355+ Add capability to specify images used as a cache source on build. These images do not need to have local parent chain and can be pulled from other registries [#26839](https://github.com/docker/docker/pull/26839)
356+ (experimental) Add option to squash image layers to the FROM image after successful builds [#22641](https://github.com/docker/docker/pull/22641)
357* Fix dockerfile parser with empty line after escape [#24725](https://github.com/docker/docker/pull/24725)
358- Add step number on `docker build` [#24978](https://github.com/docker/docker/pull/24978)
359+ Add support for compressing build context during image build [#25837](https://github.com/docker/docker/pull/25837)
360+ add `--network` to `docker build` [#27702](https://github.com/docker/docker/pull/27702)
361- Fix inconsistent behavior between `--label` flag on `docker build` and `docker run` [#26027](https://github.com/docker/docker/issues/26027)
362- Fix image layer inconsistencies when using the overlay storage driver [#27209](https://github.com/docker/docker/pull/27209)
363* Unused build-args are now allowed. A warning is presented instead of an error and failed build [#27412](https://github.com/docker/docker/pull/27412)
364- Fix builder cache issue on Windows [#27805](https://github.com/docker/docker/pull/27805)
365+ Allow `USER` in builder on Windows [#28415](https://github.com/docker/docker/pull/28415)
366+ Handle env case-insensitive on Windows [#28725](https://github.com/docker/docker/pull/28725)
367
368### Contrib
369
370+ Add support for building docker debs for Ubuntu 16.04 Xenial on PPC64LE [#23438](https://github.com/docker/docker/pull/23438)
371+ Add support for building docker debs for Ubuntu 16.04 Xenial on s390x [#26104](https://github.com/docker/docker/pull/26104)
372+ Add support for building docker debs for Ubuntu 16.10 Yakkety Yak on PPC64LE [#28046](https://github.com/docker/docker/pull/28046)
373- Add RPM builder for VMWare Photon OS [#24116](https://github.com/docker/docker/pull/24116)
374+ Add shell completions to tgz [#27735](https://github.com/docker/docker/pull/27735)
375* Update the install script to allow using the mirror in China [#27005](https://github.com/docker/docker/pull/27005)
376+ Add DEB builder for Ubuntu 16.10 Yakkety Yak [#27993](https://github.com/docker/docker/pull/27993)
377+ Add RPM builder for Fedora 25 [#28222](https://github.com/docker/docker/pull/28222)
378+ Add `make deb` support for aarch64 [#27625](https://github.com/docker/docker/pull/27625)
379
380### Distribution
381
382* Update notary dependency to 0.4.2 (full changelogs [here](https://github.com/docker/notary/releases/tag/v0.4.2)) [#27074](https://github.com/docker/docker/pull/27074)
383  - Support for compilation on windows [docker/notary#970](https://github.com/docker/notary/pull/970)
384  - Improved error messages for client authentication errors [docker/notary#972](https://github.com/docker/notary/pull/972)
385  - Support for finding keys that are anywhere in the `~/.docker/trust/private` directory, not just under `~/.docker/trust/private/root_keys` or `~/.docker/trust/private/tuf_keys` [docker/notary#981](https://github.com/docker/notary/pull/981)
386  - Previously, on any error updating, the client would fall back on the cache.  Now we only do so if there is a network error or if the server is unavailable or missing the TUF data. Invalid TUF data will cause the update to fail - for example if there was an invalid root rotation. [docker/notary#982](https://github.com/docker/notary/pull/982)
387  - Improve root validation and yubikey debug logging [docker/notary#858](https://github.com/docker/notary/pull/858) [docker/notary#891](https://github.com/docker/notary/pull/891)
388  - Warn if certificates for root or delegations are near expiry [docker/notary#802](https://github.com/docker/notary/pull/802)
389  - Warn if role metadata is near expiry [docker/notary#786](https://github.com/docker/notary/pull/786)
390  - Fix passphrase retrieval attempt counting and terminal detection [docker/notary#906](https://github.com/docker/notary/pull/906)
391- Avoid unnecessary blob uploads when different users push same layers to authenticated registry [#26564](https://github.com/docker/docker/pull/26564)
392* Allow external storage for registry credentials [#26354](https://github.com/docker/docker/pull/26354)
393
394### Logging
395
396* Standardize the default logging tag value in all logging drivers [#22911](https://github.com/docker/docker/pull/22911)
397- Improve performance and memory use when logging of long log lines [#22982](https://github.com/docker/docker/pull/22982)
398+ Enable syslog driver for windows [#25736](https://github.com/docker/docker/pull/25736)
399+ Add Logentries Driver [#27471](https://github.com/docker/docker/pull/27471)
400+ Update of AWS log driver to support tags [#27707](https://github.com/docker/docker/pull/27707)
401+ Unix socket support for fluentd [#26088](https://github.com/docker/docker/pull/26088)
402* Enable fluentd logging driver on Windows [#28189](https://github.com/docker/docker/pull/28189)
403- Sanitize docker labels when used as journald field names [#23725](https://github.com/docker/docker/pull/23725)
404- Fix an issue where `docker logs --tail` returned less lines than expected [#28203](https://github.com/docker/docker/pull/28203)
405- Splunk Logging Driver: performance and reliability improvements [#26207](https://github.com/docker/docker/pull/26207)
406- Splunk Logging Driver: configurable formats and skip for verifying connection [#25786](https://github.com/docker/docker/pull/25786)
407
408### Networking
409
410+ Add `--attachable` network support to enable `docker run` to work in swarm-mode overlay network [#25962](https://github.com/docker/docker/pull/25962)
411+ Add support for host port PublishMode in services using the `--publish` option in `docker service create` [#27917](https://github.com/docker/docker/pull/27917) and [#28943](https://github.com/docker/docker/pull/28943)
412+ Add support for Windows server 2016 overlay network driver (requires upcoming ws2016 update) [#28182](https://github.com/docker/docker/pull/28182)
413* Change the default `FORWARD` policy to `DROP` [#28257](https://github.com/docker/docker/pull/28257)
414+ Add support for specifying static IP addresses for predefined network on windows [#22208](https://github.com/docker/docker/pull/22208)
415- Fix `--publish` flag on `docker run` not working with IPv6 addresses [#27860](https://github.com/docker/docker/pull/27860)
416- Fix inspect network show gateway with mask [#25564](https://github.com/docker/docker/pull/25564)
417- Fix an issue where multiple addresses in a bridge may cause `--fixed-cidr` to not have the correct addresses [#26659](https://github.com/docker/docker/pull/26659)
418+ Add creation timestamp to `docker network inspect` [#26130](https://github.com/docker/docker/pull/26130)
419- Show peer nodes in `docker network inspect` for swarm overlay networks [#28078](https://github.com/docker/docker/pull/28078)
420- Enable ping for service VIP address [#28019](https://github.com/docker/docker/pull/28019)
421
422### Plugins
423
424- Move plugins out of experimental [#28226](https://github.com/docker/docker/pull/28226)
425- Add `--force` on `docker plugin remove` [#25096](https://github.com/docker/docker/pull/25096)
426* Add support for dynamically reloading authorization plugins [#22770](https://github.com/docker/docker/pull/22770)
427+ Add description in `docker plugin ls` [#25556](https://github.com/docker/docker/pull/25556)
428+ Add `-f`/`--format` to `docker plugin inspect` [#25990](https://github.com/docker/docker/pull/25990)
429+ Add `docker plugin create` command [#28164](https://github.com/docker/docker/pull/28164)
430* Send request's TLS peer certificates to authorization plugins [#27383](https://github.com/docker/docker/pull/27383)
431* Support for global-scoped network and ipam plugins in swarm-mode [#27287](https://github.com/docker/docker/pull/27287)
432* Split `docker plugin install` into two API call `/privileges` and `/pull` [#28963](https://github.com/docker/docker/pull/28963)
433
434### Remote API (v1.25) & Client
435
436+ Support `docker stack deploy` from a Compose file [#27998](https://github.com/docker/docker/pull/27998)
437+ (experimental) Implement checkpoint and restore [#22049](https://github.com/docker/docker/pull/22049)
438+ Add `--format` flag to `docker info` [#23808](https://github.com/docker/docker/pull/23808)
439* Remove `--name` from `docker volume create` [#23830](https://github.com/docker/docker/pull/23830)
440+ Add `docker stack ls` [#23886](https://github.com/docker/docker/pull/23886)
441+ Add a new `is-task` ps filter [#24411](https://github.com/docker/docker/pull/24411)
442+ Add `--env-file` flag to `docker service create` [#24844](https://github.com/docker/docker/pull/24844)
443+ Add `--format` on `docker stats` [#24987](https://github.com/docker/docker/pull/24987)
444+ Make `docker node ps` default to `self` in swarm node [#25214](https://github.com/docker/docker/pull/25214)
445+ Add `--group` in `docker service create` [#25317](https://github.com/docker/docker/pull/25317)
446+ Add `--no-trunc` to service/node/stack ps output [#25337](https://github.com/docker/docker/pull/25337)
447+ Add Logs to `ContainerAttachOptions` so go clients can request to retrieve container logs as part of the attach process [#26718](https://github.com/docker/docker/pull/26718)
448+ Allow client to talk to an older server [#27745](https://github.com/docker/docker/pull/27745)
449* Inform user client-side that a container removal is in progress [#26074](https://github.com/docker/docker/pull/26074)
450+ Add `Isolation` to the /info endpoint [#26255](https://github.com/docker/docker/pull/26255)
451+ Add `userns` to the /info endpoint [#27840](https://github.com/docker/docker/pull/27840)
452- Do not allow more than one mode be requested at once in the services endpoint [#26643](https://github.com/docker/docker/pull/26643)
453+ Add capability to /containers/create API to specify mounts in a more granular and safer way [#22373](https://github.com/docker/docker/pull/22373)
454+ Add `--format` flag to `network ls` and `volume ls` [#23475](https://github.com/docker/docker/pull/23475)
455* Allow the top-level `docker inspect` command to inspect any kind of resource [#23614](https://github.com/docker/docker/pull/23614)
456+ Add --cpus flag to control cpu resources for `docker run` and `docker create`, and add `NanoCPUs` to `HostConfig` [#27958](https://github.com/docker/docker/pull/27958)
457- Allow unsetting the `--entrypoint` in `docker run` or `docker create` [#23718](https://github.com/docker/docker/pull/23718)
458* Restructure CLI commands by adding `docker image` and `docker container` commands for more consistency [#26025](https://github.com/docker/docker/pull/26025)
459- Remove `COMMAND` column from `service ls` output [#28029](https://github.com/docker/docker/pull/28029)
460+ Add `--format` to `docker events` [#26268](https://github.com/docker/docker/pull/26268)
461* Allow specifying multiple nodes on `docker node ps` [#26299](https://github.com/docker/docker/pull/26299)
462* Restrict fractional digits to 2 decimals in `docker images` output [#26303](https://github.com/docker/docker/pull/26303)
463+ Add `--dns-option` to `docker run` [#28186](https://github.com/docker/docker/pull/28186)
464+ Add Image ID to container commit event [#28128](https://github.com/docker/docker/pull/28128)
465+ Add external binaries version to docker info [#27955](https://github.com/docker/docker/pull/27955)
466+ Add information for `Manager Addresses` in the output of `docker info` [#28042](https://github.com/docker/docker/pull/28042)
467+ Add a new reference filter for `docker images` [#27872](https://github.com/docker/docker/pull/27872)
468
469### Runtime
470
471+ Add `--experimental` daemon flag to enable experimental features, instead of shipping them in a separate build [#27223](https://github.com/docker/docker/pull/27223)
472+ Add a `--shutdown-timeout` daemon flag to specify the default timeout (in seconds) to stop containers gracefully before daemon exit [#23036](https://github.com/docker/docker/pull/23036)
473+ Add `--stop-timeout` to specify the timeout value (in seconds) for individual containers to stop [#22566](https://github.com/docker/docker/pull/22566)
474+ Add a new daemon flag `--userland-proxy-path` to allow configuring the userland proxy instead of using the hardcoded `docker-proxy` from `$PATH` [#26882](https://github.com/docker/docker/pull/26882)
475+ Add boolean flag `--init` on `dockerd` and on `docker run` to use [tini](https://github.com/krallin/tini) a zombie-reaping init process as PID 1 [#26061](https://github.com/docker/docker/pull/26061) [#28037](https://github.com/docker/docker/pull/28037)
476+ Add a new daemon flag `--init-path` to allow configuring the path to the `docker-init` binary [#26941](https://github.com/docker/docker/pull/26941)
477+ Add support for live reloading insecure registry in configuration [#22337](https://github.com/docker/docker/pull/22337)
478+ Add support for storage-opt size on Windows daemons [#23391](https://github.com/docker/docker/pull/23391)
479* Improve reliability of `docker run --rm` by moving it from the client to the daemon  [#20848](https://github.com/docker/docker/pull/20848)
480+ Add support for `--cpu-rt-period` and `--cpu-rt-runtime` flags, allowing containers to run real-time threads when `CONFIG_RT_GROUP_SCHED` is enabled in the kernel [#23430](https://github.com/docker/docker/pull/23430)
481* Allow parallel stop, pause, unpause [#24761](https://github.com/docker/docker/pull/24761) / [#26778](https://github.com/docker/docker/pull/26778)
482* Implement XFS quota for overlay2 [#24771](https://github.com/docker/docker/pull/24771)
483- Fix partial/full filter issue in `service tasks --filter` [#24850](https://github.com/docker/docker/pull/24850)
484- Allow engine to run inside a user namespace [#25672](https://github.com/docker/docker/pull/25672)
485- Fix a race condition between device deferred removal and resume device, when using the devicemapper graphdriver [#23497](https://github.com/docker/docker/pull/23497)
486- Add `docker stats` support in Windows [#25737](https://github.com/docker/docker/pull/25737)
487- Allow using `--pid=host` and `--net=host` when `--userns=host` [#25771](https://github.com/docker/docker/pull/25771)
488+ (experimental) Add metrics (Prometheus) output for basic `container`, `image`, and `daemon` operations [#25820](https://github.com/docker/docker/pull/25820)
489- Fix issue in `docker stats` with `NetworkDisabled=true` [#25905](https://github.com/docker/docker/pull/25905)
490+ Add `docker top` support in Windows [#25891](https://github.com/docker/docker/pull/25891)
491+ Record pid of exec'd process [#27470](https://github.com/docker/docker/pull/27470)
492+ Add support for looking up user/groups via `getent` [#27599](https://github.com/docker/docker/pull/27599)
493+ Add new `docker system` command with `df` and `prune` subcommands for system resource management, as well as `docker {container,image,volume,network} prune` subcommands [#26108](https://github.com/docker/docker/pull/26108) [#27525](https://github.com/docker/docker/pull/27525) / [#27525](https://github.com/docker/docker/pull/27525)
494- Fix an issue where containers could not be stopped or killed by setting xfs max_retries to 0 upon ENOSPC with devicemapper [#26212](https://github.com/docker/docker/pull/26212)
495- Fix `docker cp` failing to copy to a container's volume dir on CentOS with devicemapper [#28047](https://github.com/docker/docker/pull/28047)
496* Promote overlay(2) graphdriver [#27932](https://github.com/docker/docker/pull/27932)
497+ Add `--seccomp-profile` daemon flag to specify a path to a seccomp profile that overrides the default [#26276](https://github.com/docker/docker/pull/26276)
498- Fix ulimits in `docker inspect` when `--default-ulimit` is set on daemon [#26405](https://github.com/docker/docker/pull/26405)
499- Add workaround for overlay issues during build in older kernels [#28138](https://github.com/docker/docker/pull/28138)
500+ Add `TERM` environment variable on `docker exec -t` [#26461](https://github.com/docker/docker/pull/26461)
501* Honor a container’s `--stop-signal` setting upon `docker kill` [#26464](https://github.com/docker/docker/pull/26464)
502
503### Swarm Mode
504
505+ Add secret management [#27794](https://github.com/docker/docker/pull/27794)
506+ Add support for templating service options (hostname, mounts, and environment variables) [#28025](https://github.com/docker/docker/pull/28025)
507* Display the endpoint mode in the output of `docker service inspect --pretty` [#26906](https://github.com/docker/docker/pull/26906)
508* Make `docker service ps` output more bearable by shortening service IDs in task names [#28088](https://github.com/docker/docker/pull/28088)
509* Make `docker node ps` default to the current node [#25214](https://github.com/docker/docker/pull/25214)
510+ Add `--dns`, -`-dns-opt`, and `--dns-search` to service create. [#27567](https://github.com/docker/docker/pull/27567)
511+ Add `--force` to `docker service update` [#27596](https://github.com/docker/docker/pull/27596)
512+ Add `--health-*` and `--no-healthcheck` flags to `docker service create` and `docker service update` [#27369](https://github.com/docker/docker/pull/27369)
513+ Add `-q` to `docker service ps` [#27654](https://github.com/docker/docker/pull/27654)
514* Display number of global services in `docker service ls` [#27710](https://github.com/docker/docker/pull/27710)
515- Remove `--name` flag from `docker service update`. This flag is only functional on `docker service create`, so was removed from the `update` command [#26988](https://github.com/docker/docker/pull/26988)
516- Fix worker nodes failing to recover because of transient networking issues [#26646](https://github.com/docker/docker/issues/26646)
517* Add support for health aware load balancing and DNS records [#27279](https://github.com/docker/docker/pull/27279)
518+ Add `--hostname` to `docker service create` [#27857](https://github.com/docker/docker/pull/27857)
519+ Add `--host` to `docker service create`, and `--host-add`, `--host-rm` to `docker service update` [#28031](https://github.com/docker/docker/pull/28031)
520+ Add `--tty` flag to `docker service create`/`update` [#28076](https://github.com/docker/docker/pull/28076)
521* Autodetect, store, and expose node IP address as seen by the manager [#27910](https://github.com/docker/docker/pull/27910)
522* Encryption at rest of manager keys and raft data [#27967](https://github.com/docker/docker/pull/27967)
523+ Add `--update-max-failure-ratio`, `--update-monitor` and `--rollback` flags to `docker service update` [#26421](https://github.com/docker/docker/pull/26421)
524- Fix an issue with address autodiscovery on `docker swarm init` running inside a container [#26457](https://github.com/docker/docker/pull/26457)
525+ (experimental) Add `docker service logs` command to view logs for a service [#28089](https://github.com/docker/docker/pull/28089)
526+ Pin images by digest for `docker service create` and `update` [#28173](https://github.com/docker/docker/pull/28173)
527* Add short (`-f`) flag for `docker node rm --force` and `docker swarm leave --force` [#28196](https://github.com/docker/docker/pull/28196)
528+ Add options to customize Raft snapshots (`--max-snapshots`, `--snapshot-interval`) [#27997](https://github.com/docker/docker/pull/27997)
529- Don't repull image if pinned by digest [#28265](https://github.com/docker/docker/pull/28265)
530+ Swarm-mode support for Windows [#27838](https://github.com/docker/docker/pull/27838)
531+ Allow hostname to be updated on service [#28771](https://github.com/docker/docker/pull/28771)
532+ Support v2 plugins [#29433](https://github.com/docker/docker/pull/29433)
533+ Add content trust for services [#29469](https://github.com/docker/docker/pull/29469)
534
535### Volume
536
537+ Add support for labels on volumes [#21270](https://github.com/docker/docker/pull/21270)
538+ Add support for filtering volumes by label [#25628](https://github.com/docker/docker/pull/25628)
539* Add a `--force` flag in `docker volume rm` to forcefully purge the data of the volume that has already been deleted [#23436](https://github.com/docker/docker/pull/23436)
540* Enhance `docker volume inspect` to show all options used when creating the volume [#26671](https://github.com/docker/docker/pull/26671)
541* Add support for local NFS volumes to resolve hostnames [#27329](https://github.com/docker/docker/pull/27329)
542
543### Security
544
545- Fix selinux labeling of volumes shared in a container [#23024](https://github.com/docker/docker/pull/23024)
546- Prohibit `/sys/firmware/**` from being accessed with apparmor [#26618](https://github.com/docker/docker/pull/26618)
547
548### Deprecation
549
550- Marked the `docker daemon` command as deprecated. The daemon is moved to a separate binary (`dockerd`), and should be used instead [#26834](https://github.com/docker/docker/pull/26834)
551- Deprecate unversioned API endpoints [#28208](https://github.com/docker/docker/pull/28208)
552- Remove Ubuntu 15.10 (Wily Werewolf) as supported platform. Ubuntu 15.10 is EOL, and no longer receives updates [#27042](https://github.com/docker/docker/pull/27042)
553- Remove Fedora 22 as supported platform. Fedora 22 is EOL, and no longer receives updates [#27432](https://github.com/docker/docker/pull/27432)
554- Remove Fedora 23 as supported platform. Fedora 23 is EOL, and no longer receives updates [#29455](https://github.com/docker/docker/pull/29455)
555- Deprecate the `repo:shortid` syntax on `docker pull` [#27207](https://github.com/docker/docker/pull/27207)
556- Deprecate backing filesystem without `d_type` for overlay and overlay2 storage drivers [#27433](https://github.com/docker/docker/pull/27433)
557- Deprecate `MAINTAINER` in Dockerfile [#25466](https://github.com/docker/docker/pull/25466)
558- Deprecate `filter` param for endpoint `/images/json` [#27872](https://github.com/docker/docker/pull/27872)
559- Deprecate setting duplicate engine labels [#24533](https://github.com/docker/docker/pull/24533)
560- Deprecate "top-level" network information in `NetworkSettings` [#28437](https://github.com/docker/docker/pull/28437)
561
562## 1.12.6 (2017-01-10)
563
564**IMPORTANT**: Docker 1.12 ships with an updated systemd unit file for rpm
565based installs (which includes RHEL, Fedora, CentOS, and Oracle Linux 7). When
566upgrading from an older version of docker, the upgrade process may not
567automatically install the updated version of the unit file, or fail to start
568the docker service if;
569
570- the systemd unit file (`/usr/lib/systemd/system/docker.service`) contains local changes, or
571- a systemd drop-in file is present, and contains `-H fd://` in the `ExecStart` directive
572
573Starting the docker service will produce an error:
574
575    Failed to start docker.service: Unit docker.socket failed to load: No such file or directory.
576
577or
578
579    no sockets found via socket activation: make sure the service was started by systemd.
580
581To resolve this:
582
583- Backup the current version of the unit file, and replace the file with the
584  [version that ships with docker 1.12](https://raw.githubusercontent.com/docker/docker/v1.12.0/contrib/init/systemd/docker.service.rpm)
585- Remove the `Requires=docker.socket` directive from the `/usr/lib/systemd/system/docker.service` file if present
586- Remove `-H fd://` from the `ExecStart` directive (both in the main unit file, and in any drop-in files present).
587
588After making those changes, run `sudo systemctl daemon-reload`, and `sudo
589systemctl restart docker` to reload changes and (re)start the docker daemon.
590
591**NOTE**: Docker 1.12.5 will correctly validate that either an IPv6 subnet is provided or
592that the IPAM driver can provide one when you specify the `--ipv6` option.
593
594If you are currently using the `--ipv6` option _without_ specifying the
595`--fixed-cidr-v6` option, the Docker daemon will refuse to start with the
596following message:
597
598```none
599Error starting daemon: Error initializing network controller: Error creating
600                       default "bridge" network: failed to parse pool request
601                       for address space "LocalDefault" pool " subpool ":
602                       could not find an available, non-overlapping IPv6 address
603                       pool among the defaults to assign to the network
604```
605
606To resolve this error, either remove the `--ipv6` flag (to preserve the same
607behavior as in Docker 1.12.3 and earlier), or provide an IPv6 subnet as the
608value of the `--fixed-cidr-v6` flag.
609
610In a similar way, if you specify the `--ipv6` flag when creating a network
611with the default IPAM driver, without providing an IPv6 `--subnet`, network
612creation will fail with the following message:
613
614```none
615Error response from daemon: failed to parse pool request for address space
616                            "LocalDefault" pool "" subpool "": could not find an
617                            available, non-overlapping IPv6 address pool among
618                            the defaults to assign to the network
619```
620
621To resolve this, either remove the `--ipv6` flag (to preserve the same behavior
622as in Docker 1.12.3 and earlier), or provide an IPv6 subnet as the value of the
623`--subnet` flag.
624
625The network network creation will instead succeed if you use an external IPAM driver
626which supports automatic allocation of IPv6 subnets.
627
628### Runtime
629
630- Fix runC privilege escalation (CVE-2016-9962)
631
632## 1.12.5 (2016-12-15)
633
634**IMPORTANT**: Docker 1.12 ships with an updated systemd unit file for rpm
635based installs (which includes RHEL, Fedora, CentOS, and Oracle Linux 7). When
636upgrading from an older version of docker, the upgrade process may not
637automatically install the updated version of the unit file, or fail to start
638the docker service if;
639
640- the systemd unit file (`/usr/lib/systemd/system/docker.service`) contains local changes, or
641- a systemd drop-in file is present, and contains `-H fd://` in the `ExecStart` directive
642
643Starting the docker service will produce an error:
644
645    Failed to start docker.service: Unit docker.socket failed to load: No such file or directory.
646
647or
648
649    no sockets found via socket activation: make sure the service was started by systemd.
650
651To resolve this:
652
653- Backup the current version of the unit file, and replace the file with the
654  [version that ships with docker 1.12](https://raw.githubusercontent.com/docker/docker/v1.12.0/contrib/init/systemd/docker.service.rpm)
655- Remove the `Requires=docker.socket` directive from the `/usr/lib/systemd/system/docker.service` file if present
656- Remove `-H fd://` from the `ExecStart` directive (both in the main unit file, and in any drop-in files present).
657
658After making those changes, run `sudo systemctl daemon-reload`, and `sudo
659systemctl restart docker` to reload changes and (re)start the docker daemon.
660
661**NOTE**: Docker 1.12.5 will correctly validate that either an IPv6 subnet is provided or
662that the IPAM driver can provide one when you specify the `--ipv6` option.
663
664If you are currently using the `--ipv6` option _without_ specifying the
665`--fixed-cidr-v6` option, the Docker daemon will refuse to start with the
666following message:
667
668```none
669Error starting daemon: Error initializing network controller: Error creating
670                       default "bridge" network: failed to parse pool request
671                       for address space "LocalDefault" pool " subpool ":
672                       could not find an available, non-overlapping IPv6 address
673                       pool among the defaults to assign to the network
674```
675
676To resolve this error, either remove the `--ipv6` flag (to preserve the same
677behavior as in Docker 1.12.3 and earlier), or provide an IPv6 subnet as the
678value of the `--fixed-cidr-v6` flag.
679
680In a similar way, if you specify the `--ipv6` flag when creating a network
681with the default IPAM driver, without providing an IPv6 `--subnet`, network
682creation will fail with the following message:
683
684```none
685Error response from daemon: failed to parse pool request for address space
686                            "LocalDefault" pool "" subpool "": could not find an
687                            available, non-overlapping IPv6 address pool among
688                            the defaults to assign to the network
689```
690
691To resolve this, either remove the `--ipv6` flag (to preserve the same behavior
692as in Docker 1.12.3 and earlier), or provide an IPv6 subnet as the value of the
693`--subnet` flag.
694
695The network network creation will instead succeed if you use an external IPAM driver
696which supports automatic allocation of IPv6 subnets.
697
698### Runtime
699
700- Fix race on sending stdin close event [#29424](https://github.com/docker/docker/pull/29424)
701
702### Networking
703
704- Fix panic in docker network ls when a network was created with `--ipv6` and no ipv6 `--subnet` in older docker versions [#29416](https://github.com/docker/docker/pull/29416)
705
706### Contrib
707
708- Fix compilation on Darwin [#29370](https://github.com/docker/docker/pull/29370)
709
710## 1.12.4 (2016-12-12)
711
712**IMPORTANT**: Docker 1.12 ships with an updated systemd unit file for rpm
713based installs (which includes RHEL, Fedora, CentOS, and Oracle Linux 7). When
714upgrading from an older version of docker, the upgrade process may not
715automatically install the updated version of the unit file, or fail to start
716the docker service if;
717
718- the systemd unit file (`/usr/lib/systemd/system/docker.service`) contains local changes, or
719- a systemd drop-in file is present, and contains `-H fd://` in the `ExecStart` directive
720
721Starting the docker service will produce an error:
722
723    Failed to start docker.service: Unit docker.socket failed to load: No such file or directory.
724
725or
726
727    no sockets found via socket activation: make sure the service was started by systemd.
728
729To resolve this:
730
731- Backup the current version of the unit file, and replace the file with the
732  [version that ships with docker 1.12](https://raw.githubusercontent.com/docker/docker/v1.12.0/contrib/init/systemd/docker.service.rpm)
733- Remove the `Requires=docker.socket` directive from the `/usr/lib/systemd/system/docker.service` file if present
734- Remove `-H fd://` from the `ExecStart` directive (both in the main unit file, and in any drop-in files present).
735
736After making those changes, run `sudo systemctl daemon-reload`, and `sudo
737systemctl restart docker` to reload changes and (re)start the docker daemon.
738
739
740### Runtime
741
742- Fix issue where volume metadata was not removed [#29083](https://github.com/docker/docker/pull/29083)
743- Asynchronously close streams to prevent holding container lock [#29050](https://github.com/docker/docker/pull/29050)
744- Fix selinux labels for newly created container volumes [#29050](https://github.com/docker/docker/pull/29050)
745- Remove hostname validation [#28990](https://github.com/docker/docker/pull/28990)
746- Fix deadlocks caused by IO races [#29095](https://github.com/docker/docker/pull/29095) [#29141](https://github.com/docker/docker/pull/29141)
747- Return an empty stats if the container is restarting [#29150](https://github.com/docker/docker/pull/29150)
748- Fix volume store locking [#29151](https://github.com/docker/docker/pull/29151)
749- Ensure consistent status code in API [#29150](https://github.com/docker/docker/pull/29150)
750- Fix incorrect opaque directory permission in overlay2 [#29093](https://github.com/docker/docker/pull/29093)
751- Detect plugin content and error out on `docker pull` [#29297](https://github.com/docker/docker/pull/29297)
752
753### Swarm Mode
754
755* Update Swarmkit [#29047](https://github.com/docker/docker/pull/29047)
756  - orchestrator/global: Fix deadlock on updates [docker/swarmkit#1760](https://github.com/docker/swarmkit/pull/1760)
757  - on leader switchover preserve the vxlan id for existing networks [docker/swarmkit#1773](https://github.com/docker/swarmkit/pull/1773)
758- Refuse swarm spec not named "default" [#29152](https://github.com/docker/docker/pull/29152)
759
760### Networking
761
762* Update libnetwork [#29004](https://github.com/docker/docker/pull/29004) [#29146](https://github.com/docker/docker/pull/29146)
763  - Fix panic in embedded DNS [docker/libnetwork#1561](https://github.com/docker/libnetwork/pull/1561)
764  - Fix unmarhalling panic when passing --link-local-ip on global scope network [docker/libnetwork#1564](https://github.com/docker/libnetwork/pull/1564)
765  - Fix panic when network plugin returns nil StaticRoutes [docker/libnetwork#1563](https://github.com/docker/libnetwork/pull/1563)
766  - Fix panic in osl.(*networkNamespace).DeleteNeighbor [docker/libnetwork#1555](https://github.com/docker/libnetwork/pull/1555)
767  - Fix panic in swarm networking concurrent map read/write [docker/libnetwork#1570](https://github.com/docker/libnetwork/pull/1570)
768  * Allow encrypted networks when running docker inside a container [docker/libnetwork#1502](https://github.com/docker/libnetwork/pull/1502)
769  - Do not block autoallocation of IPv6 pool [docker/libnetwork#1538](https://github.com/docker/libnetwork/pull/1538)
770  - Set timeout for netlink calls [docker/libnetwork#1557](https://github.com/docker/libnetwork/pull/1557)
771  - Increase networking local store timeout to one minute [docker/libkv#140](https://github.com/docker/libkv/pull/140)
772  - Fix a panic in libnetwork.(*sandbox).execFunc [docker/libnetwork#1556](https://github.com/docker/libnetwork/pull/1556)
773  - Honor icc=false for internal networks [docker/libnetwork#1525](https://github.com/docker/libnetwork/pull/1525)
774
775### Logging
776
777* Update syslog log driver [#29150](https://github.com/docker/docker/pull/29150)
778
779### Contrib
780
781- Run "dnf upgrade" before installing in fedora [#29150](https://github.com/docker/docker/pull/29150)
782- Add build-date back to RPM packages [#29150](https://github.com/docker/docker/pull/29150)
783- deb package filename changed to include distro to distinguish between distro code names [#27829](https://github.com/docker/docker/pull/27829)
784
785## 1.12.3 (2016-10-26)
786
787**IMPORTANT**: Docker 1.12 ships with an updated systemd unit file for rpm
788based installs (which includes RHEL, Fedora, CentOS, and Oracle Linux 7). When
789upgrading from an older version of docker, the upgrade process may not
790automatically install the updated version of the unit file, or fail to start
791the docker service if;
792
793- the systemd unit file (`/usr/lib/systemd/system/docker.service`) contains local changes, or
794- a systemd drop-in file is present, and contains `-H fd://` in the `ExecStart` directive
795
796Starting the docker service will produce an error:
797
798    Failed to start docker.service: Unit docker.socket failed to load: No such file or directory.
799
800or
801
802    no sockets found via socket activation: make sure the service was started by systemd.
803
804To resolve this:
805
806- Backup the current version of the unit file, and replace the file with the
807  [version that ships with docker 1.12](https://raw.githubusercontent.com/docker/docker/v1.12.0/contrib/init/systemd/docker.service.rpm)
808- Remove the `Requires=docker.socket` directive from the `/usr/lib/systemd/system/docker.service` file if present
809- Remove `-H fd://` from the `ExecStart` directive (both in the main unit file, and in any drop-in files present).
810
811After making those changes, run `sudo systemctl daemon-reload`, and `sudo
812systemctl restart docker` to reload changes and (re)start the docker daemon.
813
814
815### Runtime
816
817- Fix ambient capability usage in containers (CVE-2016-8867) [#27610](https://github.com/docker/docker/pull/27610)
818- Prevent a deadlock in libcontainerd for Windows [#27136](https://github.com/docker/docker/pull/27136)
819- Fix error reporting in CopyFileWithTar [#27075](https://github.com/docker/docker/pull/27075)
820* Reset health status to starting when a container is restarted [#27387](https://github.com/docker/docker/pull/27387)
821* Properly handle shared mount propagation in storage directory [#27609](https://github.com/docker/docker/pull/27609)
822- Fix docker exec [#27610](https://github.com/docker/docker/pull/27610)
823- Fix backward compatibility with containerd’s events log [#27693](https://github.com/docker/docker/pull/27693)
824
825### Swarm Mode
826
827- Fix conversion of restart-policy [#27062](https://github.com/docker/docker/pull/27062)
828* Update Swarmkit [#27554](https://github.com/docker/docker/pull/27554)
829 * Avoid restarting a task that has already been restarted [docker/swarmkit#1305](https://github.com/docker/swarmkit/pull/1305)
830 * Allow duplicate published ports when they use different protocols [docker/swarmkit#1632](https://github.com/docker/swarmkit/pull/1632)
831 * Allow multiple randomly assigned published ports on service [docker/swarmkit#1657](https://github.com/docker/swarmkit/pull/1657)
832 - Fix panic when allocations happen at init time [docker/swarmkit#1651](https://github.com/docker/swarmkit/pull/1651)
833
834### Networking
835
836* Update libnetwork [#27559](https://github.com/docker/docker/pull/27559)
837 - Fix race in serializing sandbox to string [docker/libnetwork#1495](https://github.com/docker/libnetwork/pull/1495)
838 - Fix race during deletion [docker/libnetwork#1503](https://github.com/docker/libnetwork/pull/1503)
839 * Reset endpoint port info on connectivity revoke in bridge driver [docker/libnetwork#1504](https://github.com/docker/libnetwork/pull/1504)
840 - Fix a deadlock in networking code [docker/libnetwork#1507](https://github.com/docker/libnetwork/pull/1507)
841 - Fix a race in load balancer state [docker/libnetwork#1512](https://github.com/docker/libnetwork/pull/1512)
842
843### Logging
844
845* Update fluent-logger-golang to v1.2.1 [#27474](https://github.com/docker/docker/pull/27474)
846
847### Contrib
848
849* Update buildtags for armhf ubuntu-trusty [#27327](https://github.com/docker/docker/pull/27327)
850* Add AppArmor to runc buildtags for armhf [#27421](https://github.com/docker/docker/pull/27421)
851
852## 1.12.2 (2016-10-11)
853
854**IMPORTANT**: Docker 1.12 ships with an updated systemd unit file for rpm
855based installs (which includes RHEL, Fedora, CentOS, and Oracle Linux 7). When
856upgrading from an older version of docker, the upgrade process may not
857automatically install the updated version of the unit file, or fail to start
858the docker service if;
859
860- the systemd unit file (`/usr/lib/systemd/system/docker.service`) contains local changes, or
861- a systemd drop-in file is present, and contains `-H fd://` in the `ExecStart` directive
862
863Starting the docker service will produce an error:
864
865    Failed to start docker.service: Unit docker.socket failed to load: No such file or directory.
866
867or
868
869    no sockets found via socket activation: make sure the service was started by systemd.
870
871To resolve this:
872
873- Backup the current version of the unit file, and replace the file with the
874  [version that ships with docker 1.12](https://raw.githubusercontent.com/docker/docker/v1.12.0/contrib/init/systemd/docker.service.rpm)
875- Remove the `Requires=docker.socket` directive from the `/usr/lib/systemd/system/docker.service` file if present
876- Remove `-H fd://` from the `ExecStart` directive (both in the main unit file, and in any drop-in files present).
877
878After making those changes, run `sudo systemctl daemon-reload`, and `sudo
879systemctl restart docker` to reload changes and (re)start the docker daemon.
880
881
882### Runtime
883
884- Fix a panic due to a race condition filtering `docker ps` [#26049](https://github.com/docker/docker/pull/26049)
885* Implement retry logic to prevent "Unable to remove filesystem" errors when using the aufs storage driver [#26536](https://github.com/docker/docker/pull/26536)
886* Prevent devicemapper from removing device symlinks if `dm.use_deferred_removal` is enabled [#24740](https://github.com/docker/docker/pull/24740)
887- Fix an issue where the CLI did not return correct exit codes if a command was run with invalid options [#26777](https://github.com/docker/docker/pull/26777)
888- Fix a panic due to a bug in stdout / stderr processing in health checks [#26507](https://github.com/docker/docker/pull/26507)
889- Fix exec's children handling [#26874](https://github.com/docker/docker/pull/26874)
890- Fix exec form of HEALTHCHECK CMD [#26208](https://github.com/docker/docker/pull/26208)
891
892### Networking
893
894- Fix a daemon start panic on armv5 [#24315](https://github.com/docker/docker/issues/24315)
895* Vendor libnetwork [#26879](https://github.com/docker/docker/pull/26879) [#26953](https://github.com/docker/docker/pull/26953)
896 * Avoid returning early on agent join failures [docker/libnetwork#1473](https://github.com/docker/libnetwork/pull/1473)
897 - Fix service published port cleanup issues [docker/libetwork#1432](https://github.com/docker/libnetwork/pull/1432) [docker/libnetwork#1433](https://github.com/docker/libnetwork/pull/1433)
898 * Recover properly from transient gossip failures [docker/libnetwork#1446](https://github.com/docker/libnetwork/pull/1446)
899 * Disambiguate node names known to gossip cluster to avoid node name collision [docker/libnetwork#1451](https://github.com/docker/libnetwork/pull/1451)
900 * Honor user provided listen address for gossip  [docker/libnetwork#1460](https://github.com/docker/libnetwork/pull/1460)
901 * Allow reachability via published port across services on the same host [docker/libnetwork#1398](https://github.com/docker/libnetwork/pull/1398)
902 * Change the ingress sandbox name from random id to just `ingress_sbox` [docker/libnetwork#1449](https://github.com/docker/libnetwork/pull/1449)
903 - Disable service discovery in ingress network [docker/libnetwork#1489](https://github.com/docker/libnetwork/pull/1489)
904
905### Swarm Mode
906
907* Fix remote detection of a node's address when it joins the cluster [#26211](https://github.com/docker/docker/pull/26211)
908* Vendor SwarmKit [#26765](https://github.com/docker/docker/pull/26765)
909 * Bounce session after failed status update [docker/swarmkit#1539](https://github.com/docker/swarmkit/pull/1539)
910 - Fix possible raft deadlocks [docker/swarmkit#1537](https://github.com/docker/swarmkit/pull/1537)
911 - Fix panic and endpoint leak when a service is updated with no endpoints [docker/swarmkit#1481](https://github.com/docker/swarmkit/pull/1481)
912 * Produce an error if the same port is published twice on `service create` or `service update` [docker/swarmkit#1495](https://github.com/docker/swarmkit/pull/1495)
913 - Fix an issue where changes to a service were not detected, resulting in the service not being updated [docker/swarmkit#1497](https://github.com/docker/swarmkit/pull/1497)
914 - Do not allow service creation on ingress network [docker/swarmkit#1600](https://github.com/docker/swarmkit/pull/1600)
915
916### Contrib
917
918* Update the debian sysv-init script to use `dockerd` instead of `docker daemon` [#25869](https://github.com/docker/docker/pull/25869)
919* Improve stability when running the docker client on MacOS Sierra [#26875](https://github.com/docker/docker/pull/26875)
920- Fix installation on debian stretch [#27184](https://github.com/docker/docker/pull/27184)
921
922### Windows
923
924- Fix an issue where arrow-navigation did not work when running the docker client in ConEmu [#25578](https://github.com/docker/docker/pull/25578)
925
926## 1.12.1 (2016-08-18)
927
928**IMPORTANT**: Docker 1.12 ships with an updated systemd unit file for rpm
929based installs (which includes RHEL, Fedora, CentOS, and Oracle Linux 7). When
930upgrading from an older version of docker, the upgrade process may not
931automatically install the updated version of the unit file, or fail to start
932the docker service if;
933
934- the systemd unit file (`/usr/lib/systemd/system/docker.service`) contains local changes, or
935- a systemd drop-in file is present, and contains `-H fd://` in the `ExecStart` directive
936
937Starting the docker service will produce an error:
938
939    Failed to start docker.service: Unit docker.socket failed to load: No such file or directory.
940
941or
942
943    no sockets found via socket activation: make sure the service was started by systemd.
944
945To resolve this:
946
947- Backup the current version of the unit file, and replace the file with the
948  [version that ships with docker 1.12](https://raw.githubusercontent.com/docker/docker/v1.12.0/contrib/init/systemd/docker.service.rpm)
949- Remove the `Requires=docker.socket` directive from the `/usr/lib/systemd/system/docker.service` file if present
950- Remove `-H fd://` from the `ExecStart` directive (both in the main unit file, and in any drop-in files present).
951
952After making those changes, run `sudo systemctl daemon-reload`, and `sudo
953systemctl restart docker` to reload changes and (re)start the docker daemon.
954
955
956### Client
957
958* Add `Joined at` information in `node inspect --pretty` [#25512](https://github.com/docker/docker/pull/25512)
959- Fix a crash on `service inspect` [#25454](https://github.com/docker/docker/pull/25454)
960- Fix issue preventing `service update --env-add` to work as intended [#25427](https://github.com/docker/docker/pull/25427)
961- Fix issue preventing `service update --publish-add` to work as intended [#25428](https://github.com/docker/docker/pull/25428)
962- Remove `service update --network-add` and `service update --network-rm` flags
963  because this feature is not yet implemented in 1.12, but was inadvertently added
964  to the client in 1.12.0 [#25646](https://github.com/docker/docker/pull/25646)
965
966### Contrib
967
968+ Official ARM installation for Debian Jessie, Ubuntu Trusty, and Raspbian Jessie [#24815](https://github.com/docker/docker/pull/24815) [#25591](https://github.com/docker/docker/pull/25637)
969- Add selinux policy per distro/version, fixing issue preventing successful installation on Fedora 24, and Oracle Linux [#25334](https://github.com/docker/docker/pull/25334) [#25593](https://github.com/docker/docker/pull/25593)
970
971### Networking
972
973- Fix issue that prevented containers to be accessed by hostname with Docker overlay driver in Swarm Mode [#25603](https://github.com/docker/docker/pull/25603) [#25648](https://github.com/docker/docker/pull/25648)
974- Fix random network issues on service with published port [#25603](https://github.com/docker/docker/pull/25603)
975- Fix unreliable inter-service communication after scaling down and up [#25603](https://github.com/docker/docker/pull/25603)
976- Fix issue where removing all tasks on a node and adding them back breaks connectivity with other services [#25603](https://github.com/docker/docker/pull/25603)
977- Fix issue where a task that fails to start results in a race, causing a `network xxx not found` error that masks the actual error [#25550](https://github.com/docker/docker/pull/25550)
978- Relax validation of SRV records for external services that use SRV records not formatted according to RFC 2782 [#25739](https://github.com/docker/docker/pull/25739)
979
980### Plugins (experimental)
981
982* Make daemon events listen for plugin lifecycle events [#24760](https://github.com/docker/docker/pull/24760)
983* Check for plugin state before enabling plugin [#25033](https://github.com/docker/docker/pull/25033)
984- Remove plugin root from filesystem on `plugin rm` [#25187](https://github.com/docker/docker/pull/25187)
985- Prevent deadlock when more than one plugin is installed [#25384](https://github.com/docker/docker/pull/25384)
986
987### Runtime
988
989* Mask join tokens in daemon logs [#25346](https://github.com/docker/docker/pull/25346)
990- Fix `docker ps --filter` causing the results to no longer be sorted by creation time [#25387](https://github.com/docker/docker/pull/25387)
991- Fix various crashes [#25053](https://github.com/docker/docker/pull/25053)
992
993### Security
994
995* Add `/proc/timer_list` to the masked paths list to prevent information leak from the host [#25630](https://github.com/docker/docker/pull/25630)
996* Allow systemd to run with only `--cap-add SYS_ADMIN` rather than having to also add `--cap-add DAC_READ_SEARCH` or disabling seccomp filtering [#25567](https://github.com/docker/docker/pull/25567)
997
998### Swarm
999
1000- Fix an issue where the swarm can get stuck electing a new leader after quorum is lost [#25055](https://github.com/docker/docker/issues/25055)
1001- Fix unwanted rescheduling of containers after a leader failover [#25017](https://github.com/docker/docker/issues/25017)
1002- Change swarm root CA key to P256 curve [swarmkit#1376](https://github.com/docker/swarmkit/pull/1376)
1003- Allow forced removal of a node from a swarm [#25159](https://github.com/docker/docker/pull/25159)
1004- Fix connection leak when a node leaves a swarm [swarmkit/#1277](https://github.com/docker/swarmkit/pull/1277)
1005- Backdate swarm certificates by one hour to tolerate more clock skew [swarmkit/#1243](https://github.com/docker/swarmkit/pull/1243)
1006- Avoid high CPU use with many unschedulable tasks [swarmkit/#1287](https://github.com/docker/swarmkit/pull/1287)
1007- Fix issue with global tasks not starting up [swarmkit/#1295](https://github.com/docker/swarmkit/pull/1295)
1008- Garbage collect raft logs [swarmkit/#1327](https://github.com/docker/swarmkit/pull/1327)
1009
1010### Volume
1011
1012- Persist local volume options after a daemon restart [#25316](https://github.com/docker/docker/pull/25316)
1013- Fix an issue where the mount ID was not returned on volume unmount [#25333](https://github.com/docker/docker/pull/25333)
1014- Fix an issue where a volume mount could inadvertently create a bind mount [#25309](https://github.com/docker/docker/pull/25309)
1015- `docker service create --mount type=bind,...` now correctly validates if the source path exists, instead of creating it [#25494](https://github.com/docker/docker/pull/25494)
1016
1017## 1.12.0 (2016-07-28)
1018
1019
1020**IMPORTANT**: Docker 1.12.0 ships with an updated systemd unit file for rpm
1021based installs (which includes RHEL, Fedora, CentOS, and Oracle Linux 7). When
1022upgrading from an older version of docker, the upgrade process may not
1023automatically install the updated version of the unit file, or fail to start
1024the docker service if;
1025
1026- the systemd unit file (`/usr/lib/systemd/system/docker.service`) contains local changes, or
1027- a systemd drop-in file is present, and contains `-H fd://` in the `ExecStart` directive
1028
1029Starting the docker service will produce an error:
1030
1031    Failed to start docker.service: Unit docker.socket failed to load: No such file or directory.
1032
1033or
1034
1035    no sockets found via socket activation: make sure the service was started by systemd.
1036
1037To resolve this:
1038
1039- Backup the current version of the unit file, and replace the file with the
1040  [version that ships with docker 1.12](https://raw.githubusercontent.com/docker/docker/v1.12.0/contrib/init/systemd/docker.service.rpm)
1041- Remove the `Requires=docker.socket` directive from the `/usr/lib/systemd/system/docker.service` file if present
1042- Remove `-H fd://` from the `ExecStart` directive (both in the main unit file, and in any drop-in files present).
1043
1044After making those changes, run `sudo systemctl daemon-reload`, and `sudo
1045systemctl restart docker` to reload changes and (re)start the docker daemon.
1046
1047**IMPORTANT**: With Docker 1.12, a Linux docker installation now has two
1048additional binaries; `dockerd`, and `docker-proxy`. If you have scripts for
1049installing docker, please make sure to update them accordingly.
1050
1051### Builder
1052
1053+ New `HEALTHCHECK` Dockerfile instruction to support user-defined healthchecks [#23218](https://github.com/docker/docker/pull/23218)
1054+ New `SHELL` Dockerfile instruction to specify the default shell when using the shell form for commands in a Dockerfile [#22489](https://github.com/docker/docker/pull/22489)
1055+ Add `#escape=` Dockerfile directive to support platform-specific parsing of file paths in Dockerfile [#22268](https://github.com/docker/docker/pull/22268)
1056+ Add support for comments in `.dockerignore` [#23111](https://github.com/docker/docker/pull/23111)
1057* Support for UTF-8 in Dockerfiles [#23372](https://github.com/docker/docker/pull/23372)
1058* Skip UTF-8 BOM bytes from `Dockerfile` and `.dockerignore` if exist [#23234](https://github.com/docker/docker/pull/23234)
1059* Windows: support for `ARG` to match Linux [#22508](https://github.com/docker/docker/pull/22508)
1060- Fix error message when building using a daemon with the bridge network disabled [#22932](https://github.com/docker/docker/pull/22932)
1061
1062### Contrib
1063
1064* Enable seccomp for Centos 7 and Oracle Linux 7 [#22344](https://github.com/docker/docker/pull/22344)
1065- Remove MountFlags in systemd unit to allow shared mount propagation [#22806](https://github.com/docker/docker/pull/22806)
1066
1067### Distribution
1068
1069+ Add `--max-concurrent-downloads` and `--max-concurrent-uploads` daemon flags useful for situations where network connections don't support multiple downloads/uploads [#22445](https://github.com/docker/docker/pull/22445)
1070* Registry operations now honor the `ALL_PROXY` environment variable [#22316](https://github.com/docker/docker/pull/22316)
1071* Provide more information to the user on `docker load` [#23377](https://github.com/docker/docker/pull/23377)
1072* Always save registry digest metadata about images pushed and pulled [#23996](https://github.com/docker/docker/pull/23996)
1073
1074### Logging
1075
1076+ Syslog logging driver now supports DGRAM sockets [#21613](https://github.com/docker/docker/pull/21613)
1077+ Add `--details` option to `docker logs` to also display log tags [#21889](https://github.com/docker/docker/pull/21889)
1078+ Enable syslog logger to have access to env and labels [#21724](https://github.com/docker/docker/pull/21724)
1079+ An additional syslog-format option `rfc5424micro` to allow microsecond resolution in syslog timestamp [#21844](https://github.com/docker/docker/pull/21844)
1080* Inherit the daemon log options when creating containers [#21153](https://github.com/docker/docker/pull/21153)
1081* Remove `docker/` prefix from log messages tag and replace it with `{{.DaemonName}}` so that users have the option of changing the prefix [#22384](https://github.com/docker/docker/pull/22384)
1082
1083### Networking
1084
1085+ Built-in Virtual-IP based  internal and ingress load-balancing using IPVS [#23361](https://github.com/docker/docker/pull/23361)
1086+ Routing Mesh using ingress overlay network [#23361](https://github.com/docker/docker/pull/23361)
1087+ Secured multi-host overlay networking using encrypted control-plane and Data-plane [#23361](https://github.com/docker/docker/pull/23361)
1088+ MacVlan driver is out of experimental [#23524](https://github.com/docker/docker/pull/23524)
1089+ Add `driver` filter to `network ls` [#22319](https://github.com/docker/docker/pull/22319)
1090+ Adding `network` filter to `docker ps --filter` [#23300](https://github.com/docker/docker/pull/23300)
1091+ Add `--link-local-ip` flag to `create`, `run` and `network connect` to specify a container's link-local address [#23415](https://github.com/docker/docker/pull/23415)
1092+ Add network label filter support [#21495](https://github.com/docker/docker/pull/21495)
1093* Removed dependency on external KV-Store for Overlay networking in Swarm-Mode  [#23361](https://github.com/docker/docker/pull/23361)
1094* Add container's short-id as default network alias [#21901](https://github.com/docker/docker/pull/21901)
1095* `run` options `--dns` and `--net=host` are no longer mutually exclusive [#22408](https://github.com/docker/docker/pull/22408)
1096- Fix DNS issue when renaming containers with generated names [#22716](https://github.com/docker/docker/pull/22716)
1097- Allow both `network inspect -f {{.Id}}` and `network inspect -f {{.ID}}` to address inconsistency with inspect output [#23226](https://github.com/docker/docker/pull/23226)
1098
1099### Plugins (experimental)
1100
1101+ New `plugin` command to manager plugins with `install`, `enable`, `disable`, `rm`, `inspect`, `set` subcommands [#23446](https://github.com/docker/docker/pull/23446)
1102
1103### Remote API (v1.24) & Client
1104
1105+ Split the binary into two: `docker` (client) and `dockerd` (daemon) [#20639](https://github.com/docker/docker/pull/20639)
1106+ Add `before` and `since` filters to `docker images --filter` [#22908](https://github.com/docker/docker/pull/22908)
1107+ Add `--limit` option to `docker search` [#23107](https://github.com/docker/docker/pull/23107)
1108+ Add `--filter` option to `docker search` [#22369](https://github.com/docker/docker/pull/22369)
1109+ Add security options to `docker info` output [#21172](https://github.com/docker/docker/pull/21172) [#23520](https://github.com/docker/docker/pull/23520)
1110+ Add insecure registries to `docker info` output [#20410](https://github.com/docker/docker/pull/20410)
1111+ Extend Docker authorization with TLS user information [#21556](https://github.com/docker/docker/pull/21556)
1112+ devicemapper: expose Minimum Thin Pool Free Space through `docker info` [#21945](https://github.com/docker/docker/pull/21945)
1113* API now returns a JSON object when an error occurs making it more consistent [#22880](https://github.com/docker/docker/pull/22880)
1114- Prevent `docker run -i --restart` from hanging on exit [#22777](https://github.com/docker/docker/pull/22777)
1115- Fix API/CLI discrepancy on hostname validation [#21641](https://github.com/docker/docker/pull/21641)
1116- Fix discrepancy in the format of sizes in `stats` from HumanSize to BytesSize [#21773](https://github.com/docker/docker/pull/21773)
1117- authz: when request is denied return forbidden exit code (403) [#22448](https://github.com/docker/docker/pull/22448)
1118- Windows: fix tty-related displaying issues [#23878](https://github.com/docker/docker/pull/23878)
1119
1120### Runtime
1121
1122+ Split the userland proxy to a separate binary (`docker-proxy`) [#23312](https://github.com/docker/docker/pull/23312)
1123+ Add `--live-restore` daemon flag to keep containers running when daemon shuts down, and regain control on startup [#23213](https://github.com/docker/docker/pull/23213)
1124+ Ability to add OCI-compatible runtimes (via `--add-runtime` daemon flag) and select one with `--runtime` on `create` and `run` [#22983](https://github.com/docker/docker/pull/22983)
1125+ New `overlay2` graphdriver for Linux 4.0+ with multiple lower directory support [#22126](https://github.com/docker/docker/pull/22126)
1126+ New load/save image events [#22137](https://github.com/docker/docker/pull/22137)
1127+ Add support for reloading daemon configuration through systemd [#22446](https://github.com/docker/docker/pull/22446)
1128+ Add disk quota support for btrfs [#19651](https://github.com/docker/docker/pull/19651)
1129+ Add disk quota support for zfs [#21946](https://github.com/docker/docker/pull/21946)
1130+ Add support for `docker run --pid=container:<id>` [#22481](https://github.com/docker/docker/pull/22481)
1131+ Align default seccomp profile with selected capabilities [#22554](https://github.com/docker/docker/pull/22554)
1132+ Add a `daemon reload` event when the daemon reloads its configuration [#22590](https://github.com/docker/docker/pull/22590)
1133+ Add `trace` capability in the pprof profiler to show execution traces in binary form [#22715](https://github.com/docker/docker/pull/22715)
1134+ Add a `detach` event [#22898](https://github.com/docker/docker/pull/22898)
1135+ Add support for setting sysctls with `--sysctl` [#19265](https://github.com/docker/docker/pull/19265)
1136+ Add `--storage-opt` flag to `create` and `run` allowing to set `size` on devicemapper [#19367](https://github.com/docker/docker/pull/19367)
1137+ Add `--oom-score-adjust` daemon flag with a default value of `-500` making the daemon less likely to be killed before containers [#24516](https://github.com/docker/docker/pull/24516)
1138* Undeprecate the `-c` short alias of `--cpu-shares` on `run`, `build`, `create`, `update` [#22621](https://github.com/docker/docker/pull/22621)
1139* Prevent from using aufs and overlay graphdrivers on an eCryptfs mount [#23121](https://github.com/docker/docker/pull/23121)
1140- Fix issues with tmpfs mount ordering [#22329](https://github.com/docker/docker/pull/22329)
1141- Created containers are no longer listed on `docker ps -a -f exited=0` [#21947](https://github.com/docker/docker/pull/21947)
1142- Fix an issue where containers are stuck in a "Removal In Progress" state [#22423](https://github.com/docker/docker/pull/22423)
1143- Fix bug that was returning an HTTP 500 instead of a 400 when not specifying a command on run/create [#22762](https://github.com/docker/docker/pull/22762)
1144- Fix bug with `--detach-keys` whereby input matching a prefix of the detach key was not preserved [#22943](https://github.com/docker/docker/pull/22943)
1145- SELinux labeling is now disabled when using `--privileged` mode [#22993](https://github.com/docker/docker/pull/22993)
1146- If volume-mounted into a container, `/etc/hosts`, `/etc/resolv.conf`, `/etc/hostname` are no longer SELinux-relabeled [#22993](https://github.com/docker/docker/pull/22993)
1147- Fix inconsistency in `--tmpfs` behavior regarding mount options [#22438](https://github.com/docker/docker/pull/22438)
1148- Fix an issue where daemon hangs at startup [#23148](https://github.com/docker/docker/pull/23148)
1149- Ignore SIGPIPE events to prevent journald restarts to crash docker in some cases [#22460](https://github.com/docker/docker/pull/22460)
1150- Containers are not removed from stats list on error [#20835](https://github.com/docker/docker/pull/20835)
1151- Fix `on-failure` restart policy when daemon restarts [#20853](https://github.com/docker/docker/pull/20853)
1152- Fix an issue with `stats` when a container is using another container's network [#21904](https://github.com/docker/docker/pull/21904)
1153
1154### Swarm Mode
1155
1156+ New `swarm` command to manage swarms with `init`, `join`, `join-token`, `leave`, `update` subcommands [#23361](https://github.com/docker/docker/pull/23361) [#24823](https://github.com/docker/docker/pull/24823)
1157+ New `service` command to manage swarm-wide services with `create`, `inspect`, `update`, `rm`, `ps` subcommands [#23361](https://github.com/docker/docker/pull/23361) [#25140](https://github.com/docker/docker/pull/25140)
1158+ New `node` command to manage nodes with `accept`, `promote`, `demote`, `inspect`, `update`, `ps`, `ls` and `rm` subcommands [#23361](https://github.com/docker/docker/pull/23361) [#25140](https://github.com/docker/docker/pull/25140)
1159+ (experimental) New `stack` and `deploy` commands to manage and deploy multi-service applications [#23522](https://github.com/docker/docker/pull/23522) [#25140](https://github.com/docker/docker/pull/25140)
1160
1161### Volume
1162
1163+ Add support for local and global volume scopes (analogous to network scopes) [#22077](https://github.com/docker/docker/pull/22077)
1164+ Allow volume drivers to provide a `Status` field [#21006](https://github.com/docker/docker/pull/21006)
1165+ Add name/driver filter support for volume [#21361](https://github.com/docker/docker/pull/21361)
1166* Mount/Unmount operations now receives an opaque ID to allow volume drivers to differentiate between two callers [#21015](https://github.com/docker/docker/pull/21015)
1167- Fix issue preventing to remove a volume in a corner case [#22103](https://github.com/docker/docker/pull/22103)
1168- Windows: Enable auto-creation of host-path to match Linux [#22094](https://github.com/docker/docker/pull/22094)
1169
1170
1171### Deprecation
1172
1173* Environment variables `DOCKER_CONTENT_TRUST_OFFLINE_PASSPHRASE` and `DOCKER_CONTENT_TRUST_TAGGING_PASSPHRASE` have been renamed
1174  to `DOCKER_CONTENT_TRUST_ROOT_PASSPHRASE` and `DOCKER_CONTENT_TRUST_REPOSITORY_PASSPHRASE` respectively [#22574](https://github.com/docker/docker/pull/22574)
1175* Remove deprecated `syslog-tag`, `gelf-tag`, `fluentd-tag` log option in favor of the more generic `tag` one [#22620](https://github.com/docker/docker/pull/22620)
1176* Remove deprecated feature of passing HostConfig at API container start [#22570](https://github.com/docker/docker/pull/22570)
1177* Remove deprecated `-f`/`--force` flag on docker tag [#23090](https://github.com/docker/docker/pull/23090)
1178* Remove deprecated `/containers/<id|name>/copy` endpoint [#22149](https://github.com/docker/docker/pull/22149)
1179* Remove deprecated `docker ps` flags `--since` and `--before` [#22138](https://github.com/docker/docker/pull/22138)
1180* Deprecate the old 3-args form of `docker import` [#23273](https://github.com/docker/docker/pull/23273)
1181
1182## 1.11.2 (2016-05-31)
1183
1184### Networking
1185
1186- Fix a stale endpoint issue on overlay networks during ungraceful restart ([#23015](https://github.com/docker/docker/pull/23015))
1187- Fix an issue where the wrong port could be reported by `docker inspect/ps/port` ([#22997](https://github.com/docker/docker/pull/22997))
1188
1189### Runtime
1190
1191- Fix a potential panic when running `docker build` ([#23032](https://github.com/docker/docker/pull/23032))
1192- Fix interpretation of `--user` parameter ([#22998](https://github.com/docker/docker/pull/22998))
1193- Fix a bug preventing container statistics to be correctly reported ([#22955](https://github.com/docker/docker/pull/22955))
1194- Fix an issue preventing container to be restarted after daemon restart ([#22947](https://github.com/docker/docker/pull/22947))
1195- Fix issues when running 32 bit binaries on Ubuntu 16.04 ([#22922](https://github.com/docker/docker/pull/22922))
1196- Fix a possible deadlock on image deletion and container attach ([#22918](https://github.com/docker/docker/pull/22918))
1197- Fix an issue where containers fail to start after a daemon restart if they depend on a containerized cluster store ([#22561](https://github.com/docker/docker/pull/22561))
1198- Fix an issue causing `docker ps` to hang on CentOS when using devicemapper ([#22168](https://github.com/docker/docker/pull/22168), [#23067](https://github.com/docker/docker/pull/23067))
1199- Fix a bug preventing to `docker exec` into a container when using devicemapper ([#22168](https://github.com/docker/docker/pull/22168), [#23067](https://github.com/docker/docker/pull/23067))
1200
1201
1202## 1.11.1 (2016-04-26)
1203
1204### Distribution
1205
1206- Fix schema2 manifest media type to be of type `application/vnd.docker.container.image.v1+json` ([#21949](https://github.com/docker/docker/pull/21949))
1207
1208### Documentation
1209
1210+ Add missing API documentation for changes introduced with 1.11.0 ([#22048](https://github.com/docker/docker/pull/22048))
1211
1212### Builder
1213
1214* Append label passed to `docker build` as arguments as an implicit `LABEL` command at the end of the processed `Dockerfile` ([#22184](https://github.com/docker/docker/pull/22184))
1215
1216### Networking
1217
1218- Fix a panic that would occur when forwarding DNS query ([#22261](https://github.com/docker/docker/pull/22261))
1219- Fix an issue where OS threads could end up within an incorrect network namespace when using user defined networks ([#22261](https://github.com/docker/docker/pull/22261))
1220
1221### Runtime
1222
1223- Fix a bug preventing labels configuration to be reloaded via the config file ([#22299](https://github.com/docker/docker/pull/22299))
1224- Fix a regression where container mounting `/var/run` would prevent other containers from being removed ([#22256](https://github.com/docker/docker/pull/22256))
1225- Fix an issue where it would be impossible to update both `memory-swap` and `memory` value together ([#22255](https://github.com/docker/docker/pull/22255))
1226- Fix a regression from 1.11.0 where the `/auth` endpoint would not initialize `serveraddress` if it is not provided ([#22254](https://github.com/docker/docker/pull/22254))
1227- Add missing cleanup of container temporary files when cancelling a schedule restart ([#22237](https://github.com/docker/docker/pull/22237))
1228- Remove scary error message when no restart policy is specified ([#21993](https://github.com/docker/docker/pull/21993))
1229- Fix a panic that would occur when the plugins were activated via the json spec ([#22191](https://github.com/docker/docker/pull/22191))
1230- Fix restart backoff logic to correctly reset delay if container ran for at least 10secs ([#22125](https://github.com/docker/docker/pull/22125))
1231- Remove error message when a container restart get cancelled ([#22123](https://github.com/docker/docker/pull/22123))
1232- Fix an issue where `docker` would not correctly clean up after `docker exec` ([#22121](https://github.com/docker/docker/pull/22121))
1233- Fix a panic that could occur when serving concurrent `docker stats` commands ([#22120](https://github.com/docker/docker/pull/22120))`
1234- Revert deprecation of non-existent host directories auto-creation ([#22065](https://github.com/docker/docker/pull/22065))
1235- Hide misleading rpc error on daemon shutdown ([#22058](https://github.com/docker/docker/pull/22058))
1236
1237## 1.11.0 (2016-04-13)
1238
1239**IMPORTANT**: With Docker 1.11, a Linux docker installation is now made of 4 binaries (`docker`, [`docker-containerd`](https://github.com/docker/containerd), [`docker-containerd-shim`](https://github.com/docker/containerd) and [`docker-runc`](https://github.com/opencontainers/runc)). If you have scripts relying on docker being a single static binaries, please make sure to update them. Interaction with the daemon stay the same otherwise, the usage of the other binaries should be transparent. A Windows docker installation remains a single binary, `docker.exe`.
1240
1241### Builder
1242
1243- Fix a bug where Docker would not use the correct uid/gid when processing the `WORKDIR` command ([#21033](https://github.com/docker/docker/pull/21033))
1244- Fix a bug where copy operations with userns would not use the proper uid/gid ([#20782](https://github.com/docker/docker/pull/20782), [#21162](https://github.com/docker/docker/pull/21162))
1245
1246### Client
1247
1248* Usage of the `:` separator for security option has been deprecated. `=` should be used instead ([#21232](https://github.com/docker/docker/pull/21232))
1249+ The client user agent is now passed to the registry on `pull`, `build`, `push`, `login` and `search` operations ([#21306](https://github.com/docker/docker/pull/21306), [#21373](https://github.com/docker/docker/pull/21373))
1250* Allow setting the Domainname and Hostname separately through the API ([#20200](https://github.com/docker/docker/pull/20200))
1251* Docker info will now warn users if it can not detect the kernel version or the operating system ([#21128](https://github.com/docker/docker/pull/21128))
1252- Fix an issue where `docker stats --no-stream` output could be all 0s ([#20803](https://github.com/docker/docker/pull/20803))
1253- Fix a bug where some newly started container would not appear in a running `docker stats` command ([#20792](https://github.com/docker/docker/pull/20792))
1254* Post processing is no longer enabled for linux-cgo terminals ([#20587](https://github.com/docker/docker/pull/20587))
1255- Values to `--hostname` are now refused if they do not comply with [RFC1123](https://tools.ietf.org/html/rfc1123) ([#20566](https://github.com/docker/docker/pull/20566))
1256+ Docker learned how to use a SOCKS proxy ([#20366](https://github.com/docker/docker/pull/20366), [#18373](https://github.com/docker/docker/pull/18373))
1257+ Docker now supports external credential stores ([#20107](https://github.com/docker/docker/pull/20107))
1258* `docker ps` now supports displaying the list of volumes mounted inside a container ([#20017](https://github.com/docker/docker/pull/20017))
1259* `docker info` now also reports Docker's root directory location ([#19986](https://github.com/docker/docker/pull/19986))
1260- Docker now prohibits login in with an empty username (spaces are trimmed) ([#19806](https://github.com/docker/docker/pull/19806))
1261* Docker events attributes are now sorted by key ([#19761](https://github.com/docker/docker/pull/19761))
1262* `docker ps` no longer shows exported port for stopped containers ([#19483](https://github.com/docker/docker/pull/19483))
1263- Docker now cleans after itself if a save/export command fails ([#17849](https://github.com/docker/docker/pull/17849))
1264* Docker load learned how to display a progress bar ([#17329](https://github.com/docker/docker/pull/17329), [#120078](https://github.com/docker/docker/pull/20078))
1265
1266### Distribution
1267
1268- Fix a panic that occurred when pulling an image with 0 layers ([#21222](https://github.com/docker/docker/pull/21222))
1269- Fix a panic that could occur on error while pushing to a registry with a misconfigured token service ([#21212](https://github.com/docker/docker/pull/21212))
1270+ All first-level delegation roles are now signed when doing a trusted push ([#21046](https://github.com/docker/docker/pull/21046))
1271+ OAuth support for registries was added ([#20970](https://github.com/docker/docker/pull/20970))
1272* `docker login` now handles token using the implementation found in [docker/distribution](https://github.com/docker/distribution) ([#20832](https://github.com/docker/docker/pull/20832))
1273* `docker login` will no longer prompt for an email ([#20565](https://github.com/docker/docker/pull/20565))
1274* Docker will now fallback to registry V1 if no basic auth credentials are available ([#20241](https://github.com/docker/docker/pull/20241))
1275* Docker will now try to resume layer download where it left off after a network error/timeout ([#19840](https://github.com/docker/docker/pull/19840))
1276- Fix generated manifest mediaType when pushing cross-repository ([#19509](https://github.com/docker/docker/pull/19509))
1277- Fix docker requesting additional push credentials when pulling an image if Content Trust is enabled ([#20382](https://github.com/docker/docker/pull/20382))
1278
1279### Logging
1280
1281- Fix a race in the journald log driver ([#21311](https://github.com/docker/docker/pull/21311))
1282* Docker syslog driver now uses the RFC-5424 format when emitting logs ([#20121](https://github.com/docker/docker/pull/20121))
1283* Docker GELF log driver now allows to specify the compression algorithm and level via the `gelf-compression-type` and `gelf-compression-level` options ([#19831](https://github.com/docker/docker/pull/19831))
1284* Docker daemon learned to output uncolorized logs via the `--raw-logs` options ([#19794](https://github.com/docker/docker/pull/19794))
1285+ Docker, on Windows platform, now includes an ETW (Event Tracing in Windows) logging driver named `etwlogs` ([#19689](https://github.com/docker/docker/pull/19689))
1286* Journald log driver learned how to handle tags ([#19564](https://github.com/docker/docker/pull/19564))
1287+ The fluentd log driver learned the following options: `fluentd-address`, `fluentd-buffer-limit`, `fluentd-retry-wait`, `fluentd-max-retries` and `fluentd-async-connect` ([#19439](https://github.com/docker/docker/pull/19439))
1288+ Docker learned to send log to Google Cloud via the new `gcplogs` logging driver. ([#18766](https://github.com/docker/docker/pull/18766))
1289
1290
1291### Misc
1292
1293+ When saving linked images together with `docker save` a subsequent `docker load` will correctly restore their parent/child relationship ([#21385](https://github.com/docker/docker/pull/21385))
1294+ Support for building the Docker cli for OpenBSD was added ([#21325](https://github.com/docker/docker/pull/21325))
1295+ Labels can now be applied at network, volume and image creation ([#21270](https://github.com/docker/docker/pull/21270))
1296* The `dockremap` is now created as a system user ([#21266](https://github.com/docker/docker/pull/21266))
1297- Fix a few response body leaks ([#21258](https://github.com/docker/docker/pull/21258))
1298- Docker, when run as a service with systemd, will now properly manage its processes cgroups ([#20633](https://github.com/docker/docker/pull/20633))
1299* `docker info` now reports the value of cgroup KernelMemory or emits a warning if it is not supported ([#20863](https://github.com/docker/docker/pull/20863))
1300* `docker info` now also reports the cgroup driver in use ([#20388](https://github.com/docker/docker/pull/20388))
1301* Docker completion is now available on PowerShell ([#19894](https://github.com/docker/docker/pull/19894))
1302* `dockerinit` is no more ([#19490](https://github.com/docker/docker/pull/19490),[#19851](https://github.com/docker/docker/pull/19851))
1303+ Support for building Docker on arm64 was added ([#19013](https://github.com/docker/docker/pull/19013))
1304+ Experimental support for building docker.exe in a native Windows Docker installation ([#18348](https://github.com/docker/docker/pull/18348))
1305
1306### Networking
1307
1308- Fix panic if a node is forcibly removed from the cluster ([#21671](https://github.com/docker/docker/pull/21671))
1309- Fix "error creating vxlan interface" when starting a container in a Swarm cluster ([#21671](https://github.com/docker/docker/pull/21671))
1310* `docker network inspect` will now report all endpoints whether they have an active container or not ([#21160](https://github.com/docker/docker/pull/21160))
1311+ Experimental support for the MacVlan and IPVlan network drivers has been added ([#21122](https://github.com/docker/docker/pull/21122))
1312* Output of `docker network ls` is now sorted by network name ([#20383](https://github.com/docker/docker/pull/20383))
1313- Fix a bug where Docker would allow a network to be created with the reserved `default` name ([#19431](https://github.com/docker/docker/pull/19431))
1314* `docker network inspect` returns whether a network is internal or not ([#19357](https://github.com/docker/docker/pull/19357))
1315+ Control IPv6 via explicit option when creating a network (`docker network create --ipv6`). This shows up as a new `EnableIPv6` field in `docker network inspect` ([#17513](https://github.com/docker/docker/pull/17513))
1316* Support for AAAA Records (aka IPv6 Service Discovery) in embedded DNS Server ([#21396](https://github.com/docker/docker/pull/21396))
1317- Fix to not forward docker domain IPv6 queries to external servers ([#21396](https://github.com/docker/docker/pull/21396))
1318* Multiple A/AAAA records from embedded DNS Server for DNS Round robin ([#21019](https://github.com/docker/docker/pull/21019))
1319- Fix endpoint count inconsistency after an ungraceful dameon restart ([#21261](https://github.com/docker/docker/pull/21261))
1320- Move the ownership of exposed ports and port-mapping options from Endpoint to Sandbox ([#21019](https://github.com/docker/docker/pull/21019))
1321- Fixed a bug which prevents docker reload when host is configured with ipv6.disable=1 ([#21019](https://github.com/docker/docker/pull/21019))
1322- Added inbuilt nil IPAM driver ([#21019](https://github.com/docker/docker/pull/21019))
1323- Fixed bug in iptables.Exists() logic [#21019](https://github.com/docker/docker/pull/21019)
1324- Fixed a Veth interface leak when using overlay network ([#21019](https://github.com/docker/docker/pull/21019))
1325- Fixed a bug which prevents docker reload after a network delete during shutdown ([#20214](https://github.com/docker/docker/pull/20214))
1326- Make sure iptables chains are recreated on firewalld reload ([#20419](https://github.com/docker/docker/pull/20419))
1327- Allow to pass global datastore during config reload ([#20419](https://github.com/docker/docker/pull/20419))
1328- For anonymous containers use the alias name for IP to name mapping, ie:DNS PTR record ([#21019](https://github.com/docker/docker/pull/21019))
1329- Fix a panic when deleting an entry from /etc/hosts file  ([#21019](https://github.com/docker/docker/pull/21019))
1330- Source the forwarded DNS queries from the container net namespace  ([#21019](https://github.com/docker/docker/pull/21019))
1331- Fix to retain the network internal mode config for bridge networks on daemon reload ([#21780] (https://github.com/docker/docker/pull/21780))
1332- Fix to retain IPAM driver option configs on daemon reload ([#21914] (https://github.com/docker/docker/pull/21914))
1333
1334### Plugins
1335
1336- Fix a file descriptor leak that would occur every time plugins were enumerated ([#20686](https://github.com/docker/docker/pull/20686))
1337- Fix an issue where Authz plugin would corrupt the payload body when faced with a large amount of data ([#20602](https://github.com/docker/docker/pull/20602))
1338
1339### Runtime
1340
1341- Fix a panic that could occur when cleanup after a container started with invalid parameters ([#21716](https://github.com/docker/docker/pull/21716))
1342- Fix a race with event timers stopping early ([#21692](https://github.com/docker/docker/pull/21692))
1343- Fix race conditions in the layer store, potentially corrupting the map and crashing the process ([#21677](https://github.com/docker/docker/pull/21677))
1344- Un-deprecate auto-creation of host directories for mounts. This feature was marked deprecated in ([#21666](https://github.com/docker/docker/pull/21666))
1345  Docker 1.9, but was decided to be too much of a backward-incompatible change, so it was decided to keep the feature.
1346+ It is now possible for containers to share the NET and IPC namespaces when `userns` is enabled ([#21383](https://github.com/docker/docker/pull/21383))
1347+ `docker inspect <image-id>` will now expose the rootfs layers ([#21370](https://github.com/docker/docker/pull/21370))
1348+ Docker Windows gained a minimal `top` implementation ([#21354](https://github.com/docker/docker/pull/21354))
1349* Docker learned to report the faulty exe when a container cannot be started due to its condition ([#21345](https://github.com/docker/docker/pull/21345))
1350* Docker with device mapper will now refuse to run if `udev sync` is not available ([#21097](https://github.com/docker/docker/pull/21097))
1351- Fix a bug where Docker would not validate the config file upon configuration reload ([#21089](https://github.com/docker/docker/pull/21089))
1352- Fix a hang that would happen on attach if initial start was to fail ([#21048](https://github.com/docker/docker/pull/21048))
1353- Fix an issue where registry service options in the daemon configuration file were not properly taken into account ([#21045](https://github.com/docker/docker/pull/21045))
1354- Fix a race between the exec and resize operations ([#21022](https://github.com/docker/docker/pull/21022))
1355- Fix an issue where nanoseconds were not correctly taken in account when filtering Docker events ([#21013](https://github.com/docker/docker/pull/21013))
1356- Fix the handling of Docker command when passed a 64 bytes id ([#21002](https://github.com/docker/docker/pull/21002))
1357* Docker will now return a `204` (i.e http.StatusNoContent) code when it successfully deleted a network ([#20977](https://github.com/docker/docker/pull/20977))
1358- Fix a bug where the daemon would wait indefinitely in case the process it was about to killed had already exited on its own ([#20967](https://github.com/docker/docker/pull/20967)
1359* The devmapper driver learned the `dm.min_free_space` option. If the mapped device free space reaches the passed value, new device creation will be prohibited. ([#20786](https://github.com/docker/docker/pull/20786))
1360+ Docker can now prevent processes in container to gain new privileges via the `--security-opt=no-new-privileges` flag ([#20727](https://github.com/docker/docker/pull/20727))
1361- Starting a container with the `--device` option will now correctly resolves symlinks ([#20684](https://github.com/docker/docker/pull/20684))
1362+ Docker now relies on [`containerd`](https://github.com/docker/containerd) and [`runc`](https://github.com/opencontainers/runc) to spawn containers. ([#20662](https://github.com/docker/docker/pull/20662))
1363- Fix docker configuration reloading to only alter value present in the given config file ([#20604](https://github.com/docker/docker/pull/20604))
1364+ Docker now allows setting a container hostname via the `--hostname` flag when `--net=host` ([#20177](https://github.com/docker/docker/pull/20177))
1365+ Docker now allows executing privileged container while running with `--userns-remap` if both `--privileged` and the new `--userns=host` flag are specified ([#20111](https://github.com/docker/docker/pull/20111))
1366- Fix Docker not cleaning up correctly old containers upon restarting after a crash ([#19679](https://github.com/docker/docker/pull/19679))
1367* Docker will now error out if it doesn't recognize a configuration key within the config file ([#19517](https://github.com/docker/docker/pull/19517))
1368- Fix container loading, on daemon startup, when they depends on a plugin running within a container ([#19500](https://github.com/docker/docker/pull/19500))
1369* `docker update` learned how to change a container restart policy ([#19116](https://github.com/docker/docker/pull/19116))
1370* `docker inspect` now also returns a new `State` field containing the container state in a human readable way (i.e. one of `created`, `restarting`, `running`, `paused`, `exited` or `dead`)([#18966](https://github.com/docker/docker/pull/18966))
1371+ Docker learned to limit the number of active pids (i.e. processes) within the container via the `pids-limit` flags. NOTE: This requires `CGROUP_PIDS=y` to be in the kernel configuration. ([#18697](https://github.com/docker/docker/pull/18697))
1372- `docker load` now has a `--quiet` option to suppress the load output ([#20078](https://github.com/docker/docker/pull/20078))
1373- Fix a bug in neighbor discovery for IPv6 peers ([#20842](https://github.com/docker/docker/pull/20842))
1374- Fix a panic during cleanup if a container was started with invalid options ([#21802](https://github.com/docker/docker/pull/21802))
1375- Fix a situation where a container cannot be stopped if the terminal is closed ([#21840](https://github.com/docker/docker/pull/21840))
1376
1377### Security
1378
1379* Object with the `pcp_pmcd_t` selinux type were given management access to `/var/lib/docker(/.*)?` ([#21370](https://github.com/docker/docker/pull/21370))
1380* `restart_syscall`, `copy_file_range`, `mlock2` joined the list of allowed calls in the default seccomp profile ([#21117](https://github.com/docker/docker/pull/21117), [#21262](https://github.com/docker/docker/pull/21262))
1381* `send`, `recv` and `x32` were added to the list of allowed syscalls and arch in the default seccomp profile ([#19432](https://github.com/docker/docker/pull/19432))
1382* Docker Content Trust now requests the server to perform snapshot signing ([#21046](https://github.com/docker/docker/pull/21046))
1383* Support for using YubiKeys for Content Trust signing has been moved out of experimental ([#21591](https://github.com/docker/docker/pull/21591))
1384
1385### Volumes
1386
1387* Output of `docker volume ls` is now sorted by volume name ([#20389](https://github.com/docker/docker/pull/20389))
1388* Local volumes can now accept options similar to the unix `mount` tool ([#20262](https://github.com/docker/docker/pull/20262))
1389- Fix an issue where one letter directory name could not be used as source for volumes ([#21106](https://github.com/docker/docker/pull/21106))
1390+ `docker run -v` now accepts a new flag `nocopy`. This tells the runtime not to copy the container path content into the volume (which is the default behavior) ([#21223](https://github.com/docker/docker/pull/21223))
1391
1392## 1.10.3 (2016-03-10)
1393
1394### Runtime
1395
1396- Fix Docker client exiting with an "Unrecognized input header" error [#20706](https://github.com/docker/docker/pull/20706)
1397- Fix Docker exiting if Exec is started with both `AttachStdin` and `Detach` [#20647](https://github.com/docker/docker/pull/20647)
1398
1399### Distribution
1400
1401- Fix a crash when pushing multiple images sharing the same layers to the same repository in parallel [#20831](https://github.com/docker/docker/pull/20831)
1402- Fix a panic when pushing images to a registry which uses a misconfigured token service [#21030](https://github.com/docker/docker/pull/21030)
1403
1404### Plugin system
1405
1406- Fix issue preventing volume plugins to start when SELinux is enabled [#20834](https://github.com/docker/docker/pull/20834)
1407- Prevent Docker from exiting if a volume plugin returns a null response for Get requests [#20682](https://github.com/docker/docker/pull/20682)
1408- Fix plugin system leaking file descriptors if a plugin has an error [#20680](https://github.com/docker/docker/pull/20680)
1409
1410### Security
1411
1412- Fix linux32 emulation to fail during docker build [#20672](https://github.com/docker/docker/pull/20672)
1413  It was due to the `personality` syscall being blocked by the default seccomp profile.
1414- Fix Oracle XE 10g failing to start in a container [#20981](https://github.com/docker/docker/pull/20981)
1415  It was due to the `ipc` syscall being blocked by the default seccomp profile.
1416- Fix user namespaces not working on Linux From Scratch [#20685](https://github.com/docker/docker/pull/20685)
1417- Fix issue preventing daemon to start if userns is enabled and the `subuid` or `subgid` files contain comments [#20725](https://github.com/docker/docker/pull/20725)
1418
1419## 1.10.2 (2016-02-22)
1420
1421### Runtime
1422
1423- Prevent systemd from deleting containers' cgroups when its configuration is reloaded [#20518](https://github.com/docker/docker/pull/20518)
1424- Fix SELinux issues by disregarding `--read-only` when mounting `/dev/mqueue` [#20333](https://github.com/docker/docker/pull/20333)
1425- Fix chown permissions used during `docker cp` when userns is used [#20446](https://github.com/docker/docker/pull/20446)
1426- Fix configuration loading issue with all booleans defaulting to `true` [#20471](https://github.com/docker/docker/pull/20471)
1427- Fix occasional panic with `docker logs -f` [#20522](https://github.com/docker/docker/pull/20522)
1428
1429### Distribution
1430
1431- Keep layer reference if deletion failed to avoid a badly inconsistent state [#20513](https://github.com/docker/docker/pull/20513)
1432- Handle gracefully a corner case when canceling migration [#20372](https://github.com/docker/docker/pull/20372)
1433- Fix docker import on compressed data [#20367](https://github.com/docker/docker/pull/20367)
1434- Fix tar-split files corruption during migration that later cause docker push and docker save to fail [#20458](https://github.com/docker/docker/pull/20458)
1435
1436### Networking
1437
1438- Fix daemon crash if embedded DNS is sent garbage [#20510](https://github.com/docker/docker/pull/20510)
1439
1440### Volumes
1441
1442- Fix issue with multiple volume references with same name [#20381](https://github.com/docker/docker/pull/20381)
1443
1444### Security
1445
1446- Fix potential cache corruption and delegation conflict issues [#20523](https://github.com/docker/docker/pull/20523)
1447
1448## 1.10.1 (2016-02-11)
1449
1450### Runtime
1451
1452* Do not stop daemon on migration hard failure [#20156](https://github.com/docker/docker/pull/20156)
1453- Fix various issues with migration to content-addressable images [#20058](https://github.com/docker/docker/pull/20058)
1454- Fix ZFS permission bug with user namespaces [#20045](https://github.com/docker/docker/pull/20045)
1455- Do not leak /dev/mqueue from the host to all containers, keep it container-specific [#19876](https://github.com/docker/docker/pull/19876) [#20133](https://github.com/docker/docker/pull/20133)
1456- Fix `docker ps --filter before=...` to not show stopped containers without providing `-a` flag [#20135](https://github.com/docker/docker/pull/20135)
1457
1458### Security
1459
1460- Fix issue preventing docker events to work properly with authorization plugin [#20002](https://github.com/docker/docker/pull/20002)
1461
1462### Distribution
1463
1464* Add additional verifications and prevent from uploading invalid data to registries [#20164](https://github.com/docker/docker/pull/20164)
1465- Fix regression preventing uppercase characters in image reference hostname [#20175](https://github.com/docker/docker/pull/20175)
1466
1467### Networking
1468
1469- Fix embedded DNS for user-defined networks in the presence of firewalld [#20060](https://github.com/docker/docker/pull/20060)
1470- Fix issue where removing a network during shutdown left Docker inoperable [#20181](https://github.com/docker/docker/issues/20181) [#20235](https://github.com/docker/docker/issues/20235)
1471- Embedded DNS is now able to return compressed results [#20181](https://github.com/docker/docker/issues/20181)
1472- Fix port-mapping issue with `userland-proxy=false` [#20181](https://github.com/docker/docker/issues/20181)
1473
1474### Logging
1475
1476- Fix bug where tcp+tls protocol would be rejected [#20109](https://github.com/docker/docker/pull/20109)
1477
1478### Volumes
1479
1480- Fix issue whereby older volume drivers would not receive volume options [#19983](https://github.com/docker/docker/pull/19983)
1481
1482### Misc
1483
1484- Remove TasksMax from Docker systemd service [#20167](https://github.com/docker/docker/pull/20167)
1485
1486## 1.10.0 (2016-02-04)
1487
1488**IMPORTANT**: Docker 1.10 uses a new content-addressable storage for images and layers.
1489A migration is performed the first time docker is run, and can take a significant amount of time depending on the number of images present.
1490Refer to this page on the wiki for more information: https://github.com/docker/docker/wiki/Engine-v1.10.0-content-addressability-migration
1491We also released a cool migration utility that enables you to perform the migration before updating to reduce downtime.
1492Engine 1.10 migrator can be found on Docker Hub: https://hub.docker.com/r/docker/v1.10-migrator/
1493
1494### Runtime
1495
1496+ New `docker update` command that allows updating resource constraints on running containers [#15078](https://github.com/docker/docker/pull/15078)
1497+ Add `--tmpfs` flag to `docker run` to create a tmpfs mount in a container [#13587](https://github.com/docker/docker/pull/13587)
1498+ Add `--format` flag to `docker images` command [#17692](https://github.com/docker/docker/pull/17692)
1499+ Allow to set daemon configuration in a file and hot-reload it with the `SIGHUP` signal [#18587](https://github.com/docker/docker/pull/18587)
1500+ Updated docker events to include more meta-data and event types [#18888](https://github.com/docker/docker/pull/18888)
1501  This change is backward compatible in the API, but not on the CLI.
1502+ Add `--blkio-weight-device` flag to `docker run` [#13959](https://github.com/docker/docker/pull/13959)
1503+ Add `--device-read-bps` and `--device-write-bps` flags to `docker run` [#14466](https://github.com/docker/docker/pull/14466)
1504+ Add `--device-read-iops` and `--device-write-iops` flags to `docker run` [#15879](https://github.com/docker/docker/pull/15879)
1505+ Add `--oom-score-adj` flag to `docker run` [#16277](https://github.com/docker/docker/pull/16277)
1506+ Add `--detach-keys` flag to `attach`, `run`, `start` and `exec` commands to override the default key sequence that detaches from a container  [#15666](https://github.com/docker/docker/pull/15666)
1507+ Add `--shm-size` flag to `run`, `create` and `build` to set the size of `/dev/shm` [#16168](https://github.com/docker/docker/pull/16168)
1508+ Show the number of running, stopped, and paused containers in `docker info` [#19249](https://github.com/docker/docker/pull/19249)
1509+ Show the `OSType` and `Architecture` in `docker info` [#17478](https://github.com/docker/docker/pull/17478)
1510+ Add `--cgroup-parent` flag on `daemon` to set cgroup parent for all containers [#19062](https://github.com/docker/docker/pull/19062)
1511+ Add `-L` flag to docker cp to follow symlinks [#16613](https://github.com/docker/docker/pull/16613)
1512+ New `status=dead` filter for `docker ps` [#17908](https://github.com/docker/docker/pull/17908)
1513* Change `docker run` exit codes to distinguish between runtime and application errors [#14012](https://github.com/docker/docker/pull/14012)
1514* Enhance `docker events --since` and `--until` to support nanoseconds and timezones [#17495](https://github.com/docker/docker/pull/17495)
1515* Add `--all`/`-a` flag to `stats` to include both running and stopped containers [#16742](https://github.com/docker/docker/pull/16742)
1516* Change the default cgroup-driver to `cgroupfs` [#17704](https://github.com/docker/docker/pull/17704)
1517* Emit a "tag" event when tagging an image with `build -t` [#17115](https://github.com/docker/docker/pull/17115)
1518* Best effort for linked containers' start order when starting the daemon [#18208](https://github.com/docker/docker/pull/18208)
1519* Add ability to add multiple tags on `build` [#15780](https://github.com/docker/docker/pull/15780)
1520* Permit `OPTIONS` request against any url, thus fixing issue with CORS [#19569](https://github.com/docker/docker/pull/19569)
1521- Fix the `--quiet` flag on `docker build` to actually be quiet [#17428](https://github.com/docker/docker/pull/17428)
1522- Fix `docker images --filter dangling=false` to now show all non-dangling images [#19326](https://github.com/docker/docker/pull/19326)
1523- Fix race condition causing autorestart turning off on restart [#17629](https://github.com/docker/docker/pull/17629)
1524- Recognize GPFS filesystems [#19216](https://github.com/docker/docker/pull/19216)
1525- Fix obscure bug preventing to start containers [#19751](https://github.com/docker/docker/pull/19751)
1526- Forbid `exec` during container restart [#19722](https://github.com/docker/docker/pull/19722)
1527- devicemapper: Increasing `--storage-opt dm.basesize` will now increase the base device size on daemon restart [#19123](https://github.com/docker/docker/pull/19123)
1528
1529### Security
1530
1531+ Add `--userns-remap` flag to `daemon` to support user namespaces (previously in experimental) [#19187](https://github.com/docker/docker/pull/19187)
1532+ Add support for custom seccomp profiles in `--security-opt` [#17989](https://github.com/docker/docker/pull/17989)
1533+ Add default seccomp profile [#18780](https://github.com/docker/docker/pull/18780)
1534+ Add `--authorization-plugin` flag to `daemon` to customize ACLs [#15365](https://github.com/docker/docker/pull/15365)
1535+ Docker Content Trust now supports the ability to read and write user delegations [#18887](https://github.com/docker/docker/pull/18887)
1536  This is an optional, opt-in feature that requires the explicit use of the Notary command-line utility in order to be enabled.
1537  Enabling delegation support in a specific repository will break the ability of Docker 1.9 and 1.8 to pull from that repository, if content trust is enabled.
1538* Allow SELinux to run in a container when using the BTRFS storage driver [#16452](https://github.com/docker/docker/pull/16452)
1539
1540### Distribution
1541
1542* Use content-addressable storage for images and layers [#17924](https://github.com/docker/docker/pull/17924)
1543  Note that a migration is performed the first time docker is run; it can take a significant amount of time depending on the number of images and containers present.
1544  Images no longer depend on the parent chain but contain a list of layer references.
1545  `docker load`/`docker save` tarballs now also contain content-addressable image configurations.
1546  For more information: https://github.com/docker/docker/wiki/Engine-v1.10.0-content-addressability-migration
1547* Add support for the new [manifest format ("schema2")](https://github.com/docker/distribution/blob/master/docs/spec/manifest-v2-2.md) [#18785](https://github.com/docker/docker/pull/18785)
1548* Lots of improvements for push and pull: performance++, retries on failed downloads, cancelling on client disconnect [#18353](https://github.com/docker/docker/pull/18353), [#18418](https://github.com/docker/docker/pull/18418), [#19109](https://github.com/docker/docker/pull/19109), [#18353](https://github.com/docker/docker/pull/18353)
1549* Limit v1 protocol fallbacks [#18590](https://github.com/docker/docker/pull/18590)
1550- Fix issue where docker could hang indefinitely waiting for a nonexistent process to pull an image [#19743](https://github.com/docker/docker/pull/19743)
1551
1552### Networking
1553
1554+ Use DNS-based discovery instead of `/etc/hosts` [#19198](https://github.com/docker/docker/pull/19198)
1555+ Support for network-scoped alias using `--net-alias` on `run` and `--alias` on `network connect` [#19242](https://github.com/docker/docker/pull/19242)
1556+ Add `--ip` and `--ip6` on `run` and `network connect` to support custom IP addresses for a container in a network [#19001](https://github.com/docker/docker/pull/19001)
1557+ Add `--ipam-opt` to `network create` for passing custom IPAM options [#17316](https://github.com/docker/docker/pull/17316)
1558+ Add `--internal` flag to `network create` to restrict external access to and from the network [#19276](https://github.com/docker/docker/pull/19276)
1559+ Add `kv.path` option to `--cluster-store-opt` [#19167](https://github.com/docker/docker/pull/19167)
1560+ Add `discovery.heartbeat` and `discovery.ttl` options to `--cluster-store-opt` to configure discovery TTL and heartbeat timer [#18204](https://github.com/docker/docker/pull/18204)
1561+ Add `--format` flag to `network inspect` [#17481](https://github.com/docker/docker/pull/17481)
1562+ Add `--link` to `network connect` to provide a container-local alias [#19229](https://github.com/docker/docker/pull/19229)
1563+ Support for Capability exchange with remote IPAM plugins [#18775](https://github.com/docker/docker/pull/18775)
1564+ Add `--force` to `network disconnect` to force container to be disconnected from network [#19317](https://github.com/docker/docker/pull/19317)
1565* Support for multi-host networking using built-in overlay driver for all engine supported kernels: 3.10+ [#18775](https://github.com/docker/docker/pull/18775)
1566* `--link` is now supported on `docker run` for containers in user-defined network [#19229](https://github.com/docker/docker/pull/19229)
1567* Enhance `docker network rm` to allow removing multiple networks [#17489](https://github.com/docker/docker/pull/17489)
1568* Include container names in `network inspect` [#17615](https://github.com/docker/docker/pull/17615)
1569* Include auto-generated subnets for user-defined networks in `network inspect` [#17316](https://github.com/docker/docker/pull/17316)
1570* Add `--filter` flag to `network ls` to hide predefined networks [#17782](https://github.com/docker/docker/pull/17782)
1571* Add support for network connect/disconnect to stopped containers [#18906](https://github.com/docker/docker/pull/18906)
1572* Add network ID to container inspect [#19323](https://github.com/docker/docker/pull/19323)
1573- Fix MTU issue where Docker would not start with two or more default routes [#18108](https://github.com/docker/docker/pull/18108)
1574- Fix duplicate IP address for containers [#18106](https://github.com/docker/docker/pull/18106)
1575- Fix issue preventing sometimes docker from creating the bridge network [#19338](https://github.com/docker/docker/pull/19338)
1576- Do not substitute 127.0.0.1 name server when using `--net=host` [#19573](https://github.com/docker/docker/pull/19573)
1577
1578### Logging
1579
1580+ New logging driver for Splunk [#16488](https://github.com/docker/docker/pull/16488)
1581+ Add support for syslog over TCP+TLS [#18998](https://github.com/docker/docker/pull/18998)
1582* Enhance `docker logs --since` and `--until` to support nanoseconds and time [#17495](https://github.com/docker/docker/pull/17495)
1583* Enhance AWS logs to auto-detect region [#16640](https://github.com/docker/docker/pull/16640)
1584
1585### Volumes
1586
1587+ Add support to set the mount propagation mode for a volume [#17034](https://github.com/docker/docker/pull/17034)
1588* Add `ls` and `inspect` endpoints to volume plugin API [#16534](https://github.com/docker/docker/pull/16534)
1589  Existing plugins need to make use of these new APIs to satisfy users' expectation
1590  For that, please use the new MIME type `application/vnd.docker.plugins.v1.2+json` [#19549](https://github.com/docker/docker/pull/19549)
1591- Fix data not being copied to named volumes [#19175](https://github.com/docker/docker/pull/19175)
1592- Fix issues preventing volume drivers from being containerized [#19500](https://github.com/docker/docker/pull/19500)
1593- Fix `docker volumes ls --dangling=false` to now show all non-dangling volumes [#19671](https://github.com/docker/docker/pull/19671)
1594- Do not remove named volumes on container removal [#19568](https://github.com/docker/docker/pull/19568)
1595- Allow external volume drivers to host anonymous volumes [#19190](https://github.com/docker/docker/pull/19190)
1596
1597### Builder
1598
1599+ Add support for `**` in `.dockerignore` to wildcard multiple levels of directories [#17090](https://github.com/docker/docker/pull/17090)
1600- Fix handling of UTF-8 characters in Dockerfiles [#17055](https://github.com/docker/docker/pull/17055)
1601- Fix permissions problem when reading from STDIN [#19283](https://github.com/docker/docker/pull/19283)
1602
1603### Client
1604
1605+ Add support for overriding the API version to use via an `DOCKER_API_VERSION` environment-variable [#15964](https://github.com/docker/docker/pull/15964)
1606- Fix a bug preventing Windows clients to log in to Docker Hub [#19891](https://github.com/docker/docker/pull/19891)
1607
1608### Misc
1609
1610* systemd: Set TasksMax in addition to LimitNPROC in systemd service file [#19391](https://github.com/docker/docker/pull/19391)
1611
1612### Deprecations
1613
1614* Remove LXC support. The LXC driver was deprecated in Docker 1.8, and has now been removed [#17700](https://github.com/docker/docker/pull/17700)
1615* Remove `--exec-driver` daemon flag, because it is no longer in use [#17700](https://github.com/docker/docker/pull/17700)
1616* Remove old deprecated single-dashed long CLI flags (such as `-rm`; use `--rm` instead) [#17724](https://github.com/docker/docker/pull/17724)
1617* Deprecate HostConfig at API container start [#17799](https://github.com/docker/docker/pull/17799)
1618* Deprecate docker packages for newly EOL'd Linux distributions: Fedora 21 and Ubuntu 15.04 (Vivid) [#18794](https://github.com/docker/docker/pull/18794), [#18809](https://github.com/docker/docker/pull/18809)
1619* Deprecate `-f` flag for docker tag [#18350](https://github.com/docker/docker/pull/18350)
1620
1621## 1.9.1 (2015-11-21)
1622
1623### Runtime
1624
1625- Do not prevent daemon from booting if images could not be restored (#17695)
1626- Force IPC mount to unmount on daemon shutdown/init (#17539)
1627- Turn IPC unmount errors into warnings (#17554)
1628- Fix `docker stats` performance regression (#17638)
1629- Clarify cryptic error message upon `docker logs` if `--log-driver=none` (#17767)
1630- Fix seldom panics (#17639, #17634, #17703)
1631- Fix opq whiteouts problems for files with dot prefix (#17819)
1632- devicemapper: try defaulting to xfs instead of ext4 for performance reasons (#17903, #17918)
1633- devicemapper: fix displayed fs in docker info (#17974)
1634- selinux: only relabel if user requested so with the `z` option (#17450, #17834)
1635- Do not make network calls when normalizing names (#18014)
1636
1637### Client
1638
1639- Fix `docker login` on windows (#17738)
1640- Fix bug with `docker inspect` output when not connected to daemon (#17715)
1641- Fix `docker inspect -f {{.HostConfig.Dns}} somecontainer` (#17680)
1642
1643### Builder
1644
1645- Fix regression with symlink behavior in ADD/COPY (#17710)
1646
1647### Networking
1648
1649- Allow passing a network ID as an argument for `--net` (#17558)
1650- Fix connect to host and prevent disconnect from host for `host` network (#17476)
1651- Fix `--fixed-cidr` issue when gateway ip falls in ip-range and ip-range is
1652  not the first block in the network (#17853)
1653- Restore deterministic `IPv6` generation from `MAC` address on default `bridge` network (#17890)
1654- Allow port-mapping only for endpoints created on docker run (#17858)
1655- Fixed an endpoint delete issue with a possible stale sbox (#18102)
1656
1657### Distribution
1658
1659- Correct parent chain in v2 push when v1Compatibility files on the disk are inconsistent (#18047)
1660
1661## 1.9.0 (2015-11-03)
1662
1663### Runtime
1664
1665+ `docker stats` now returns block IO metrics (#15005)
1666+ `docker stats` now details network stats per interface (#15786)
1667+ Add `ancestor=<image>` filter to `docker ps --filter` flag to filter
1668containers based on their ancestor images (#14570)
1669+ Add `label=<somelabel>` filter to `docker ps --filter` to filter containers
1670based on label (#16530)
1671+ Add `--kernel-memory` flag to `docker run` (#14006)
1672+ Add `--message` flag to `docker import` allowing to specify an optional
1673message (#15711)
1674+ Add `--privileged` flag to `docker exec` (#14113)
1675+ Add `--stop-signal` flag to `docker run` allowing to replace the container
1676process stopping signal (#15307)
1677+ Add a new `unless-stopped` restart policy (#15348)
1678+ Inspecting an image now returns tags (#13185)
1679+ Add container size information to `docker inspect` (#15796)
1680+ Add `RepoTags` and `RepoDigests` field to `/images/{name:.*}/json` (#17275)
1681- Remove the deprecated `/container/ps` endpoint from the API (#15972)
1682- Send and document correct HTTP codes for `/exec/<name>/start` (#16250)
1683- Share shm and mqueue between containers sharing IPC namespace (#15862)
1684- Event stream now shows OOM status when `--oom-kill-disable` is set (#16235)
1685- Ensure special network files (/etc/hosts etc.) are read-only if bind-mounted
1686with `ro` option (#14965)
1687- Improve `rmi` performance (#16890)
1688- Do not update /etc/hosts for the default bridge network, except for links (#17325)
1689- Fix conflict with duplicate container names (#17389)
1690- Fix an issue with incorrect template execution in `docker inspect` (#17284)
1691- DEPRECATE `-c` short flag variant for `--cpu-shares` in docker run (#16271)
1692
1693### Client
1694
1695+ Allow `docker import` to import from local files (#11907)
1696
1697### Builder
1698
1699+ Add a `STOPSIGNAL` Dockerfile instruction allowing to set a different
1700stop-signal for the container process (#15307)
1701+ Add an `ARG` Dockerfile instruction and a `--build-arg` flag to `docker build`
1702that allows to add build-time environment variables (#15182)
1703- Improve cache miss performance (#16890)
1704
1705### Storage
1706
1707- devicemapper: Implement deferred deletion capability (#16381)
1708
1709### Networking
1710
1711+ `docker network` exits experimental and is part of standard release (#16645)
1712+ New network top-level concept, with associated subcommands and API (#16645)
1713  WARNING: the API is different from the experimental API
1714+ Support for multiple isolated/micro-segmented networks (#16645)
1715+ Built-in multihost networking using VXLAN based overlay driver (#14071)
1716+ Support for third-party network plugins (#13424)
1717+ Ability to dynamically connect containers to multiple networks (#16645)
1718+ Support for user-defined IP address management via pluggable IPAM drivers (#16910)
1719+ Add daemon flags `--cluster-store` and `--cluster-advertise` for built-in nodes discovery (#16229)
1720+ Add `--cluster-store-opt` for setting up TLS settings (#16644)
1721+ Add `--dns-opt` to the daemon (#16031)
1722- DEPRECATE following container `NetworkSettings` fields in API v1.21: `EndpointID`, `Gateway`,
1723  `GlobalIPv6Address`, `GlobalIPv6PrefixLen`, `IPAddress`, `IPPrefixLen`, `IPv6Gateway` and `MacAddress`.
1724  Those are now specific to the `bridge` network. Use `NetworkSettings.Networks` to inspect
1725  the networking settings of a container per network.
1726
1727### Volumes
1728
1729+ New top-level `volume` subcommand and API (#14242)
1730- Move API volume driver settings to host-specific config (#15798)
1731- Print an error message if volume name is not unique (#16009)
1732- Ensure volumes created from Dockerfiles always use the local volume driver
1733(#15507)
1734- DEPRECATE auto-creating missing host paths for bind mounts (#16349)
1735
1736### Logging
1737
1738+ Add `awslogs` logging driver for Amazon CloudWatch (#15495)
1739+ Add generic `tag` log option to allow customizing container/image
1740information passed to driver (e.g. show container names) (#15384)
1741- Implement the `docker logs` endpoint for the journald driver (#13707)
1742- DEPRECATE driver-specific log tags (e.g. `syslog-tag`, etc.) (#15384)
1743
1744### Distribution
1745
1746+ `docker search` now works with partial names (#16509)
1747- Push optimization: avoid buffering to file (#15493)
1748- The daemon will display progress for images that were already being pulled
1749by another client (#15489)
1750- Only permissions required for the current action being performed are requested (#)
1751+ Renaming trust keys (and respective environment variables) from `offline` to
1752`root` and `tagging` to `repository` (#16894)
1753- DEPRECATE trust key environment variables
1754`DOCKER_CONTENT_TRUST_OFFLINE_PASSPHRASE` and
1755`DOCKER_CONTENT_TRUST_TAGGING_PASSPHRASE` (#16894)
1756
1757### Security
1758
1759+ Add SELinux profiles to the rpm package (#15832)
1760- Fix various issues with AppArmor profiles provided in the deb package
1761(#14609)
1762- Add AppArmor policy that prevents writing to /proc (#15571)
1763
1764## 1.8.3 (2015-10-12)
1765
1766### Distribution
1767
1768- Fix layer IDs lead to local graph poisoning (CVE-2014-8178)
1769- Fix manifest validation and parsing logic errors allow pull-by-digest validation bypass (CVE-2014-8179)
1770+ Add `--disable-legacy-registry` to prevent a daemon from using a v1 registry
1771
1772## 1.8.2 (2015-09-10)
1773
1774### Distribution
1775
1776- Fixes rare edge case of handling GNU LongLink and LongName entries.
1777- Fix ^C on docker pull.
1778- Fix docker pull issues on client disconnection.
1779- Fix issue that caused the daemon to panic when loggers weren't configured properly.
1780- Fix goroutine leak pulling images from registry V2.
1781
1782### Runtime
1783
1784- Fix a bug mounting cgroups for docker daemons running inside docker containers.
1785- Initialize log configuration properly.
1786
1787### Client:
1788
1789- Handle `-q` flag in `docker ps` properly when there is a default format.
1790
1791### Networking
1792
1793- Fix several corner cases with netlink.
1794
1795### Contrib
1796
1797- Fix several issues with bash completion.
1798
1799## 1.8.1 (2015-08-12)
1800
1801### Distribution
1802
1803* Fix a bug where pushing multiple tags would result in invalid images
1804
1805## 1.8.0 (2015-08-11)
1806
1807### Distribution
1808
1809+ Trusted pull, push and build, disabled by default
1810* Make tar layers deterministic between registries
1811* Don't allow deleting the image of running containers
1812* Check if a tag name to load is a valid digest
1813* Allow one character repository names
1814* Add a more accurate error description for invalid tag name
1815* Make build cache ignore mtime
1816
1817### Cli
1818
1819+ Add support for DOCKER_CONFIG/--config to specify config file dir
1820+ Add --type flag  for docker inspect command
1821+ Add formatting options to `docker ps` with `--format`
1822+ Replace `docker -d` with new subcommand `docker daemon`
1823* Zsh completion updates and improvements
1824* Add some missing events to bash completion
1825* Support daemon urls with base paths in `docker -H`
1826* Validate status= filter to docker ps
1827* Display when a container is in --net=host in docker ps
1828* Extend docker inspect to export image metadata related to graph driver
1829* Restore --default-gateway{,-v6} daemon options
1830* Add missing unpublished ports in docker ps
1831* Allow duration strings in `docker events` as --since/--until
1832* Expose more mounts information in `docker inspect`
1833
1834### Runtime
1835
1836+ Add new Fluentd logging driver
1837+ Allow `docker import` to load from local files
1838+ Add logging driver for GELF via UDP
1839+ Allow to copy files from host to containers with `docker cp`
1840+ Promote volume drivers from experimental to master
1841+ Add rollover options to json-file log driver, and --log-driver-opts flag
1842+ Add memory swappiness tuning options
1843* Remove cgroup read-only flag when privileged
1844* Make /proc, /sys, & /dev readonly for readonly containers
1845* Add cgroup bind mount by default
1846* Overlay: Export metadata for container and image in `docker inspect`
1847* Devicemapper: external device activation
1848* Devicemapper: Compare uuid of base device on startup
1849* Remove RC4 from the list of registry cipher suites
1850* Add syslog-facility option
1851* LXC execdriver compatibility with recent LXC versions
1852* Mark LXC execriver as deprecated (to be removed with the migration to runc)
1853
1854### Plugins
1855
1856* Separate plugin sockets and specs locations
1857* Allow TLS connections to plugins
1858
1859### Bug fixes
1860
1861- Add missing 'Names' field to /containers/json API output
1862- Make `docker rmi` of dangling images safe while pulling
1863- Devicemapper: Change default basesize to 100G
1864- Go Scheduler issue with sync.Mutex and gcc
1865- Fix issue where Search API endpoint would panic due to empty AuthConfig
1866- Set image canonical names correctly
1867- Check dockerinit only if lxc driver is used
1868- Fix ulimit usage of nproc
1869- Always attach STDIN if -i,--interactive is specified
1870- Show error messages when saving container state fails
1871- Fixed incorrect assumption on --bridge=none treated as disable network
1872- Check for invalid port specifications in host configuration
1873- Fix endpoint leave failure for --net=host mode
1874- Fix goroutine leak in the stats API if the container is not running
1875- Check for apparmor file before reading it
1876- Fix DOCKER_TLS_VERIFY being ignored
1877- Set umask to the default on startup
1878- Correct the message of pause and unpause a non-running container
1879- Adjust disallowed CpuShares in container creation
1880- ZFS: correctly apply selinux context
1881- Display empty string instead of <nil> when IP opt is nil
1882- `docker kill` returns error when container is not running
1883- Fix COPY/ADD quoted/json form
1884- Fix goroutine leak on logs -f with no output
1885- Remove panic in nat package on invalid hostport
1886- Fix container linking in Fedora 22
1887- Fix error caused using default gateways outside of the allocated range
1888- Format times in inspect command with a template as RFC3339Nano
1889- Make registry client to accept 2xx and 3xx http status responses as successful
1890- Fix race issue that caused the daemon to crash with certain layer downloads failed in a specific order.
1891- Fix error when the docker ps format was not valid.
1892- Remove redundant ip forward check.
1893- Fix issue trying to push images to repository mirrors.
1894- Fix error cleaning up network entrypoints when there is an initialization issue.
1895
1896## 1.7.1 (2015-07-14)
1897
1898#### Runtime
1899
1900- Fix default user spawning exec process with `docker exec`
1901- Make `--bridge=none` not to configure the network bridge
1902- Publish networking stats properly
1903- Fix implicit devicemapper selection with static binaries
1904- Fix socket connections that hung intermittently
1905- Fix bridge interface creation on CentOS/RHEL 6.6
1906- Fix local dns lookups added to resolv.conf
1907- Fix copy command mounting volumes
1908- Fix read/write privileges in volumes mounted with --volumes-from
1909
1910#### Remote API
1911
1912- Fix unmarshaling of Command and Entrypoint
1913- Set limit for minimum client version supported
1914- Validate port specification
1915- Return proper errors when attach/reattach fail
1916
1917#### Distribution
1918
1919- Fix pulling private images
1920- Fix fallback between registry V2 and V1
1921
1922## 1.7.0 (2015-06-16)
1923
1924#### Runtime
1925+ Experimental feature: support for out-of-process volume plugins
1926* The userland proxy can be disabled in favor of hairpin NAT using the daemon’s `--userland-proxy=false` flag
1927* The `exec` command supports the `-u|--user` flag to specify the new process owner
1928+ Default gateway for containers can be specified daemon-wide using the `--default-gateway` and `--default-gateway-v6` flags
1929+ The CPU CFS (Completely Fair Scheduler) quota can be set in `docker run` using `--cpu-quota`
1930+ Container block IO can be controlled in `docker run` using`--blkio-weight`
1931+ ZFS support
1932+ The `docker logs` command supports a `--since` argument
1933+ UTS namespace can be shared with the host with `docker run --uts=host`
1934
1935#### Quality
1936* Networking stack was entirely rewritten as part of the libnetwork effort
1937* Engine internals refactoring
1938* Volumes code was entirely rewritten to support the plugins effort
1939+ Sending SIGUSR1 to a daemon will dump all goroutines stacks without exiting
1940
1941#### Build
1942+ Support ${variable:-value} and ${variable:+value} syntax for environment variables
1943+ Support resource management flags `--cgroup-parent`, `--cpu-period`, `--cpu-quota`, `--cpuset-cpus`, `--cpuset-mems`
1944+ git context changes with branches and directories
1945* The .dockerignore file support exclusion rules
1946
1947#### Distribution
1948+ Client support for v2 mirroring support for the official registry
1949
1950#### Bugfixes
1951* Firewalld is now supported and will automatically be used when available
1952* mounting --device recursively
1953
1954## 1.6.2 (2015-05-13)
1955
1956####  Runtime
1957- Revert change prohibiting mounting into /sys
1958
1959## 1.6.1 (2015-05-07)
1960
1961####  Security
1962- Fix read/write /proc paths (CVE-2015-3630)
1963- Prohibit VOLUME /proc and VOLUME / (CVE-2015-3631)
1964- Fix opening of file-descriptor 1 (CVE-2015-3627)
1965- Fix symlink traversal on container respawn allowing local privilege escalation (CVE-2015-3629)
1966- Prohibit mount of /sys
1967
1968#### Runtime
1969- Update AppArmor policy to not allow mounts
1970
1971## 1.6.0 (2015-04-07)
1972
1973#### Builder
1974+ Building images from an image ID
1975+ Build containers with resource constraints, ie `docker build --cpu-shares=100 --memory=1024m...`
1976+ `commit --change` to apply specified Dockerfile instructions while committing the image
1977+ `import --change` to apply specified Dockerfile instructions while importing the image
1978+ Builds no longer continue in the background when canceled with CTRL-C
1979
1980#### Client
1981+ Windows Support
1982
1983#### Runtime
1984+ Container and image Labels
1985+ `--cgroup-parent` for specifying a parent cgroup to place container cgroup within
1986+ Logging drivers, `json-file`, `syslog`, or `none`
1987+ Pulling images by ID
1988+ `--ulimit` to set the ulimit on a container
1989+ `--default-ulimit` option on the daemon which applies to all created containers (and overwritten by `--ulimit` on run)
1990
1991## 1.5.0 (2015-02-10)
1992
1993#### Builder
1994+ Dockerfile to use for a given `docker build` can be specified with the `-f` flag
1995* Dockerfile and .dockerignore files can be themselves excluded as part of the .dockerignore file, thus preventing modifications to these files invalidating ADD or COPY instructions cache
1996* ADD and COPY instructions accept relative paths
1997* Dockerfile `FROM scratch` instruction is now interpreted as a no-base specifier
1998* Improve performance when exposing a large number of ports
1999
2000#### Hack
2001+ Allow client-side only integration tests for Windows
2002* Include docker-py integration tests against Docker daemon as part of our test suites
2003
2004#### Packaging
2005+ Support for the new version of the registry HTTP API
2006* Speed up `docker push` for images with a majority of already existing layers
2007- Fixed contacting a private registry through a proxy
2008
2009#### Remote API
2010+ A new endpoint will stream live container resource metrics and can be accessed with the `docker stats` command
2011+ Containers can be renamed using the new `rename` endpoint and the associated `docker rename` command
2012* Container `inspect` endpoint show the ID of `exec` commands running in this container
2013* Container `inspect` endpoint show the number of times Docker auto-restarted the container
2014* New types of event can be streamed by the `events` endpoint: ‘OOM’ (container died with out of memory), ‘exec_create’, and ‘exec_start'
2015- Fixed returned string fields which hold numeric characters incorrectly omitting surrounding double quotes
2016
2017#### Runtime
2018+ Docker daemon has full IPv6 support
2019+ The `docker run` command can take the `--pid=host` flag to use the host PID namespace, which makes it possible for example to debug host processes using containerized debugging tools
2020+ The `docker run` command can take the `--read-only` flag to make the container’s root filesystem mounted as readonly, which can be used in combination with volumes to force a container’s processes to only write to locations that will be persisted
2021+ Container total memory usage can be limited for `docker run` using the `--memory-swap` flag
2022* Major stability improvements for devicemapper storage driver
2023* Better integration with host system: containers will reflect changes to the host's `/etc/resolv.conf` file when restarted
2024* Better integration with host system: per-container iptable rules are moved to the DOCKER chain
2025- Fixed container exiting on out of memory to return an invalid exit code
2026
2027#### Other
2028* The HTTP_PROXY, HTTPS_PROXY, and NO_PROXY environment variables are properly taken into account by the client when connecting to the Docker daemon
2029
2030## 1.4.1 (2014-12-15)
2031
2032#### Runtime
2033- Fix issue with volumes-from and bind mounts not being honored after create
2034
2035## 1.4.0 (2014-12-11)
2036
2037#### Notable Features since 1.3.0
2038+ Set key=value labels to the daemon (displayed in `docker info`), applied with
2039  new `-label` daemon flag
2040+ Add support for `ENV` in Dockerfile of the form:
2041  `ENV name=value name2=value2...`
2042+ New Overlayfs Storage Driver
2043+ `docker info` now returns an `ID` and `Name` field
2044+ Filter events by event name, container, or image
2045+ `docker cp` now supports copying from container volumes
2046- Fixed `docker tag`, so it honors `--force` when overriding a tag for existing
2047  image.
2048
2049## 1.3.3 (2014-12-11)
2050
2051#### Security
2052- Fix path traversal vulnerability in processing of absolute symbolic links (CVE-2014-9356)
2053- Fix decompression of xz image archives, preventing privilege escalation (CVE-2014-9357)
2054- Validate image IDs (CVE-2014-9358)
2055
2056#### Runtime
2057- Fix an issue when image archives are being read slowly
2058
2059#### Client
2060- Fix a regression related to stdin redirection
2061- Fix a regression with `docker cp` when destination is the current directory
2062
2063## 1.3.2 (2014-11-20)
2064
2065#### Security
2066- Fix tar breakout vulnerability
2067* Extractions are now sandboxed chroot
2068- Security options are no longer committed to images
2069
2070#### Runtime
2071- Fix deadlock in `docker ps -f exited=1`
2072- Fix a bug when `--volumes-from` references a container that failed to start
2073
2074#### Registry
2075+ `--insecure-registry` now accepts CIDR notation such as 10.1.0.0/16
2076* Private registries whose IPs fall in the 127.0.0.0/8 range do no need the `--insecure-registry` flag
2077- Skip the experimental registry v2 API when mirroring is enabled
2078
2079## 1.3.1 (2014-10-28)
2080
2081#### Security
2082* Prevent fallback to SSL protocols < TLS 1.0 for client, daemon and registry
2083+ Secure HTTPS connection to registries with certificate verification and without HTTP fallback unless `--insecure-registry` is specified
2084
2085#### Runtime
2086- Fix issue where volumes would not be shared
2087
2088#### Client
2089- Fix issue with `--iptables=false` not automatically setting `--ip-masq=false`
2090- Fix docker run output to non-TTY stdout
2091
2092#### Builder
2093- Fix escaping `$` for environment variables
2094- Fix issue with lowercase `onbuild` Dockerfile instruction
2095- Restrict environment variable expansion to `ENV`, `ADD`, `COPY`, `WORKDIR`, `EXPOSE`, `VOLUME` and `USER`
2096
2097## 1.3.0 (2014-10-14)
2098
2099#### Notable features since 1.2.0
2100+ Docker `exec` allows you to run additional processes inside existing containers
2101+ Docker `create` gives you the ability to create a container via the CLI without executing a process
2102+ `--security-opts` options to allow user to customize container labels and apparmor profiles
2103+ Docker `ps` filters
2104- Wildcard support to COPY/ADD
2105+ Move production URLs to get.docker.com from get.docker.io
2106+ Allocate IP address on the bridge inside a valid CIDR
2107+ Use drone.io for PR and CI testing
2108+ Ability to setup an official registry mirror
2109+ Ability to save multiple images with docker `save`
2110
2111## 1.2.0 (2014-08-20)
2112
2113#### Runtime
2114+ Make /etc/hosts /etc/resolv.conf and /etc/hostname editable at runtime
2115+ Auto-restart containers using policies
2116+ Use /var/lib/docker/tmp for large temporary files
2117+ `--cap-add` and `--cap-drop` to tweak what linux capability you want
2118+ `--device` to use devices in containers
2119
2120#### Client
2121+ `docker search` on private registries
2122+ Add `exited` filter to `docker ps --filter`
2123* `docker rm -f` now kills instead of stop
2124+ Support for IPv6 addresses in `--dns` flag
2125
2126#### Proxy
2127+ Proxy instances in separate processes
2128* Small bug fix on UDP proxy
2129
2130## 1.1.2 (2014-07-23)
2131
2132#### Runtime
2133+ Fix port allocation for existing containers
2134+ Fix containers restart on daemon restart
2135
2136#### Packaging
2137+ Fix /etc/init.d/docker issue on Debian
2138
2139## 1.1.1 (2014-07-09)
2140
2141#### Builder
2142* Fix issue with ADD
2143
2144## 1.1.0 (2014-07-03)
2145
2146#### Notable features since 1.0.1
2147+ Add `.dockerignore` support
2148+ Pause containers during `docker commit`
2149+ Add `--tail` to `docker logs`
2150
2151#### Builder
2152+ Allow a tar file as context for `docker build`
2153* Fix issue with white-spaces and multi-lines in `Dockerfiles`
2154
2155#### Runtime
2156* Overall performance improvements
2157* Allow `/` as source of `docker run -v`
2158* Fix port allocation
2159* Fix bug in `docker save`
2160* Add links information to `docker inspect`
2161
2162#### Client
2163* Improve command line parsing for `docker commit`
2164
2165#### Remote API
2166* Improve status code for the `start` and `stop` endpoints
2167
2168## 1.0.1 (2014-06-19)
2169
2170#### Notable features since 1.0.0
2171* Enhance security for the LXC driver
2172
2173#### Builder
2174* Fix `ONBUILD` instruction passed to grandchildren
2175
2176#### Runtime
2177* Fix events subscription
2178* Fix /etc/hostname file with host networking
2179* Allow `-h` and `--net=none`
2180* Fix issue with hotplug devices in `--privileged`
2181
2182#### Client
2183* Fix artifacts with events
2184* Fix a panic with empty flags
2185* Fix `docker cp` on Mac OS X
2186
2187#### Miscellaneous
2188* Fix compilation on Mac OS X
2189* Fix several races
2190
2191## 1.0.0 (2014-06-09)
2192
2193#### Notable features since 0.12.0
2194* Production support
2195
2196## 0.12.0 (2014-06-05)
2197
2198#### Notable features since 0.11.0
2199* 40+ various improvements to stability, performance and usability
2200* New `COPY` Dockerfile instruction to allow copying a local file from the context into the container without ever extracting if the file is a tar file
2201* Inherit file permissions from the host on `ADD`
2202* New `pause` and `unpause` commands to allow pausing and unpausing of containers using cgroup freezer
2203* The `images` command has a `-f`/`--filter` option to filter the list of images
2204* Add `--force-rm` to clean up after a failed build
2205* Standardize JSON keys in Remote API to CamelCase
2206* Pull from a docker run now assumes `latest` tag if not specified
2207* Enhance security on Linux capabilities and device nodes
2208
2209## 0.11.1 (2014-05-07)
2210
2211#### Registry
2212- Fix push and pull to private registry
2213
2214## 0.11.0 (2014-05-07)
2215
2216#### Notable features since 0.10.0
2217
2218* SELinux support for mount and process labels
2219* Linked containers can be accessed by hostname
2220* Use the net `--net` flag to allow advanced network configuration such as host networking so that containers can use the host's network interfaces
2221* Add a ping endpoint to the Remote API to do healthchecks of your docker daemon
2222* Logs can now be returned with an optional timestamp
2223* Docker now works with registries that support SHA-512
2224* Multiple registry endpoints are supported to allow registry mirrors
2225
2226## 0.10.0 (2014-04-08)
2227
2228#### Builder
2229- Fix printing multiple messages on a single line. Fixes broken output during builds.
2230- Follow symlinks inside container's root for ADD build instructions.
2231- Fix EXPOSE caching.
2232
2233#### Documentation
2234- Add the new options of `docker ps` to the documentation.
2235- Add the options of `docker restart` to the documentation.
2236- Update daemon docs and help messages for --iptables and --ip-forward.
2237- Updated apt-cacher-ng docs example.
2238- Remove duplicate description of --mtu from docs.
2239- Add missing -t and -v for `docker images` to the docs.
2240- Add fixes to the cli docs.
2241- Update libcontainer docs.
2242- Update images in docs to remove references to AUFS and LXC.
2243- Update the nodejs_web_app in the docs to use the new epel RPM address.
2244- Fix external link on security of containers.
2245- Update remote API docs.
2246- Add image size to history docs.
2247- Be explicit about binding to all interfaces in redis example.
2248- Document DisableNetwork flag in the 1.10 remote api.
2249- Document that `--lxc-conf` is lxc only.
2250- Add chef usage documentation.
2251- Add example for an image with multiple for `docker load`.
2252- Explain what `docker run -a` does in the docs.
2253
2254#### Contrib
2255- Add variable for DOCKER_LOGFILE to sysvinit and use append instead of overwrite in opening the logfile.
2256- Fix init script cgroup mounting workarounds to be more similar to cgroupfs-mount and thus work properly.
2257- Remove inotifywait hack from the upstart host-integration example because it's not necessary any more.
2258- Add check-config script to contrib.
2259- Fix fish shell completion.
2260
2261#### Hack
2262* Clean up "go test" output from "make test" to be much more readable/scannable.
2263* Exclude more "definitely not unit tested Go source code" directories from hack/make/test.
2264+ Generate md5 and sha256 hashes when building, and upload them via hack/release.sh.
2265- Include contributed completions in Ubuntu PPA.
2266+ Add cli integration tests.
2267* Add tweaks to the hack scripts to make them simpler.
2268
2269#### Remote API
2270+ Add TLS auth support for API.
2271* Move git clone from daemon to client.
2272- Fix content-type detection in docker cp.
2273* Split API into 2 go packages.
2274
2275#### Runtime
2276* Support hairpin NAT without going through Docker server.
2277- devicemapper: succeed immediately when removing non-existent devices.
2278- devicemapper: improve handling of devicemapper devices (add per device lock, increase sleep time and unlock while sleeping).
2279- devicemapper: increase timeout in waitClose to 10 seconds.
2280- devicemapper: ensure we shut down thin pool cleanly.
2281- devicemapper: pass info, rather than hash to activateDeviceIfNeeded, deactivateDevice, setInitialized, deleteDevice.
2282- devicemapper: avoid AB-BA deadlock.
2283- devicemapper: make shutdown better/faster.
2284- improve alpha sorting in mflag.
2285- Remove manual http cookie management because the cookiejar is being used.
2286- Use BSD raw mode on Darwin. Fixes nano, tmux and others.
2287- Add FreeBSD support for the client.
2288- Merge auth package into registry.
2289- Add deprecation warning for -t on `docker pull`.
2290- Remove goroutine leak on error.
2291- Update parseLxcInfo to comply with new lxc1.0 format.
2292- Fix attach exit on darwin.
2293- Improve deprecation message.
2294- Retry to retrieve the layer metadata up to 5 times for `docker pull`.
2295- Only unshare the mount namespace for execin.
2296- Merge existing config when committing.
2297- Disable daemon startup timeout.
2298- Fix issue #4681: add loopback interface when networking is disabled.
2299- Add failing test case for issue #4681.
2300- Send SIGTERM to child, instead of SIGKILL.
2301- Show the driver and the kernel version in `docker info` even when not in debug mode.
2302- Always symlink /dev/ptmx for libcontainer. This fixes console related problems.
2303- Fix issue caused by the absence of /etc/apparmor.d.
2304- Don't leave empty cidFile behind when failing to create the container.
2305- Mount cgroups automatically if they're not mounted already.
2306- Use mock for search tests.
2307- Update to double-dash everywhere.
2308- Move .dockerenv parsing to lxc driver.
2309- Move all bind mounts in the container inside the namespace.
2310- Don't use separate bind mount for container.
2311- Always symlink /dev/ptmx for libcontainer.
2312- Don't kill by pid for other drivers.
2313- Add initial logging to libcontainer.
2314* Sort by port in `docker ps`.
2315- Move networking drivers into runtime top level package.
2316+ Add --no-prune to `docker rmi`.
2317+ Add time since exit in `docker ps`.
2318- graphdriver: add build tags.
2319- Prevent allocation of previously allocated ports & prevent improve port allocation.
2320* Add support for --since/--before in `docker ps`.
2321- Clean up container stop.
2322+ Add support for configurable dns search domains.
2323- Add support for relative WORKDIR instructions.
2324- Add --output flag for docker save.
2325- Remove duplication of DNS entries in config merging.
2326- Add cpuset.cpus to cgroups and native driver options.
2327- Remove docker-ci.
2328- Promote btrfs. btrfs is no longer considered experimental.
2329- Add --input flag to `docker load`.
2330- Return error when existing bridge doesn't match IP address.
2331- Strip comments before parsing line continuations to avoid interpreting instructions as comments.
2332- Fix TestOnlyLoopbackExistsWhenUsingDisableNetworkOption to ignore "DOWN" interfaces.
2333- Add systemd implementation of cgroups and make containers show up as systemd units.
2334- Fix commit and import when no repository is specified.
2335- Remount /var/lib/docker as --private to fix scaling issue.
2336- Use the environment's proxy when pinging the remote registry.
2337- Reduce error level from harmless errors.
2338* Allow --volumes-from to be individual files.
2339- Fix expanding buffer in StdCopy.
2340- Set error regardless of attach or stdin. This fixes #3364.
2341- Add support for --env-file to load environment variables from files.
2342- Symlink /etc/mtab and /proc/mounts.
2343- Allow pushing a single tag.
2344- Shut down containers cleanly at shutdown and wait forever for the containers to shut down. This makes container shutdown on daemon shutdown work properly via SIGTERM.
2345- Don't throw error when starting an already running container.
2346- Fix dynamic port allocation limit.
2347- remove setupDev from libcontainer.
2348- Add API version to `docker version`.
2349- Return correct exit code when receiving signal and make SIGQUIT quit without cleanup.
2350- Fix --volumes-from mount failure.
2351- Allow non-privileged containers to create device nodes.
2352- Skip login tests because of external dependency on a hosted service.
2353- Deprecate `docker images --tree` and `docker images --viz`.
2354- Deprecate `docker insert`.
2355- Include base abstraction for apparmor. This fixes some apparmor related problems on Ubuntu 14.04.
2356- Add specific error message when hitting 401 over HTTP on push.
2357- Fix absolute volume check.
2358- Remove volumes-from from the config.
2359- Move DNS options to hostconfig.
2360- Update the apparmor profile for libcontainer.
2361- Add deprecation notice for `docker commit -run`.
2362
2363## 0.9.1 (2014-03-24)
2364
2365#### Builder
2366- Fix printing multiple messages on a single line. Fixes broken output during builds.
2367
2368#### Documentation
2369- Fix external link on security of containers.
2370
2371#### Contrib
2372- Fix init script cgroup mounting workarounds to be more similar to cgroupfs-mount and thus work properly.
2373- Add variable for DOCKER_LOGFILE to sysvinit and use append instead of overwrite in opening the logfile.
2374
2375#### Hack
2376- Generate md5 and sha256 hashes when building, and upload them via hack/release.sh.
2377
2378#### Remote API
2379- Fix content-type detection in `docker cp`.
2380
2381#### Runtime
2382- Use BSD raw mode on Darwin. Fixes nano, tmux and others.
2383- Only unshare the mount namespace for execin.
2384- Retry to retrieve the layer metadata up to 5 times for `docker pull`.
2385- Merge existing config when committing.
2386- Fix panic in monitor.
2387- Disable daemon startup timeout.
2388- Fix issue #4681: add loopback interface when networking is disabled.
2389- Add failing test case for issue #4681.
2390- Send SIGTERM to child, instead of SIGKILL.
2391- Show the driver and the kernel version in `docker info` even when not in debug mode.
2392- Always symlink /dev/ptmx for libcontainer. This fixes console related problems.
2393- Fix issue caused by the absence of /etc/apparmor.d.
2394- Don't leave empty cidFile behind when failing to create the container.
2395- Improve deprecation message.
2396- Fix attach exit on darwin.
2397- devicemapper: improve handling of devicemapper devices (add per device lock, increase sleep time, unlock while sleeping).
2398- devicemapper: succeed immediately when removing non-existent devices.
2399- devicemapper: increase timeout in waitClose to 10 seconds.
2400- Remove goroutine leak on error.
2401- Update parseLxcInfo to comply with new lxc1.0 format.
2402
2403## 0.9.0 (2014-03-10)
2404
2405#### Builder
2406- Avoid extra mount/unmount during build. This fixes mount/unmount related errors during build.
2407- Add error to docker build --rm. This adds missing error handling.
2408- Forbid chained onbuild, `onbuild from` and  `onbuild maintainer` triggers.
2409- Make `--rm` the default for `docker build`.
2410
2411#### Documentation
2412- Download the docker client binary for Mac over https.
2413- Update the titles of the install instructions & descriptions.
2414* Add instructions for upgrading boot2docker.
2415* Add port forwarding example in OS X install docs.
2416- Attempt to disentangle repository and registry.
2417- Update docs to explain more about `docker ps`.
2418- Update sshd example to use a Dockerfile.
2419- Rework some examples, including the Python examples.
2420- Update docs to include instructions for a container's lifecycle.
2421- Update docs documentation to discuss the docs branch.
2422- Don't skip cert check for an example & use HTTPS.
2423- Bring back the memory and swap accounting section which was lost when the kernel page was removed.
2424- Explain DNS warnings and how to fix them on systems running and using a local nameserver.
2425
2426#### Contrib
2427- Add Tanglu support for mkimage-debootstrap.
2428- Add SteamOS support for mkimage-debootstrap.
2429
2430#### Hack
2431- Get package coverage when running integration tests.
2432- Remove the Vagrantfile. This is being replaced with boot2docker.
2433- Fix tests on systems where aufs isn't available.
2434- Update packaging instructions and remove the dependency on lxc.
2435
2436#### Remote API
2437* Move code specific to the API to the api package.
2438- Fix header content type for the API. Makes all endpoints use proper content type.
2439- Fix registry auth & remove ping calls from CmdPush and CmdPull.
2440- Add newlines to the JSON stream functions.
2441
2442#### Runtime
2443* Do not ping the registry from the CLI. All requests to registries flow through the daemon.
2444- Check for nil information return in the lxc driver. This fixes panics with older lxc versions.
2445- Devicemapper: cleanups and fix for unmount. Fixes two problems which were causing unmount to fail intermittently.
2446- Devicemapper: remove directory when removing device. Directories don't get left behind when removing the device.
2447* Devicemapper: enable skip_block_zeroing. Improves performance by not zeroing blocks.
2448- Devicemapper: fix shutdown warnings. Fixes shutdown warnings concerning pool device removal.
2449- Ensure docker cp stream is closed properly. Fixes problems with files not being copied by `docker cp`.
2450- Stop making `tcp://` default to `127.0.0.1:4243` and remove the default port for tcp.
2451- Fix `--run` in `docker commit`. This makes `docker commit --run` work again.
2452- Fix custom bridge related options. This makes custom bridges work again.
2453+ Mount-bind the PTY as container console. This allows tmux/screen to run.
2454+ Add the pure Go libcontainer library to make it possible to run containers using only features of the Linux kernel.
2455+ Add native exec driver which uses libcontainer and make it the default exec driver.
2456- Add support for handling extended attributes in archives.
2457* Set the container MTU to be the same as the host MTU.
2458+ Add simple sha256 checksums for layers to speed up `docker push`.
2459* Improve kernel version parsing.
2460* Allow flag grouping (`docker run -it`).
2461- Remove chroot exec driver.
2462- Fix divide by zero to fix panic.
2463- Rewrite `docker rmi`.
2464- Fix docker info with lxc 1.0.0.
2465- Fix fedora tty with apparmor.
2466* Don't always append env vars, replace defaults with vars from config.
2467* Fix a goroutine leak.
2468* Switch to Go 1.2.1.
2469- Fix unique constraint error checks.
2470* Handle symlinks for Docker's data directory and for TMPDIR.
2471- Add deprecation warnings for flags (-flag is deprecated in favor of --flag)
2472- Add apparmor profile for the native execution driver.
2473* Move system specific code from archive to pkg/system.
2474- Fix duplicate signal for `docker run -i -t` (issue #3336).
2475- Return correct process pid for lxc.
2476- Add a -G option to specify the group which unix sockets belong to.
2477+ Add `-f` flag to `docker rm` to force removal of running containers.
2478+ Kill ghost containers and restart all ghost containers when the docker daemon restarts.
2479+ Add `DOCKER_RAMDISK` environment variable to make Docker work when the root is on a ramdisk.
2480
2481## 0.8.1 (2014-02-18)
2482
2483#### Builder
2484
2485- Avoid extra mount/unmount during build. This removes an unneeded mount/unmount operation which was causing problems with devicemapper
2486- Fix regression with ADD of tar files. This stops Docker from decompressing tarballs added via ADD from the local file system
2487- Add error to `docker build --rm`. This adds a missing error check to ensure failures to remove containers are detected and reported
2488
2489#### Documentation
2490
2491* Update issue filing instructions
2492* Warn against the use of symlinks for Docker's storage folder
2493* Replace the Firefox example with an IceWeasel example
2494* Rewrite the PostgreSQL example using a Dockerfile and add more details to it
2495* Improve the OS X documentation
2496
2497#### Remote API
2498
2499- Fix broken images API for version less than 1.7
2500- Use the right encoding for all API endpoints which return JSON
2501- Move remote api client to api/
2502- Queue calls to the API using generic socket wait
2503
2504#### Runtime
2505
2506- Fix the use of custom settings for bridges and custom bridges
2507- Refactor the devicemapper code to avoid many mount/unmount race conditions and failures
2508- Remove two panics which could make Docker crash in some situations
2509- Don't ping registry from the CLI client
2510- Enable skip_block_zeroing for devicemapper. This stops devicemapper from always zeroing entire blocks
2511- Fix --run in `docker commit`. This makes docker commit store `--run` in the image configuration
2512- Remove directory when removing devicemapper device. This cleans up leftover mount directories
2513- Drop NET_ADMIN capability for non-privileged containers. Unprivileged containers can't change their network configuration
2514- Ensure `docker cp` stream is closed properly
2515- Avoid extra mount/unmount during container registration. This removes an unneeded mount/unmount operation which was causing problems with devicemapper
2516- Stop allowing tcp:// as a default tcp bin address which binds to 127.0.0.1:4243 and remove the default port
2517+ Mount-bind the PTY as container console. This allows tmux and screen to run in a container
2518- Clean up archive closing. This fixes and improves archive handling
2519- Fix engine tests on systems where temp directories are symlinked
2520- Add test methods for save and load
2521- Avoid temporarily unmounting the container when restarting it. This fixes a race for devicemapper during restart
2522- Support submodules when building from a GitHub repository
2523- Quote volume path to allow spaces
2524- Fix remote tar ADD behavior. This fixes a regression which was causing Docker to extract tarballs
2525
2526## 0.8.0 (2014-02-04)
2527
2528#### Notable features since 0.7.0
2529
2530* Images and containers can be removed much faster
2531* Building an image from source with docker build is now much faster
2532* The Docker daemon starts and stops much faster
2533* The memory footprint of many common operations has been reduced, by streaming files instead of buffering them in memory, fixing memory leaks, and fixing various suboptimal memory allocations
2534* Several race conditions were fixed, making Docker more stable under very high concurrency load. This makes Docker more stable and less likely to crash and reduces the memory footprint of many common operations
2535* All packaging operations are now built on the Go language’s standard tar implementation, which is bundled with Docker itself. This makes packaging more portable across host distributions, and solves several issues caused by quirks and incompatibilities between different distributions of tar
2536* Docker can now create, remove and modify larger numbers of containers and images graciously thanks to more aggressive releasing of system resources. For example the storage driver API now allows Docker to do reference counting on mounts created by the drivers
2537With the ongoing changes to the networking and execution subsystems of docker testing these areas have been a focus of the refactoring.  By moving these subsystems into separate packages we can test, analyze, and monitor coverage and quality of these packages
2538* Many components have been separated into smaller sub-packages, each with a dedicated test suite. As a result the code is better-tested, more readable and easier to change
2539
2540* The ADD instruction now supports caching, which avoids unnecessarily re-uploading the same source content again and again when it hasn’t changed
2541* The new ONBUILD instruction adds to your image a “trigger” instruction to be executed at a later time, when the image is used as the base for another build
2542* Docker now ships with an experimental storage driver which uses the BTRFS filesystem for copy-on-write
2543* Docker is officially supported on Mac OS X
2544* The Docker daemon supports systemd socket activation
2545
2546## 0.7.6 (2014-01-14)
2547
2548#### Builder
2549
2550* Do not follow symlink outside of build context
2551
2552#### Runtime
2553
2554- Remount bind mounts when ro is specified
2555* Use https for fetching docker version
2556
2557#### Other
2558
2559* Inline the test.docker.io fingerprint
2560* Add ca-certificates to packaging documentation
2561
2562## 0.7.5 (2014-01-09)
2563
2564#### Builder
2565
2566* Disable compression for build. More space usage but a much faster upload
2567- Fix ADD caching for certain paths
2568- Do not compress archive from git build
2569
2570#### Documentation
2571
2572- Fix error in GROUP add example
2573* Make sure the GPG fingerprint is inline in the documentation
2574* Give more specific advice on setting up signing of commits for DCO
2575
2576#### Runtime
2577
2578- Fix misspelled container names
2579- Do not add hostname when networking is disabled
2580* Return most recent image from the cache by date
2581- Return all errors from docker wait
2582* Add Content-Type Header "application/json" to GET /version and /info responses
2583
2584#### Other
2585
2586* Update DCO to version 1.1
2587+ Update Makefile to use "docker:GIT_BRANCH" as the generated image name
2588* Update Travis to check for new 1.1 DCO version
2589
2590## 0.7.4 (2014-01-07)
2591
2592#### Builder
2593
2594- Fix ADD caching issue with . prefixed path
2595- Fix docker build on devicemapper by reverting sparse file tar option
2596- Fix issue with file caching and prevent wrong cache hit
2597* Use same error handling while unmarshaling CMD and ENTRYPOINT
2598
2599#### Documentation
2600
2601* Simplify and streamline Amazon Quickstart
2602* Install instructions use unprefixed Fedora image
2603* Update instructions for mtu flag for Docker on GCE
2604+ Add Ubuntu Saucy to installation
2605- Fix for wrong version warning on master instead of latest
2606
2607#### Runtime
2608
2609- Only get the image's rootfs when we need to calculate the image size
2610- Correctly handle unmapping UDP ports
2611* Make CopyFileWithTar use a pipe instead of a buffer to save memory on docker build
2612- Fix login message to say pull instead of push
2613- Fix "docker load" help by removing "SOURCE" prompt and mentioning STDIN
2614* Make blank -H option default to the same as no -H was sent
2615* Extract cgroups utilities to own submodule
2616
2617#### Other
2618
2619+ Add Travis CI configuration to validate DCO and gofmt requirements
2620+ Add Developer Certificate of Origin Text
2621* Upgrade VBox Guest Additions
2622* Check standalone header when pinging a registry server
2623
2624## 0.7.3 (2014-01-02)
2625
2626#### Builder
2627
2628+ Update ADD to use the image cache, based on a hash of the added content
2629* Add error message for empty Dockerfile
2630
2631#### Documentation
2632
2633- Fix outdated link to the "Introduction" on www.docker.io
2634+ Update the docs to get wider when the screen does
2635- Add information about needing to install LXC when using raw binaries
2636* Update Fedora documentation to disentangle the docker and docker.io conflict
2637* Add a note about using the new `-mtu` flag in several GCE zones
2638+ Add FrugalWare installation instructions
2639+ Add a more complete example of `docker run`
2640- Fix API documentation for creating and starting Privileged containers
2641- Add missing "name" parameter documentation on "/containers/create"
2642* Add a mention of `lxc-checkconfig` as a way to check for some of the necessary kernel configuration
2643- Update the 1.8 API documentation with some additions that were added to the docs for 1.7
2644
2645#### Hack
2646
2647- Add missing libdevmapper dependency to the packagers documentation
2648* Update minimum Go requirement to a hard line at Go 1.2+
2649* Many minor improvements to the Vagrantfile
2650+ Add ability to customize dockerinit search locations when compiling (to be used very sparingly only by packagers of platforms who require a nonstandard location)
2651+ Add coverprofile generation reporting
2652- Add `-a` to our Go build flags, removing the need for recompiling the stdlib manually
2653* Update Dockerfile to be more canonical and have less spurious warnings during build
2654- Fix some miscellaneous `docker pull` progress bar display issues
2655* Migrate more miscellaneous packages under the "pkg" folder
2656* Update TextMate highlighting to automatically be enabled for files named "Dockerfile"
2657* Reorganize syntax highlighting files under a common "contrib/syntax" directory
2658* Update install.sh script (https://get.docker.io/) to not fail if busybox fails to download or run at the end of the Ubuntu/Debian installation
2659* Add support for container names in bash completion
2660
2661#### Packaging
2662
2663+ Add an official Docker client binary for Darwin (Mac OS X)
2664* Remove empty "Vendor" string and added "License" on deb package
2665+ Add a stubbed version of "/etc/default/docker" in the deb package
2666
2667#### Runtime
2668
2669* Update layer application to extract tars in place, avoiding file churn while handling whiteouts
2670- Fix permissiveness of mtime comparisons in tar handling (since GNU tar and Go tar do not yet support sub-second mtime precision)
2671* Reimplement `docker top` in pure Go to work more consistently, and even inside Docker-in-Docker (thus removing the shell injection vulnerability present in some versions of `lxc-ps`)
2672+ Update `-H unix://` to work similarly to `-H tcp://` by inserting the default values for missing portions
2673- Fix more edge cases regarding dockerinit and deleted or replaced docker or dockerinit files
2674* Update container name validation to include '.'
2675- Fix use of a symlink or non-absolute path as the argument to `-g` to work as expected
2676* Update to handle external mounts outside of LXC, fixing many small mounting quirks and making future execution backends and other features simpler
2677* Update to use proper box-drawing characters everywhere in `docker images -tree`
2678* Move MTU setting from LXC configuration to directly use netlink
2679* Add `-S` option to external tar invocation for more efficient spare file handling
2680+ Add arch/os info to User-Agent string, especially for registry requests
2681+ Add `-mtu` option to Docker daemon for configuring MTU
2682- Fix `docker build` to exit with a non-zero exit code on error
2683+ Add `DOCKER_HOST` environment variable to configure the client `-H` flag without specifying it manually for every invocation
2684
2685## 0.7.2 (2013-12-16)
2686
2687#### Runtime
2688
2689+ Validate container names on creation with standard regex
2690* Increase maximum image depth to 127 from 42
2691* Continue to move api endpoints to the job api
2692+ Add -bip flag to allow specification of dynamic bridge IP via CIDR
2693- Allow bridge creation when ipv6 is not enabled on certain systems
2694* Set hostname and IP address from within dockerinit
2695* Drop capabilities from within dockerinit
2696- Fix volumes on host when symlink is present the image
2697- Prevent deletion of image if ANY container is depending on it even if the container is not running
2698* Update docker push to use new progress display
2699* Use os.Lstat to allow mounting unix sockets when inspecting volumes
2700- Adjust handling of inactive user login
2701- Add missing defines in devicemapper for older kernels
2702- Allow untag operations with no container validation
2703- Add auth config to docker build
2704
2705#### Documentation
2706
2707* Add more information about Docker logging
2708+ Add RHEL documentation
2709* Add a direct example for changing the CMD that is run in a container
2710* Update Arch installation documentation
2711+ Add section on Trusted Builds
2712+ Add Network documentation page
2713
2714#### Other
2715
2716+ Add new cover bundle for providing code coverage reporting
2717* Separate integration tests in bundles
2718* Make Tianon the hack maintainer
2719* Update mkimage-debootstrap with more tweaks for keeping images small
2720* Use https to get the install script
2721* Remove vendored dotcloud/tar now that Go 1.2 has been released
2722
2723## 0.7.1 (2013-12-05)
2724
2725#### Documentation
2726
2727+ Add @SvenDowideit as documentation maintainer
2728+ Add links example
2729+ Add documentation regarding ambassador pattern
2730+ Add Google Cloud Platform docs
2731+ Add dockerfile best practices
2732* Update doc for RHEL
2733* Update doc for registry
2734* Update Postgres examples
2735* Update doc for Ubuntu install
2736* Improve remote api doc
2737
2738#### Runtime
2739
2740+ Add hostconfig to docker inspect
2741+ Implement `docker log -f` to stream logs
2742+ Add env variable to disable kernel version warning
2743+ Add -format to `docker inspect`
2744+ Support bind mount for files
2745- Fix bridge creation on RHEL
2746- Fix image size calculation
2747- Make sure iptables are called even if the bridge already exists
2748- Fix issue with stderr only attach
2749- Remove init layer when destroying a container
2750- Fix same port binding on different interfaces
2751- `docker build` now returns the correct exit code
2752- Fix `docker port` to display correct port
2753- `docker build` now check that the dockerfile exists client side
2754- `docker attach` now returns the correct exit code
2755- Remove the name entry when the container does not exist
2756
2757#### Registry
2758
2759* Improve progress bars, add ETA for downloads
2760* Simultaneous pulls now waits for the first to finish instead of failing
2761- Tag only the top-layer image when pushing to registry
2762- Fix issue with offline image transfer
2763- Fix issue preventing using ':' in password for registry
2764
2765#### Other
2766
2767+ Add pprof handler for debug
2768+ Create a Makefile
2769* Use stdlib tar that now includes fix
2770* Improve make.sh test script
2771* Handle SIGQUIT on the daemon
2772* Disable verbose during tests
2773* Upgrade to go1.2 for official build
2774* Improve unit tests
2775* The test suite now runs all tests even if one fails
2776* Refactor C in Go (Devmapper)
2777- Fix OS X compilation
2778
2779## 0.7.0 (2013-11-25)
2780
2781#### Notable features since 0.6.0
2782
2783* Storage drivers: choose from aufs, device-mapper, or vfs.
2784* Standard Linux support: docker now runs on unmodified Linux kernels and all major distributions.
2785* Links: compose complex software stacks by connecting containers to each other.
2786* Container naming: organize your containers by giving them memorable names.
2787* Advanced port redirects: specify port redirects per interface, or keep sensitive ports private.
2788* Offline transfer: push and pull images to the filesystem without losing information.
2789* Quality: numerous bugfixes and small usability improvements. Significant increase in test coverage.
2790
2791## 0.6.7 (2013-11-21)
2792
2793#### Runtime
2794
2795* Improve stability, fixes some race conditions
2796* Skip the volumes mounted when deleting the volumes of container.
2797* Fix layer size computation: handle hard links correctly
2798* Use the work Path for docker cp CONTAINER:PATH
2799* Fix tmp dir never cleanup
2800* Speedup docker ps
2801* More informative error message on name collisions
2802* Fix nameserver regex
2803* Always return long id's
2804* Fix container restart race condition
2805* Keep published ports on docker stop;docker start
2806* Fix container networking on Fedora
2807* Correctly express "any address" to iptables
2808* Fix network setup when reconnecting to ghost container
2809* Prevent deletion if image is used by a running container
2810* Lock around read operations in graph
2811
2812#### RemoteAPI
2813
2814* Return full ID on docker rmi
2815
2816#### Client
2817
2818+ Add -tree option to images
2819+ Offline image transfer
2820* Exit with status 2 on usage error and display usage on stderr
2821* Do not forward SIGCHLD to container
2822* Use string timestamp for docker events -since
2823
2824#### Other
2825
2826* Update to go 1.2rc5
2827+ Add /etc/default/docker support to upstart
2828
2829## 0.6.6 (2013-11-06)
2830
2831#### Runtime
2832
2833* Ensure container name on register
2834* Fix regression in /etc/hosts
2835+ Add lock around write operations in graph
2836* Check if port is valid
2837* Fix restart runtime error with ghost container networking
2838+ Add some more colors and animals to increase the pool of generated names
2839* Fix issues in docker inspect
2840+ Escape apparmor confinement
2841+ Set environment variables using a file.
2842* Prevent docker insert to erase something
2843+ Prevent DNS server conflicts in CreateBridgeIface
2844+ Validate bind mounts on the server side
2845+ Use parent image config in docker build
2846* Fix regression in /etc/hosts
2847
2848#### Client
2849
2850+ Add -P flag to publish all exposed ports
2851+ Add -notrunc and -q flags to docker history
2852* Fix docker commit, tag and import usage
2853+ Add stars, trusted builds and library flags in docker search
2854* Fix docker logs with tty
2855
2856#### RemoteAPI
2857
2858* Make /events API send headers immediately
2859* Do not split last column docker top
2860+ Add size to history
2861
2862#### Other
2863
2864+ Contrib: Desktop integration. Firefox usecase.
2865+ Dockerfile: bump to go1.2rc3
2866
2867## 0.6.5 (2013-10-29)
2868
2869#### Runtime
2870
2871+ Containers can now be named
2872+ Containers can now be linked together for service discovery
2873+ 'run -a', 'start -a' and 'attach' can forward signals to the container for better integration with process supervisors
2874+ Automatically start crashed containers after a reboot
2875+ Expose IP, port, and proto as separate environment vars for container links
2876* Allow ports to be published to specific ips
2877* Prohibit inter-container communication by default
2878- Ignore ErrClosedPipe for stdin in Container.Attach
2879- Remove unused field kernelVersion
2880* Fix issue when mounting subdirectories of /mnt in container
2881- Fix untag during removal of images
2882* Check return value of syscall.Chdir when changing working directory inside dockerinit
2883
2884#### Client
2885
2886- Only pass stdin to hijack when needed to avoid closed pipe errors
2887* Use less reflection in command-line method invocation
2888- Monitor the tty size after starting the container, not prior
2889- Remove useless os.Exit() calls after log.Fatal
2890
2891#### Hack
2892
2893+ Add initial init scripts library and a safer Ubuntu packaging script that works for Debian
2894* Add -p option to invoke debootstrap with http_proxy
2895- Update install.sh with $sh_c to get sudo/su for modprobe
2896* Update all the mkimage scripts to use --numeric-owner as a tar argument
2897* Update hack/release.sh process to automatically invoke hack/make.sh and bail on build and test issues
2898
2899#### Other
2900
2901* Documentation: Fix the flags for nc in example
2902* Testing: Remove warnings and prevent mount issues
2903- Testing: Change logic for tty resize to avoid warning in tests
2904- Builder: Fix race condition in docker build with verbose output
2905- Registry: Fix content-type for PushImageJSONIndex method
2906* Contrib: Improve helper tools to generate debian and Arch linux server images
2907
2908## 0.6.4 (2013-10-16)
2909
2910#### Runtime
2911
2912- Add cleanup of container when Start() fails
2913* Add better comments to utils/stdcopy.go
2914* Add utils.Errorf for error logging
2915+ Add -rm to docker run for removing a container on exit
2916- Remove error messages which are not actually errors
2917- Fix `docker rm` with volumes
2918- Fix some error cases where an HTTP body might not be closed
2919- Fix panic with wrong dockercfg file
2920- Fix the attach behavior with -i
2921* Record termination time in state.
2922- Use empty string so TempDir uses the OS's temp dir automatically
2923- Make sure to close the network allocators
2924+ Autorestart containers by default
2925* Bump vendor kr/pty to commit 3b1f6487b `(syscall.O_NOCTTY)`
2926* lxc: Allow set_file_cap capability in container
2927- Move run -rm to the cli only
2928* Split stdout stderr
2929* Always create a new session for the container
2930
2931#### Testing
2932
2933- Add aggregated docker-ci email report
2934- Add cleanup to remove leftover containers
2935* Add nightly release to docker-ci
2936* Add more tests around auth.ResolveAuthConfig
2937- Remove a few errors in tests
2938- Catch errClosing error when TCP and UDP proxies are terminated
2939* Only run certain tests with TESTFLAGS='-run TestName' make.sh
2940* Prevent docker-ci to test closing PRs
2941* Replace panic by log.Fatal in tests
2942- Increase TestRunDetach timeout
2943
2944#### Documentation
2945
2946* Add initial draft of the Docker infrastructure doc
2947* Add devenvironment link to CONTRIBUTING.md
2948* Add `apt-get install curl` to Ubuntu docs
2949* Add explanation for export restrictions
2950* Add .dockercfg doc
2951* Remove Gentoo install notes about #1422 workaround
2952* Fix help text for -v option
2953* Fix Ping endpoint documentation
2954- Fix parameter names in docs for ADD command
2955- Fix ironic typo in changelog
2956* Various command fixes in postgres example
2957* Document how to edit and release docs
2958- Minor updates to `postgresql_service.rst`
2959* Clarify LGTM process to contributors
2960- Corrected error in the package name
2961* Document what `vagrant up` is actually doing
2962+ improve doc search results
2963* Cleanup whitespace in API 1.5 docs
2964* use angle brackets in MAINTAINER example email
2965* Update archlinux.rst
2966+ Changes to a new style for the docs. Includes version switcher.
2967* Formatting, add information about multiline json
2968* Improve registry and index REST API documentation
2969- Replace deprecated upgrading reference to docker-latest.tgz, which hasn't been updated since 0.5.3
2970* Update Gentoo installation documentation now that we're in the portage tree proper
2971* Cleanup and reorganize docs and tooling for contributors and maintainers
2972- Minor spelling correction of protocoll -> protocol
2973
2974#### Contrib
2975
2976* Add vim syntax highlighting for Dockerfiles from @honza
2977* Add mkimage-arch.sh
2978* Reorganize contributed completion scripts to add zsh completion
2979
2980#### Hack
2981
2982* Add vagrant user to the docker group
2983* Add proper bash completion for "docker push"
2984* Add xz utils as a runtime dep
2985* Add cleanup/refactor portion of #2010 for hack and Dockerfile updates
2986+ Add contrib/mkimage-centos.sh back (from #1621), and associated documentation link
2987* Add several of the small make.sh fixes from #1920, and make the output more consistent and contributor-friendly
2988+ Add @tianon to hack/MAINTAINERS
2989* Improve network performance for VirtualBox
2990* Revamp install.sh to be usable by more people, and to use official install methods whenever possible (apt repo, portage tree, etc.)
2991- Fix contrib/mkimage-debian.sh apt caching prevention
2992+ Add Dockerfile.tmLanguage to contrib
2993* Configured FPM to make /etc/init/docker.conf a config file
2994* Enable SSH Agent forwarding in Vagrant VM
2995* Several small tweaks/fixes for contrib/mkimage-debian.sh
2996
2997#### Other
2998
2999- Builder: Abort build if mergeConfig returns an error and fix duplicate error message
3000- Packaging: Remove deprecated packaging directory
3001- Registry: Use correct auth config when logging in.
3002- Registry: Fix the error message so it is the same as the regex
3003
3004## 0.6.3 (2013-09-23)
3005
3006#### Packaging
3007
3008* Add 'docker' group on install for ubuntu package
3009* Update tar vendor dependency
3010* Download apt key over HTTPS
3011
3012#### Runtime
3013
3014- Only copy and change permissions on non-bindmount volumes
3015* Allow multiple volumes-from
3016- Fix HTTP imports from STDIN
3017
3018#### Documentation
3019
3020* Update section on extracting the docker binary after build
3021* Update development environment docs for new build process
3022* Remove 'base' image from documentation
3023
3024#### Other
3025
3026- Client: Fix detach issue
3027- Registry: Update regular expression to match index
3028
3029## 0.6.2 (2013-09-17)
3030
3031#### Runtime
3032
3033+ Add domainname support
3034+ Implement image filtering with path.Match
3035* Remove unnecessary warnings
3036* Remove os/user dependency
3037* Only mount the hostname file when the config exists
3038* Handle signals within the `docker login` command
3039- UID and GID are now also applied to volumes
3040- `docker start` set error code upon error
3041- `docker run` set the same error code as the process started
3042
3043#### Builder
3044
3045+ Add -rm option in order to remove intermediate containers
3046* Allow multiline for the RUN instruction
3047
3048#### Registry
3049
3050* Implement login with private registry
3051- Fix push issues
3052
3053#### Other
3054
3055+ Hack: Vendor all dependencies
3056* Remote API: Bump to v1.5
3057* Packaging: Break down hack/make.sh into small scripts, one per 'bundle': test, binary, ubuntu etc.
3058* Documentation: General improvements
3059
3060## 0.6.1 (2013-08-23)
3061
3062#### Registry
3063
3064* Pass "meta" headers in API calls to the registry
3065
3066#### Packaging
3067
3068- Use correct upstart script with new build tool
3069- Use libffi-dev, don`t build it from sources
3070- Remove duplicate mercurial install command
3071
3072## 0.6.0 (2013-08-22)
3073
3074#### Runtime
3075
3076+ Add lxc-conf flag to allow custom lxc options
3077+ Add an option to set the working directory
3078* Add Image name to LogEvent tests
3079+ Add -privileged flag and relevant tests, docs, and examples
3080* Add websocket support to /container/<name>/attach/ws
3081* Add warning when net.ipv4.ip_forwarding = 0
3082* Add hostname to environment
3083* Add last stable version in `docker version`
3084- Fix race conditions in parallel pull
3085- Fix Graph ByParent() to generate list of child images per parent image.
3086- Fix typo: fmt.Sprint -> fmt.Sprintf
3087- Fix small \n error un docker build
3088* Fix to "Inject dockerinit at /.dockerinit"
3089* Fix #910. print user name to docker info output
3090* Use Go 1.1.2 for dockerbuilder
3091* Use ranged for loop on channels
3092- Use utils.ParseRepositoryTag instead of strings.Split(name, ":") in server.ImageDelete
3093- Improve CMD, ENTRYPOINT, and attach docs.
3094- Improve connect message with socket error
3095- Load authConfig only when needed and fix useless WARNING
3096- Show tag used when image is missing
3097* Apply volumes-from before creating volumes
3098- Make docker run handle SIGINT/SIGTERM
3099- Prevent crash when .dockercfg not readable
3100- Install script should be fetched over https, not http.
3101* API, issue 1471: Use groups for socket permissions
3102- Correctly detect IPv4 forwarding
3103* Mount /dev/shm as a tmpfs
3104- Switch from http to https for get.docker.io
3105* Let userland proxy handle container-bound traffic
3106* Update the Docker CLI to specify a value for the "Host" header.
3107- Change network range to avoid conflict with EC2 DNS
3108- Reduce connect and read timeout when pinging the registry
3109* Parallel pull
3110- Handle ip route showing mask-less IP addresses
3111* Allow ENTRYPOINT without CMD
3112- Always consider localhost as a domain name when parsing the FQN repos name
3113* Refactor checksum
3114
3115#### Documentation
3116
3117* Add MongoDB image example
3118* Add instructions for creating and using the docker group
3119* Add sudo to examples and installation to documentation
3120* Add ufw doc
3121* Add a reference to ps -a
3122* Add information about Docker`s high level tools over LXC.
3123* Fix typo in docs for docker run -dns
3124* Fix a typo in the ubuntu installation guide
3125* Fix to docs regarding adding docker groups
3126* Update default -H docs
3127* Update readme with dependencies for building
3128* Update amazon.rst to explain that Vagrant is not necessary for running Docker on ec2
3129* PostgreSQL service example in documentation
3130* Suggest installing linux-headers by default.
3131* Change the twitter handle
3132* Clarify Amazon EC2 installation
3133* 'Base' image is deprecated and should no longer be referenced in the docs.
3134* Move note about officially supported kernel
3135- Solved the logo being squished in Safari
3136
3137#### Builder
3138
3139+ Add USER instruction do Dockerfile
3140+ Add workdir support for the Buildfile
3141* Add no cache for docker build
3142- Fix docker build and docker events output
3143- Only count known instructions as build steps
3144- Make sure ENV instruction within build perform a commit each time
3145- Forbid certain paths within docker build ADD
3146- Repository name (and optionally a tag) in build usage
3147- Make sure ADD will create everything in 0755
3148
3149#### Remote API
3150
3151* Sort Images by most recent creation date.
3152* Reworking opaque requests in registry module
3153* Add image name in /events
3154* Use mime pkg to parse Content-Type
3155* 650 http utils and user agent field
3156
3157#### Hack
3158
3159+ Bash Completion: Limit commands to containers of a relevant state
3160* Add docker dependencies coverage testing into docker-ci
3161
3162#### Packaging
3163
3164+ Docker-brew 0.5.2 support and memory footprint reduction
3165* Add new docker dependencies into docker-ci
3166- Revert "docker.upstart: avoid spawning a `sh` process"
3167+ Docker-brew and Docker standard library
3168+ Release docker with docker
3169* Fix the upstart script generated by get.docker.io
3170* Enabled the docs to generate manpages.
3171* Revert Bind daemon to 0.0.0.0 in Vagrant.
3172
3173#### Register
3174
3175* Improve auth push
3176* Registry unit tests + mock registry
3177
3178#### Tests
3179
3180* Improve TestKillDifferentUser to prevent timeout on buildbot
3181- Fix typo in TestBindMounts (runContainer called without image)
3182* Improve TestGetContainersTop so it does not rely on sleep
3183* Relax the lo interface test to allow iface index != 1
3184* Add registry functional test to docker-ci
3185* Add some tests in server and utils
3186
3187#### Other
3188
3189* Contrib: bash completion script
3190* Client: Add docker cp command and copy api endpoint to copy container files/folders to the host
3191* Don`t read from stdout when only attached to stdin
3192
3193## 0.5.3 (2013-08-13)
3194
3195#### Runtime
3196
3197* Use docker group for socket permissions
3198- Spawn shell within upstart script
3199- Handle ip route showing mask-less IP addresses
3200- Add hostname to environment
3201
3202#### Builder
3203
3204- Make sure ENV instruction within build perform a commit each time
3205
3206## 0.5.2 (2013-08-08)
3207
3208* Builder: Forbid certain paths within docker build ADD
3209- Runtime: Change network range to avoid conflict with EC2 DNS
3210* API: Change daemon to listen on unix socket by default
3211
3212## 0.5.1 (2013-07-30)
3213
3214#### Runtime
3215
3216+ Add `ps` args to `docker top`
3217+ Add support for container ID files (pidfile like)
3218+ Add container=lxc in default env
3219+ Support networkless containers with `docker run -n` and `docker -d -b=none`
3220* Stdout/stderr logs are now stored in the same file as JSON
3221* Allocate a /16 IP range by default, with fallback to /24. Try 12 ranges instead of 3.
3222* Change .dockercfg format to json and support multiple auth remote
3223- Do not override volumes from config
3224- Fix issue with EXPOSE override
3225
3226#### API
3227
3228+ Docker client now sets useragent (RFC 2616)
3229+ Add /events endpoint
3230
3231#### Builder
3232
3233+ ADD command now understands URLs
3234+ CmdAdd and CmdEnv now respect Dockerfile-set ENV variables
3235- Create directories with 755 instead of 700 within ADD instruction
3236
3237#### Hack
3238
3239* Simplify unit tests with helpers
3240* Improve docker.upstart event
3241* Add coverage testing into docker-ci
3242
3243## 0.5.0 (2013-07-17)
3244
3245#### Runtime
3246
3247+ List all processes running inside a container with 'docker top'
3248+ Host directories can be mounted as volumes with 'docker run -v'
3249+ Containers can expose public UDP ports (eg, '-p 123/udp')
3250+ Optionally specify an exact public port (eg. '-p 80:4500')
3251* 'docker login' supports additional options
3252- Don't save a container`s hostname when committing an image.
3253
3254#### Registry
3255
3256+ New image naming scheme inspired by Go packaging convention allows arbitrary combinations of registries
3257- Fix issues when uploading images to a private registry
3258
3259#### Builder
3260
3261+ ENTRYPOINT instruction sets a default binary entry point to a container
3262+ VOLUME instruction marks a part of the container as persistent data
3263* 'docker build' displays the full output of a build by default
3264
3265## 0.4.8 (2013-07-01)
3266
3267+ Builder: New build operation ENTRYPOINT adds an executable entry point to the container.  - Runtime: Fix a bug which caused 'docker run -d' to no longer print the container ID.
3268- Tests: Fix issues in the test suite
3269
3270## 0.4.7 (2013-06-28)
3271
3272#### Remote API
3273
3274* The progress bar updates faster when downloading and uploading large files
3275- Fix a bug in the optional unix socket transport
3276
3277#### Runtime
3278
3279* Improve detection of kernel version
3280+ Host directories can be mounted as volumes with 'docker run -b'
3281- fix an issue when only attaching to stdin
3282* Use 'tar --numeric-owner' to avoid uid mismatch across multiple hosts
3283
3284#### Hack
3285
3286* Improve test suite and dev environment
3287* Remove dependency on unit tests on 'os/user'
3288
3289#### Other
3290
3291* Registry: easier push/pull to a custom registry
3292+ Documentation: add terminology section
3293
3294## 0.4.6 (2013-06-22)
3295
3296- Runtime: fix a bug which caused creation of empty images (and volumes) to crash.
3297
3298## 0.4.5 (2013-06-21)
3299
3300+ Builder: 'docker build git://URL' fetches and builds a remote git repository
3301* Runtime: 'docker ps -s' optionally prints container size
3302* Tests: improved and simplified
3303- Runtime: fix a regression introduced in 0.4.3 which caused the logs command to fail.
3304- Builder: fix a regression when using ADD with single regular file.
3305
3306## 0.4.4 (2013-06-19)
3307
3308- Builder: fix a regression introduced in 0.4.3 which caused builds to fail on new clients.
3309
3310## 0.4.3 (2013-06-19)
3311
3312#### Builder
3313
3314+ ADD of a local file will detect tar archives and unpack them
3315* ADD improvements: use tar for copy + automatically unpack local archives
3316* ADD uses tar/untar for copies instead of calling 'cp -ar'
3317* Fix the behavior of ADD to be (mostly) reverse-compatible, predictable and well-documented.
3318- Fix a bug which caused builds to fail if ADD was the first command
3319* Nicer output for 'docker build'
3320
3321#### Runtime
3322
3323* Remove bsdtar dependency
3324* Add unix socket and multiple -H support
3325* Prevent rm of running containers
3326* Use go1.1 cookiejar
3327- Fix issue detaching from running TTY container
3328- Forbid parallel push/pull for a single image/repo. Fixes #311
3329- Fix race condition within Run command when attaching.
3330
3331#### Client
3332
3333* HumanReadable ProgressBar sizes in pull
3334* Fix docker version`s git commit output
3335
3336#### API
3337
3338* Send all tags on History API call
3339* Add tag lookup to history command. Fixes #882
3340
3341#### Documentation
3342
3343- Fix missing command in irc bouncer example
3344
3345## 0.4.2 (2013-06-17)
3346
3347- Packaging: Bumped version to work around an Ubuntu bug
3348
3349## 0.4.1 (2013-06-17)
3350
3351#### Remote Api
3352
3353+ Add flag to enable cross domain requests
3354+ Add images and containers sizes in docker ps and docker images
3355
3356#### Runtime
3357
3358+ Configure dns configuration host-wide with 'docker -d -dns'
3359+ Detect faulty DNS configuration and replace it with a public default
3360+ Allow docker run <name>:<id>
3361+ You can now specify public port (ex: -p 80:4500)
3362* Improve image removal to garbage-collect unreferenced parents
3363
3364#### Client
3365
3366* Allow multiple params in inspect
3367* Print the container id before the hijack in `docker run`
3368
3369#### Registry
3370
3371* Add regexp check on repo`s name
3372* Move auth to the client
3373- Remove login check on pull
3374
3375#### Other
3376
3377* Vagrantfile: Add the rest api port to vagrantfile`s port_forward
3378* Upgrade to Go 1.1
3379- Builder: don`t ignore last line in Dockerfile when it doesn`t end with \n
3380
3381## 0.4.0 (2013-06-03)
3382
3383#### Builder
3384
3385+ Introducing Builder
3386+ 'docker build' builds a container, layer by layer, from a source repository containing a Dockerfile
3387
3388#### Remote API
3389
3390+ Introducing Remote API
3391+ control Docker programmatically using a simple HTTP/json API
3392
3393#### Runtime
3394
3395* Various reliability and usability improvements
3396
3397## 0.3.4 (2013-05-30)
3398
3399#### Builder
3400
3401+ 'docker build' builds a container, layer by layer, from a source repository containing a Dockerfile
3402+ 'docker build -t FOO' applies the tag FOO to the newly built container.
3403
3404#### Runtime
3405
3406+ Interactive TTYs correctly handle window resize
3407* Fix how configuration is merged between layers
3408
3409#### Remote API
3410
3411+ Split stdout and stderr on 'docker run'
3412+ Optionally listen on a different IP and port (use at your own risk)
3413
3414#### Documentation
3415
3416* Improve install instructions.
3417
3418## 0.3.3 (2013-05-23)
3419
3420- Registry: Fix push regression
3421- Various bugfixes
3422
3423## 0.3.2 (2013-05-09)
3424
3425#### Registry
3426
3427* Improve the checksum process
3428* Use the size to have a good progress bar while pushing
3429* Use the actual archive if it exists in order to speed up the push
3430- Fix error 400 on push
3431
3432#### Runtime
3433
3434* Store the actual archive on commit
3435
3436## 0.3.1 (2013-05-08)
3437
3438#### Builder
3439
3440+ Implement the autorun capability within docker builder
3441+ Add caching to docker builder
3442+ Add support for docker builder with native API as top level command
3443+ Implement ENV within docker builder
3444- Check the command existence prior create and add Unit tests for the case
3445* use any whitespaces instead of tabs
3446
3447#### Runtime
3448
3449+ Add go version to debug infos
3450* Kernel version - don`t show the dash if flavor is empty
3451
3452#### Registry
3453
3454+ Add docker search top level command in order to search a repository
3455- Fix pull for official images with specific tag
3456- Fix issue when login in with a different user and trying to push
3457* Improve checksum - async calculation
3458
3459#### Images
3460
3461+ Output graph of images to dot (graphviz)
3462- Fix ByParent function
3463
3464#### Documentation
3465
3466+ New introduction and high-level overview
3467+ Add the documentation for docker builder
3468- CSS fix for docker documentation to make REST API docs look better.
3469- Fix CouchDB example page header mistake
3470- Fix README formatting
3471* Update www.docker.io website.
3472
3473#### Other
3474
3475+ Website: new high-level overview
3476- Makefile: Swap "go get" for "go get -d", especially to compile on go1.1rc
3477* Packaging: packaging ubuntu; issue #510: Use goland-stable PPA package to build docker
3478
3479## 0.3.0 (2013-05-06)
3480
3481#### Runtime
3482
3483- Fix the command existence check
3484- strings.Split may return an empty string on no match
3485- Fix an index out of range crash if cgroup memory is not
3486
3487#### Documentation
3488
3489* Various improvements
3490+ New example: sharing data between 2 couchdb databases
3491
3492#### Other
3493
3494* Vagrant: Use only one deb line in /etc/apt
3495+ Registry: Implement the new registry
3496
3497## 0.2.2 (2013-05-03)
3498
3499+ Support for data volumes ('docker run -v=PATH')
3500+ Share data volumes between containers ('docker run -volumes-from')
3501+ Improve documentation
3502* Upgrade to Go 1.0.3
3503* Various upgrades to the dev environment for contributors
3504
3505## 0.2.1 (2013-05-01)
3506
3507+ 'docker commit -run' bundles a layer with default runtime options: command, ports etc.
3508* Improve install process on Vagrant
3509+ New Dockerfile operation: "maintainer"
3510+ New Dockerfile operation: "expose"
3511+ New Dockerfile operation: "cmd"
3512+ Contrib script to build a Debian base layer
3513+ 'docker -d -r': restart crashed containers at daemon startup
3514* Runtime: improve test coverage
3515
3516## 0.2.0 (2013-04-23)
3517
3518- Runtime: ghost containers can be killed and waited for
3519* Documentation: update install instructions
3520- Packaging: fix Vagrantfile
3521- Development: automate releasing binaries and ubuntu packages
3522+ Add a changelog
3523- Various bugfixes
3524
3525## 0.1.8 (2013-04-22)
3526
3527- Dynamically detect cgroup capabilities
3528- Issue stability warning on kernels <3.8
3529- 'docker push' buffers on disk instead of memory
3530- Fix 'docker diff' for removed files
3531- Fix 'docker stop' for ghost containers
3532- Fix handling of pidfile
3533- Various bugfixes and stability improvements
3534
3535## 0.1.7 (2013-04-18)
3536
3537- Container ports are available on localhost
3538- 'docker ps' shows allocated TCP ports
3539- Contributors can run 'make hack' to start a continuous integration VM
3540- Streamline ubuntu packaging & uploading
3541- Various bugfixes and stability improvements
3542
3543## 0.1.6 (2013-04-17)
3544
3545- Record the author an image with 'docker commit -author'
3546
3547## 0.1.5 (2013-04-17)
3548
3549- Disable standalone mode
3550- Use a custom DNS resolver with 'docker -d -dns'
3551- Detect ghost containers
3552- Improve diagnosis of missing system capabilities
3553- Allow disabling memory limits at compile time
3554- Add debian packaging
3555- Documentation: installing on Arch Linux
3556- Documentation: running Redis on docker
3557- Fix lxc 0.9 compatibility
3558- Automatically load aufs module
3559- Various bugfixes and stability improvements
3560
3561## 0.1.4 (2013-04-09)
3562
3563- Full support for TTY emulation
3564- Detach from a TTY session with the escape sequence `C-p C-q`
3565- Various bugfixes and stability improvements
3566- Minor UI improvements
3567- Automatically create our own bridge interface 'docker0'
3568
3569## 0.1.3 (2013-04-04)
3570
3571- Choose TCP frontend port with '-p :PORT'
3572- Layer format is versioned
3573- Major reliability improvements to the process manager
3574- Various bugfixes and stability improvements
3575
3576## 0.1.2 (2013-04-03)
3577
3578- Set container hostname with 'docker run -h'
3579- Selective attach at run with 'docker run -a [stdin[,stdout[,stderr]]]'
3580- Various bugfixes and stability improvements
3581- UI polish
3582- Progress bar on push/pull
3583- Use XZ compression by default
3584- Make IP allocator lazy
3585
3586## 0.1.1 (2013-03-31)
3587
3588- Display shorthand IDs for convenience
3589- Stabilize process management
3590- Layers can include a commit message
3591- Simplified 'docker attach'
3592- Fix support for re-attaching
3593- Various bugfixes and stability improvements
3594- Auto-download at run
3595- Auto-login on push
3596- Beefed up documentation
3597
3598## 0.1.0 (2013-03-23)
3599
3600Initial public release
3601
3602- Implement registry in order to push/pull images
3603- TCP port allocation
3604- Fix termcaps on Linux
3605- Add documentation
3606- Add Vagrant support with Vagrantfile
3607- Add unit tests
3608- Add repository/tags to ease image management
3609- Improve the layer implementation
3610