Docker

Docker for Mac is an integrated, easy-to-deploy environment for building, assembling, and shipping applications from a Mac, Docker for Mac is a native Mac application architected from scratch, with a native user interface and auto-update capability, deeply integrated with OS X native virtualization, Hypervisor Framework, networking and file system, making it faster and more reliable than previous ways of getting Docker on a Mac.

With Docker for Mac, volume data access works correctly, including file change notifications enabling edit/test cycles for "in container" development. It includes a DNS server for containers, and is integrated with the Mac OS X networking system so that Docker can be used even when connected to a very restrictive corporate VPN.

Note: Docker 17.06.0 has an issue in the image builder causing a change in the behavior of the ADD instruction of Dockerfile when referencing a remote .tar.gz file. The issue will be fixed in Docker 17.06.1.

Note: Starting with Docker CE 17.06, Ubuntu packages are also available for IBM z Systems using the s390x architecture.

Note: Docker 17.06 by default disables communication with legacy (v1) registries. If you require interaction with registries that have not yet migrated to the v2 protocol, set the --disable-legacy-registry=false daemon option. Interaction with v1 registries will be removed in Docker 17.12.

Builder:

• Add --iidfile option to docker build. It allows specifying a location where to save the resulting image ID
• Allow specifying any remote ref in git checkout URLs #32502

Client:

• Add --format option to docker stack ls #31557
• Add support for labels in compose initiated builds #32632 #32972
• Add --format option to docker history #30962
• Add --format option to docker system df #31482
• Allow specifying Nameservers and Search Domains in stack files #32059
• Add support for read_only service to docker stack deploy #docker/cli/73
• Display Swarm cluster and node TLS information #docker/cli/44
• Add support for placement preference to docker stack deploy #docker/cli/35
• Add new ca subcommand to docker swarm to allow managing a swarm CA #docker/cli/48
• Add credential-spec to compose #docker/cli/71
• Add support for csv format options to --network and --network-add #docker/cli/62 #33130
• Fix stack compose bind-mount volumes on Windows #docker/cli/136
• Correctly handle a Docker daemon without registry info #docker/cli/126
• Allow --detach and --quiet flags when using --rollback #docker/cli/144
• Remove deprecated --email flag from docker login #docker/cli/143
• Adjusted docker stats memory output #docker/cli/80

Distribution:

• Select digest over tag when both are provided during a pull #33214

Logging:

• Add monitored resource type metadata for GCP logging driver #32930
• Add multiline processing to the AWS CloudWatch logs driver #30891

Networking:

• Add Support swarm-mode services with node-local networks such as macvlan, ipvlan, bridge, host #32981
• Pass driver-options to network drivers on service creation [#32981] (moby/moby#33130)
• Isolate Swarm Control-plane traffic from Application data traffic using --data-path-addr [#32717] (moby/moby#32717)
• Several improvments to Service Discovery #docker/libnetwork/1796

Packaging:

• Rely on container-selinux on Centos/Fedora/RHEL when available #32437

Runtime:

• Add build & engine info prometheus metrics #32792
• Update containerd to d24f39e203aa6be4944f06dd0fe38a618a36c764 #33007
• Update runc to 992a5be178a62e026f4069f443c6164912adbf09 #33007
• Add option to auto-configure blkdev for devmapper #31104
• Add log driver list to docker info #32540
• Add API endpoint to allow retrieving an image manifest #32061
• Do not remove container from memory on error with forceremove #31012
• Add support for metric plugins #32874
• Return an error when an invalid filter is given to prune commands #33023
• Add daemon option to allow pushing foreign layers #33151
• Fix an issue preventing containerd to be restarted after it died #32986
• Add cluster events to Docker event stream. #32421
• Add support for DNS search on windows #33311
• Upgrade to Go 1.8.3 #33387
• Prevent a containerd crash when journald is restarted #containerd/930
• Fix healthcheck failures due to invalid environment variables #33249
• Prevent a directory to be created in lieu of the daemon socket when a container mounting it is to be restarted during a shutdown #30348
• Prevent a container to be restarted upon stop if its stop signal is set to SIGKILL #33335
• Ensure log drivers get passed the same filename to both StartLogging and StopLogging endpoints #33583
• Remove daemon data structure dump on SIGUSR1 to avoid a panic #33598

Security:

• Allow personality with UNAME26 bit set in default seccomp profile #32965

Swarm Mode:

• Add an option to allow specifying a different interface for the data traffic (as opposed to control traffic) #32717
• Allow specifying a secret location within the container #32571
• Add support for secrets on Windows #32208
• Add TLS Info to swarm info and node info endpoint #32875
• Add support for services to carry arbitrary config objects #32336, #docker/cli/45,#33169
• Add API to rotate swarm CA certificate #32993
• Service digest pining is now handled client side #32388, #33239
• Placement now also take platform in account #33144
• Fix possible hang when joining fails #docker-ce/19
• Fix an issue preventing external CA to be accepted #33341
• Fix possible orchestration panic in mixed version clusters #swarmkit/2233
• Avoid assigning duplicate IPs during initialization #swarmkit/2237

Deprecation:

• Disable legacy registry (v1) by default #33629