v1.12.3

1.12.3 (2016-10-26)

IMPORTANT: Docker 1.12 ships with an updated systemd unit file for rpm
based installs (which includes RHEL, Fedora, CentOS, and Oracle Linux 7). When
upgrading from an older version of docker, the upgrade process may not
automatically install the updated version of the unit file, or fail to start
the docker service if;

• the systemd unit file (/usr/lib/systemd/system/docker.service) contains local changes, or
• a systemd drop-in file is present, and contains -H fd:// in the ExecStart directive

Starting the docker service will produce an error:

Failed to start docker.service: Unit docker.socket failed to load: No such file or directory.

or

no sockets found via socket activation: make sure the service was started by systemd.

To resolve this:

• Backup the current version of the unit file, and replace the file with the
  version that ships with docker 1.12
• Remove the Requires=docker.socket directive from the /usr/lib/systemd/system/docker.service file if present
• Remove -H fd:// from the ExecStart directive (both in the main unit file, and in any drop-in files present).

After making those changes, run sudo systemctl daemon-reload, and sudo systemctl restart docker to reload changes and (re)start the docker daemon.

Runtime

• Fix ambient capability usage in containers (CVE-2016-8867) #27610
• Prevent a deadlock in libcontainerd for Windows #27136
• Fix error reporting in CopyFileWithTar #27075
• Reset health status to starting when a container is restarted #27387
• Properly handle shared mount propagation in storage directory #27609
• Fix docker exec #27610
• Fix backward compatibility with containerd’s events log #27693

Swarm Mode

• Fix conversion of restart-policy #27062
• Update Swarmkit #27554
  • Avoid restarting a task that has already been restarted docker/swarmkit#1305
  • Allow duplicate published ports when they use different protocols docker/swarmkit#1632
  • Allow multiple randomly assigned published ports on service docker/swarmkit#1657
  • Fix panic when allocations happen at init time docker/swarmkit#1651

Networking

• Update libnetwork #27559
  • Fix race in serializing sandbox to string docker/libnetwork#1495
  • Fix race during deletion docker/libnetwork#1503
  • Reset endpoint port info on connectivity revoke in bridge driver docker/libnetwork#1504
  • Fix a deadlock in networking code docker/libnetwork#1507
  • Fix a race in load balancer state docker/libnetwork#1512

Logging

• Update fluent-logger-golang to v1.2.1 #27474

Contrib

• Update buildtags for armhf ubuntu-trusty #27327
• Add AppArmor to runc buildtags for armhf #27421

Downloads

Regular

deb/rpm install: curl -fsSL https://get.docker.com/ | sh
Linux 64bits tgz: https://get.docker.com/builds/Linux/x86_64/docker-1.12.3.tgz
Darwin/OSX 64bits client tgz: https://get.docker.com/builds/Darwin/x86_64/docker-1.12.3.tgz
Linux 32bits arm tgz: https://get.docker.com/builds/Linux/armel/docker-1.12.3.tgz
Windows 64bits zip: https://get.docker.com/builds/Windows/x86_64/docker-1.12.3.zip
Windows 32bits client zip: https://get.docker.com/builds/Windows/i386/docker-1.12.3.zip

With experimental features

deb/rpm install: curl -fsSL https://experimental.docker.com/ | sh
Linux 64bits tgz: https://experimental.docker.com/builds/Linux/x86_64/docker-1.12.3.tgz
Darwin/OSX 64bits client tgz: https://experimental.docker.com/builds/Darwin/x86_64/docker-1.12.3.tgz
Linux 32bits arm tgz: https://experimental.docker.com/builds/Linux/armel/docker-1.12.3.tgz
Windows 64bits zip: https://experimental.docker.com/builds/Windows/x86_64/docker-1.12.3.zip
Windows 32bits client zip: https://experimental.docker.com/builds/Windows/i386/docker-1.12.3.zip