-
Notifications
You must be signed in to change notification settings - Fork 18.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
1.12.3 Changelog #27611
1.12.3 Changelog #27611
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
couple of nits / suggestions, but LGTM otherwise
- Prevent a deadlock in libcontainerd for Windows [#27136](https://github.com/docker/docker/pull/27136) | ||
- Fix error reporting in CopyFileWithTar [#27075](https://github.com/docker/docker/pull/27075) | ||
* Reset health status to starting when a container is restarted [#27387](https://github.com/docker/docker/pull/27387) | ||
* Remount everything as private in new mntns [#27609](https://github.com/docker/docker/pull/27609) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should probably describe what it's fixing as well; Also should this be in the "Builder" section?
* Fix an error when trying to `ADD` or `COPY` files to the root (`/`) of the container's filesystem
@tonistiigi SGTY? ^^
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The problem is in file extraction so not directly related to builder. Could probably happen in pull/load/cp as well in certain conditions. I'd add "during extraction ...". Or "Properly handle shared mount propagation in storage directory".
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I like Properly handle shared mount propagation in storage directory
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
SGTM
|
||
- Fix conversion of restart-policy [#27062](https://github.com/docker/docker/pull/27062) | ||
* Vendor Swarmkit [#27554](https://github.com/docker/docker/pull/27554) | ||
* Avoid restarting a task that has already been restarted [docker/swarmkit#1305] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Missing https://github.com/ here and couple below
9a35aa3
to
a4f62a0
Compare
please take a look @aaronlehmann @mrjana @riyazdf |
- Fix race in serializing sandbox to string [docker/libnetwork#1495](https://github.com/docker/libnetwork/pull/1495) | ||
- Fix race during deletion [docker/libnetwork#1503](https://github.com/docker/libnetwork/pull/1503) | ||
* Reset endpoint port info on connectivity revoke in bridge driver [docker/libnetwork#1504](https://github.com/docker/libnetwork/pull/1504) | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Add the following as well:
- Fix a deadlock in networking code docker/libnetwork#1507
- Fix a race in load balancer state docker/libnetwork#1512
### Swarm Mode | ||
|
||
- Fix conversion of restart-policy [#27062](https://github.com/docker/docker/pull/27062) | ||
* Vendor Swarmkit [#27554](https://github.com/docker/docker/pull/27554) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe "Update" instead of "Vendor"?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@icecrime we used vendor previously in 1.12.2 already but I can change
|
||
- Fix conversion of restart-policy [#27062](https://github.com/docker/docker/pull/27062) | ||
* Vendor Swarmkit [#27554](https://github.com/docker/docker/pull/27554) | ||
* Avoid restarting a task that has already been restarted [https://github.com/docker/swarmkit/pull/1305] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't know if that's intentional, but this isn't a properly formatted markdown link.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
thanks
|
||
### Runtime | ||
|
||
- Fix user permissions in containers (CVE-2016-8867) [#27610](https://github.com/docker/docker/pull/27610) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
s/Fix user permissions in containers/Fix ambient capability usage in containers/
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
CVE-2016-8867 not published yet?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not published yet, but we've received a confirmed ID from MITRE.
We will keep everyone posted as we get details back from MITRE, but that pull request and the linked issue describe the ambient capability misconfiguration.
4308575
to
a31a9bb
Compare
Signed-off-by: Victor Vieux <vieux@docker.com>
LGTM |
* Reset endpoint port info on connectivity revoke in bridge driver [docker/libnetwork#1504](https://github.com/docker/libnetwork/pull/1504) | ||
- Fix a deadlock in networking code [docker/libnetwork#1507](https://github.com/docker/libnetwork/pull/1507) | ||
- Fix a race in load balancer state [docker/libnetwork#1512](https://github.com/docker/libnetwork/pull/1512) | ||
### Logging |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Minor nit: missing new line.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
thanks.
a31a9bb
to
548f8f0
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
ping @thaJeztah