Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

1.12.3 Changelog #27611

Merged
merged 1 commit into from
Oct 24, 2016
Merged

1.12.3 Changelog #27611

merged 1 commit into from
Oct 24, 2016

Conversation

vieux
Copy link
Contributor

@vieux vieux commented Oct 20, 2016

ping @thaJeztah

@vieux vieux added this to the 1.12.3 milestone Oct 20, 2016
@vieux vieux self-assigned this Oct 20, 2016
Copy link
Member

@thaJeztah thaJeztah left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

couple of nits / suggestions, but LGTM otherwise

- Prevent a deadlock in libcontainerd for Windows [#27136](https://github.com/docker/docker/pull/27136)
- Fix error reporting in CopyFileWithTar [#27075](https://github.com/docker/docker/pull/27075)
* Reset health status to starting when a container is restarted [#27387](https://github.com/docker/docker/pull/27387)
* Remount everything as private in new mntns [#27609](https://github.com/docker/docker/pull/27609)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should probably describe what it's fixing as well; Also should this be in the "Builder" section?

* Fix an error when trying to `ADD` or `COPY` files to the root  (`/`) of the container's filesystem

@tonistiigi SGTY? ^^

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The problem is in file extraction so not directly related to builder. Could probably happen in pull/load/cp as well in certain conditions. I'd add "during extraction ...". Or "Properly handle shared mount propagation in storage directory".

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I like Properly handle shared mount propagation in storage directory

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SGTM


- Fix conversion of restart-policy [#27062](https://github.com/docker/docker/pull/27062)
* Vendor Swarmkit [#27554](https://github.com/docker/docker/pull/27554)
* Avoid restarting a task that has already been restarted [docker/swarmkit#1305]
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Missing https://github.com/ here and couple below

@vieux vieux force-pushed the changelog-1.12.3 branch 3 times, most recently from 9a35aa3 to a4f62a0 Compare October 21, 2016 21:17
@vieux
Copy link
Contributor Author

vieux commented Oct 21, 2016

please take a look @aaronlehmann @mrjana @riyazdf

- Fix race in serializing sandbox to string [docker/libnetwork#1495](https://github.com/docker/libnetwork/pull/1495)
- Fix race during deletion [docker/libnetwork#1503](https://github.com/docker/libnetwork/pull/1503)
* Reset endpoint port info on connectivity revoke in bridge driver [docker/libnetwork#1504](https://github.com/docker/libnetwork/pull/1504)

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add the following as well:

### Swarm Mode

- Fix conversion of restart-policy [#27062](https://github.com/docker/docker/pull/27062)
* Vendor Swarmkit [#27554](https://github.com/docker/docker/pull/27554)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe "Update" instead of "Vendor"?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@icecrime we used vendor previously in 1.12.2 already but I can change


- Fix conversion of restart-policy [#27062](https://github.com/docker/docker/pull/27062)
* Vendor Swarmkit [#27554](https://github.com/docker/docker/pull/27554)
* Avoid restarting a task that has already been restarted [https://github.com/docker/swarmkit/pull/1305]
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't know if that's intentional, but this isn't a properly formatted markdown link.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks


### Runtime

- Fix user permissions in containers (CVE-2016-8867) [#27610](https://github.com/docker/docker/pull/27610)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

s/Fix user permissions in containers/Fix ambient capability usage in containers/

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor

@riyazdf riyazdf Oct 21, 2016

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not published yet, but we've received a confirmed ID from MITRE.

We will keep everyone posted as we get details back from MITRE, but that pull request and the linked issue describe the ambient capability misconfiguration.

@vieux vieux force-pushed the changelog-1.12.3 branch 2 times, most recently from 4308575 to a31a9bb Compare October 21, 2016 23:53
@vieux
Copy link
Contributor Author

vieux commented Oct 21, 2016

@icecrime @riyazdf PTAL

Signed-off-by: Victor Vieux <vieux@docker.com>
@icecrime
Copy link
Contributor

LGTM

* Reset endpoint port info on connectivity revoke in bridge driver [docker/libnetwork#1504](https://github.com/docker/libnetwork/pull/1504)
- Fix a deadlock in networking code [docker/libnetwork#1507](https://github.com/docker/libnetwork/pull/1507)
- Fix a race in load balancer state [docker/libnetwork#1512](https://github.com/docker/libnetwork/pull/1512)
### Logging
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Minor nit: missing new line.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks.

Copy link
Contributor

@riyazdf riyazdf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@vieux vieux merged commit c5ac1fc into moby:1.12.x Oct 24, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants