Skip to content

Releases: moby/moby

v27.5.0-rc.1

23 Dec 11:22
c23af29
Compare
Choose a tag to compare
v27.5.0-rc.1 Pre-release
Pre-release

27.5.0-rc.1

This is a pre-release of the upcoming 27.5.0 release.

Pre-releases are intended for testing new releases: only install in a test environment!

curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh

Known issues:

Bugs and regressions can be reported in these issue trackers:

When reporting issues, include [27.5.0-rc] in the issue title

What's Changed

  • [27.x backport] vendor: github.com/go-logr/logr v1.4.2, github.com/cenkalti/backoff/v4 v4.3.0 #48943
  • [27.x backport] vendor: github.com/prometheus/client_golang v1.20.5 #48939
  • [27.x backport] vendor: vendor: github.com/vishvananda/netlink v1.3.x (084abd93d) and fix compatibility #48938
  • [27.x backport] vendor: go.opentelemetry.io/otel v1.28.0, go.opentelemetry.io/contrib v0.53.0 #49134
  • [27.x backport] pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec #49135
  • [27.x backport] builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy #49137
  • [27.x backport] vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8 #49136
  • [27.x backport] swagger / API-docs updates #49145
  • [27.x backport] vendor: update buildkit to v0.18.2 #48949

Full Changelog: v27.4.1...v27.5.0-rc.1

v27.4.1

18 Dec 11:35
c710b88
Compare
Choose a tag to compare

27.4.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • Fix excessive memory allocations when OTel is not configured. moby/moby#49079
  • The docker info command and the corresponding GET /info API endpoint no longer include warnings when bridge-nf-call-iptables or bridge-nf-call-ip6tables are disabled at the daemon is started. The br_netfilter kernel module is now attempted to be loaded when needed, which made those warnings inaccurate. moby/moby#49090
  • Attempt to load kernel modules, including ip6_tables and br_netfilter when required, using a method that is likely to succeed inside a Docker-in-Docker container. moby/moby#49043
  • Fix a bug that could result in an iptables DOCKER FILTER chain not being cleaned up on failure. moby/moby#49110

Deprecations

  • pkg/system: Deprecate Lstat(), Mkdev(), Mknod(), FromStatT() and Stat() functions, and related StatT types. These were only used internally, and will be removed in the next release. moby/moby#49100
  • libnetwork/iptables: Deprecate IPV, Iptables and IP6Tables types in favor of IPVersion, IPv4, and IPv6. This type and consts will be removed in the next release. moby/moby#49093
  • libnetwork/iptables: Deprecate Passthrough. This function was only used internally, and will be removed in the next release. moby/moby#49119

Packaging updates

v27.4.0

09 Dec 15:54
92a8393
Compare
Choose a tag to compare

27.4.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

API

  • GET /images/json with the manifests option enabled now preserves the original order in which manifests appeared in the manifest-index. moby/moby#48712

Bug fixes and enhancements

  • When reading logs with the jsonfile or local log drivers, any errors while trying to read or parse underlying log files will cause the rest of the file to be skipped and move to the next log file (if one exists) rather than returning an error to the client and closing the stream. The errors are viewable in the Docker Daemon logs and exported to traces when tracing is configured. moby/moby#48842
  • When reading log files, compressed log files are now only decompressed when needed rather than decompressing all files before starting the log stream. moby/moby#48842
  • Fix an issue that meant published ports from one container on a bridge network were not accessible from another container on the same network with userland-proxy disabled, if the kernel's br_netfilter module was not loaded and enabled. The daemon will now attempt to load the module and enable bridge-nf-call-iptables or bridge-nf-call-ip6tables when creating a network with the userland proxy disabled. moby/moby#48685
  • Fix loading of bridge and br_netfilter kernel modules. moby/moby#48966
  • containerd image store: Fix Docker daemon failing to fully start with a "context deadline exceeded error" with containerd snapshotter and many builds/images. moby/moby#48954
  • containerd image-store: Fix partially pulled images not being garbage-collected. moby#48910, moby/moby#48957
  • containerd image store: Fix docker image inspect outputting duplicate references in RepoDigests. moby/moby#48785
  • containerd image store: Fix not being able to connect to some insecure registries in cases where the HTTPS request failed due to a non-TLS related error. moby/moby#48758
  • containerd image store: Remove a confusing warning log when tagging a non-dangling image. moby/moby#49010
  • dockerd-rootless-setuptool.sh: let --force ignore smoke test errors moby/moby#48695
  • Disable IPv6 Duplicate Address Detection (DAD) for addresses assigned to the bridges belonging to bridge networks. moby/moby#48684
  • Remove BuildKit init timeout. moby/moby#48963
  • Ignore "dataset does not exist" error when removing dataset on ZFS. moby/moby#48968
  • Client: Prevent idle connections leaking FDs. moby/moby#48764
  • Fix anonymous volumes being created through the --mount option not being marked as anonymous. moby/moby#48755
  • After a daemon restart with live-restore, ensure an iptables jump to the DOCKER-USER chain is placed before other rules. moby/moby#48714
  • Fix a possible memory leak caused by OTel meters. moby/moby#48693
  • Create distinct build history db for each store. moby/moby#48688
  • Fix an issue that caused excessive memory usage when DNS resolution was made in a tight loop. moby/moby#48840
  • containerd image store: Do not underline names in docker image ls --tree. docker/cli#5519
  • containerd image store: Change name of USED column in docker image ls --tree to IN USE. docker/cli#5518
  • Fix a bug preventing image pulls from being cancelled during docker run. docker/cli#5654
  • Port some completions from the bash completion to the new cobra based completion. docker/cli#5618
  • The docker login and docker logout command no longer update the configuration file if the credentials didn't change. docker/cli#5569
  • Optimise docker stats to reduce flickering issues. docker/cli#5588, docker/cli#5635
  • Fix inaccessible plugins paths preventing plugins from being detected. docker/cli#5652
  • Add support for events --filter in cobra generated shell completions. docker/cli#5614
  • Fix bash completion for events --filter daemon=. docker/cli#5563
  • Improve shell-completion of containers for docker rm. docker/cli#5540
  • Add shell-completion for --platform flags. docker/cli#5540
  • rootless: Make /etc/cdi and /var/run/cdi accessible by the Container Device Interface (CDI) integration. moby/moby#49027

Removed

  • Deprecate Daemon.Exists() and Daemon.IsPaused(). These functions are no longer used and will be removed in the next release. moby/moby#48719
  • Deprecate container.ErrNameReserved and container.ErrNameNotReserved. moby/moby#48697
  • Deprecate pkg/platform - this package is only used internally, and will be removed in the next release. moby/moby#48863
  • Deprecate RepositoryInfo.Class. This field is no longer used, and will be removed in the next release. moby/moby#49013
  • Go SDK: Fix deprecation of cli/command.ConfigureAuth(), which was deprecated since v27.2.1. docker/cli#5552
  • Go SDK: Deprecate cli.Errors type in favour of Go's errors.Join docker/cli#5548

Packaging updates

v25.0.7

05 Dec 19:38
7de3a1f
Compare
Choose a tag to compare

25.0.7

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestone:

Bug fixes and enhancements

  • [25.0 backport] api: adjust health start interval on swarm update by @austinvazquez in #48253
  • [25.0 backport] Move dockerd man page back from docker/cli by @corhere in #48379
  • [25.0 backport] seccomp: add riscv64 mapping to seccomp_linux.go by @gdams in #48465
  • [25.0 backport] Explicitly disable nvidia device injection for --gpus=0 by @austinvazquez in #48493
  • [25.0 backport] man: dockerd: add description for --log-format option by @thaJeztah in #48507
  • [25.0 backport] cmd/dockerd: Add workaround for OTEL meter leak by @austinvazquez in #48711
  • [25.0 backport] Fix: setup user chains during libnetwork controller initialization by @pendo324 in #48717

Packaging updates

Full Changelog: v25.0.6...v25.0.7

v23.0.16

05 Dec 19:33
d08a1ae
Compare
Choose a tag to compare

23.0.16

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestone:

v27.4.0-rc.4

05 Dec 08:38
92a8393
Compare
Choose a tag to compare
v27.4.0-rc.4 Pre-release
Pre-release

27.4.0-rc.4

This is a pre-release of the upcoming 27.4.0 release.

Pre-releases are intended for testing new releases: only install in a test environment!

curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh

Known issues:

Bugs and regressions can be reported in these issue trackers:

When reporting issues, include [27.4.0-rc] in the issue title

What's Changed

  • [27.x backport] Jenkinsfile: modprobe br_netfilter #48995
  • [27.x backport] c8d/tag: Don't log a warning if the source image is not dangling #49010
  • [27.x backport] registry: deprecate RepositoryInfo.Class #49013
  • [27.x] vendor: github.com/moby/buildkit v0.17.3 #49024
  • [27.x] update to go1.22.10 #49026
  • [27.x backport] Dockerd rootless: make {/etc,/var/run}/cdi available #49027

Full Changelog: v27.4.0-rc.3...v27.4.0-rc.4

v27.4.0-rc.3

29 Nov 22:15
7f11005
Compare
Choose a tag to compare
v27.4.0-rc.3 Pre-release
Pre-release

27.4.0-rc.3

This is a pre-release of the upcoming 27.4.0 release.

Pre-releases are intended for testing new releases: only install in a test environment!

curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh

Known issues:

Bugs and regressions can be reported in these issue trackers:

When reporting issues, include [27.4.0-rc] in the issue title

What's Changed

  • [27.x backport] vendor: github.com/golang-jwt/jwt/v4@v4.5.1 #48913
  • [27.x backport] Dockerfile: update containerd v1.7.24, runc v1.2.2 #48919
  • [27.x backport] vendor: github.com/containerd/continuity v0.4.5 #48926
  • [27.x backport] vendor: resenje.org/singleflight v0.4.3 #48931
  • [27.x backport] vendor: github.com/tonistiigi/go-actions-cache 394979b8119e #48933
  • [27.x backport] vendor: github.com/containerd/typeurl v2.2.3 #48935
  • [27.x backport] Update containerd to v1.7.24 #48934
  • [27.x] vendor: github.com/moby/buildkit v0.17.2 #48942
  • [27.x] vendor: github.com/moby/buildkit 80e01a9dc7c1 (v0.17.3-dev) #48954
  • [27.x backport] Fix lease management during pull and export #48957
  • [27.x backport] Remove buildkit init timeout #48963
  • [27.x backport] integration: add wait #48969
  • [27.x backport] Fix br_netfilter module loading logic #48966
  • [27.x backport] daemon/graphdriver/zfs: ignore non-existent dataset on removal #48968

Full Changelog: v27.4.0-rc.2...v27.4.0-rc.3

v27.4.0-rc.2

19 Nov 16:06
a080c3f
Compare
Choose a tag to compare
v27.4.0-rc.2 Pre-release
Pre-release

27.4.0-rc.2

This is a pre-release of the upcoming 27.4.0 release.

Pre-releases are intended for testing new releases: only install in a test environment!

curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh

Known issues:

Bugs and regressions can be reported in these issue trackers:

When reporting issues, include [27.4.0-rc] in the issue title

What's Changed

  • [27.x] update go:build tags to use go1.22, fix missing go:build tags #48885
  • [27.x] vendor: tags.cncf.io/container-device-interface v0.8.0 #48886
  • [27.x] vendor: github.com/containerd/containerd v1.7.23 #48880
  • [27.x backport] vendor: google.golang.org/grpc v1.66.3 #48899

Full Changelog: v27.4.0-rc.1...v27.4.0-rc.2

v27.4.0-rc.1

14 Nov 22:09
5765e9f
Compare
Choose a tag to compare
v27.4.0-rc.1 Pre-release
Pre-release

27.4.0-rc.1

This is a pre-release of the upcoming 27.4.0 release.

Pre-releases are intended for testing new releases: only install in a test environment!

curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh

Known issues:

Bugs and regressions can be reported in these issue trackers:

When reporting issues, include [27.4.0-rc] in the issue title

What's Changed

  • [27.x backport] gha: add CodeQL Analysis workflow in #48574
  • [27.x backport] Dockerfile: update docker CLI to v27.3.1, compose to v2.29.7 in #48578
  • [27.x backport] update to go1.22.8 in #48580
  • [27.x backport] gha: buildkit: make sure expected Go version is installed in #48624
  • [27.x backport] vendor assorted dependencies in preparation of BuildKit v0.17 in #48621
  • [27.x backport] integration/build: remove TestBuildWithSession, and fsutil direct dependency in #48630
  • [27.x backport] gha: add guardrails timeouts on all jobs in #48633
  • [27.x backport] vendor: github.com/moby/buildkit v0.17.0-rc1 in #48635
  • [27.x backport] gha: restrict cross and bin-image to 20 minutes in #48646
  • [27.x backport] docs: api: document w (width) and h (height) query params as required in #48666
  • [27.x backport] update links to API documentation in #48656
  • [27.x backport] Set NODAD on bridge IPv6 addresses in #48684
  • [27.x backport] Enable bridge netfiltering if userland-proxy=false in #48685
  • [27.x backport] build: create distinct history db for each store in #48688
  • [27.x backport] vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e in #48687
  • [27.x backport] Touch-up some errors for missing platforms in #48691
  • [27.x backport] cmd/dockerd: Add workaround for OTEL meter leak in #48693
  • [27.x backport] dockerd-rootless-setuptool.sh: let --force ignore smoke test errors in #48695
  • [27.x backport] gha: more limits, update alpine version, and some minor improvements in #48698
  • [27.x backport] container: deprecate ErrNameReserved, ErrNameNotReserved, use errdefs instead in #48697
  • [27.x backport] api: GET /images/json: preserve original manifest order in #48712
  • [27.x backport] Fix: setup user chains even if there are running containers in #48714
  • [27.x backport] daemon: deprecate Daemon.Exists and Daemon.IsPaused in #48719
  • [27.x backport] daemon: use OwnCgroupPath in withCgroups in #48742
  • [27.x backport] volume/mounts: fix anonymous volume not being labeled in #48755
  • [27.x] c8d/httpfallback: Handle connection errors in #48758
  • [27.x backport] client: prevent idle connections leaking FDs in #48764
  • [27.x backport] volume: VolumesService.Create: fix log-level for debug logs in #48768
  • [27.x] c8d/inspect: Fix duplicate RepoDigests in #48785
  • [27.x backport] api/swagger: Improve description for platform in images/push in #48829
  • [27.x] update to go1.22.9 in #48832
  • [27.x] vendor: update buildkit to v0.17.1, pin github.com/microsoft/hcsshim to v0.11.x in #48820
  • [27.4] libnet: don't put external DNS answers in OTel spans in #48840
  • [27.x backport] Dockerfile: update buildx to v0.18.0, compose to v2.30.3 in #48867
  • [27.x backport] Increase test handler sleep, replace deprecated assert in #48864
  • [27.x backport] deprecate pkg/platform and move internal in #48863
  • [27.x]: Make log reading more robust to errors in #48842

Full Changelog: v27.3.1...v27.4.0-rc.1

v23.0.15

07 Oct 16:23
ac20cc9
Compare
Choose a tag to compare

23.0.15

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestone: