- Promote volume drivers from experimental to master
- Add rollover log driver, and --log-driver-opts flag
- Add memory swappiness tuning options
- Add support for DOCKER_CONFIG/--config to specify config file dir
- Add --type flag for docker inspect command
- Add new Fluentd logging driver
- Allow
docker importto load from local files - Add logging driver for GELF via UDP
- Add formatting options to
docker pswith--format - Allow to copy files from host to containers with
docker cp - Trusted pull, push and build flags (Notary)
- Replace
docker -dwith new subcommanddocker daemon - Make tar layers deterministic between registries
- Add new apt and yum repos to the install script
- Separate plugin sockets and specs
- Don't allow deleting the image of running containers
- Check if a tag name to load is a valid digest
- Zsh completion updates and improvements
- Remove cgroup read-only flag when privileged
- Support daemon urls with base paths in
docker -H - Add some missing events to bash completion
- Allow one character repository names
- Make /proc, /sys, & /dev readonly for readonly containers
- Validate status= filter to docker ps
- Add cgroup bind mount by default
- Add support for building docker-engine RPM on Oracle Linux 7
- Overlay: Export metadata for container and image in
docker inspect - Devicemapper: external device activation
- Remove RC4 from the list of registry cipher suites
- Allow TLS connections to plugins
- Add syslog-facility option
- Display when a container is in --net=host in docker ps
- LXC execdriver compatibility with recent LXC versions
- Devicemapper: Compare uuid of base device on startup
- Add a more accurate error description for invalid tag name
- Extend docker inspect to export image metadata related to graph driver
- Make build cache ignore mtime
- Added openSUSE and SUSE Linux Enterprise support to install.sh
- Restore --default-gateway{,-v6} daemon options
- Add missing unpublished ports in docker ps
- Allow duration strings in
docker eventsas --since/--until - Expose more mounts information in
docker inspect
- Add missing 'Names' field to /containers/json API output
- Make
docker rmi --danglingsafe when pulling - Devicemapper: Change default basesize to 100G
- Go Scheduler issue with sync.Mutex and gcc
- Fix issue where Search API endpoint would panic due to empty AuthConfig
- Set image canonical names correctly
- Check dockerinit only if lxc driver is used
- Fix ulimit usage of nproc
- Always attach STDIN if -i,--interactive is specified
- Show error messages when saving container state fails
- Fixed incorrect assumption on --bridge=none treated as disable network
- Check for invalid port specifications in host configuration
- Fix endpoint leave failure for --net=host mode
- Fix goroutine leak in the stats API if the container is not running
- Check for apparmor file before reading it
- Fix DOCKER_TLS_VERIFY being ignored
- Set umask to the default on startup
- Correct the message of pause and unpause a non-running container
- Adjust disallowed CpuShares in container creation
- ZFS: correctly apply selinux context
- Display empty string instead of when IP opt is nil
docker killreturns error when container is not running- Fix COPY/ADD quoted/json form
- Fix goroutine leak on logs -f with no output
- Remove panic in nat package on invalid hostport
re: "read apparmor file"... what we actually do now is no longer load profiles automatically at all. The apparmor profile is loaded as long as AppArmor itself is available. If AppArmor is available, but the policy does not, a user will encounter a hard error. The packaging installs the profile and users on systems with AppArmor installed (i.e. Ubuntu) will NEED to use the package or manually install the policy file.