En

Docker官网普通更新(2018-03-19)

来源:Docker官网 发布日期:2018-03-19 阅读次数:1123 评论:0

基本信息

发布日期:2018-03-19(官方当地时间)

更新类型:普通更新

更新版本:17.06.2-ee-7

感知时间:2019-12-05 19:41:37

风险等级:未知

情报贡献:TSRC

更新标题

Docker官网版本更新,17.06.2-ee-7版本发布

更新详情



Important notes about this release


The overlay2 detection has been improved in this release. On
Linux distributions where devicemapper was the default storage driver,
overlay2 is now used by default, if the kernel supports it.


Logging


Set timeout on splunk batch send moby/moby#35496
AWS: Fix batch size calculation for large logsmoby/moby#35726
Support a proxy in splunk log driver moby/moby#36220


Networking


Fix NetworkDB node management race condition docker/libnetwork#2033
Update Netlink socket timeout docker/libnetwork#2044
Fix for duplicate IP issues docker/libnetwork#2105


Packaging


Add a platform version to Docker --version docker/cli#427 and moby/moby#35705
SLES and Ubuntu set TasksMax in docker.service docker/docker-ce-packaging#78


Runtime


Adjust min TLS Version to v1.2 for PCI compliance docker/go-connections#45
Fix systemd cgroup after memory type changed opencontainers/runc#1573
Detect overlay2 support on pre-4.0 kernels moby/moby#35527
Enables deferred device deletion/removal by default if the driver version in the kernel supports the feature moby/moby#33698
Fix EBUSY errors under overlayfs and v4.13+ kernels moby/moby#34914 and moby/moby#34948
Fix TestMount under a selinux system moby/moby#34965
Fix devicemapper error: cannot remove container filesystem, layer not retained moby/moby#36160
Golang bumped to 1.8.7
Add timeouts for volume plugin ops moby/moby#35441
Add REMOVE and ORPHANED to TaskState moby/moby#36146
Fix abort when setting may_detach_mounts moby/moby#35172
Windows: Ensure Host Network Service exists moby/moby#34928
Fix issue where network inspect does not show created time in swarm scope moby/moby#36095
Windows: Daemon should respect DOCKER_TMPDIR moby/moby#35077
Merge global storage options on create moby/moby#34508
Remove support for overlay/overlay2 without d_type moby/moby#35514


Swarm mode


Add required call to allocate VIPs when endpoints are restored docker/swarmkit#2468
Synchronize Dispatcher.Stop() with incoming rpcs docker/swarmkit#2524
Fix IP overlap with empty EndpointSpec docker/swarmkit#2511


Known issues


It’s recommended that users create overlay networks with /24 blocks (the default) of 256 IP addresses when networks are used by services created using VIP-based endpoint-mode (the default). This is because of limitations with Docker Swarm moby/moby#30820. Users should not work around this by increasing the IP block size. To work around this limitation, either use dnsrr endpoint-mode or use multiple smaller overlay networks.
Docker may experience IP exhaustion if many tasks are assigned to a single overlay network, for example if many services are attached to that network or because services on the network are scaled to many replicas. The problem may also manifest when tasks are rescheduled because of node failures. In case of node failure, Docker currently waits 24h to release overlay IP addresses. The problem can be diagnosed by looking for failed to allocate network IP for task messages in the Docker logs.
SELinux enablement is not supported for containers on IBM Z on RHEL because of missing Red Hat package.
If a container is spawned on node A, using the same IP of a container destroyed
on nodeB within 5 min from the time that it exit, the container on node A is
not reachable until one of these 2 conditions happens:



Container on A sends a packet out,
The timer that cleans the arp entry in the overlay namespace is triggered (around 5 minutes).


As a workaround, send at least a packet out from each container like
(ping, GARP, etc).

软件描述

Docker 是一个开源的应用容器引擎,让开发者可以打包他们的应用以及依赖包到一个可移植的镜像中,然后发布到任何流行的 Linux或Windows 机器上,也可以实现虚拟化。容器是完全使用沙箱机制,相互之间不会有任何接口。 [1]

CVE编号

TSRC分析

暂无

业界资讯

暂无

评论

提交评论 您输入的评论有误,请重新输入