File _patchinfo of Package patchinfo.2283
<patchinfo incident="2283">
<issue id="970637" tracker="bnc">update docker to 1.10.3</issue>
<issue id="964468" tracker="bnc">gcc-go can no longer compile Docker (master)</issue>
<issue id="968972" tracker="bnc">let docker manage the cgroups of the processes that it launches without systemd</issue>
<issue id="965600" tracker="bnc">SLES12 SP1 - Static shared memory limit in container (docker)</issue>
<issue id="968933" tracker="bnc">update docker to 1.10.2</issue>
<issue id="965918" tracker="bnc">update docker to 1.10.0</issue>
<issue id="968937" tracker="bnc">run docker migrations without downtime</issue>
<issue id="963142" tracker="bnc">SLES 12 SP1 - Copy one or more file to docker container via "docker cp" causes an error when removing the container later on</issue>
<issue id="320637" tracker="fate"/>
<category>recommended</category>
<rating>moderate</rating>
<packager>jordimassaguerpla</packager>
<description>
This update provides Docker 1.10.3, bringing several fixes and enhancements:
- Add usernamespace support.
- Add support for custom seccomp profiles.
- Improvements in network and volume management.
- Let docker manage the cgroups of the processes that it launches without systemd. (bsc#968972)
- Recommend docker-image-migrator. (bsc#968933)
- Register /run/secrets as a mountpoint, so that it is unmounted properly when the container
is removed and thus container removal works. (bsc#963142)
- Add no-downtime migration package "docker-image-migrator". (bsc#968937, fate#320637)
Runtime:
- Fix Docker client exiting with an "Unrecognized input header" error.
- Fix Docker exiting if Exec is started with both AttachStdin and Detach.
- Prevent systemd from deleting containers' cgroups when its configuration is reloaded.
- Fix SELinux issues by disregarding --read-only when mounting /dev/mqueue.
- Fix chown permissions used during docker cp when userns is used.
- Fix configuration loading issue with all booleans defaulting to true.
- Fix occasional panic with docker logs -f.
Distribution:
- Fix a crash when pushing multiple images sharing the same layers to the same repository in parallel.
- Fix a panic when pushing images to a registry which uses a misconfigured token service.
- Keep layer reference if deletion failed to avoid a badly inconsistent state.
- Handle gracefully a corner case when canceling migration.
- Fix docker import on compressed data.
- Fix tar-split files corruption during migration that later cause docker push and docker save to fail.
Networking:
- Fix daemon crash if embedded DNS is sent garbage.
Plugin system:
- Fix issue preventing volume plugins to start when SELinux is enabled.
- Prevent Docker from exiting if a volume plugin returns a null response for Get requests.
- Fix plugin system leaking file descriptors if a plugin has an error.
Volumes:
- Fix issue with multiple volume references with same name.
Security:
- Fix linux32 emulation to fail during docker build.
- Fix Oracle XE 10g failing to start in a container.
- Fix issue preventing daemon to start if userns is enabled and the subuid or subgid files contain comments.
- Fix potential cache corruption and delegation conflict issues.
For a comprehensive list of changes, please refer to the following Release Notes:
- https://github.com/docker/docker/releases/tag/v1.10.3
- https://github.com/docker/docker/releases/tag/v1.10.2
- https://github.com/docker/docker/releases/tag/v1.10.1
- https://github.com/docker/docker/releases/tag/v1.10.0
</description>
<summary>Recommended update for docker, docker-image-migrator</summary>
</patchinfo>