The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems
This is a pre-release of the upcoming 25.0.0 release.
Pre-releases are intended for testing new releases: only install in a test environment!
curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh
LimitNOFILE which on older versions of systemd, such as used by CentOS 7 is very low and may limit the number of containers that can be run. Set LimitNOFILE=1048576 to get the previous behavior.Bugs and regressions can be reported in these issue trackers:
When reporting issues, include [25.0.0-beta] in the issue title
This is a pre-release of the upcoming 25.0.0 release.
Pre-releases are intended for testing new releases: only install in a test environment!
curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh
LimitNOFILE which on older versions of systemd, such as used by CentOS 7 is very low and may limit the number of containers that can be run. Set LimitNOFILE=1048576 to get the previous behavior.Bugs and regressions can be reported in these issue trackers:
When reporting issues, include [25.0.0-beta] in the issue title
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
IP_NF_MANGLE to check-config.sh to the "generally required" list in check-config.sh because it is required by Swarm. https://github.com/moby/moby/pull/46674
/sys/devices/virtual/powercap by default. This change hardens against CVE-2020-8694, CVE-2020-8695, and CVE-2020-12912, and an attack known as the PLATYPUS attack. For more details, see advisory, commit.For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
IP_NF_MANGLE to the "generally required" list in check-config.sh because it is required by Swarm. https://github.com/moby/moby/pull/46675
/sys/devices/virtual/powercap by default. This change hardens against CVE-2020-8694, CVE-2020-8695, and CVE-2020-12912, and an attack known as the PLATYPUS attack. For more details, see advisory, commit.This is a pre-release of the upcoming 25.0.0 release.
Pre-releases are intended for testing new releases: only install in a test environment!
curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh
LimitNOFILE which on older versions of systemd, such as used by CentOS 7 is very low and may limit the number of containers that can be run. Set LimitNOFILE=1048576 to get the previous behavior.Bugs and regressions can be reported in these issue trackers:
When reporting issues, include [25.0.0-beta] in the issue title
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
dockerd-rootless-setuptools.sh when username contains a backslash. moby/moby#46407
dockerd --bridge=none is used. moby/moby#46702
--ip-range with a range larger than the subnet. docker/for-mac#6870
docker.socket not getting disabled when uninstalling the docker-ce RPM package. docker/docker-ce-packaging#852
go1.20.10. docker/docker-ce-packaging#951
v1.7.6 (static binaries only). moby/moby#46103
containerd.io package to v1.6.24./sys/devices/virtual/powercap by default. This change hardens against CVE-2020-8694, CVE-2020-8695, and CVE-2020-12912, and an attack known as the PLATYPUS attack. For more details, see advisory, commit.For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
insecure-registries daemon configuration. https://github.com/moby/moby/pull/45572
POST /commit again. https://github.com/moby/moby/pull/45569
docker build. https://github.com/moby/moby/pull/45791
NodeCSIInfo. https://github.com/moby/moby/pull/45809
name_to_handle_at(2). https://github.com/moby/moby/pull/45834
--security-opt=no-new-privileges. https://github.com/moby/moby/pull/46222
device or type volume option to be unmounted when restarting the daemon and not live-restoring it properly. https://github.com/moby/moby/pull/46367
--register-service when executed from within binary directory. https://github.com/moby/moby/pull/46216
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
/proc/sys rule. https://github.com/moby/moby/pull/45716
name_to_handle_at(2). https://github.com/moby/moby/pull/45835
--register-service when executed from within binary directory. https://github.com/moby/moby/pull/46217
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
docker ps failing when a container image is no longer present in the content store. moby/moby#46095
docker ps -s -a and docker container prune failing when a container image config is no longer present in the content store. moby/moby#46097
docker inspect failing when a container image config is no longer (or was never) present in the content store. moby/moby#46244
overlayfs snapshotter by using reference-counted rootfs mounts. moby/moby#46266
FROM scratch Dockerfile instruction with the classic builder. moby/moby#46302
mismatched image rootfs and manifest layers errors with the classic builder. moby/moby#46310
dockerd.exe --register-service not working when the binary is in the current directory on Windows. moby/moby#46215
docker login against Docker Hub. docker/cli#4500
GET /_ping when possible. docker/cli#4508
docker manifest inspect an image on Docker Hub. docker/cli#4512
docker events not supporting --format=json. docker/cli#4544
go1.20.7. moby/moby#46140, docker/cli#4476, docker/docker-ce-packaging#932
v1.7.3 (static binaries only). moby/moby#46103
v2.21.0. docker/docker-ce-packaging#936
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Host: header, in order to be compatible with changes introduced in go1.20.6. moby/moby#45962, moby/moby#45990
Variant not being included in docker image inspect and GET /images/{name}/json. moby/moby#46025
RepoDigests. moby/moby#46014
EXPOSE when building containers with the legacy builder. moby/moby#45921
overlay network on a non-Swarm node. moby/moby#45974
auths: null is found in the CLI config file. docker/cli#4450
contrib/init. docker/docker-ce-packaging#914, docker/docker-ce-packaging#926
contrib/init. moby/moby#46044
go1.20.6. docker/cli#4428, moby/moby#45970, docker/docker-ce-packaging#921
v2.20.2. docker/docker-ce-packaging#924
v0.11.2. docker/docker-ce-packaging#922