The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems
This is a pre-release of the upcoming 25.0.0 release.
Pre-releases are intended for testing new releases: only install in a test environment!
curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh
LimitNOFILE which on older versions of systemd, such as used by CentOS 7 is very low and may limit the number of containers that can be run. Set LimitNOFILE=1048576 to get the previous behavior.Bugs and regressions can be reported in these issue trackers:
When reporting issues, include [25.0.0-beta] in the issue title
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
dockerd-rootless-setuptools.sh when username contains a backslash. moby/moby#46407
dockerd --bridge=none is used. moby/moby#46702
--ip-range with a range larger than the subnet. docker/for-mac#6870
docker.socket not getting disabled when uninstalling the docker-ce RPM package. docker/docker-ce-packaging#852
go1.20.10. docker/docker-ce-packaging#951
v1.7.6 (static binaries only). moby/moby#46103
containerd.io package to v1.6.24./sys/devices/virtual/powercap by default. This change hardens against CVE-2020-8694, CVE-2020-8695, and CVE-2020-12912, and an attack known as the PLATYPUS attack. For more details, see advisory, commit.For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
insecure-registries daemon configuration. https://github.com/moby/moby/pull/45572
POST /commit again. https://github.com/moby/moby/pull/45569
docker build. https://github.com/moby/moby/pull/45791
NodeCSIInfo. https://github.com/moby/moby/pull/45809
name_to_handle_at(2). https://github.com/moby/moby/pull/45834
--security-opt=no-new-privileges. https://github.com/moby/moby/pull/46222
device or type volume option to be unmounted when restarting the daemon and not live-restoring it properly. https://github.com/moby/moby/pull/46367
--register-service when executed from within binary directory. https://github.com/moby/moby/pull/46216
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
/proc/sys rule. https://github.com/moby/moby/pull/45716
name_to_handle_at(2). https://github.com/moby/moby/pull/45835
--register-service when executed from within binary directory. https://github.com/moby/moby/pull/46217
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
docker ps failing when a container image is no longer present in the content store. moby/moby#46095
docker ps -s -a and docker container prune failing when a container image config is no longer present in the content store. moby/moby#46097
docker inspect failing when a container image config is no longer (or was never) present in the content store. moby/moby#46244
overlayfs snapshotter by using reference-counted rootfs mounts. moby/moby#46266
FROM scratch Dockerfile instruction with the classic builder. moby/moby#46302
mismatched image rootfs and manifest layers errors with the classic builder. moby/moby#46310
dockerd.exe --register-service not working when the binary is in the current directory on Windows. moby/moby#46215
docker login against Docker Hub. docker/cli#4500
GET /_ping when possible. docker/cli#4508
docker manifest inspect an image on Docker Hub. docker/cli#4512
docker events not supporting --format=json. docker/cli#4544
go1.20.7. moby/moby#46140, docker/cli#4476, docker/docker-ce-packaging#932
v1.7.3 (static binaries only). moby/moby#46103
v2.21.0. docker/docker-ce-packaging#936
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Host: header, in order to be compatible with changes introduced in go1.20.6. moby/moby#45962, moby/moby#45990
Variant not being included in docker image inspect and GET /images/{name}/json. moby/moby#46025
RepoDigests. moby/moby#46014
EXPOSE when building containers with the legacy builder. moby/moby#45921
overlay network on a non-Swarm node. moby/moby#45974
auths: null is found in the CLI config file. docker/cli#4450
contrib/init. docker/docker-ce-packaging#914, docker/docker-ce-packaging#926
contrib/init. moby/moby#46044
go1.20.6. docker/cli#4428, moby/moby#45970, docker/docker-ce-packaging#921
v2.20.2. docker/docker-ce-packaging#924
v0.11.2. docker/docker-ce-packaging#922
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
FROM scratch in container builds. moby/moby#45822
docker cp with snapshotters that cannot mount the same content multiple times. moby/moby#45780, moby/moby#45786
type=image not being correctly unpacked/stored. moby/moby#45692
docker load. moby/moby#45688
name_to_handle_at(2) is now always allowed in the default seccomp profile. moby/moby#45833
host-gateway with BuildKit by passing the IP as a label (also requires docker/buildx#1894). moby/moby#45790
POST /containers/{id}/stop would forcefully terminate the container when the request was canceled, instead of waiting until the specified timeout for a 'graceful' stop. moby/moby#45774
docker cp -a from the root (/) directory would fail. moby/moby#45748
GET /info. moby/moby#45856
docker info when only the client is in debug mode. docker/cli#4393
go1.20.5. moby/moby#45745, docker/cli#4351, docker/docker-ce-packaging#904
v2.19.1. docker/docker-ce-packaging#916
v0.11.1. docker/docker-ce-packaging#918
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
exit code: 4294967295 when performing many concurrent build stages. moby/moby#45620
etc/hosts (%WINDIR%\System32\Drivers\etc\hosts), including resolution of localhost. moby/moby#45562
docker exec commands to take significantly longer than expected. moby/moby#45625
Created field would contain an incorrect value. moby/moby#45623
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
docker pull --platform would report No such image regarding another tag pointing to the same image. moby/moby#45562
docker images -a moby/moby#45588
GET /images/{id}/json would return null instead of empty RepoTags and RepoDigests. moby/moby#45564
POST /commit did not accept an empty request body. moby/moby#45568
v2.18.1. docker/docker-ce-packaging#896