https://docs.docker.com/engine/release-notes/

Docker官网安全更新，20.10.4版本发布

Builder


Fix incorrect cache match for inline cache import with empty layers moby/moby#42061
Update BuildKit to v0.8.2 moby/moby#42061

resolver: avoid error caching on token fetch
fileop: fix checksum to contain indexes of inputs preventing certain cache misses
Fix reference count issues on typed errors with mount references (fixing invalid mutable ref errors)
git: set token only for main remote access allowing cloning submodules with different credentials


Ensure blobs get deleted in /var/lib/docker/buildkit/content/blobs/sha256 after pull. To clean up old state run builder prune moby/moby#42065
Fix parallel pull synchronization regression moby/moby#42049
Ensure libnetwork state files do not leak moby/moby#41972


Client


Fix a panic on docker login if no config file is present docker/cli#2959
Fix WARNING: Error loading config file: .dockercfg: $HOME is not defined docker/cli#2958


Runtime


docker info: silence unhandleable warnings moby/moby#41958
Avoid creating parent directories for XGlobalHeader moby/moby#42017
Use 0755 permissions when creating missing directories moby/moby#42017
Fallback to manifest list when no platform matches in image config moby/moby#42045 moby/moby#41873
Fix a daemon panic on setups with a custom default runtime configured moby/moby#41974
Fix a panic when daemon configuration is empty moby/moby#41976
Fix daemon panic when starting container with invalid device cgroup rule moby/moby#42001
Fix userns-remap option when username & UID match moby/moby#42013
static: update runc binary to v1.0.0-rc93 moby/moby#42014


Logger


Honor labels-regex config even if labels is not set moby/moby#42046
Handle long log messages correctly preventing awslogs in non-blocking mode to split events bigger than 16kB mobymoby#41975


Rootless


Prevent the service hanging when stopping by setting systemd KillMode to mixed moby/moby#41956
dockerd-rootless.sh: add typo guard moby/moby#42070
Update rootlesskit to v0.13.1 to fix handling of IPv6 addresses moby/moby#42025
allow mknodding FIFO inside userns moby/moby#41957


Security


profiles: seccomp: update to Linux 5.11 syscall list moby/moby#41971


Swarm


Fix issue with heartbeat not persisting upon restart moby/moby#42060
Fix potential stalled tasks moby/moby#42060
Fix --update-order and --rollback-order flags when only --update-order or --rollback-order is provided docker/cli#2963
Fix docker service rollback returning a non-zero exit code in some situations docker/cli#2964
Fix inconsistent progress-bar direction on docker service rollback docker/cli#2964

Docker 是一个开源的应用容器引擎，让开发者可以打包他们的应用以及依赖包到一个可移植的镜像中，然后发布到任何流行的 Linux或Windows 机器上，也可以实现虚拟化。容器是完全使用沙箱机制，相互之间不会有任何接口。 [1]

暂无

暂无