--- title: Docker Engine 17.09 release notes toc_min: 1 toc_max: 2 skip_read_time: true --- ## 17.09.1-ce 2017-12-07 ### Builder - Fix config leakage on shared parent stage [moby/moby#33753](https://github.com/moby/moby/issues/33753) - Warn on empty continuation lines only, not on comment-only lines [moby/moby#35004](https://github.com/moby/moby/pull/35004) ### Client - Set API version on Client even when Ping fails [docker/cli#546](https://github.com/docker/cli/pull/546) ### Networking - Overlay fix for transient IP reuse [docker/libnetwork#2016](https://github.com/docker/libnetwork/pull/2016) - Fix reapTime logic in NetworkDB and handle DNS cleanup for attachable container [docker/libnetwork#2017](https://github.com/docker/libnetwork/pull/2017) - Disable hostname lookup on chain exists check [docker/libnetwork#2019](https://github.com/docker/libnetwork/pull/2019) - Fix lint issues [docker/libnetwork#2020](https://github.com/docker/libnetwork/pull/2020) - Restore error type in FindNetwork [moby/moby#35634](https://github.com/moby/moby/pull/35634) ### Runtime - Protect `health monitor` Go channel [moby/moby#35482](https://github.com/moby/moby/pull/35482) - Fix leaking container/exec state [moby/moby#35484](https://github.com/moby/moby/pull/35484) - Add /proc/scsi to masked paths (patch to work around [CVE-2017-16539](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16539) [moby/moby/#35399](https://github.com/moby/moby/pull/35399) - Vendor tar-split: fix to prevent memory exhaustion issue that could crash Docker daemon [moby/moby/#35424](https://github.com/moby/moby/pull/35424) Fixes [CVE-2017-14992](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14992) - Fix P/Z HubPullSuite tests [moby/moby#34837](https://github.com/moby/moby/pull/34837) + Windows: Add support for version filtering on pull [moby/moby#35090](https://github.com/moby/moby/pull/35090) - Windows: Stop filtering Windows manifest lists by version [moby/moby#35117](https://github.com/moby/moby/pull/35117) - Use rslave instead of rprivate in chroot archive [moby/moby/#35217](https://github.com/moby/moby/pull/35217) - Remove container rootfs mountPath after unmount [moby/moby#34573](https://github.com/moby/moby/pull/34573) - Fix honoring tmpfs size of user /dev/shm mount [moby/moby#35316](https://github.com/moby/moby/pull/35316) - Don't abort when setting may_detach_mounts (log the error instead) [moby/moby#35172](https://github.com/moby/moby/pull/35172) - Fix version comparison when negotiating the API version [moby/moby#35008](https://github.com/moby/moby/pull/35008) ### Swarm mode * Increase gRPC request timeout when sending snapshots [docker/swarmkit#2404](https://github.com/docker/swarmkit/pull/2404) - Fix node filtering when there is no log driver [docker/swarmkit#2442](https://github.com/docker/swarmkit/pull/2442) - Add an error on attempt to change cluster name [docker/swarmkit/#2454](https://github.com/docker/swarmkit/pull/2454) - Delete node attachments when node is removed [docker/swarmkit/#2456](https://github.com/docker/swarmkit/pull/2456) - Provide custom gRPC dialer to override default proxy dialer [docker/swarmkit/#2457](https://github.com/docker/swarmkit/pull/2457) - Avoids recursive readlock on swarm info [moby/moby#35388](https://github.com/moby/moby/pull/35388) ## 17.09.0-ce 2017-09-26 ### Builder + Add `--chown` flag to `ADD/COPY` commands in Dockerfile [moby/moby#34263](https://github.com/moby/moby/pull/34263) * Fix cloning unneeded files while building from git repositories [moby/moby#33704](https://github.com/moby/moby/pull/33704) ### Client * Allow extension fields in the v3.4 version of the compose format [docker/cli#452](https://github.com/docker/cli/pull/452) * Make compose file allow to specify names for non-external volume [docker/cli#306](https://github.com/docker/cli/pull/306) * Support `--compose-file -` as stdin [docker/cli#347](https://github.com/docker/cli/pull/347) * Support `start_period` for healthcheck in Docker Compose [docker/cli#475](https://github.com/docker/cli/pull/475) + Add support for `stop-signal` in docker stack commands [docker/cli#388](https://github.com/docker/cli/pull/388) + Add support for update order in compose deployments [docker/cli#360](https://github.com/docker/cli/pull/360) + Add ulimits to unsupported compose fields [docker/cli#482](https://github.com/docker/cli/pull/482) + Add `--format` to `docker-search` [docker/cli#440](https://github.com/docker/cli/pull/440) * Show images digests when {% raw %}`{{.Digest}}`{% endraw %} is in format [docker/cli#439](https://github.com/docker/cli/pull/439) * Print output of `docker stack rm` on `stdout` instead of `stderr` [docker/cli#491](https://github.com/docker/cli/pull/491) - Fix {% raw %}`docker history --format {{json .}}`{% endraw %} printing human-readable timestamps instead of ISO8601 when `--human=true` [docker/cli#438](https://github.com/docker/cli/pull/438) - Fix idempotence of `docker stack deploy` when secrets or configs are used [docker/cli#509](https://github.com/docker/cli/pull/509) - Fix presentation of random host ports [docker/cli#404](https://github.com/docker/cli/pull/404) - Fix redundant service restarts when service created with multiple secrets [moby/moby#34746](https://github.com/moby/moby/issues/34746) ### Logging - Fix Splunk logger not transmitting log data when tag is empty and raw-mode is used [moby/moby#34520](https://github.com/moby/moby/pull/34520) ### Networking + Add the control plane MTU option in the daemon config [moby/moby#34103](https://github.com/moby/moby/pull/34103) + Add service virtual IP to sandbox's loopback address [docker/libnetwork#1877](https://github.com/docker/libnetwork/pull/1877) ### Runtime * Graphdriver: promote overlay2 over aufs [moby/moby#34430](https://github.com/moby/moby/pull/34430) * LCOW: Additional flags for VHD boot [moby/moby#34451](https://github.com/moby/moby/pull/34451) * LCOW: Don't block export [moby/moby#34448](https://github.com/moby/moby/pull/34448) * LCOW: Dynamic sandbox management [moby/moby#34170](https://github.com/moby/moby/pull/34170) * LCOW: Force Hyper-V Isolation [moby/moby#34468](https://github.com/moby/moby/pull/34468) * LCOW: Move toolsScratchPath to /tmp [moby/moby#34396](https://github.com/moby/moby/pull/34396) * LCOW: Remove hard-coding [moby/moby#34398](https://github.com/moby/moby/pull/34398) * LCOW: WORKDIR correct handling [moby/moby#34405](https://github.com/moby/moby/pull/34405) * Windows: named pipe mounts [moby/moby#33852](https://github.com/moby/moby/pull/33852) - Fix "permission denied" errors when accessing volume with SELinux enforcing mode [moby/moby#34684](https://github.com/moby/moby/pull/34684) - Fix layers size reported as `0` in `docker system df` [moby/moby#34826](https://github.com/moby/moby/pull/34826) - Fix some "device or resource busy" errors when removing containers on RHEL 7.4 based kernels [moby/moby#34886](https://github.com/moby/moby/pull/34886) ### Swarm mode * Include whether the managers in the swarm are autolocked as part of `docker info` [docker/cli#471](https://github.com/docker/cli/pull/471) + Add 'docker service rollback' subcommand [docker/cli#205](https://github.com/docker/cli/pull/205) - Fix managers failing to join if the gRPC snapshot is larger than 4MB [docker/swarmkit#2375](https://github.com/docker/swarmkit/pull/2375) - Fix "permission denied" errors for configuration file in SELinux-enabled containers [moby/moby#34732](https://github.com/moby/moby/pull/34732) - Fix services failing to deploy on ARM nodes [moby/moby#34021](https://github.com/moby/moby/pull/34021) ### Packaging + Build scripts for ppc64el on Ubuntu [docker/docker-ce-packaging#43](https://github.com/docker/docker-ce-packaging/pull/43) ### Deprecation + Remove deprecated `--enable-api-cors` daemon flag [moby/moby#34821](https://github.com/moby/moby/pull/34821)