v17.06.0-ce-rc5

Changelog

Items starting with DEPRECATE are important deprecation notices. For more
information on the list of deprecated flags and APIs please have a look at
https://docs.docker.com/engine/deprecated/ where target removal dates can also
be found.

17.06.0-ce (2017-06-19)

NOTE: Docker 17.06 by default disables communication with legacy (v1) registries. If you
require interaction with registries that have not yet migrated to the v2 protocol, set the
--disable-legacy-registry=false daemon option. Interaction with v1 registries will be removed
in Docker 17.12.

Builder

• Add --iidfile option to docker build. It allows specifying a location where to save the resulting image ID
• Allow specifying any remote ref in git checkout URLs #32502

Client

• Add --format option to docker stack ls #31557
• Add support for labels in compose initiated builds #32632 #32972
• Add --format option to docker history #30962
• Add --format option to docker system df #31482
• Allow specifying Nameservers and Search Domains in stack files #32059
• Add support for read_only service to docker stack deploy #docker/cli/73

• Display Swarm cluster and node TLS information #docker/cli/44

• Add support for placement preference to docker stack deploy #docker/cli/35
• Add new ca subcommand to docker swarm to allow managing a swarm CA #docker/cli/48
• Add credential-spec to compose #docker/cli/71
• Add support for csv format options to --network and --network-add #docker/cli/62 #33130

• Fix stack compose bind-mount volumes on Windows #docker/cli/136
• Correctly handle a Docker daemon without registry info #docker/cli/126

• Allow --detach and --quiet flags when using --rollback #docker/cli/144
• Remove deprecated --email flag from docker login #docker/cli/143

• Adjusted docker stats memory output #docker/cli/80

Distribution

• Select digest over tag when both are provided during a pull #33214

Logging

• Add monitored resource type metadata for GCP logging driver #32930
• Add multiline processing to the AWS CloudWatch logs driver #30891

Networking

• Add Support swarm-mode services with node-local networks such as macvlan, ipvlan, bridge, host #32981
• Pass driver-options to network drivers on service creation [#32981] (moby/moby#33130)
• Isolate Swarm Control-plane traffic from Application data traffic using --data-path-addr [#32717] (moby/moby#32717)

• Several improvments to Service Discovery #docker/libnetwork/1796

Packaging

• Rely on container-selinux on Centos/Fedora/RHEL when available #32437

Runtime

• Add build & engine info prometheus metrics #32792

• Update containerd to d24f39e203aa6be4944f06dd0fe38a618a36c764 #33007
• Update runc to 992a5be178a62e026f4069f443c6164912adbf09 #33007

• Add option to auto-configure blkdev for devmapper #31104
• Add log driver list to docker info #32540
• Add API endpoint to allow retrieving an image manifest #32061

• Do not remove container from memory on error with forceremove #31012

• Add support for metric plugins #32874

• Return an error when an invalid filter is given to prune commands #33023

• Add daemon option to allow pushing foreign layers #33151

• Fix an issue preventing containerd to be restarted after it died #32986

• Add cluster events to Docker event stream. #32421
• Add support for DNS search on windows #33311

• Upgrade to Go 1.8.3 #33387

• Prevent a containerd crash when journald is restarted #containerd/930
• Fix healthcheck failures due to invalid environment variables #33249
• Prevent a directory to be created in lieu of the daemon socket when a container mounting it is to be restarted during a shutdown #30348
• Prevent a container to be restarted upon stop if its stop signal is set to SIGKILL #33335
• Ensure log drivers get passed the same filename to both StartLogging and StopLogging endpoints #33583
• Remove daemon data structure dump on SIGUSR1 to avoid a panic #33598

Security

• Allow personality with UNAME26 bit set in default seccomp profile #32965

Swarm Mode

• Add an option to allow specifying a different interface for the data traffic (as opposed to control traffic) #32717

• Allow specifying a secret location within the container #32571

• Add support for secrets on Windows #32208
• Add TLS Info to swarm info and node info endpoint #32875
• Add support for services to carry arbitrary config objects #32336, #docker/cli/45,#33169
• Add API to rotate swarm CA certificate #32993

• Service digest pining is now handled client side #32388, #33239

• Placement now also take platform in account #33144

• Fix possible hang when joining fails #docker-ce/19
• Fix an issue preventing external CA to be accepted #33341
• Fix possible orchestration panic in mixed version clusters #swarmkit/2233
• Avoid assigning duplicate IPs during initialization #swarmkit/2237

Deprecation

• Disable legacy registry (v1) by default #33629