Releases: moby/moby
v27.5.0-rc.1
27.5.0-rc.1
This is a pre-release of the upcoming 27.5.0 release.
Pre-releases are intended for testing new releases: only install in a test environment!
curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh
Known issues:
- There is no changelog yet; an overview of pull requests included in this release can be found on GitHub:
- docker cli: all pull requests for 27.5.0 / all "changelog" pull requests for 27.5.0
- docker engine: all pull requests for 27.5.0 / all "changelog" pull requests for 27.5.0
- There are no packages available yet for the s390x and ppc64le architectures
Bugs and regressions can be reported in these issue trackers:
- Related to the CLI: https://github.com/docker/cli/issues
- Related to the Docker Engine https://github.com/moby/moby/issues
When reporting issues, include [27.5.0-rc]
in the issue title
What's Changed
- [27.x backport] vendor: github.com/go-logr/logr v1.4.2, github.com/cenkalti/backoff/v4 v4.3.0 #48943
- [27.x backport] vendor: github.com/prometheus/client_golang v1.20.5 #48939
- [27.x backport] vendor: vendor: github.com/vishvananda/netlink v1.3.x (084abd93d) and fix compatibility #48938
- [27.x backport] vendor: go.opentelemetry.io/otel v1.28.0, go.opentelemetry.io/contrib v0.53.0 #49134
- [27.x backport] pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec #49135
- [27.x backport] builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy #49137
- [27.x backport] vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8 #49136
- [27.x backport] swagger / API-docs updates #49145
- [27.x backport] vendor: update buildkit to v0.18.2 #48949
Full Changelog: v27.4.1...v27.5.0-rc.1
v27.4.1
27.4.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
- Fix excessive memory allocations when OTel is not configured. moby/moby#49079
- The
docker info
command and the correspondingGET /info
API endpoint no longer include warnings whenbridge-nf-call-iptables
orbridge-nf-call-ip6tables
are disabled at the daemon is started. Thebr_netfilter
kernel module is now attempted to be loaded when needed, which made those warnings inaccurate. moby/moby#49090 - Attempt to load kernel modules, including
ip6_tables
andbr_netfilter
when required, using a method that is likely to succeed inside a Docker-in-Docker container. moby/moby#49043 - Fix a bug that could result in an iptables
DOCKER FILTER
chain not being cleaned up on failure. moby/moby#49110
Deprecations
- pkg/system: Deprecate
Lstat()
,Mkdev()
,Mknod()
,FromStatT()
andStat()
functions, and relatedStatT
types. These were only used internally, and will be removed in the next release. moby/moby#49100 - libnetwork/iptables: Deprecate
IPV
,Iptables
andIP6Tables
types in favor ofIPVersion
,IPv4
, andIPv6
. This type and consts will be removed in the next release. moby/moby#49093 - libnetwork/iptables: Deprecate
Passthrough
. This function was only used internally, and will be removed in the next release. moby/moby#49119
Packaging updates
- Update Compose to v2.32.1. docker/docker-ce-packaging#1130
- Update Buildx to v0.19.3. docker/docker-ce-packaging#1132
- Update
runc
to v1.2.3 (static packages only). moby/moby#49085
v27.4.0
27.4.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
API
GET /images/json
with themanifests
option enabled now preserves the original order in which manifests appeared in the manifest-index. moby/moby#48712
Bug fixes and enhancements
- When reading logs with the
jsonfile
orlocal
log drivers, any errors while trying to read or parse underlying log files will cause the rest of the file to be skipped and move to the next log file (if one exists) rather than returning an error to the client and closing the stream. The errors are viewable in the Docker Daemon logs and exported to traces when tracing is configured. moby/moby#48842 - When reading log files, compressed log files are now only decompressed when needed rather than decompressing all files before starting the log stream. moby/moby#48842
- Fix an issue that meant published ports from one container on a bridge network were not accessible from another container on the same network with
userland-proxy
disabled, if the kernel'sbr_netfilter
module was not loaded and enabled. The daemon will now attempt to load the module and enablebridge-nf-call-iptables
orbridge-nf-call-ip6tables
when creating a network with the userland proxy disabled. moby/moby#48685 - Fix loading of
bridge
andbr_netfilter
kernel modules. moby/moby#48966 - containerd image store: Fix Docker daemon failing to fully start with a "context deadline exceeded error" with containerd snapshotter and many builds/images. moby/moby#48954
- containerd image-store: Fix partially pulled images not being garbage-collected. moby#48910, moby/moby#48957
- containerd image store: Fix
docker image inspect
outputting duplicate references inRepoDigests
. moby/moby#48785 - containerd image store: Fix not being able to connect to some insecure registries in cases where the HTTPS request failed due to a non-TLS related error. moby/moby#48758
- containerd image store: Remove a confusing warning log when tagging a non-dangling image. moby/moby#49010
- dockerd-rootless-setuptool.sh: let --force ignore smoke test errors moby/moby#48695
- Disable IPv6 Duplicate Address Detection (DAD) for addresses assigned to the bridges belonging to bridge networks. moby/moby#48684
- Remove BuildKit init timeout. moby/moby#48963
- Ignore "dataset does not exist" error when removing dataset on ZFS. moby/moby#48968
- Client: Prevent idle connections leaking FDs. moby/moby#48764
- Fix anonymous volumes being created through the
--mount
option not being marked as anonymous. moby/moby#48755 - After a daemon restart with live-restore, ensure an iptables jump to the
DOCKER-USER
chain is placed before other rules. moby/moby#48714 - Fix a possible memory leak caused by OTel meters. moby/moby#48693
- Create distinct build history db for each store. moby/moby#48688
- Fix an issue that caused excessive memory usage when DNS resolution was made in a tight loop. moby/moby#48840
- containerd image store: Do not underline names in
docker image ls --tree
. docker/cli#5519 - containerd image store: Change name of
USED
column indocker image ls --tree
toIN USE
. docker/cli#5518 - Fix a bug preventing image pulls from being cancelled during
docker run
. docker/cli#5654 - Port some completions from the bash completion to the new cobra based completion. docker/cli#5618
- The
docker login
anddocker logout
command no longer update the configuration file if the credentials didn't change. docker/cli#5569 - Optimise
docker stats
to reduce flickering issues. docker/cli#5588, docker/cli#5635 - Fix inaccessible plugins paths preventing plugins from being detected. docker/cli#5652
- Add support for
events --filter
in cobra generated shell completions. docker/cli#5614 - Fix bash completion for
events --filter daemon=
. docker/cli#5563 - Improve shell-completion of containers for
docker rm
. docker/cli#5540 - Add shell-completion for
--platform
flags. docker/cli#5540 - rootless: Make
/etc/cdi
and/var/run/cdi
accessible by the Container Device Interface (CDI) integration. moby/moby#49027
Removed
- Deprecate
Daemon.Exists()
andDaemon.IsPaused()
. These functions are no longer used and will be removed in the next release. moby/moby#48719 - Deprecate
container.ErrNameReserved
andcontainer.ErrNameNotReserved
. moby/moby#48697 - Deprecate
pkg/platform
- this package is only used internally, and will be removed in the next release. moby/moby#48863 - Deprecate
RepositoryInfo.Class
. This field is no longer used, and will be removed in the next release. moby/moby#49013 - Go SDK: Fix deprecation of
cli/command.ConfigureAuth()
, which was deprecated since v27.2.1. docker/cli#5552 - Go SDK: Deprecate
cli.Errors
type in favour of Go'serrors.Join
docker/cli#5548
Packaging updates
- Update Go runtime to 1.22.10. moby/moby#49026, docker/cli#5669, docker/docker-ce-packaging#1120.
- Update Compose to v2.31.0. docker/docker-ce-packaging#1100
- Update BuildKit to v0.17.3. moby/moby#49024
- Update Buildx to v0.19.1. docker/docker-ce-packaging#1115
- Update containerd to v1.7.24. moby/moby#48934
- Update
containerd
(static binaries only) to v1.7.24. moby/moby#48919 - Update
runc
to v1.2.2. moby/moby#48919
v25.0.7
25.0.7
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestone:
- moby/moby, 25.0.7 milestone
- Deprecated and removed features, see Deprecated Features.
- Changes to the Engine API, see API version history.
Bug fixes and enhancements
- [25.0 backport] api: adjust health start interval on swarm update by @austinvazquez in #48253
- [25.0 backport] Move dockerd man page back from docker/cli by @corhere in #48379
- [25.0 backport] seccomp: add riscv64 mapping to seccomp_linux.go by @gdams in #48465
- [25.0 backport] Explicitly disable nvidia device injection for --gpus=0 by @austinvazquez in #48493
- [25.0 backport] man: dockerd: add description for --log-format option by @thaJeztah in #48507
- [25.0 backport] cmd/dockerd: Add workaround for OTEL meter leak by @austinvazquez in #48711
- [25.0 backport] Fix: setup user chains during libnetwork controller initialization by @pendo324 in #48717
Packaging updates
- [25.0 backport] bump containerd v1.7.22 by @dperny in #48548
- [25.0 backport] update to go1.22.8 by @austinvazquez in #48582
Full Changelog: v25.0.6...v25.0.7
v23.0.16
23.0.16
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestone:
v27.4.0-rc.4
27.4.0-rc.4
This is a pre-release of the upcoming 27.4.0 release.
Pre-releases are intended for testing new releases: only install in a test environment!
curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh
Known issues:
- There is no changelog yet; an overview of pull requests included in this release can be found on GitHub:
- docker cli: all pull requests for 27.4.0 / all "changelog" pull requests for 27.4.0
- docker engine: all pull requests for 27.4.0 / all "changelog" pull requests for 27.4.0
- There are no packages available yet for the s390x and ppc64le architectures
Bugs and regressions can be reported in these issue trackers:
- Related to the CLI: https://github.com/docker/cli/issues
- Related to the Docker Engine https://github.com/moby/moby/issues
When reporting issues, include [27.4.0-rc]
in the issue title
What's Changed
- [27.x backport] Jenkinsfile: modprobe br_netfilter #48995
- [27.x backport] c8d/tag: Don't log a warning if the source image is not dangling #49010
- [27.x backport] registry: deprecate RepositoryInfo.Class #49013
- [27.x] vendor: github.com/moby/buildkit v0.17.3 #49024
- [27.x] update to go1.22.10 #49026
- [27.x backport] Dockerd rootless: make {/etc,/var/run}/cdi available #49027
Full Changelog: v27.4.0-rc.3...v27.4.0-rc.4
v27.4.0-rc.3
27.4.0-rc.3
This is a pre-release of the upcoming 27.4.0 release.
Pre-releases are intended for testing new releases: only install in a test environment!
curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh
Known issues:
- There is no changelog yet; an overview of pull requests included in this release can be found on GitHub:
- docker cli: all pull requests for 27.4.0 / all "changelog" pull requests for 27.4.0
- docker engine: all pull requests for 27.4.0 / all "changelog" pull requests for 27.4.0
- There are no packages available yet for the s390x and ppc64le architectures
Bugs and regressions can be reported in these issue trackers:
- Related to the CLI: https://github.com/docker/cli/issues
- Related to the Docker Engine https://github.com/moby/moby/issues
When reporting issues, include [27.4.0-rc]
in the issue title
What's Changed
- [27.x backport] vendor: github.com/golang-jwt/jwt/v4@v4.5.1 #48913
- [27.x backport] Dockerfile: update containerd v1.7.24, runc v1.2.2 #48919
- [27.x backport] vendor: github.com/containerd/continuity v0.4.5 #48926
- [27.x backport] vendor: resenje.org/singleflight v0.4.3 #48931
- [27.x backport] vendor: github.com/tonistiigi/go-actions-cache 394979b8119e #48933
- [27.x backport] vendor: github.com/containerd/typeurl v2.2.3 #48935
- [27.x backport] Update containerd to v1.7.24 #48934
- [27.x] vendor: github.com/moby/buildkit v0.17.2 #48942
- [27.x] vendor: github.com/moby/buildkit 80e01a9dc7c1 (v0.17.3-dev) #48954
- [27.x backport] Fix lease management during pull and export #48957
- [27.x backport] Remove buildkit init timeout #48963
- [27.x backport] integration: add wait #48969
- [27.x backport] Fix br_netfilter module loading logic #48966
- [27.x backport] daemon/graphdriver/zfs: ignore non-existent dataset on removal #48968
Full Changelog: v27.4.0-rc.2...v27.4.0-rc.3
v27.4.0-rc.2
27.4.0-rc.2
This is a pre-release of the upcoming 27.4.0 release.
Pre-releases are intended for testing new releases: only install in a test environment!
curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh
Known issues:
- There is no changelog yet; an overview of pull requests included in this release can be found on GitHub:
- docker cli: all pull requests for 27.4.0 / all "changelog" pull requests for 27.4.0
- docker engine: all pull requests for 27.4.0 / all "changelog" pull requests for 27.4.0
- There are no packages available yet for the s390x and ppc64le architectures
Bugs and regressions can be reported in these issue trackers:
- Related to the CLI: https://github.com/docker/cli/issues
- Related to the Docker Engine https://github.com/moby/moby/issues
When reporting issues, include [27.4.0-rc]
in the issue title
What's Changed
- [27.x] update go:build tags to use go1.22, fix missing go:build tags #48885
- [27.x] vendor: tags.cncf.io/container-device-interface v0.8.0 #48886
- [27.x] vendor: github.com/containerd/containerd v1.7.23 #48880
- [27.x backport] vendor: google.golang.org/grpc v1.66.3 #48899
Full Changelog: v27.4.0-rc.1...v27.4.0-rc.2
v27.4.0-rc.1
27.4.0-rc.1
This is a pre-release of the upcoming 27.4.0 release.
Pre-releases are intended for testing new releases: only install in a test environment!
curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh
Known issues:
- There is no changelog yet; an overview of pull requests included in this release can be found on GitHub:
- docker cli: all pull requests for 27.4.0 / all "changelog" pull requests for 27.4.0
- docker engine: all pull requests for 27.4.0 / all "changelog" pull requests for 27.4.0
- There are no packages available yet for the s390x and ppc64le architectures
Bugs and regressions can be reported in these issue trackers:
- Related to the CLI: https://github.com/docker/cli/issues
- Related to the Docker Engine https://github.com/moby/moby/issues
When reporting issues, include [27.4.0-rc]
in the issue title
What's Changed
- [27.x backport] gha: add CodeQL Analysis workflow in #48574
- [27.x backport] Dockerfile: update docker CLI to v27.3.1, compose to v2.29.7 in #48578
- [27.x backport] update to go1.22.8 in #48580
- [27.x backport] gha: buildkit: make sure expected Go version is installed in #48624
- [27.x backport] vendor assorted dependencies in preparation of BuildKit v0.17 in #48621
- [27.x backport] integration/build: remove TestBuildWithSession, and fsutil direct dependency in #48630
- [27.x backport] gha: add guardrails timeouts on all jobs in #48633
- [27.x backport] vendor: github.com/moby/buildkit v0.17.0-rc1 in #48635
- [27.x backport] gha: restrict cross and bin-image to 20 minutes in #48646
- [27.x backport] docs: api: document w (width) and h (height) query params as required in #48666
- [27.x backport] update links to API documentation in #48656
- [27.x backport] Set NODAD on bridge IPv6 addresses in #48684
- [27.x backport] Enable bridge netfiltering if userland-proxy=false in #48685
- [27.x backport] build: create distinct history db for each store in #48688
- [27.x backport] vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e in #48687
- [27.x backport] Touch-up some errors for missing platforms in #48691
- [27.x backport] cmd/dockerd: Add workaround for OTEL meter leak in #48693
- [27.x backport] dockerd-rootless-setuptool.sh: let --force ignore smoke test errors in #48695
- [27.x backport] gha: more limits, update alpine version, and some minor improvements in #48698
- [27.x backport] container: deprecate ErrNameReserved, ErrNameNotReserved, use errdefs instead in #48697
- [27.x backport] api: GET /images/json: preserve original manifest order in #48712
- [27.x backport] Fix: setup user chains even if there are running containers in #48714
- [27.x backport] daemon: deprecate Daemon.Exists and Daemon.IsPaused in #48719
- [27.x backport] daemon: use OwnCgroupPath in withCgroups in #48742
- [27.x backport] volume/mounts: fix anonymous volume not being labeled in #48755
- [27.x] c8d/httpfallback: Handle connection errors in #48758
- [27.x backport] client: prevent idle connections leaking FDs in #48764
- [27.x backport] volume: VolumesService.Create: fix log-level for debug logs in #48768
- [27.x] c8d/inspect: Fix duplicate RepoDigests in #48785
- [27.x backport] api/swagger: Improve description for platform in images/push in #48829
- [27.x] update to go1.22.9 in #48832
- [27.x] vendor: update buildkit to v0.17.1, pin github.com/microsoft/hcsshim to v0.11.x in #48820
- [27.4] libnet: don't put external DNS answers in OTel spans in #48840
- [27.x backport] Dockerfile: update buildx to v0.18.0, compose to v2.30.3 in #48867
- [27.x backport] Increase test handler sleep, replace deprecated assert in #48864
- [27.x backport] deprecate pkg/platform and move internal in #48863
- [27.x]: Make log reading more robust to errors in #48842
Full Changelog: v27.3.1...v27.4.0-rc.1
v23.0.15
23.0.15
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestone: