# changelog

author: Tom "spot" Callaway <tcallawa@redhat.com> - 2.10.0-2
changelog:
  - get rid of index.txt scriptlet on R-core (bz 533572)
  - leave macro in place, but don't call /usr/lib/rpm/R-make-search-index.sh equivalent anymore
  - add version check to see if we need to run R-make-search-index.sh guts


author: Vlad Sharanhovich <vlad.sharanhovich@oracle.com> - 2.13.1-1
changelog:
  - Fixed missing macros.R and R-make-search-index.sh
  - Synced up with the latest Fedoca R spec file (excluding java stuff).
  - Fixed several minor mistakes and removed obsolete objects.


author: Vlad Sharanhovich <vlad.sharanhovich@oracle.com> - 2.13.1-1
changelog:
  - Fixed missing macros.R and R-make-search-index.sh
  - Synced up with the latest Fedora R spec file (excluding java stuff).
  - Fixed several minor mistakes and removed obsolete objects.


author: Sweekar Pinto <sweekar.pinto@oracle.com> - 2.2.33-1
changelog:
  - Build WALinuxAgent-2.2.33-1.el7 based on https://github.com/Azure/WALinuxAgent/releases/tag/v2.2.33


author: Jingdong Lu <jingdong.lu@oracle.com> - 2.2.35-1
changelog:
  - Build WALinuxAgent-2.2.35-1.el7 based on https://github.com/Azure/WALinuxAgent/releases/tag/v2.2.35


author: Natalya Naumova <natalya.naumova@oracle.com> - 2.2.45-1
changelog:
  - Build WALinuxAgent-2.2.45-1.el7 based on https://github.com/Azure/WALinuxAgent/releases/tag/v2.2.45


author: Natalya Naumova <natalya.naumova@oracle.com> - 2.2.46-1
changelog:
  - Build WALinuxAgent-2.2.46-1.el7 based on https://github.com/Azure/WALinuxAgent/releases/tag/v2.2.46


author: Garrett Holmstrom <gholms@fedoraproject.org> - 0.7.2-9
changelog:
  - Write /etc/locale.conf instead of /etc/sysconfig/i18n [RH:1008250]
  - Add tmpfiles.d configuration for /run/cloud-init [RH:1103761]
  - Use the license rpm macro
  - BuildRequire python-setuptools, not python-setuptools-devel


author: Juerg Haefliger <juergh@gmail.com> - 0.27-4
changelog:
  - Break out the growpart script into its own subpackage to prevent pulling a
    boatload of unnecessary dependencies into a cloud image.


author: Juerg Haefliger <juergh@gmail.com> - 0.27-5
changelog:
  - Don't make gdisk a hard requirement for cloud-utils-growpart to save some
    space on systems that don't use GPT partitions.


author: Juerg Haefliger <juergh@gmail.com> - 0.27-8
changelog:
  - Make the package a no-noarch package on EPEL so that the build of the main
    package can be prevented for the arches that don't support it [bz#986809].


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.76-1
changelog:
  - Allow containers to use fuse file systems by default
  - Allow containers to sendto dgram socket of container runtimes
  - Needed to run container runtimes in notify socket unit files.


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.10-1
changelog:
  - Update to the latest container-selinux patch from upstream
  - Label files under /usr/libexec/lxc as container_runtime_exec_t
  - Give container_t access to XFRM sockets
  - Allow spc_t to dbus chat with init system
  - Allow containers to read cgroup configuration mounted into a container


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.19-1
changelog:
  - Fix mcs transition problem on stdin/stdout/stderr
  - Add labels for CRI-O
  - Allow containers to use tunnel sockets


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:2.73-2
changelog:
  - moved changelog entries:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.
  - Allow container_runtimes to setattr on callers fifo_files
  - Fix restorecon to not error on missing directory


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.7.4-1
changelog:
  - Resolves: #1664009 - bump to v0.7.4
  - remove unused devel and unit-test* packages
  - update go build env


author: Dmitry Alexeev <dmitry.alexeev@oracle.com> - 1:0.1.37-3.0.1
changelog:
  - add oracle registry into the conf file [Orabug: 29845934, 30302344]
  - delivering fix for [Orabug: 29874238] by Nikita Gerasimov <nikita.gerasimov@oracle.com>


author: Avi Miller <avi.miller@oracle.com> - 0.11.1-22.0.1
changelog:
  - Restore SysV init scripts for Oracle Linux 6
  - Require Oracle Unbreakable Enterprise Kernel Release 3 or higher
  - Remove subscription manager dependency for Docker operation


author: Tianyue Lan <tianyue.lan@oracle.com> - 1.1.2-13.0.1
changelog:
  - Restore SysV init scripts for Oracle Linux 6
  - Require Oracle Unbreakable Enterprise Kernel Release 3 or higher
  - change buildreq to use golang-github-coreos-go-systemd >= 2-1


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1.2.0-3
changelog:
  - Resolves: rhbz#1145660 - support /etc/sysconfig/docker-storage 
    From: Colin Walters <walters@redhat.com>
  - patch to ignore selinux if it's disabled
    https://github.com/docker/docker/commit/9e2eb0f1cc3c4ef000e139f1d85a20f0e00971e6
    From: Dan Walsh <dwalsh@redhat.com>


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1.2.0-4
changelog:
  - Resolves: rhbz#1139415 - correct path for bash completion
      /usr/share/bash-completion/completions
  - versioned provides for docker
  - golang versioned requirements for devel and pkg-devel
  - remove macros from changelog
  - don't own dirs owned by vim, systemd, bash


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1.3.0-1
changelog:
  - Resolves: rhbz#1153936 - update to v1.3.0
  - don't install zsh files
  - iptables=false => ip-masq=false


author: Jacob Wang <jacob.wang@oracle.com> - 1.3.2-1
changelog:
  - Update source to 1.3.2 from https://github.com/docker/docker/releases/tag/v1.3.2
    Prevent host privilege escalation from an image extraction vulnerability (CVE-2014-6407).
    Prevent container escalation from malicious security options applied to images (CVE-2014-6408).
    The `--insecure-registry` flag of the `docker run` command has undergone several refinements and additions. 
    You can now specify a sub-net in order to set a range of registries which the Docker daemon will consider insecure.
    By default, Docker now defines `localhost` as an insecure registry.
    Registries can now be referenced using the Classless Inter-Domain Routing (CIDR) format.
    When mirroring is enabled, the experimental registry v2 API is skipped.


author: Jacob Wang <jacob.wang@oracle.com> - 1.3.2-1.0.1
changelog:
  - Rename requirement of docker-io-pkg-devel in %package devel as docker-pkg-devel
  - Rename as docker
  - Restore SysV init scripts for Oracle Linux 6


author: Jacob Wang <jacob.wang@oracle.com> - 1.3.3-1
changelog:
  - Update source to 1.3.3 from https://github.com/docker/docker/releases/tag/v1.3.3
    Path traversal during processing of absolute symlinks (CVE-2014-9356)
    Escalation of privileges during decompression of LZMA (.xz) archives (CVE-2014-9357)
    Path traversal and spoofing opportunities presented through image identifiers (CVE-2014-9358)


author: Jacob Wang <jacob.wang@oracle.com> - 1.3.3-1.0.1
changelog:
  - Add symlink/LICENSE.BSD and symlink/LICENSE.APACHE under %files macro for docker-pkg-devel
  - Rename requirement of docker-io-pkg-devel in %package devel as docker-pkg-devel
  - Rename as docker
  - Restore SysV init scripts for Oracle Linux 6


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1.4.1-7
changelog:
  - docker group no longer used or created
  - no socket activation
  - config file updates to include info about docker_transition_unconfined
  boolean


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1.4.1-8
changelog:
  - Resolves:rhbz#1185423 - MountFlags=slave in unitfile
  - use golang(github.com/coreos/go-systemd/activation)


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1.4.1-9
changelog:
  - Resolves: rhbz#1184266 - enable debugging
  - Resolves: rhbz#1190748 - enable creation of core dumps
  - set no limit on core dump size


author: Jacob Wang <jacob.wang@oracle.com> - 1.5.0-1.0.1
changelog:
  - Restore SysV init scripts for Oracle Linux 6
  - Require device-mapper 1.02.90-2 or higher (sweekar.pinto@oracle.com)


author: Jacob Wang <jacob.wang@oracle.com> - 1.6.1-1.0.1
changelog:
  - Update source to 1.6.1 from https://github.com/docker/docker/releases/tag/v1.6.1
    Symlink traversal on container respawn allows local privilege escalation (CVE-2015-3629)
    Insecure opening of file-descriptor 1 leading to privilege escalation (CVE-2015-3627)
    Read/write proc paths allow host modification & information disclosure (CVE-2015-3630)
    Volume mounts allow LSM profile escalation (CVE-2015-3631)
    AppArmor policy improvements


author: Durai Govindasamy <durai.vattakalvalasu.govindas@oracle.com> - 19.03.11-10
changelog:
  - Addresses runc CVE-2021-30465 - updated runc versions in cli/vendor.conf and docker-engine/vendor.conf to 1.0.0-rc95.


author: Durai Govindasamy <durai.vattakalvalasu.govindas@oracle.com> - 19.03.11-12
changelog:
  - Addressed oraBug 33099096 docker: Error response from daemon: unable to find user 0: invalid argument.


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.8.2
changelog:
  - Fixes rare edge case of handling GNU LongLink and LongName entries.
  - Fix ^C on docker pull.
  - Fix docker pull issues on client disconnection.
  - Fix issue that caused the daemon to panic when loggers weren't configured properly.
  - Fix goroutine leak pulling images from registry V2.
  - Fix a bug mounting cgroups for docker daemons running inside docker containers.
  - Initialize log configuration properly.
  - Handle -q flag in docker ps properly when there is a default format.
  - Fix several corner cases with netlink.
  - Fix several issues with bash completion.


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.8.3
changelog:
  - Fix layer IDs lead to local graph poisoning (CVE-2014-8178)
  - Fix manifest validation and parsing logic errors allow pull-by-digest validation bypass (CVE-2014-8179)
  - Add --disable-legacy-registry to prevent a daemon from using a v1 registry


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.9.0
changelog:
  - docker stats now returns block IO metrics (#15005)
  - docker stats now details network stats per interface (#15786)
  - Add ancestor=<image> filter to docker ps --filter flag to filter
  - Add label=<somelabel> filter to docker ps --filter to filter containers
  - Add --kernel-memory flag to docker run (#14006)
  - Add --message flag to docker import allowing to specify an optional
  - Add --privileged flag to docker exec (#14113)
  - Add --stop-signal flag to docker run allowing to replace the container
  - Add a new unless-stopped restart policy (#15348)
  - Inspecting an image now returns tags (#13185)
  - Add container size information to docker inspect (#15796)
  - Add RepoTags and RepoDigests field to /images/{name:.*}/json (#17275)
  - Remove the deprecated /container/ps endpoint from the API (#15972)
  - Send and document correct HTTP codes for /exec/<name>/start (#16250)
  - Share shm and mqueue between containers sharing IPC namespace (#15862)
  - Event stream now shows OOM status when --oom-kill-disable is set (#16235)
  - Ensure special network files (/etc/hosts etc.) are read-only if bind-mounted
  - Improve rmi performance (#16890)
  - Do not update /etc/hosts for the default bridge network, except for links (#17325)
  - Fix conflict with duplicate container names (#17389)
  - Fix an issue with incorrect template execution in docker inspect (#17284)
  - DEPRECATE -c short flag variant for --cpu-shares in docker run (#16271)
  - Allow docker import to import from local files (#11907)
  - Add a STOPSIGNAL Dockerfile instruction allowing to set a different
  - Add an ARG Dockerfile instruction and a --build-arg flag to docker build
  - Improve cache miss performance (#16890)
  - devicemapper: Implement deferred deletion capability (#16381)
  - docker network exits experimental and is part of standard release (#16645)
  - New network top-level concept, with associated subcommands and API (#16645)
  - Support for multiple isolated/micro-segmented networks (#16645)
  - Built-in multihost networking using VXLAN based overlay driver (#14071)
  - Support for third-party network plugins (#13424)
  - Ability to dynamically connect containers to multiple networks (#16645)
  - Support for user-defined IP address management via pluggable IPAM drivers (#16910)
  - Add daemon flags --cluster-store and --cluster-advertise for built-in nodes discovery (#16229)
  - Add --cluster-store-opt for setting up TLS settings (#16644)
  - Add --dns-opt to the daemon (#16031)
  - DEPRECATE following container NetworkSettings fields in API v1.21: EndpointID, Gateway,
  - New top-level volume subcommand and API (#14242)
  - Move API volume driver settings to host-specific config (#15798)
  - Print an error message if volume name is not unique (#16009)
  - Ensure volumes created from Dockerfiles always use the local volume driver
  - DEPRECATE auto-creating missing host paths for bind mounts (#16349)
  - Add awslogs logging driver for Amazon CloudWatch (#15495)
  - Add generic tag log option to allow customizing container/image
  - Implement the docker logs endpoint for the journald driver (#13707)
  - DEPRECATE driver-specific log tags (e.g. syslog-tag, etc.) (#15384)
  - docker search now works with partial names (#16509)
  - Push optimization: avoid buffering to file (#15493)
  - The daemon will display progress for images that were already being pulled
  - Only permissions required for the current action being performed are requested (#)
  - Renaming trust keys (and respective environment variables) from offline to
  - DEPRECATE trust key environment variables
  - Add SELinux profiles to the rpm package (#15832)
  - Fix various issues with AppArmor profiles provided in the deb package
  - Add AppArmor policy that prevents writing to /proc (#15571)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.9.1
changelog:
  - Do not prevent daemon from booting if images could not be restored (#17695)
  - Force IPC mount to unmount on daemon shutdown/init (#17539)
  - Turn IPC unmount errors into warnings (#17554)
  - Fix docker stats performance regression (#17638)
  - Clarify cryptic error message upon docker logs if --log-driver=none (#17767)
  - Fix seldom panics (#17639, #17634, #17703)
  - Fix opq whiteouts problems for files with dot prefix (#17819)
  - devicemapper: try defaulting to xfs instead of ext4 for performance reasons (#17903, #17918)
  - devicemapper: fix displayed fs in docker info (#17974)
  - selinux: only relabel if user requested so with the z option (#17450, #17834)
  - Do not make network calls when normalizing names (#18014)
  - Fix docker login on windows (#17738)
  - Fix bug with docker inspect output when not connected to daemon (#17715)
  - Fix docker inspect -f {{.HostConfig.Dns}} somecontainer (#17680)
  - Fix regression with symlink behavior in ADD/COPY (#17710)
  - Allow passing a network ID as an argument for --net (#17558)
  - Fix connect to host and prevent disconnect from host for host network (#17476)
  - Fix --fixed-cidr issue when gateway ip falls in ip-range and ip-range is
  - Restore deterministic IPv6 generation from MAC address on default bridge network (#17890)
  - Allow port-mapping only for endpoints created on docker run (#17858)
  - Fixed an endpoint delete issue with a possible stale sbox (#18102)
  - Correct parent chain in v2 push when v1Compatibility files on the disk are inconsistent (#18047)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.10.0
changelog:
  - New docker update command that allows updating resource constraints on running containers [#15078](https://github.com/docker/docker/pull/15078)
  - Add --tmpfs flag to docker run to create a tmpfs mount in a container [#13587](https://github.com/docker/docker/pull/13587)
  - Add --format flag to docker images command [#17692](https://github.com/docker/docker/pull/17692)
  - Allow to set daemon configuration in a file and hot-reload it with the SIGHUP signal [#18587](https://github.com/docker/docker/pull/18587)
  - Updated docker events to include more meta-data and event types [#18888](https://github.com/docker/docker/pull/18888)
  - Add --blkio-weight-device flag to docker run [#13959](https://github.com/docker/docker/pull/13959)
  - Add --device-read-bps and --device-write-bps flags to docker run [#14466](https://github.com/docker/docker/pull/14466)
  - Add --device-read-iops and --device-write-iops flags to docker run [#15879](https://github.com/docker/docker/pull/15879)
  - Add --oom-score-adj flag to docker run [#16277](https://github.com/docker/docker/pull/16277)
  - Add --detach-keys flag to attach, run, start and exec commands to override the default key sequence that detaches from a container  [#15666](https://github.com/docker/docker/pull/15666)
  - Add --shm-size flag to run, create and build to set the size of /dev/shm [#16168](https://github.com/docker/docker/pull/16168)
  - Show the number of running, stopped, and paused containers in docker info [#19249](https://github.com/docker/docker/pull/19249)
  - Show the OSType and Architecture in docker info [#17478](https://github.com/docker/docker/pull/17478)
  - Add --cgroup-parent flag on daemon to set cgroup parent for all containers [#19062](https://github.com/docker/docker/pull/19062)
  - Add -L flag to docker cp to follow symlinks [#16613](https://github.com/docker/docker/pull/16613)
  - New status=dead filter for docker ps [#17908](https://github.com/docker/docker/pull/17908)
  - Change docker run exit codes to distinguish between runtime and application errors [#14012](https://github.com/docker/docker/pull/14012)
  - Enhance docker events --since and --until to support nanoseconds and timezones [#17495](https://github.com/docker/docker/pull/17495)
  - Add --all/-a flag to stats to include both running and stopped containers [#16742](https://github.com/docker/docker/pull/16742)
  - Change the default cgroup-driver to cgroupfs [#17704](https://github.com/docker/docker/pull/17704)
  - Emit a "tag" event when tagging an image with build -t [#17115](https://github.com/docker/docker/pull/17115)
  - Best effort for linked containers' start order when starting the daemon [#18208](https://github.com/docker/docker/pull/18208)
  - Add ability to add multiple tags on build [#15780](https://github.com/docker/docker/pull/15780)
  - Permit OPTIONS request against any url, thus fixing issue with CORS [#19569](https://github.com/docker/docker/pull/19569)
  - Fix the --quiet flag on docker build to actually be quiet [#17428](https://github.com/docker/docker/pull/17428)
  - Fix docker images --filter dangling=false to now show all non-dangling images [#19326](https://github.com/docker/docker/pull/19326)
  - Fix race condition causing autorestart turning off on restart [#17629](https://github.com/docker/docker/pull/17629)
  - Recognize GPFS filesystems [#19216](https://github.com/docker/docker/pull/19216)
  - Fix obscure bug preventing to start containers [#19751](https://github.com/docker/docker/pull/19751)
  - Forbid exec during container restart [#19722](https://github.com/docker/docker/pull/19722)
  - devicemapper: Increasing --storage-opt dm.basesize will now increase the base device size on daemon restart [#19123](https://github.com/docker/docker/pull/19123)
  - Add --userns-remap flag to daemon to support user namespaces (previously in experimental) [#19187](https://github.com/docker/docker/pull/19187)
  - Add support for custom seccomp profiles in --security-opt [#17989](https://github.com/docker/docker/pull/17989)
  - Add default seccomp profile [#18780](https://github.com/docker/docker/pull/18780)
  - Add --authorization-plugin flag to daemon to customize ACLs [#15365](https://github.com/docker/docker/pull/15365)
  - Docker Content Trust now supports the ability to read and write user delegations [#18887](https://github.com/docker/docker/pull/18887)
  - Allow SELinux to run in a container when using the BTRFS storage driver [#16452](https://github.com/docker/docker/pull/16452)
  - Use content-addressable storage for images and layers [#17924](https://github.com/docker/docker/pull/17924)
  - Add support for the new [manifest format ("schema2")](https://github.com/docker/distribution/blob/master/docs/spec/manifest-v2-2.md) [#18785](https://github.com/docker/docker/pull/18785)
  - Lots of improvements for push and pull: performance++, retries on failed downloads, cancelling on client disconnect [#18353](https://github.com/docker/docker/pull/18353), [#18418](https://github.com/docker/docker/pull/18418), [#19109](https://github.com/docker/docker/pull/19109), [#18353](https://github.com/docker/docker/pull/18353)
  - Limit v1 protocol fallbacks [#18590](https://github.com/docker/docker/pull/18590)
  - Fix issue where docker could hang indefinitely waiting for a nonexistent process to pull an image [#19743](https://github.com/docker/docker/pull/19743)
  - Use DNS-based discovery instead of /etc/hosts [#19198](https://github.com/docker/docker/pull/19198)
  - Support for network-scoped alias using --net-alias on run and --alias on network connect [#19242](https://github.com/docker/docker/pull/19242)
  - Add --ip and --ip6 on run and network connect to support custom IP addresses for a container in a network [#19001](https://github.com/docker/docker/pull/19001)
  - Add --ipam-opt to network create for passing custom IPAM options [#17316](https://github.com/docker/docker/pull/17316)
  - Add --internal flag to network create to restrict external access to and from the network [#19276](https://github.com/docker/docker/pull/19276)
  - Add kv.path option to --cluster-store-opt [#19167](https://github.com/docker/docker/pull/19167)
  - Add discovery.heartbeat and discovery.ttl options to --cluster-store-opt to configure discovery TTL and heartbeat timer [#18204](https://github.com/docker/docker/pull/18204)
  - Add --format flag to network inspect [#17481](https://github.com/docker/docker/pull/17481)
  - Add --link to network connect to provide a container-local alias [#19229](https://github.com/docker/docker/pull/19229)
  - Support for Capability exchange with remote IPAM plugins [#18775](https://github.com/docker/docker/pull/18775)
  - Add --force to network disconnect to force container to be disconnected from network [#19317](https://github.com/docker/docker/pull/19317)
  - Support for multi-host networking using built-in overlay driver for all engine supported kernels: 3.10+ [#18775](https://github.com/docker/docker/pull/18775)
  - --link is now supported on docker run for containers in user-defined network [#19229](https://github.com/docker/docker/pull/19229)
  - Enhance docker network rm to allow removing multiple networks [#17489](https://github.com/docker/docker/pull/17489)
  - Include container names in network inspect [#17615](https://github.com/docker/docker/pull/17615)
  - Include auto-generated subnets for user-defined networks in network inspect [#17316](https://github.com/docker/docker/pull/17316)
  - Add --filter flag to network ls to hide predefined networks [#17782](https://github.com/docker/docker/pull/17782)
  - Add support for network connect/disconnect to stopped containers [#18906](https://github.com/docker/docker/pull/18906)
  - Add network ID to container inspect [#19323](https://github.com/docker/docker/pull/19323)
  - Fix MTU issue where Docker would not start with two or more default routes [#18108](https://github.com/docker/docker/pull/18108)
  - Fix duplicate IP address for containers [#18106](https://github.com/docker/docker/pull/18106)
  - Fix issue preventing sometimes docker from creating the bridge network [#19338](https://github.com/docker/docker/pull/19338)
  - Do not substitute 127.0.0.1 name server when using --net=host [#19573](https://github.com/docker/docker/pull/19573)
  - New logging driver for Splunk [#16488](https://github.com/docker/docker/pull/16488)
  - Add support for syslog over TCP+TLS [#18998](https://github.com/docker/docker/pull/18998)
  - Enhance docker logs --since and --until to support nanoseconds and time [#17495](https://github.com/docker/docker/pull/17495)
  - Enhance AWS logs to auto-detect region [#16640](https://github.com/docker/docker/pull/16640)
  - Add support to set the mount propagation mode for a volume [#17034](https://github.com/docker/docker/pull/17034)
  - Add ls and inspect endpoints to volume plugin API [#16534](https://github.com/docker/docker/pull/16534)
  - Fix data not being copied to named volumes [#19175](https://github.com/docker/docker/pull/19175)
  - Fix issues preventing volume drivers from being containerized [#19500](https://github.com/docker/docker/pull/19500)
  - Fix docker volumes ls --dangling=false to now show all non-dangling volumes [#19671](https://github.com/docker/docker/pull/19671)
  - Do not remove named volumes on container removal [#19568](https://github.com/docker/docker/pull/19568)
  - Allow external volume drivers to host anonymous volumes [#19190](https://github.com/docker/docker/pull/19190)
  - Add support for ** in .dockerignore to wildcard multiple levels of directories [#17090](https://github.com/docker/docker/pull/17090)
  - Fix handling of UTF-8 characters in Dockerfiles [#17055](https://github.com/docker/docker/pull/17055)
  - Fix permissions problem when reading from STDIN [#19283](https://github.com/docker/docker/pull/19283)
  - Add support for overriding the API version to use via an DOCKER_API_VERSION environment-variable [#15964](https://github.com/docker/docker/pull/15964)
  - Fix a bug preventing Windows clients to log in to Docker Hub [#19891](https://github.com/docker/docker/pull/19891)
  - systemd: Set TasksMax in addition to LimitNPROC in systemd service file [#19391](https://github.com/docker/docker/pull/19391)
  - Remove LXC support. The LXC driver was deprecated in Docker 1.8, and has now been removed [#17700](https://github.com/docker/docker/pull/17700)
  - Remove --exec-driver daemon flag, because it is no longer in use [#17700](https://github.com/docker/docker/pull/17700)
  - Remove old deprecated single-dashed long CLI flags (such as -rm; use --rm instead) [#17724](https://github.com/docker/docker/pull/17724)
  - Deprecate HostConfig at API container start [#17799](https://github.com/docker/docker/pull/17799)
  - Deprecate docker packages for newly EOL'd Linux distributions: Fedora 21 and Ubuntu 15.04 (Vivid) [#18794](https://github.com/docker/docker/pull/18794), [#18809](https://github.com/docker/docker/pull/18809)
  - Deprecate -f flag for docker tag [#18350](https://github.com/docker/docker/pull/18350)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.10.1
changelog:
  - Do not stop daemon on migration hard failure [#20156](https://github.com/docker/docker/pull/20156)
  - Fix various issues with migration to content-addressable images [#20058](https://github.com/docker/docker/pull/20058)
  - Fix ZFS permission bug with user namespaces [#20045](https://github.com/docker/docker/pull/20045)
  - Do not leak /dev/mqueue from the host to all containers, keep it container-specific [#19876](https://github.com/docker/docker/pull/19876) [#20133](https://github.com/docker/docker/pull/20133)
  - Fix docker ps --filter before=... to not show stopped containers without providing -a flag [#20135](https://github.com/docker/docker/pull/20135)
  - Fix issue preventing docker events to work properly with authorization plugin [#20002](https://github.com/docker/docker/pull/20002)
  - Add additional verifications and prevent from uploading invalid data to registries [#20164](https://github.com/docker/docker/pull/20164)
  - Fix regression preventing uppercase characters in image reference hostname [#20175](https://github.com/docker/docker/pull/20175)
  - Fix embedded DNS for user-defined networks in the presence of firewalld [#20060](https://github.com/docker/docker/pull/20060)
  - Fix issue where removing a network during shutdown left Docker inoperable [#20181](https://github.com/docker/docker/issues/20181) [#20235](https://github.com/docker/docker/issues/20235)
  - Embedded DNS is now able to return compressed results [#20181](https://github.com/docker/docker/issues/20181)
  - Fix port-mapping issue with userland-proxy=false [#20181](https://github.com/docker/docker/issues/20181)
  - Fix bug where tcp+tls protocol would be rejected [#20109](https://github.com/docker/docker/pull/20109)
  - Fix issue whereby older volume drivers would not receive volume options [#19983](https://github.com/docker/docker/pull/19983)
  - Remove TasksMax from Docker systemd service [#20167](https://github.com/docker/docker/pull/20167)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.10.2
changelog:
  - Prevent systemd from deleting containers' cgroups when its configuration is reloaded [#20518](https://github.com/docker/docker/pull/20518)
  - Fix SELinux issues by disregarding --read-only when mounting /dev/mqueue [#20333](https://github.com/docker/docker/pull/20333)
  - Fix chown permissions used during docker cp when userns is used [#20446](https://github.com/docker/docker/pull/20446)
  - Fix configuration loading issue with all booleans defaulting to true [#20471](https://github.com/docker/docker/pull/20471)
  - Fix occasional panic with docker logs -f [#20522](https://github.com/docker/docker/pull/20522)
  - Keep layer reference if deletion failed to avoid a badly inconsistent state [#20513](https://github.com/docker/docker/pull/20513)
  - Handle gracefully a corner case when canceling migration [#20372](https://github.com/docker/docker/pull/20372)
  - Fix docker import on compressed data [#20367](https://github.com/docker/docker/pull/20367)
  - Fix tar-split files corruption during migration that later cause docker push and docker save to fail [#20458](https://github.com/docker/docker/pull/20458)
  - Fix daemon crash if embedded DNS is sent garbage [#20510](https://github.com/docker/docker/pull/20510)
  - Fix issue with multiple volume references with same name [#20381](https://github.com/docker/docker/pull/20381)
  - Fix potential cache corruption and delegation conflict issues [#20523](https://github.com/docker/docker/pull/20523)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.10.3
changelog:
  - Fix Docker client exiting with an "Unrecognized input header" error [#20706](https://github.com/docker/docker/pull/20706)
  - Fix Docker exiting if Exec is started with both AttachStdin and Detach [#20647](https://github.com/docker/docker/pull/20647)
  - Fix a crash when pushing multiple images sharing the same layers to the same repository in parallel [#20831](https://github.com/docker/docker/pull/20831)
  - Fix a panic when pushing images to a registry which uses a misconfigured token service [#21030](https://github.com/docker/docker/pull/21030)
  - Fix issue preventing volume plugins to start when SELinux is enabled [#20834](https://github.com/docker/docker/pull/20834)
  - Prevent Docker from exiting if a volume plugin returns a null response for Get requests [#20682](https://github.com/docker/docker/pull/20682)
  - Fix plugin system leaking file descriptors if a plugin has an error [#20680](https://github.com/docker/docker/pull/20680)
  - Fix linux32 emulation to fail during docker build [#20672](https://github.com/docker/docker/pull/20672)
  - Fix Oracle XE 10g failing to start in a container [#20981](https://github.com/docker/docker/pull/20981)
  - Fix user namespaces not working on Linux From Scratch [#20685](https://github.com/docker/docker/pull/20685)
  - Fix issue preventing daemon to start if userns is enabled and the subuid or subgid files contain comments [#20725](https://github.com/docker/docker/pull/20725)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.10.3-1.0.1
changelog:
  - Enable configuration of Docker daemon via sysconfig [orabug 21804877]
  - Require UEK4 for docker 1.9 [orabug 22235639 22235645]


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.10.3-1.0.3
changelog:
  - CVE-2016-3697: docker: Potential privilege escalation via confusion of usernames and UIDs [orabug 23279003]


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.11.0
changelog:
  - Fix a bug where Docker would not use the correct uid/gid when processing the WORKDIR command ([#21033](https://github.com/docker/docker/pull/21033))
  - Fix a bug where copy operations with userns would not use the proper uid/gid ([#20782](https://github.com/docker/docker/pull/20782), [#21162](https://github.com/docker/docker/pull/21162))
  - Usage of the : separator for security option has been deprecated. = should be used instead ([#21232](https://github.com/docker/docker/pull/21232))
  - The client user agent is now passed to the registry on pull, build, push, login and search operations ([#21306](https://github.com/docker/docker/pull/21306), [#21373](https://github.com/docker/docker/pull/21373))
  - Allow setting the Domainname and Hostname separately through the API ([#20200](https://github.com/docker/docker/pull/20200))
  - Docker info will now warn users if it can not detect the kernel version or the operating system ([#21128](https://github.com/docker/docker/pull/21128))
  - Fix an issue where docker stats --no-stream output could be all 0s ([#20803](https://github.com/docker/docker/pull/20803))
  - Fix a bug where some newly started container would not appear in a running docker stats command ([#20792](https://github.com/docker/docker/pull/20792))
  - Post processing is no longer enabled for linux-cgo terminals ([#20587](https://github.com/docker/docker/pull/20587))
  - Values to --hostname are now refused if they do not comply with [RFC1123](https://tools.ietf.org/html/rfc1123) ([#20566](https://github.com/docker/docker/pull/20566))
  - Docker learned how to use a SOCKS proxy ([#20366](https://github.com/docker/docker/pull/20366), [#18373](https://github.com/docker/docker/pull/18373))
  - Docker now supports external credential stores ([#20107](https://github.com/docker/docker/pull/20107))
  - docker ps now supports displaying the list of volumes mounted inside a container ([#20017](https://github.com/docker/docker/pull/20017))
  - docker info now also reports Docker's root directory location ([#19986](https://github.com/docker/docker/pull/19986))
  - Docker now prohibits login in with an empty username (spaces are trimmed) ([#19806](https://github.com/docker/docker/pull/19806))
  - Docker events attributes are now sorted by key ([#19761](https://github.com/docker/docker/pull/19761))
  - docker ps no longer shows exported port for stopped containers ([#19483](https://github.com/docker/docker/pull/19483))
  - Docker now cleans after itself if a save/export command fails ([#17849](https://github.com/docker/docker/pull/17849))
  - Docker load learned how to display a progress bar ([#17329](https://github.com/docker/docker/pull/17329), [#120078](https://github.com/docker/docker/pull/20078))
  - Fix a panic that occurred when pulling an image with 0 layers ([#21222](https://github.com/docker/docker/pull/21222))
  - Fix a panic that could occur on error while pushing to a registry with a misconfigured token service ([#21212](https://github.com/docker/docker/pull/21212))
  - All first-level delegation roles are now signed when doing a trusted push ([#21046](https://github.com/docker/docker/pull/21046))
  - OAuth support for registries was added ([#20970](https://github.com/docker/docker/pull/20970))
  - docker login now handles token using the implementation found in [docker/distribution](https://github.com/docker/distribution) ([#20832](https://github.com/docker/docker/pull/20832))
  - docker login will no longer prompt for an email ([#20565](https://github.com/docker/docker/pull/20565))
  - Docker will now fallback to registry V1 if no basic auth credentials are available ([#20241](https://github.com/docker/docker/pull/20241))
  - Docker will now try to resume layer download where it left off after a network error/timeout ([#19840](https://github.com/docker/docker/pull/19840))
  - Fix generated manifest mediaType when pushing cross-repository ([#19509](https://github.com/docker/docker/pull/19509))
  - Fix docker requesting additional push credentials when pulling an image if Content Trust is enabled ([#20382](https://github.com/docker/docker/pull/20382))
  - Fix a race in the journald log driver ([#21311](https://github.com/docker/docker/pull/21311))
  - Docker syslog driver now uses the RFC-5424 format when emitting logs ([#20121](https://github.com/docker/docker/pull/20121))
  - Docker GELF log driver now allows to specify the compression algorithm and level via the gelf-compression-type and gelf-compression-level options ([#19831](https://github.com/docker/docker/pull/19831))
  - Docker daemon learned to output uncolorized logs via the --raw-logs options ([#19794](https://github.com/docker/docker/pull/19794))
  - Docker, on Windows platform, now includes an ETW (Event Tracing in Windows) logging driver named etwlogs ([#19689](https://github.com/docker/docker/pull/19689))
  - Journald log driver learned how to handle tags ([#19564](https://github.com/docker/docker/pull/19564))
  - The fluentd log driver learned the following options: fluentd-address, fluentd-buffer-limit, fluentd-retry-wait, fluentd-max-retries and fluentd-async-connect ([#19439](https://github.com/docker/docker/pull/19439))
  - Docker learned to send log to Google Cloud via the new gcplogs logging driver. ([#18766](https://github.com/docker/docker/pull/18766))
  - When saving linked images together with docker save a subsequent docker load will correctly restore their parent/child relationship ([#21385](https://github.com/docker/docker/pull/21385))
  - Support for building the Docker cli for OpenBSD was added ([#21325](https://github.com/docker/docker/pull/21325))
  - Labels can now be applied at network, volume and image creation ([#21270](https://github.com/docker/docker/pull/21270))
  - The dockremap is now created as a system user ([#21266](https://github.com/docker/docker/pull/21266))
  - Fix a few response body leaks ([#21258](https://github.com/docker/docker/pull/21258))
  - Docker, when run as a service with systemd, will now properly manage its processes cgroups ([#20633](https://github.com/docker/docker/pull/20633))
  - docker info now reports the value of cgroup KernelMemory or emits a warning if it is not supported ([#20863](https://github.com/docker/docker/pull/20863))
  - docker info now also reports the cgroup driver in use ([#20388](https://github.com/docker/docker/pull/20388))
  - Docker completion is now available on PowerShell ([#19894](https://github.com/docker/docker/pull/19894))
  - dockerinit is no more ([#19490](https://github.com/docker/docker/pull/19490),[#19851](https://github.com/docker/docker/pull/19851))
  - Support for building Docker on arm64 was added ([#19013](https://github.com/docker/docker/pull/19013))
  - Experimental support for building docker.exe in a native Windows Docker installation ([#18348](https://github.com/docker/docker/pull/18348))
  - Fix panic if a node is forcibly removed from the cluster ([#21671](https://github.com/docker/docker/pull/21671))
  - Fix "error creating vxlan interface" when starting a container in a Swarm cluster ([#21671](https://github.com/docker/docker/pull/21671))
  - docker network inspect will now report all endpoints whether they have an active container or not ([#21160](https://github.com/docker/docker/pull/21160))
  - Experimental support for the MacVlan and IPVlan network drivers has been added ([#21122](https://github.com/docker/docker/pull/21122))
  - Output of docker network ls is now sorted by network name ([#20383](https://github.com/docker/docker/pull/20383))
  - Fix a bug where Docker would allow a network to be created with the reserved default name ([#19431](https://github.com/docker/docker/pull/19431))
  - docker network inspect returns whether a network is internal or not ([#19357](https://github.com/docker/docker/pull/19357))
  - Control IPv6 via explicit option when creating a network (docker network create --ipv6). This shows up as a new EnableIPv6 field in docker network inspect ([#17513](https://github.com/docker/docker/pull/17513))
  - Support for AAAA Records (aka IPv6 Service Discovery) in embedded DNS Server ([#21396](https://github.com/docker/docker/pull/21396))
  - Fix to not forward docker domain IPv6 queries to external servers ([#21396](https://github.com/docker/docker/pull/21396))
  - Multiple A/AAAA records from embedded DNS Server for DNS Round robin ([#21019](https://github.com/docker/docker/pull/21019))
  - Fix endpoint count inconsistency after an ungraceful dameon restart ([#21261](https://github.com/docker/docker/pull/21261))
  - Move the ownership of exposed ports and port-mapping options from Endpoint to Sandbox ([#21019](https://github.com/docker/docker/pull/21019))
  - Fixed a bug which prevents docker reload when host is configured with ipv6.disable=1 ([#21019](https://github.com/docker/docker/pull/21019))
  - Added inbuilt nil IPAM driver ([#21019](https://github.com/docker/docker/pull/21019))
  - Fixed bug in iptables.Exists() logic [#21019](https://github.com/docker/docker/pull/21019)
  - Fixed a Veth interface leak when using overlay network ([#21019](https://github.com/docker/docker/pull/21019))
  - Fixed a bug which prevents docker reload after a network delete during shutdown ([#20214](https://github.com/docker/docker/pull/20214))
  - Make sure iptables chains are recreated on firewalld reload ([#20419](https://github.com/docker/docker/pull/20419))
  - Allow to pass global datastore during config reload ([#20419](https://github.com/docker/docker/pull/20419))
  - For anonymous containers use the alias name for IP to name mapping, ie:DNS PTR record ([#21019](https://github.com/docker/docker/pull/21019))
  - Fix a panic when deleting an entry from /etc/hosts file  ([#21019](https://github.com/docker/docker/pull/21019))
  - Source the forwarded DNS queries from the container net namespace  ([#21019](https://github.com/docker/docker/pull/21019))
  - Fix to retain the network internal mode config for bridge networks on daemon reload ([#21780] (https://github.com/docker/docker/pull/21780))
  - Fix to retain IPAM driver option configs on daemon reload ([#21914] (https://github.com/docker/docker/pull/21914))
  - Fix a file descriptor leak that would occur every time plugins were enumerated ([#20686](https://github.com/docker/docker/pull/20686))
  - Fix an issue where Authz plugin would corrupt the payload body when faced with a large amount of data ([#20602](https://github.com/docker/docker/pull/20602))
  - Fix a panic that could occur when cleanup after a container started with invalid parameters ([#21716](https://github.com/docker/docker/pull/21716))
  - Fix a race with event timers stopping early ([#21692](https://github.com/docker/docker/pull/21692))
  - Fix race conditions in the layer store, potentially corrupting the map and crashing the process ([#21677](https://github.com/docker/docker/pull/21677))
  - Un-deprecate auto-creation of host directories for mounts. This feature was marked deprecated in ([#21666](https://github.com/docker/docker/pull/21666))
  - It is now possible for containers to share the NET and IPC namespaces when userns is enabled ([#21383](https://github.com/docker/docker/pull/21383))
  - docker inspect <image-id> will now expose the rootfs layers ([#21370](https://github.com/docker/docker/pull/21370))
  - Docker Windows gained a minimal top implementation ([#21354](https://github.com/docker/docker/pull/21354))
  - Docker learned to report the faulty exe when a container cannot be started due to its condition ([#21345](https://github.com/docker/docker/pull/21345))
  - Docker with device mapper will now refuse to run if udev sync is not available ([#21097](https://github.com/docker/docker/pull/21097))
  - Fix a bug where Docker would not validate the config file upon configuration reload ([#21089](https://github.com/docker/docker/pull/21089))
  - Fix a hang that would happen on attach if initial start was to fail ([#21048](https://github.com/docker/docker/pull/21048))
  - Fix an issue where registry service options in the daemon configuration file were not properly taken into account ([#21045](https://github.com/docker/docker/pull/21045))
  - Fix a race between the exec and resize operations ([#21022](https://github.com/docker/docker/pull/21022))
  - Fix an issue where nanoseconds were not correctly taken in account when filtering Docker events ([#21013](https://github.com/docker/docker/pull/21013))
  - Fix the handling of Docker command when passed a 64 bytes id ([#21002](https://github.com/docker/docker/pull/21002))
  - Docker will now return a 204 (i.e http.StatusNoContent) code when it successfully deleted a network ([#20977](https://github.com/docker/docker/pull/20977))
  - Fix a bug where the daemon would wait indefinitely in case the process it was about to killed had already exited on its own ([#20967](https://github.com/docker/docker/pull/20967)
  - The devmapper driver learned the dm.min_free_space option. If the mapped device free space reaches the passed value, new device creation will be prohibited. ([#20786](https://github.com/docker/docker/pull/20786))
  - Docker can now prevent processes in container to gain new privileges via the --security-opt=no-new-privileges flag ([#20727](https://github.com/docker/docker/pull/20727))
  - Starting a container with the --device option will now correctly resolves symlinks ([#20684](https://github.com/docker/docker/pull/20684))
  - Docker now relies on [containerd](https://github.com/docker/containerd) and [runc](https://github.com/opencontainers/runc) to spawn containers. ([#20662](https://github.com/docker/docker/pull/20662))
  - Fix docker configuration reloading to only alter value present in the given config file ([#20604](https://github.com/docker/docker/pull/20604))
  - Docker now allows setting a container hostname via the --hostname flag when --net=host ([#20177](https://github.com/docker/docker/pull/20177))
  - Docker now allows executing privileged container while running with --userns-remap if both --privileged and the new --userns=host flag are specified ([#20111](https://github.com/docker/docker/pull/20111))
  - Fix Docker not cleaning up correctly old containers upon restarting after a crash ([#19679](https://github.com/docker/docker/pull/19679))
  - Docker will now error out if it doesn't recognize a configuration key within the config file ([#19517](https://github.com/docker/docker/pull/19517))
  - Fix container loading, on daemon startup, when they depends on a plugin running within a container ([#19500](https://github.com/docker/docker/pull/19500))
  - docker update learned how to change a container restart policy ([#19116](https://github.com/docker/docker/pull/19116))
  - docker inspect now also returns a new State field containing the container state in a human readable way (i.e. one of created, restarting, running, paused, exited or dead)([#18966](https://github.com/docker/docker/pull/18966))
  - Docker learned to limit the number of active pids (i.e. processes) within the container via the pids-limit flags. NOTE: This requires CGROUP_PIDS=y to be in the kernel configuration. ([#18697](https://github.com/docker/docker/pull/18697))
  - docker load now has a --quiet option to suppress the load output ([#20078](https://github.com/docker/docker/pull/20078))
  - Fix a bug in neighbor discovery for IPv6 peers ([#20842](https://github.com/docker/docker/pull/20842))
  - Fix a panic during cleanup if a container was started with invalid options ([#21802](https://github.com/docker/docker/pull/21802))
  - Fix a situation where a container cannot be stopped if the terminal is closed ([#21840](https://github.com/docker/docker/pull/21840))
  - Object with the pcp_pmcd_t selinux type were given management access to /var/lib/docker(/.*)? ([#21370](https://github.com/docker/docker/pull/21370))
  - restart_syscall, copy_file_range, mlock2 joined the list of allowed calls in the default seccomp profile ([#21117](https://github.com/docker/docker/pull/21117), [#21262](https://github.com/docker/docker/pull/21262))
  - send, recv and x32 were added to the list of allowed syscalls and arch in the default seccomp profile ([#19432](https://github.com/docker/docker/pull/19432))
  - Docker Content Trust now requests the server to perform snapshot signing ([#21046](https://github.com/docker/docker/pull/21046))
  - Support for using YubiKeys for Content Trust signing has been moved out of experimental ([#21591](https://github.com/docker/docker/pull/21591))
  - Output of docker volume ls is now sorted by volume name ([#20389](https://github.com/docker/docker/pull/20389))
  - Local volumes can now accept options similar to the unix mount tool ([#20262](https://github.com/docker/docker/pull/20262))
  - Fix an issue where one letter directory name could not be used as source for volumes ([#21106](https://github.com/docker/docker/pull/21106))
  - docker run -v now accepts a new flag nocopy. This tells the runtime not to copy the container path content into the volume (which is the default behavior) ([#21223](https://github.com/docker/docker/pull/21223))


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.11.1
changelog:
  - Fix schema2 manifest media type to be of type application/vnd.docker.container.image.v1+json ([#21949](https://github.com/docker/docker/pull/21949))
  - Add missing API documentation for changes introduced with 1.11.0 ([#22048](https://github.com/docker/docker/pull/22048))
  - Append label passed to docker build as arguments as an implicit LABEL command at the end of the processed Dockerfile ([#22184](https://github.com/docker/docker/pull/22184))
  - Fix a panic that would occur when forwarding DNS query ([#22261](https://github.com/docker/docker/pull/22261))
  - Fix an issue where OS threads could end up within an incorrect network namespace when using user defined networks ([#22261](https://github.com/docker/docker/pull/22261))
  - Fix a bug preventing labels configuration to be reloaded via the config file ([#22299](https://github.com/docker/docker/pull/22299))
  - Fix a regression where container mounting /var/run would prevent other containers from being removed ([#22256](https://github.com/docker/docker/pull/22256))
  - Fix an issue where it would be impossible to update both memory-swap and memory value together ([#22255](https://github.com/docker/docker/pull/22255))
  - Fix a regression from 1.11.0 where the /auth endpoint would not initialize serveraddress if it is not provided ([#22254](https://github.com/docker/docker/pull/22254))
  - Add missing cleanup of container temporary files when cancelling a schedule restart ([#22237](https://github.com/docker/docker/pull/22237))
  - Remove scary error message when no restart policy is specified ([#21993](https://github.com/docker/docker/pull/21993))
  - Fix a panic that would occur when the plugins were activated via the json spec ([#22191](https://github.com/docker/docker/pull/22191))
  - Fix restart backoff logic to correctly reset delay if container ran for at least 10secs ([#22125](https://github.com/docker/docker/pull/22125))
  - Remove error message when a container restart get cancelled ([#22123](https://github.com/docker/docker/pull/22123))
  - Fix an issue where docker would not correctly clean up after docker exec ([#22121](https://github.com/docker/docker/pull/22121))
  - Fix a panic that could occur when serving concurrent docker stats commands ([#22120](https://github.com/docker/docker/pull/22120))
  - Revert deprecation of non-existent host directories auto-creation ([#22065](https://github.com/docker/docker/pull/22065))
  - Hide misleading rpc error on daemon shutdown ([#22058](https://github.com/docker/docker/pull/22058))


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.11.2
changelog:
  - Fix a stale endpoint issue on overlay networks during ungraceful restart ([#23015](https://github.com/docker/docker/pull/23015))
  - Fix an issue where the wrong port could be reported by docker inspect/ps/port ([#22997](https://github.com/docker/docker/pull/22997))
  - Fix a potential panic when running docker build ([#23032](https://github.com/docker/docker/pull/23032))
  - Fix interpretation of --user parameter ([#22998](https://github.com/docker/docker/pull/22998))
  - Fix a bug preventing container statistics to be correctly reported ([#22955](https://github.com/docker/docker/pull/22955))
  - Fix an issue preventing container to be restarted after daemon restart ([#22947](https://github.com/docker/docker/pull/22947))
  - Fix issues when running 32 bit binaries on Ubuntu 16.04 ([#22922](https://github.com/docker/docker/pull/22922))
  - Fix a possible deadlock on image deletion and container attach ([#22918](https://github.com/docker/docker/pull/22918))
  - Fix an issue where containers fail to start after a daemon restart if they depend on a containerized cluster store ([#22561](https://github.com/docker/docker/pull/22561))
  - Fix an issue causing docker ps to hang on CentOS when using devicemapper ([#22168](https://github.com/docker/docker/pull/22168), [#23067](https://github.com/docker/docker/pull/23067))
  - Fix a bug preventing to docker exec into a container when using devicemapper ([#22168](https://github.com/docker/docker/pull/22168), [#23067](https://github.com/docker/docker/pull/23067))


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.12.0
changelog:
  - New HEALTHCHECK Dockerfile instruction to support user-defined healthchecks [#23218](https://github.com/docker/docker/pull/23218)
  - New SHELL Dockerfile instruction to specify the default shell when using the shell form for commands in a Dockerfile [#22489](https://github.com/docker/docker/pull/22489)
  - Add #escape= Dockerfile directive to support platform-specific parsing of file paths in Dockerfile [#22268](https://github.com/docker/docker/pull/22268)
  - Add support for comments in .dockerignore [#23111](https://github.com/docker/docker/pull/23111)
  - Support for UTF-8 in Dockerfiles [#23372](https://github.com/docker/docker/pull/23372)
  - Skip UTF-8 BOM bytes from Dockerfile and .dockerignore if exist [#23234](https://github.com/docker/docker/pull/23234)
  - Windows: support for ARG to match Linux [#22508](https://github.com/docker/docker/pull/22508)
  - Fix error message when building using a daemon with the bridge network disabled [#22932](https://github.com/docker/docker/pull/22932)
  - Enable seccomp for Centos 7 and Oracle Linux 7 [#22344](https://github.com/docker/docker/pull/22344)
  - Remove MountFlags in systemd unit to allow shared mount propagation [#22806](https://github.com/docker/docker/pull/22806)
  - Add --max-concurrent-downloads and --max-concurrent-uploads daemon flags useful for situations where network connections don't support multiple downloads/uploads [#22445](https://github.com/docker/docker/pull/22445)
  - Registry operations now honor the ALL_PROXY environment variable [#22316](https://github.com/docker/docker/pull/22316)
  - Provide more information to the user on docker load [#23377](https://github.com/docker/docker/pull/23377)
  - Always save registry digest metadata about images pushed and pulled [#23996](https://github.com/docker/docker/pull/23996)
  - Syslog logging driver now supports DGRAM sockets [#21613](https://github.com/docker/docker/pull/21613)
  - Add --details option to docker logs to also display log tags [#21889](https://github.com/docker/docker/pull/21889)
  - Enable syslog logger to have access to env and labels [#21724](https://github.com/docker/docker/pull/21724)
  - An additional syslog-format option rfc5424micro to allow microsecond resolution in syslog timestamp [#21844](https://github.com/docker/docker/pull/21844)
  - Inherit the daemon log options when creating containers [#21153](https://github.com/docker/docker/pull/21153)
  - Remove docker/ prefix from log messages tag and replace it with {{.DaemonName}} so that users have the option of changing the prefix [#22384](https://github.com/docker/docker/pull/22384)
  - Built-in Virtual-IP based  internal and ingress load-balancing using IPVS [#23361](https://github.com/docker/docker/pull/23361)
  - Routing Mesh using ingress overlay network [#23361](https://github.com/docker/docker/pull/23361)
  - Secured multi-host overlay networking using encrypted control-plane and Data-plane [#23361](https://github.com/docker/docker/pull/23361)
  - MacVlan driver is out of experimental [#23524](https://github.com/docker/docker/pull/23524)
  - Add driver filter to network ls [#22319](https://github.com/docker/docker/pull/22319)
  - Adding network filter to docker ps --filter [#23300](https://github.com/docker/docker/pull/23300)
  - Add --link-local-ip flag to create, run and network connect to specify a container's link-local address [#23415](https://github.com/docker/docker/pull/23415)
  - Add network label filter support [#21495](https://github.com/docker/docker/pull/21495)
  - Removed dependency on external KV-Store for Overlay networking in Swarm-Mode  [#23361](https://github.com/docker/docker/pull/23361)
  - Add container's short-id as default network alias [#21901](https://github.com/docker/docker/pull/21901)
  - run options --dns and --net=host are no longer mutually exclusive [#22408](https://github.com/docker/docker/pull/22408)
  - Fix DNS issue when renaming containers with generated names [#22716](https://github.com/docker/docker/pull/22716)
  - Allow both network inspect -f {{.Id}} and network inspect -f {{.ID}} to address inconsistency with inspect output [#23226](https://github.com/docker/docker/pull/23226)
  - New plugin command to manager plugins with install, enable, disable, rm, inspect, set subcommands [#23446](https://github.com/docker/docker/pull/23446)
  - Split the binary into two: docker (client) and dockerd (daemon) [#20639](https://github.com/docker/docker/pull/20639)
  - Add before and since filters to docker images --filter [#22908](https://github.com/docker/docker/pull/22908)
  - Add --limit option to docker search [#23107](https://github.com/docker/docker/pull/23107)
  - Add --filter option to docker search [#22369](https://github.com/docker/docker/pull/22369)
  - Add security options to docker info output [#21172](https://github.com/docker/docker/pull/21172) [#23520](https://github.com/docker/docker/pull/23520)
  - Add insecure registries to docker info output [#20410](https://github.com/docker/docker/pull/20410)
  - Extend Docker authorization with TLS user information [#21556](https://github.com/docker/docker/pull/21556)
  - devicemapper: expose Mininum Thin Pool Free Space through docker info [#21945](https://github.com/docker/docker/pull/21945)
  - API now returns a JSON object when an error occurs making it more consistent [#22880](https://github.com/docker/docker/pull/22880)
  - Prevent docker run -i --restart from hanging on exit [#22777](https://github.com/docker/docker/pull/22777)
  - Fix API/CLI discrepancy on hostname validation [#21641](https://github.com/docker/docker/pull/21641)
  - Fix discrepancy in the format of sizes in stats from HumanSize to BytesSize [#21773](https://github.com/docker/docker/pull/21773)
  - authz: when request is denied return forbbiden exit code (403) [#22448](https://github.com/docker/docker/pull/22448)
  - Windows: fix tty-related displaying issues [#23878](https://github.com/docker/docker/pull/23878)
  - Add --live-restore daemon flag to keep containers running when daemon shuts down, and regain control on startup [#23213](https://github.com/docker/docker/pull/23213)
  - Ability to add OCI-compatible runtimes (via --add-runtime daemon flag) and select one with --runtime on create and run [#22983](https://github.com/docker/docker/pull/22983)
  - New overlay2 graphdriver for Linux 4.0+ with multiple lower directory support [#22126](https://github.com/docker/docker/pull/22126)
  - New load/save image events [#22137](https://github.com/docker/docker/pull/22137)
  - Add support for reloading daemon configuration through systemd [#22446](https://github.com/docker/docker/pull/22446)
  - Add disk quota support for btrfs [#19651](https://github.com/docker/docker/pull/19651)
  - Add disk quota support for zfs [#21946](https://github.com/docker/docker/pull/21946)
  - Add support for docker run --pid=container:<id> [#22481](https://github.com/docker/docker/pull/22481)
  - Align default seccomp profile with selected capabilities [#22554](https://github.com/docker/docker/pull/22554)
  - Add a daemon reload event when the daemon reloads its configuration [#22590](https://github.com/docker/docker/pull/22590)
  - Add trace capability in the pprof profiler to show execution traces in binary form [#22715](https://github.com/docker/docker/pull/22715)
  - Add a detach event [#22898](https://github.com/docker/docker/pull/22898)
  - Add support for setting sysctls with --sysctl [#19265](https://github.com/docker/docker/pull/19265)
  - Add --storage-opt flag to create and run allowing to set size on devicemapper [#19367](https://github.com/docker/docker/pull/19367)
  - Add --oom-score-adjust daemon flag with a default value of -500 making the daemon less likely to be killed before containers [#24516](https://github.com/docker/docker/pull/24516)
  - Undeprecate the -c short alias of --cpu-shares on run, build, create, update [#22621](https://github.com/docker/docker/pull/22621)
  - Prevent from using aufs and overlay graphdrivers on an eCryptfs mount [#23121](https://github.com/docker/docker/pull/23121)
  - Fix issues with tmpfs mount ordering [#22329](https://github.com/docker/docker/pull/22329)
  - Created containers are no longer listed on docker ps -a -f exited=0 [#21947](https://github.com/docker/docker/pull/21947)
  - Fix an issue where containers are stuck in a "Removal In Progress" state [#22423](https://github.com/docker/docker/pull/22423)
  - Fix bug that was returning an HTTP 500 instead of a 400 when not specifying a command on run/create [#22762](https://github.com/docker/docker/pull/22762)
  - Fix bug with --detach-keys whereby input matching a prefix of the detach key was not preserved [#22943](https://github.com/docker/docker/pull/22943)
  - SELinux labeling is now disabled when using --privileged mode [#22993](https://github.com/docker/docker/pull/22993)
  - If volume-mounted into a container, /etc/hosts, /etc/resolv.conf, /etc/hostname are no longer SELinux-relabeled [#22993](https://github.com/docker/docker/pull/22993)
  - Fix inconsistency in --tmpfs behavior regarding mount options [#22438](https://github.com/docker/docker/pull/22438)
  - Fix an issue where daemon hangs at startup [#23148](https://github.com/docker/docker/pull/23148)
  - Ignore SIGPIPE events to prevent journald restarts to crash docker in some cases [#22460](https://github.com/docker/docker/pull/22460)
  - Containers are not removed from stats list on error [#20835](https://github.com/docker/docker/pull/20835)
  - Fix on-failure restart policy when daemon restarts [#20853](https://github.com/docker/docker/pull/20853)
  - Fix an issue with stats when a container is using another container's network [#21904](https://github.com/docker/docker/pull/21904)
  - New swarm command to manage swarms with init, join, join-token, leave, update subcommands [#23361](https://github.com/docker/docker/pull/23361) [#24823](https://github.com/docker/docker/pull/24823)
  - New service command to manage swarm-wide services with create, inspect, update, rm, ps subcommands [#23361](https://github.com/docker/docker/pull/23361) [#25140](https://github.com/docker/docker/pull/25140)
  - New node command to manage nodes with accept, promote, demote, inspect, update, ps, ls and rm subcommands [#23361](https://github.com/docker/docker/pull/23361) [#25140](https://github.com/docker/docker/pull/25140)
  - (experimental) New stack and deploy commands to manage and deploy multi-service applications [#23522](https://github.com/docker/docker/pull/23522) [#25140](https://github.com/docker/docker/pull/25140)
  - Add support for local and global volume scopes (analogous to network scopes) [#22077](https://github.com/docker/docker/pull/22077)
  - Allow volume drivers to provide a Status field [#21006](https://github.com/docker/docker/pull/21006)
  - Add name/driver filter support for volume [#21361](https://github.com/docker/docker/pull/21361)
  - Mount/Unmount operations now receives an opaque ID to allow volume drivers to differentiate between two callers [#21015](https://github.com/docker/docker/pull/21015)
  - Fix issue preventing to remove a volume in a corner case [#22103](https://github.com/docker/docker/pull/22103)
  - Windows: Enable auto-creation of host-path to match Linux [#22094](https://github.com/docker/docker/pull/22094)
  - Environment variables DOCKER_CONTENT_TRUST_OFFLINE_PASSPHRASE and DOCKER_CONTENT_TRUST_TAGGING_PASSPHRASE have been renamed
  - Remove deprecated syslog-tag, gelf-tag, fluentd-tag log option in favor of the more generic tag one [#22620](https://github.com/docker/docker/pull/22620)
  - Remove deprecated feature of passing HostConfig at API container start [#22570](https://github.com/docker/docker/pull/22570)
  - Remove deprecated -f/--force flag on docker tag [#23090](https://github.com/docker/docker/pull/23090)
  - Remove deprecated /containers/<id|name>/copy endpoint [#22149](https://github.com/docker/docker/pull/22149)
  - Remove deprecated docker ps flags --since and --before [#22138](https://github.com/docker/docker/pull/22138)
  - Deprecate the old 3-args form of docker import [#23273](https://github.com/docker/docker/pull/23273)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.12.0-1.0.1
changelog:
  - Enable configuration of Docker daemon via sysconfig [orabug 21804877]
  - Require UEK4 for docker 1.9 [orabug 22235639 22235645]
  - Add selinux policy per distro (Michael Crosby)
  - Add Oracle Linux specific selinux file (Thomas Tanaka) [orabug 23733327]


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.12.0
changelog:
  - the systemd unit file (/usr/lib/systemd/system/docker.service) contains local changes, or
  - a systemd drop-in file is present, and contains -H fd:// in the ExecStart directive
  - Backup the current version of the unit file, and replace the file with the
  - Remove the Requires=docker.socket directive from the /usr/lib/systemd/system/docker.service file if present
  - Remove -H fd:// from the ExecStart directive (both in the main unit file, and in any drop-in files present).
  - New HEALTHCHECK Dockerfile instruction to support user-defined healthchecks [#23218](https://github.com/docker/docker/pull/23218)
  - New SHELL Dockerfile instruction to specify the default shell when using the shell form for commands in a Dockerfile [#22489](https://github.com/docker/docker/pull/22489)
  - Add #escape= Dockerfile directive to support platform-specific parsing of file paths in Dockerfile [#22268](https://github.com/docker/docker/pull/22268)
  - Add support for comments in .dockerignore [#23111](https://github.com/docker/docker/pull/23111)
  - Support for UTF-8 in Dockerfiles [#23372](https://github.com/docker/docker/pull/23372)
  - Skip UTF-8 BOM bytes from Dockerfile and .dockerignore if exist [#23234](https://github.com/docker/docker/pull/23234)
  - Windows: support for ARG to match Linux [#22508](https://github.com/docker/docker/pull/22508)
  - Fix error message when building using a daemon with the bridge network disabled [#22932](https://github.com/docker/docker/pull/22932)
  - Enable seccomp for Centos 7 and Oracle Linux 7 [#22344](https://github.com/docker/docker/pull/22344)
  - Remove MountFlags in systemd unit to allow shared mount propagation [#22806](https://github.com/docker/docker/pull/22806)
  - Add --max-concurrent-downloads and --max-concurrent-uploads daemon flags useful for situations where network connections don't support multiple downloads/uploads [#22445](https://github.com/docker/docker/pull/22445)
  - Registry operations now honor the ALL_PROXY environment variable [#22316](https://github.com/docker/docker/pull/22316)
  - Provide more information to the user on docker load [#23377](https://github.com/docker/docker/pull/23377)
  - Always save registry digest metadata about images pushed and pulled [#23996](https://github.com/docker/docker/pull/23996)
  - Syslog logging driver now supports DGRAM sockets [#21613](https://github.com/docker/docker/pull/21613)
  - Add --details option to docker logs to also display log tags [#21889](https://github.com/docker/docker/pull/21889)
  - Enable syslog logger to have access to env and labels [#21724](https://github.com/docker/docker/pull/21724)
  - An additional syslog-format option rfc5424micro to allow microsecond resolution in syslog timestamp [#21844](https://github.com/docker/docker/pull/21844)
  - Inherit the daemon log options when creating containers [#21153](https://github.com/docker/docker/pull/21153)
  - Remove docker/ prefix from log messages tag and replace it with {{.DaemonName}} so that users have the option of changing the prefix [#22384](https://github.com/docker/docker/pull/22384)
  - Built-in Virtual-IP based  internal and ingress load-balancing using IPVS [#23361](https://github.com/docker/docker/pull/23361)
  - Routing Mesh using ingress overlay network [#23361](https://github.com/docker/docker/pull/23361)
  - Secured multi-host overlay networking using encrypted control-plane and Data-plane [#23361](https://github.com/docker/docker/pull/23361)
  - MacVlan driver is out of experimental [#23524](https://github.com/docker/docker/pull/23524)
  - Add driver filter to network ls [#22319](https://github.com/docker/docker/pull/22319)
  - Adding network filter to docker ps --filter [#23300](https://github.com/docker/docker/pull/23300)
  - Add --link-local-ip flag to create, run and network connect to specify a container's link-local address [#23415](https://github.com/docker/docker/pull/23415)
  - Add network label filter support [#21495](https://github.com/docker/docker/pull/21495)
  - Removed dependency on external KV-Store for Overlay networking in Swarm-Mode  [#23361](https://github.com/docker/docker/pull/23361)
  - Add container's short-id as default network alias [#21901](https://github.com/docker/docker/pull/21901)
  - run options --dns and --net=host are no longer mutually exclusive [#22408](https://github.com/docker/docker/pull/22408)
  - Fix DNS issue when renaming containers with generated names [#22716](https://github.com/docker/docker/pull/22716)
  - Allow both network inspect -f {{.Id}} and network inspect -f {{.ID}} to address inconsistency with inspect output [#23226](https://github.com/docker/docker/pull/23226)
  - New plugin command to manager plugins with install, enable, disable, rm, inspect, set subcommands [#23446](https://github.com/docker/docker/pull/23446)
  - Split the binary into two: docker (client) and dockerd (daemon) [#20639](https://github.com/docker/docker/pull/20639)
  - Add before and since filters to docker images --filter [#22908](https://github.com/docker/docker/pull/22908)
  - Add --limit option to docker search [#23107](https://github.com/docker/docker/pull/23107)
  - Add --filter option to docker search [#22369](https://github.com/docker/docker/pull/22369)
  - Add security options to docker info output [#21172](https://github.com/docker/docker/pull/21172) [#23520](https://github.com/docker/docker/pull/23520)
  - Add insecure registries to docker info output [#20410](https://github.com/docker/docker/pull/20410)
  - Extend Docker authorization with TLS user information [#21556](https://github.com/docker/docker/pull/21556)
  - devicemapper: expose Mininum Thin Pool Free Space through docker info [#21945](https://github.com/docker/docker/pull/21945)
  - API now returns a JSON object when an error occurs making it more consistent [#22880](https://github.com/docker/docker/pull/22880)
  - Prevent docker run -i --restart from hanging on exit [#22777](https://github.com/docker/docker/pull/22777)
  - Fix API/CLI discrepancy on hostname validation [#21641](https://github.com/docker/docker/pull/21641)
  - Fix discrepancy in the format of sizes in stats from HumanSize to BytesSize [#21773](https://github.com/docker/docker/pull/21773)
  - authz: when request is denied return forbbiden exit code (403) [#22448](https://github.com/docker/docker/pull/22448)
  - Windows: fix tty-related displaying issues [#23878](https://github.com/docker/docker/pull/23878)
  - Split the userland proxy to a separate binary (docker-proxy) [#23312](https://github.com/docker/docker/pull/23312)
  - Add --live-restore daemon flag to keep containers running when daemon shuts down, and regain control on startup [#23213](https://github.com/docker/docker/pull/23213)
  - Ability to add OCI-compatible runtimes (via --add-runtime daemon flag) and select one with --runtime on create and run [#22983](https://github.com/docker/docker/pull/22983)
  - New overlay2 graphdriver for Linux 4.0+ with multiple lower directory support [#22126](https://github.com/docker/docker/pull/22126)
  - New load/save image events [#22137](https://github.com/docker/docker/pull/22137)
  - Add support for reloading daemon configuration through systemd [#22446](https://github.com/docker/docker/pull/22446)
  - Add disk quota support for btrfs [#19651](https://github.com/docker/docker/pull/19651)
  - Add disk quota support for zfs [#21946](https://github.com/docker/docker/pull/21946)
  - Add support for docker run --pid=container:<id> [#22481](https://github.com/docker/docker/pull/22481)
  - Align default seccomp profile with selected capabilities [#22554](https://github.com/docker/docker/pull/22554)
  - Add a daemon reload event when the daemon reloads its configuration [#22590](https://github.com/docker/docker/pull/22590)
  - Add trace capability in the pprof profiler to show execution traces in binary form [#22715](https://github.com/docker/docker/pull/22715)
  - Add a detach event [#22898](https://github.com/docker/docker/pull/22898)
  - Add support for setting sysctls with --sysctl [#19265](https://github.com/docker/docker/pull/19265)
  - Add --storage-opt flag to create and run allowing to set size on devicemapper [#19367](https://github.com/docker/docker/pull/19367)
  - Add --oom-score-adjust daemon flag with a default value of -500 making the daemon less likely to be killed before containers [#24516](https://github.com/docker/docker/pull/24516)
  - Undeprecate the -c short alias of --cpu-shares on run, build, create, update [#22621](https://github.com/docker/docker/pull/22621)
  - Prevent from using aufs and overlay graphdrivers on an eCryptfs mount [#23121](https://github.com/docker/docker/pull/23121)
  - Fix issues with tmpfs mount ordering [#22329](https://github.com/docker/docker/pull/22329)
  - Created containers are no longer listed on docker ps -a -f exited=0 [#21947](https://github.com/docker/docker/pull/21947)
  - Fix an issue where containers are stuck in a "Removal In Progress" state [#22423](https://github.com/docker/docker/pull/22423)
  - Fix bug that was returning an HTTP 500 instead of a 400 when not specifying a command on run/create [#22762](https://github.com/docker/docker/pull/22762)
  - Fix bug with --detach-keys whereby input matching a prefix of the detach key was not preserved [#22943](https://github.com/docker/docker/pull/22943)
  - SELinux labeling is now disabled when using --privileged mode [#22993](https://github.com/docker/docker/pull/22993)
  - If volume-mounted into a container, /etc/hosts, /etc/resolv.conf, /etc/hostname are no longer SELinux-relabeled [#22993](https://github.com/docker/docker/pull/22993)
  - Fix inconsistency in --tmpfs behavior regarding mount options [#22438](https://github.com/docker/docker/pull/22438)
  - Fix an issue where daemon hangs at startup [#23148](https://github.com/docker/docker/pull/23148)
  - Ignore SIGPIPE events to prevent journald restarts to crash docker in some cases [#22460](https://github.com/docker/docker/pull/22460)
  - Containers are not removed from stats list on error [#20835](https://github.com/docker/docker/pull/20835)
  - Fix on-failure restart policy when daemon restarts [#20853](https://github.com/docker/docker/pull/20853)
  - Fix an issue with stats when a container is using another container's network [#21904](https://github.com/docker/docker/pull/21904)
  - New swarm command to manage swarms with init, join, join-token, leave, update subcommands [#23361](https://github.com/docker/docker/pull/23361) [#24823](https://github.com/docker/docker/pull/24823)
  - New service command to manage swarm-wide services with create, inspect, update, rm, ps subcommands [#23361](https://github.com/docker/docker/pull/23361) [#25140](https://github.com/docker/docker/pull/25140)
  - New node command to manage nodes with accept, promote, demote, inspect, update, ps, ls and rm subcommands [#23361](https://github.com/docker/docker/pull/23361) [#25140](https://github.com/docker/docker/pull/25140)
  - (experimental) New stack and deploy commands to manage and deploy multi-service applications [#23522](https://github.com/docker/docker/pull/23522) [#25140](https://github.com/docker/docker/pull/25140)
  - Add support for local and global volume scopes (analogous to network scopes) [#22077](https://github.com/docker/docker/pull/22077)
  - Allow volume drivers to provide a Status field [#21006](https://github.com/docker/docker/pull/21006)
  - Add name/driver filter support for volume [#21361](https://github.com/docker/docker/pull/21361)
  - Mount/Unmount operations now receives an opaque ID to allow volume drivers to differentiate between two callers [#21015](https://github.com/docker/docker/pull/21015)
  - Fix issue preventing to remove a volume in a corner case [#22103](https://github.com/docker/docker/pull/22103)
  - Windows: Enable auto-creation of host-path to match Linux [#22094](https://github.com/docker/docker/pull/22094)
  - Environment variables DOCKER_CONTENT_TRUST_OFFLINE_PASSPHRASE and DOCKER_CONTENT_TRUST_TAGGING_PASSPHRASE have been renamed
  - Remove deprecated syslog-tag, gelf-tag, fluentd-tag log option in favor of the more generic tag one [#22620](https://github.com/docker/docker/pull/22620)
  - Remove deprecated feature of passing HostConfig at API container start [#22570](https://github.com/docker/docker/pull/22570)
  - Remove deprecated -f/--force flag on docker tag [#23090](https://github.com/docker/docker/pull/23090)
  - Remove deprecated /containers/<id|name>/copy endpoint [#22149](https://github.com/docker/docker/pull/22149)
  - Remove deprecated docker ps flags --since and --before [#22138](https://github.com/docker/docker/pull/22138)
  - Deprecate the old 3-args form of docker import [#23273](https://github.com/docker/docker/pull/23273)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.12.1
changelog:
  - the systemd unit file (/usr/lib/systemd/system/docker.service) contains local changes, or
  - a systemd drop-in file is present, and contains -H fd:// in the ExecStart directive
  - Backup the current version of the unit file, and replace the file with the
  - Remove the Requires=docker.socket directive from the /usr/lib/systemd/system/docker.service file if present
  - Remove -H fd:// from the ExecStart directive (both in the main unit file, and in any drop-in files present).
  - Add Joined at information in node inspect --pretty [#25512](https://github.com/docker/docker/pull/25512)
  - Fix a crash on service inspect [#25454](https://github.com/docker/docker/pull/25454)
  - Fix issue preventing service update --env-add to work as intended [#25427](https://github.com/docker/docker/pull/25427)
  - Fix issue preventing service update --publish-add to work as intended [#25428](https://github.com/docker/docker/pull/25428)
  - Remove service update --network-add and service update --network-rm flags
  - Official ARM installation for Debian Jessie, Ubuntu Trusty, and Raspbian Jessie [#24815](https://github.com/docker/docker/pull/24815) [#25591](https://github.com/docker/docker/pull/25637)
  - Add selinux policy per distro/version, fixing issue preventing successful installation on Fedora 24, and Oracle Linux [#25334](https://github.com/docker/docker/pull/25334) [#25593](https://github.com/docker/docker/pull/25593)
  - Fix issue that prevented containers to be accessed by hostname with Docker overlay driver in Swarm Mode [#25603](https://github.com/docker/docker/pull/25603) [#25648](https://github.com/docker/docker/pull/25648)
  - Fix random network issues on service with published port [#25603](https://github.com/docker/docker/pull/25603)
  - Fix unreliable inter-service communication after scaling down and up [#25603](https://github.com/docker/docker/pull/25603)
  - Fix issue where removing all tasks on a node and adding them back breaks connectivity with other services [#25603](https://github.com/docker/docker/pull/25603)
  - Fix issue where a task that fails to start results in a race, causing a network xxx not found error that masks the actual error [#25550](https://github.com/docker/docker/pull/25550)
  - Relax validation of SRV records for external services that use SRV records not formatted according to RFC 2782 [#25739](https://github.com/docker/docker/pull/25739)
  - Make daemon events listen for plugin lifecycle events [#24760](https://github.com/docker/docker/pull/24760)
  - Check for plugin state before enabling plugin [#25033](https://github.com/docker/docker/pull/25033)
  - Remove plugin root from filesystem on plugin rm [#25187](https://github.com/docker/docker/pull/25187)
  - Prevent deadlock when more than one plugin is installed [#25384](https://github.com/docker/docker/pull/25384)
  - Mask join tokens in daemon logs [#25346](https://github.com/docker/docker/pull/25346)
  - Fix docker ps --filter causing the results to no longer be sorted by creation time [#25387](https://github.com/docker/docker/pull/25387)
  - Fix various crashes [#25053](https://github.com/docker/docker/pull/25053)
  - Add /proc/timer_list to the masked paths list to prevent information leak from the host [#25630](https://github.com/docker/docker/pull/25630)
  - Allow systemd to run with only --cap-add SYS_ADMIN rather than having to also add --cap-add DAC_READ_SEARCH or disabling seccomp filtering [#25567](https://github.com/docker/docker/pull/25567)
  - Fix an issue where the swarm can get stuck electing a new leader after quorum is lost [#25055](https://github.com/docker/docker/issues/25055)
  - Fix unwanted rescheduling of containers after a leader failover [#25017](https://github.com/docker/docker/issues/25017)
  - Change swarm root CA key to P256 curve [swarmkit#1376](https://github.com/docker/swarmkit/pull/1376)
  - Allow forced removal of a node from a swarm [#25159](https://github.com/docker/docker/pull/25159)
  - Fix connection leak when a node leaves a swarm [swarmkit/#1277](https://github.com/docker/swarmkit/pull/1277)
  - Backdate swarm certificates by one hour to tolerate more clock skew [swarmkit/#1243](https://github.com/docker/swarmkit/pull/1243)
  - Avoid high CPU use with many unschedulable tasks [swarmkit/#1287](https://github.com/docker/swarmkit/pull/1287)
  - Fix issue with global tasks not starting up [swarmkit/#1295](https://github.com/docker/swarmkit/pull/1295)
  - Garbage collect raft logs [swarmkit/#1327](https://github.com/docker/swarmkit/pull/1327)
  - Persist local volume options after a daemon restart [#25316](https://github.com/docker/docker/pull/25316)
  - Fix an issue where the mount ID was not returned on volume unmount [#25333](https://github.com/docker/docker/pull/25333)
  - Fix an issue where a volume mount could inadvertently create a bind mount [#25309](https://github.com/docker/docker/pull/25309)
  - docker service create --mount type=bind,... now correctly validates if the source path exists, instead of creating it [#25494](https://github.com/docker/docker/pull/25494)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.12.2
changelog:
  - the systemd unit file (/usr/lib/systemd/system/docker.service) contains local changes, or
  - a systemd drop-in file is present, and contains -H fd:// in the ExecStart directive
  - Backup the current version of the unit file, and replace the file with the
  - Remove the Requires=docker.socket directive from the /usr/lib/systemd/system/docker.service file if present
  - Remove -H fd:// from the ExecStart directive (both in the main unit file, and in any drop-in files present).
  - Fix a panic due to a race condition filtering docker ps [#26049](https://github.com/docker/docker/pull/26049)
  - Implement retry logic to prevent "Unable to remove filesystem" errors when using the aufs storage driver [#26536](https://github.com/docker/docker/pull/26536)
  - Prevent devicemapper from removing device symlinks if dm.use_deferred_removal is enabled [#24740](https://github.com/docker/docker/pull/24740)
  - Fix an issue where the CLI did not return correct exit codes if a command was run with invalid options [#26777](https://github.com/docker/docker/pull/26777)
  - Fix a panic due to a bug in stdout / stderr processing in health checks [#26507](https://github.com/docker/docker/pull/26507)
  - Fix exec's children handling [#26874](https://github.com/docker/docker/pull/26874)
  - Fix exec form of HEALTHCHECK CMD [#26208](https://github.com/docker/docker/pull/26208)
  - Fix a daemon start panic on armv5 [#24315](https://github.com/docker/docker/issues/24315)
  - Vendor libnetwork [#26879](https://github.com/docker/docker/pull/26879) [#26953](https://github.com/docker/docker/pull/26953)
  - Avoid returning early on agent join failures [docker/libnetwork#1473](https://github.com/docker/libnetwork/pull/1473)
  - Fix service published port cleanup issues [docker/libetwork#1432](https://github.com/docker/libnetwork/pull/1432) [docker/libnetwork#1433](https://github.com/docker/libnetwork/pull/1433)
  - Recover properly from transient gossip failures [docker/libnetwork#1446](https://github.com/docker/libnetwork/pull/1446)
  - Disambiguate node names known to gossip cluster to avoid node name collision [docker/libnetwork#1451](https://github.com/docker/libnetwork/pull/1451)
  - Honor user provided listen address for gossip  [docker/libnetwork#1460](https://github.com/docker/libnetwork/pull/1460)
  - Allow reachability via published port across services on the same host [docker/libnetwork#1398](https://github.com/docker/libnetwork/pull/1398)
  - Change the ingress sandbox name from random id to just ingress_sbox [docker/libnetwork#1449](https://github.com/docker/libnetwork/pull/1449)
  - Disable service discovery in ingress network [docker/libnetwork#1489](https://github.com/docker/libnetwork/pull/1489)
  - Fix remote detection of a node's address when it joins the cluster [#26211](https://github.com/docker/docker/pull/26211)
  - Vendor SwarmKit [#26765](https://github.com/docker/docker/pull/26765)
  - Bounce session after failed status update [docker/swarmkit#1539](https://github.com/docker/swarmkit/pull/1539)
  - Fix possible raft deadlocks [docker/swarmkit#1537](https://github.com/docker/swarmkit/pull/1537)
  - Fix panic and endpoint leak when a service is updated with no endpoints [docker/swarmkit#1481](https://github.com/docker/swarmkit/pull/1481)
  - Produce an error if the same port is published twice on service create or service update [docker/swarmkit#1495](https://github.com/docker/swarmkit/pull/1495)
  - Fix an issue where changes to a service were not detected, resulting in the service not being updated [docker/swarmkit#1497](https://github.com/docker/swarmkit/pull/1497)
  - Do not allow service creation on ingress network [docker/swarmkit#1600](https://github.com/docker/swarmkit/pull/1600)
  - Update the debian sysv-init script to use dockerd instead of docker daemon [#25869](https://github.com/docker/docker/pull/25869)
  - Improve stability when running the docker client on MacOS Sierra [#26875](https://github.com/docker/docker/pull/26875)
  - Fix installation on debian stretch [#27184](https://github.com/docker/docker/pull/27184)
  - Fix an issue where arrow-navigation did not work when running the docker client in ConEmu [#25578](https://github.com/docker/docker/pull/25578)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.12.3
changelog:
  - the systemd unit file (/usr/lib/systemd/system/docker.service) contains local changes, or
  - a systemd drop-in file is present, and contains -H fd:// in the ExecStart directive
  - Backup the current version of the unit file, and replace the file with the
  - Remove the Requires=docker.socket directive from the /usr/lib/systemd/system/docker.service file if present
  - Remove -H fd:// from the ExecStart directive (both in the main unit file, and in any drop-in files present).
  - Fix ambient capability usage in containers (CVE-2016-8867) [#27610](https://github.com/docker/docker/pull/27610)
  - Prevent a deadlock in libcontainerd for Windows [#27136](https://github.com/docker/docker/pull/27136)
  - Fix error reporting in CopyFileWithTar [#27075](https://github.com/docker/docker/pull/27075)
  - Reset health status to starting when a container is restarted [#27387](https://github.com/docker/docker/pull/27387)
  - Properly handle shared mount propagation in storage directory [#27609](https://github.com/docker/docker/pull/27609)
  - Fix docker exec [#27610](https://github.com/docker/docker/pull/27610)
  - Fix backward compatibility with containerd’s events log [#27693](https://github.com/docker/docker/pull/27693)
  - Fix conversion of restart-policy [#27062](https://github.com/docker/docker/pull/27062)
  - Update Swarmkit [#27554](https://github.com/docker/docker/pull/27554)
  - Avoid restarting a task that has already been restarted [docker/swarmkit#1305](https://github.com/docker/swarmkit/pull/1305)
  - Allow duplicate published ports when they use different protocols [docker/swarmkit#1632](https://github.com/docker/swarmkit/pull/1632)
  - Allow multiple randomly assigned published ports on service [docker/swarmkit#1657](https://github.com/docker/swarmkit/pull/1657)
  - Fix panic when allocations happen at init time [docker/swarmkit#1651](https://github.com/docker/swarmkit/pull/1651)
  - Update libnetwork [#27559](https://github.com/docker/docker/pull/27559)
  - Fix race in serializing sandbox to string [docker/libnetwork#1495](https://github.com/docker/libnetwork/pull/1495)
  - Fix race during deletion [docker/libnetwork#1503](https://github.com/docker/libnetwork/pull/1503)
  - Reset endpoint port info on connectivity revoke in bridge driver [docker/libnetwork#1504](https://github.com/docker/libnetwork/pull/1504)
  - Fix a deadlock in networking code [docker/libnetwork#1507](https://github.com/docker/libnetwork/pull/1507)
  - Fix a race in load balancer state [docker/libnetwork#1512](https://github.com/docker/libnetwork/pull/1512)
  - Update fluent-logger-golang to v1.2.1 [#27474](https://github.com/docker/docker/pull/27474)
  - Update buildtags for armhf ubuntu-trusty [#27327](https://github.com/docker/docker/pull/27327)
  - Add AppArmor to runc buildtags for armhf [#27421](https://github.com/docker/docker/pull/27421)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.12.4
changelog:
  - the systemd unit file (/usr/lib/systemd/system/docker.service) contains local changes, or
  - a systemd drop-in file is present, and contains -H fd:// in the ExecStart directive
  - Backup the current version of the unit file, and replace the file with the
  - Remove the Requires=docker.socket directive from the /usr/lib/systemd/system/docker.service file if present
  - Remove -H fd:// from the ExecStart directive (both in the main unit file, and in any drop-in files present).
  - Fix issue where volume metadata was not removed [#29083](https://github.com/docker/docker/pull/29083)
  - Asynchronously close streams to prevent holding container lock [#29050](https://github.com/docker/docker/pull/29050)
  - Fix selinux labels for newly created container volumes [#29050](https://github.com/docker/docker/pull/29050)
  - Remove hostname validation [#28990](https://github.com/docker/docker/pull/28990)
  - Fix deadlocks caused by IO races [#29095](https://github.com/docker/docker/pull/29095) [#29141](https://github.com/docker/docker/pull/29141)
  - Return an empty stats if the container is restarting [#29150](https://github.com/docker/docker/pull/29150)
  - Fix volume store locking [#29151](https://github.com/docker/docker/pull/29151)
  - Ensure consistent status code in API [#29150](https://github.com/docker/docker/pull/29150)
  - Fix incorrect opaque directory permission in overlay2 [#29093](https://github.com/docker/docker/pull/29093)
  - Detect plugin content and error out on docker pull [#29297](https://github.com/docker/docker/pull/29297)
  - Update Swarmkit [#29047](https://github.com/docker/docker/pull/29047)
  - orchestrator/global: Fix deadlock on updates [docker/swarmkit#1760](https://github.com/docker/swarmkit/pull/1760)
  - on leader switchover preserve the vxlan id for existing networks [docker/swarmkit#1773](https://github.com/docker/swarmkit/pull/1773)
  - Refuse swarm spec not named "default" [#29152](https://github.com/docker/docker/pull/29152)
  - Update libnetwork [#29004](https://github.com/docker/docker/pull/29004) [#29146](https://github.com/docker/docker/pull/29146)
  - Fix panic in embedded DNS [docker/libnetwork#1561](https://github.com/docker/libnetwork/pull/1561)
  - Fix unmarhalling panic when passing --link-local-ip on global scope network [docker/libnetwork#1564](https://github.com/docker/libnetwork/pull/1564)
  - Fix panic when network plugin returns nil StaticRoutes [docker/libnetwork#1563](https://github.com/docker/libnetwork/pull/1563)
  - Fix panic in osl.(*networkNamespace).DeleteNeighbor [docker/libnetwork#1555](https://github.com/docker/libnetwork/pull/1555)
  - Fix panic in swarm networking concurrent map read/write [docker/libnetwork#1570](https://github.com/docker/libnetwork/pull/1570)
  - Allow encrypted networks when running docker inside a container [docker/libnetwork#1502](https://github.com/docker/libnetwork/pull/1502)
  - Do not block autoallocation of IPv6 pool [docker/libnetwork#1538](https://github.com/docker/libnetwork/pull/1538)
  - Set timeout for netlink calls [docker/libnetwork#1557](https://github.com/docker/libnetwork/pull/1557)
  - Increase networking local store timeout to one minute [docker/libkv#140](https://github.com/docker/libkv/pull/140)
  - Fix a panic in libnetwork.(*sandbox).execFunc [docker/libnetwork#1556](https://github.com/docker/libnetwork/pull/1556)
  - Honor icc=false for internal networks [docker/libnetwork#1525](https://github.com/docker/libnetwork/pull/1525)
  - Update syslog log driver [#29150](https://github.com/docker/docker/pull/29150)
  - Run "dnf upgrade" before installing in fedora [#29150](https://github.com/docker/docker/pull/29150)
  - Add build-date back to RPM packages [#29150](https://github.com/docker/docker/pull/29150)
  - deb package filename changed to include distro to distinguish between distro code names [#27829](https://github.com/docker/docker/pull/27829)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.12.5
changelog:
  - the systemd unit file (/usr/lib/systemd/system/docker.service) contains local changes, or
  - a systemd drop-in file is present, and contains -H fd:// in the ExecStart directive
  - Backup the current version of the unit file, and replace the file with the
  - Remove the Requires=docker.socket directive from the /usr/lib/systemd/system/docker.service file if present
  - Remove -H fd:// from the ExecStart directive (both in the main unit file, and in any drop-in files present).
  - Fix race on sending stdin close event [#29424](https://github.com/docker/docker/pull/29424)
  - Fix panic in docker network ls when a network was created with --ipv6 and no ipv6 --subnet in older docker versions [#29416](https://github.com/docker/docker/pull/29416)
  - Fix compilation on Darwin [#29370](https://github.com/docker/docker/pull/29370)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.12.6
changelog:
  - the systemd unit file (/usr/lib/systemd/system/docker.service) contains local changes, or
  - a systemd drop-in file is present, and contains -H fd:// in the ExecStart directive
  - Backup the current version of the unit file, and replace the file with the
  - Remove the Requires=docker.socket directive from the /usr/lib/systemd/system/docker.service file if present
  - Remove -H fd:// from the ExecStart directive (both in the main unit file, and in any drop-in files present).
  - Fix runC privilege escalation (CVE-2016-9962)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.12.6-1.0.1
changelog:
  - Enable configuration of Docker daemon via sysconfig [orabug 21804877]
  - Require UEK4 for docker 1.9 [orabug 22235639 22235645]
  - Add docker.conf for prelink [orabug 25147708]


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.12.6-1.0.3
changelog:
  - Update oracle linux selinux policy to match upstream [orabug 25653794]
  - Use dockerd instead of docker daemon as it is deprecrated [orabug 25653794]


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.5.0
changelog:
  - Dockerfile to use for a given docker build can be specified with the -f flag
  - Dockerfile and .dockerignore files can be themselves excluded as part of the .dockerignore file, thus preventing modifications to these files invalidating ADD or COPY instructions cache
  - ADD and COPY instructions accept relative paths
  - Dockerfile FROM scratch instruction is now interpreted as a no-base specifier
  - Improve performance when exposing a large number of ports
  - Allow client-side only integration tests for Windows
  - Include docker-py integration tests against Docker daemon as part of our test suites
  - Support for the new version of the registry HTTP API
  - Speed up docker push for images with a majority of already existing layers
  - Fixed contacting a private registry through a proxy
  - A new endpoint will stream live container resource metrics and can be accessed with the docker stats command
  - Containers can be renamed using the new rename endpoint and the associated docker rename command
  - Container inspect endpoint show the ID of exec commands running in this container
  - Container inspect endpoint show the number of times Docker auto-restarted the container
  - New types of event can be streamed by the events endpoint: ‘OOM’ (container died with out of memory), ‘exec_create’, and ‘exec_start'
  - Fixed returned string fields which hold numeric characters incorrectly omitting surrounding double quotes
  - Docker daemon has full IPv6 support
  - The docker run command can take the --pid=host flag to use the host PID namespace, which makes it possible for example to debug host processes using containerized debugging tools
  - The docker run command can take the --read-only flag to make the container’s root filesystem mounted as readonly, which can be used in combination with volumes to force a container’s processes to only write to locations that will be persisted
  - Container total memory usage can be limited for docker run using the —memory-swap flag
  - Major stability improvements for devicemapper storage driver
  - Better integration with host system: containers will reflect changes to the host's /etc/resolv.conf file when restarted
  - Better integration with host system: per-container iptable rules are moved to the DOCKER chain
  - Fixed container exiting on out of memory to return an invalid exit code
  - The HTTP_PROXY, HTTPS_PROXY, and NO_PROXY environment variables are properly taken into account by the client when connecting to the Docker daemon


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.6.0
changelog:
  - Building images from an image ID
  - Build containers with resource constraints, ie docker build --cpu-shares=100 --memory=1024m...
  - commit --change to apply specified Dockerfile instructions while committing the image
  - import --change to apply specified Dockerfile instructions while importing the image
  - Builds no longer continue in the background when canceled with CTRL-C
  - Windows Support
  - Container and image Labels
  - --cgroup-parent for specifying a parent cgroup to place container cgroup within
  - Logging drivers, json-file, syslog, or none
  - Pulling images by ID
  - --ulimit to set the ulimit on a container
  - --default-ulimit option on the daemon which applies to all created containers (and overwritten by --ulimit on run)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.6.1
changelog:
  - Fix read/write /proc paths (CVE-2015-3630)
  - Prohibit VOLUME /proc and VOLUME / (CVE-2015-3631)
  - Fix opening of file-descriptor 1 (CVE-2015-3627)
  - Fix symlink traversal on container respawn allowing local privilege escalation (CVE-2015-3629)
  - Prohibit mount of /sys
  - Update AppArmor policy to not allow mounts


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.7.0
changelog:
  - Experimental feature: support for out-of-process volume plugins
  - The userland proxy can be disabled in favor of hairpin NAT using the daemon’s --userland-proxy=false flag
  - The exec command supports the -u|--user flag to specify the new process owner
  - Default gateway for containers can be specified daemon-wide using the --default-gateway and --default-gateway-v6 flags
  - The CPU CFS (Completely Fair Scheduler) quota can be set in docker run using --cpu-quota
  - Container block IO can be controlled in docker run using--blkio-weight
  - ZFS support
  - The docker logs command supports a --since argument
  - UTS namespace can be shared with the host with docker run --uts=host
  - Networking stack was entirely rewritten as part of the libnetwork effort
  - Engine internals refactoring
  - Volumes code was entirely rewritten to support the plugins effort
  - Sending SIGUSR1 to a daemon will dump all goroutines stacks without exiting
  - Support ${variable:-value} and ${variable:+value} syntax for environment variables
  - Support resource management flags --cgroup-parent, --cpu-period, --cpu-quota, --cpuset-cpus, --cpuset-mems
  - git context changes with branches and directories
  - The .dockerignore file support exclusion rules
  - Client support for v2 mirroring support for the official registry
  - Firewalld is now supported and will automatically be used when available
  - mounting --device recursively


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.7.1
changelog:
  - Fix default user spawning exec process with docker exec
  - Make --bridge=none not to configure the network bridge
  - Publish networking stats properly
  - Fix implicit devicemapper selection with static binaries
  - Fix socket connections that hung intermittently
  - Fix bridge interface creation on CentOS/RHEL 6.6
  - Fix local dns lookups added to resolv.conf
  - Fix copy command mounting volumes
  - Fix read/write privileges in volumes mounted with --volumes-from
  - Fix unmarshalling of Command and Entrypoint
  - Set limit for minimum client version supported
  - Validate port specification
  - Return proper errors when attach/reattach fail
  - Fix pulling private images
  - Fix fallback between registry V2 and V1


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.8.0
changelog:
  - Trusted pull, push and build, disabled by default
  - Make tar layers deterministic between registries
  - Don't allow deleting the image of running containers
  - Check if a tag name to load is a valid digest
  - Allow one character repository names
  - Add a more accurate error description for invalid tag name
  - Make build cache ignore mtime
  - Add support for DOCKER_CONFIG/--config to specify config file dir
  - Add --type flag  for docker inspect command
  - Add formatting options to docker ps with --format
  - Replace docker -d with new subcommand docker daemon
  - Zsh completion updates and improvements
  - Add some missing events to bash completion
  - Support daemon urls with base paths in docker -H
  - Validate status= filter to docker ps
  - Display when a container is in --net=host in docker ps
  - Extend docker inspect to export image metadata related to graph driver
  - Restore --default-gateway{,-v6} daemon options
  - Add missing unpublished ports in docker ps
  - Allow duration strings in docker events as --since/--until
  - Expose more mounts information in docker inspect
  - Add new Fluentd logging driver
  - Allow docker import to load from local files
  - Add logging driver for GELF via UDP
  - Allow to copy files from host to containers with docker cp
  - Promote volume drivers from experimental to master
  - Add rollover log driver, and --log-driver-opts flag
  - Add memory swappiness tuning options
  - Remove cgroup read-only flag when privileged
  - Make /proc, /sys, & /dev readonly for readonly containers
  - Add cgroup bind mount by default
  - Overlay: Export metadata for container and image in docker inspect
  - Devicemapper: external device activation
  - Devicemapper: Compare uuid of base device on startup
  - Remove RC4 from the list of registry cipher suites
  - Add syslog-facility option
  - LXC execdriver compatibility with recent LXC versions
  - Mark LXC execriver as deprecated (to be removed with the migration to runc)
  - Separate plugin sockets and specs locations
  - Allow TLS connections to plugins
  - Add missing 'Names' field to /containers/json API output
  - Make docker rmi --dangling safe when pulling
  - Devicemapper: Change default basesize to 100G
  - Go Scheduler issue with sync.Mutex and gcc
  - Fix issue where Search API endpoint would panic due to empty AuthConfig
  - Set image canonical names correctly
  - Check dockerinit only if lxc driver is used
  - Fix ulimit usage of nproc
  - Always attach STDIN if -i,--interactive is specified
  - Show error messages when saving container state fails
  - Fixed incorrect assumption on --bridge=none treated as disable network
  - Check for invalid port specifications in host configuration
  - Fix endpoint leave failure for --net=host mode
  - Fix goroutine leak in the stats API if the container is not running
  - Check for apparmor file before reading it
  - Fix DOCKER_TLS_VERIFY being ignored
  - Set umask to the default on startup
  - Correct the message of pause and unpause a non-running container
  - Adjust disallowed CpuShares in container creation
  - ZFS: correctly apply selinux context
  - Display empty string instead of <nil> when IP opt is nil
  - docker kill returns error when container is not running
  - Fix COPY/ADD quoted/json form
  - Fix goroutine leak on logs -f with no output
  - Remove panic in nat package on invalid hostport
  - Fix container linking in Fedora 22
  - Fix error caused using default gateways outside of the allocated range
  - Format times in inspect command with a template as RFC3339Nano
  - Make registry client to accept 2xx and 3xx http status responses as successful
  - Fix race issue that caused the daemon to crash with certain layer downloads failed in a specific order.
  - Fix error when the docker ps format was not valid.
  - Remove redundant ip forward check.
  - Fix issue trying to push images to repository mirrors.
  - Fix error cleaning up network entrypoints when there is an initialization issue.


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.8.3-1.0.1
changelog:
  - Enable configuration of Docker daemon via sysconfig [orabug 21804877]
  - Add documentation files to binary RPM


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.8.3-1.0.2
changelog:
  - Merge pull request #15832 from jfrazelle/add-docker-seliux-policy-for-rpm
  - Add docker seliux policy for rpm


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.8.0
changelog:
  - Trusted pull, push and build, disabled by default
  - Make tar layers deterministic between registries
  - Don't allow deleting the image of running containers
  - Check if a tag name to load is a valid digest
  - Allow one character repository names
  - Add a more accurate error description for invalid tag name
  - Make build cache ignore mtime
  - Add support for DOCKER_CONFIG/--config to specify config file dir
  - Add --type flag  for docker inspect command
  - Add formatting options to docker ps with --format
  - Replace docker -d with new subcommand docker daemon
  - Zsh completion updates and improvements
  - Add some missing events to bash completion
  - Support daemon urls with base paths in docker -H
  - Validate status= filter to docker ps
  - Display when a container is in --net=host in docker ps
  - Extend docker inspect to export image metadata related to graph driver
  - Restore --default-gateway{,-v6} daemon options
  - Add missing unpublished ports in docker ps
  - Allow duration strings in docker events as --since/--until
  - Expose more mounts information in docker inspect
  - Add new Fluentd logging driver
  - Allow docker import to load from local files
  - Add logging driver for GELF via UDP
  - Allow to copy files from host to containers with docker cp
  - Promote volume drivers from experimental to master
  - Add rollover options to json-file log driver, and --log-driver-opts flag
  - Add memory swappiness tuning options
  - Remove cgroup read-only flag when privileged
  - Make /proc, /sys, & /dev readonly for readonly containers
  - Add cgroup bind mount by default
  - Overlay: Export metadata for container and image in docker inspect
  - Devicemapper: external device activation
  - Devicemapper: Compare uuid of base device on startup
  - Remove RC4 from the list of registry cipher suites
  - Add syslog-facility option
  - LXC execdriver compatibility with recent LXC versions
  - Mark LXC execriver as deprecated (to be removed with the migration to runc)
  - Separate plugin sockets and specs locations
  - Allow TLS connections to plugins
  - Add missing 'Names' field to /containers/json API output
  - Make docker rmi of dangling images safe while pulling
  - Devicemapper: Change default basesize to 100G
  - Go Scheduler issue with sync.Mutex and gcc
  - Fix issue where Search API endpoint would panic due to empty AuthConfig
  - Set image canonical names correctly
  - Check dockerinit only if lxc driver is used
  - Fix ulimit usage of nproc
  - Always attach STDIN if -i,--interactive is specified
  - Show error messages when saving container state fails
  - Fixed incorrect assumption on --bridge=none treated as disable network
  - Check for invalid port specifications in host configuration
  - Fix endpoint leave failure for --net=host mode
  - Fix goroutine leak in the stats API if the container is not running
  - Check for apparmor file before reading it
  - Fix DOCKER_TLS_VERIFY being ignored
  - Set umask to the default on startup
  - Correct the message of pause and unpause a non-running container
  - Adjust disallowed CpuShares in container creation
  - ZFS: correctly apply selinux context
  - Display empty string instead of <nil> when IP opt is nil
  - docker kill returns error when container is not running
  - Fix COPY/ADD quoted/json form
  - Fix goroutine leak on logs -f with no output
  - Remove panic in nat package on invalid hostport
  - Fix container linking in Fedora 22
  - Fix error caused using default gateways outside of the allocated range
  - Format times in inspect command with a template as RFC3339Nano
  - Make registry client to accept 2xx and 3xx http status responses as successful
  - Fix race issue that caused the daemon to crash with certain layer downloads failed in a specific order.
  - Fix error when the docker ps format was not valid.
  - Remove redundant ip forward check.
  - Fix issue trying to push images to repository mirrors.
  - Fix error cleaning up network entrypoints when there is an initialization issue.


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.13.0
changelog:
  - Add capability to specify images used as a cache source on build. These images do not need to have local parent chain and can be pulled from other registries [#26839](https://github.com/docker/docker/pull/26839)
  - (experimental) Add option to squash image layers to the FROM image after successful builds [#22641](https://github.com/docker/docker/pull/22641)
  - Fix dockerfile parser with empty line after escape [#24725](https://github.com/docker/docker/pull/24725)
  - Add step number on docker build [#24978](https://github.com/docker/docker/pull/24978)
  - Add support for compressing build context during image build [#25837](https://github.com/docker/docker/pull/25837)
  - add --network to docker build [#27702](https://github.com/docker/docker/pull/27702)
  - Fix inconsistent behavior between --label flag on docker build and docker run [#26027](https://github.com/docker/docker/issues/26027)
  - Fix image layer inconsistencies when using the overlay storage driver [#27209](https://github.com/docker/docker/pull/27209)
  - Unused build-args are now allowed. A warning is presented instead of an error and failed build [#27412](https://github.com/docker/docker/pull/27412)
  - Fix builder cache issue on Windows [#27805](https://github.com/docker/docker/pull/27805)
  - Allow USER in builder on Windows [#28415](https://github.com/docker/docker/pull/28415)
  - Handle env case-insensitive on Windows [#28725](https://github.com/docker/docker/pull/28725)
  - Add support for building docker debs for Ubuntu 16.04 Xenial on PPC64LE [#23438](https://github.com/docker/docker/pull/23438)
  - Add support for building docker debs for Ubuntu 16.04 Xenial on s390x [#26104](https://github.com/docker/docker/pull/26104)
  - Add support for building docker debs for Ubuntu 16.10 Yakkety Yak on PPC64LE [#28046](https://github.com/docker/docker/pull/28046)
  - Add RPM builder for VMWare Photon OS [#24116](https://github.com/docker/docker/pull/24116)
  - Add shell completions to tgz [#27735](https://github.com/docker/docker/pull/27735)
  - Update the install script to allow using the mirror in China [#27005](https://github.com/docker/docker/pull/27005)
  - Add DEB builder for Ubuntu 16.10 Yakkety Yak [#27993](https://github.com/docker/docker/pull/27993)
  - Add RPM builder for Fedora 25 [#28222](https://github.com/docker/docker/pull/28222)
  - Add make deb support for aarch64 [#27625](https://github.com/docker/docker/pull/27625)
  - Update notary dependency to 0.4.2 (full changelogs [here](https://github.com/docker/notary/releases/tag/v0.4.2)) [#27074](https://github.com/docker/docker/pull/27074)
  - Support for compilation on windows [docker/notary#970](https://github.com/docker/notary/pull/970)
  - Improved error messages for client authentication errors [docker/notary#972](https://github.com/docker/notary/pull/972)
  - Support for finding keys that are anywhere in the ~/.docker/trust/private directory, not just under ~/.docker/trust/private/root_keys or ~/.docker/trust/private/tuf_keys [docker/notary#981](https://github.com/docker/notary/pull/981)
  - Previously, on any error updating, the client would fall back on the cache.  Now we only do so if there is a network error or if the server is unavailable or missing the TUF data. Invalid TUF data will cause the update to fail - for example if there was an invalid root rotation. [docker/notary#982](https://github.com/docker/notary/pull/982)
  - Improve root validation and yubikey debug logging [docker/notary#858](https://github.com/docker/notary/pull/858) [docker/notary#891](https://github.com/docker/notary/pull/891)
  - Warn if certificates for root or delegations are near expiry [docker/notary#802](https://github.com/docker/notary/pull/802)
  - Warn if role metadata is near expiry [docker/notary#786](https://github.com/docker/notary/pull/786)
  - Fix passphrase retrieval attempt counting and terminal detection [docker/notary#906](https://github.com/docker/notary/pull/906)
  - Avoid unnecessary blob uploads when different users push same layers to authenticated registry [#26564](https://github.com/docker/docker/pull/26564)
  - Allow external storage for registry credentials [#26354](https://github.com/docker/docker/pull/26354)
  - Standardize the default logging tag value in all logging drivers [#22911](https://github.com/docker/docker/pull/22911)
  - Improve performance and memory use when logging of long log lines [#22982](https://github.com/docker/docker/pull/22982)
  - Enable syslog driver for windows [#25736](https://github.com/docker/docker/pull/25736)
  - Add Logentries Driver [#27471](https://github.com/docker/docker/pull/27471)
  - Update of AWS log driver to support tags [#27707](https://github.com/docker/docker/pull/27707)
  - Unix socket support for fluentd [#26088](https://github.com/docker/docker/pull/26088)
  - Enable fluentd logging driver on Windows [#28189](https://github.com/docker/docker/pull/28189)
  - Sanitize docker labels when used as journald field names [#23725](https://github.com/docker/docker/pull/23725)
  - Fix an issue where docker logs --tail returned less lines than expected [#28203](https://github.com/docker/docker/pull/28203)
  - Splunk Logging Driver: performance and reliability improvements [#26207](https://github.com/docker/docker/pull/26207)
  - Splunk Logging Driver: configurable formats and skip for verifying connection [#25786](https://github.com/docker/docker/pull/25786)
  - Add --attachable network support to enable docker run to work in swarm-mode overlay network [#25962](https://github.com/docker/docker/pull/25962)
  - Add support for host port PublishMode in services using the --publish option in docker service create [#27917](https://github.com/docker/docker/pull/27917) and [#28943](https://github.com/docker/docker/pull/28943)
  - Add support for Windows server 2016 overlay network driver (requires upcoming ws2016 update) [#28182](https://github.com/docker/docker/pull/28182)
  - Change the default FORWARD policy to DROP [#28257](https://github.com/docker/docker/pull/28257)
  - Add support for specifying static IP addresses for predefined network on windows [#22208](https://github.com/docker/docker/pull/22208)
  - Fix --publish flag on docker run not working with IPv6 addresses [#27860](https://github.com/docker/docker/pull/27860)
  - Fix inspect network show gateway with mask [#25564](https://github.com/docker/docker/pull/25564)
  - Fix an issue where multiple addresses in a bridge may cause --fixed-cidr to not have the correct addresses [#26659](https://github.com/docker/docker/pull/26659)
  - Add creation timestamp to docker network inspect [#26130](https://github.com/docker/docker/pull/26130)
  - Show peer nodes in docker network inspect for swarm overlay networks [#28078](https://github.com/docker/docker/pull/28078)
  - Enable ping for service VIP address [#28019](https://github.com/docker/docker/pull/28019)
  - Move plugins out of experimental [#28226](https://github.com/docker/docker/pull/28226)
  - Add --force on docker plugin remove [#25096](https://github.com/docker/docker/pull/25096)
  - Add support for dynamically reloading authorization plugins [#22770](https://github.com/docker/docker/pull/22770)
  - Add description in docker plugin ls [#25556](https://github.com/docker/docker/pull/25556)
  - Add -f/--format to docker plugin inspect [#25990](https://github.com/docker/docker/pull/25990)
  - Add docker plugin create command [#28164](https://github.com/docker/docker/pull/28164)
  - Send request's TLS peer certificates to authorization plugins [#27383](https://github.com/docker/docker/pull/27383)
  - Support for global-scoped network and ipam plugins in swarm-mode [#27287](https://github.com/docker/docker/pull/27287)
  - Split docker plugin install into two API call /privileges and /pull [#28963](https://github.com/docker/docker/pull/28963)
  - Support docker stack deploy from a Compose file [#27998](https://github.com/docker/docker/pull/27998)
  - (experimental) Implement checkpoint and restore [#22049](https://github.com/docker/docker/pull/22049)
  - Add --format flag to docker info [#23808](https://github.com/docker/docker/pull/23808)
  - Remove --name from docker volume create [#23830](https://github.com/docker/docker/pull/23830)
  - Add docker stack ls [#23886](https://github.com/docker/docker/pull/23886)
  - Add a new is-task ps filter [#24411](https://github.com/docker/docker/pull/24411)
  - Add --env-file flag to docker service create [#24844](https://github.com/docker/docker/pull/24844)
  - Add --format on docker stats [#24987](https://github.com/docker/docker/pull/24987)
  - Make docker node ps default to self in swarm node [#25214](https://github.com/docker/docker/pull/25214)
  - Add --group in docker service create [#25317](https://github.com/docker/docker/pull/25317)
  - Add --no-trunc to service/node/stack ps output [#25337](https://github.com/docker/docker/pull/25337)
  - Add Logs to ContainerAttachOptions so go clients can request to retrieve container logs as part of the attach process [#26718](https://github.com/docker/docker/pull/26718)
  - Allow client to talk to an older server [#27745](https://github.com/docker/docker/pull/27745)
  - Inform user client-side that a container removal is in progress [#26074](https://github.com/docker/docker/pull/26074)
  - Add Isolation to the /info endpoint [#26255](https://github.com/docker/docker/pull/26255)
  - Add userns to the /info endpoint [#27840](https://github.com/docker/docker/pull/27840)
  - Do not allow more than one mode be requested at once in the services endpoint [#26643](https://github.com/docker/docker/pull/26643)
  - Add capability to /containers/create API to specify mounts in a more granular and safer way [#22373](https://github.com/docker/docker/pull/22373)
  - Add --format flag to network ls and volume ls [#23475](https://github.com/docker/docker/pull/23475)
  - Allow the top-level docker inspect command to inspect any kind of resource [#23614](https://github.com/docker/docker/pull/23614)
  - Add --cpus flag to control cpu resources for docker run and docker create, and add NanoCPUs to HostConfig [#27958](https://github.com/docker/docker/pull/27958)
  - Allow unsetting the --entrypoint in docker run or docker create [#23718](https://github.com/docker/docker/pull/23718)
  - Restructure CLI commands by adding docker image and docker container commands for more consistency [#26025](https://github.com/docker/docker/pull/26025)
  - Remove COMMAND column from service ls output [#28029](https://github.com/docker/docker/pull/28029)
  - Add --format to docker events [#26268](https://github.com/docker/docker/pull/26268)
  - Allow specifying multiple nodes on docker node ps [#26299](https://github.com/docker/docker/pull/26299)
  - Restrict fractional digits to 2 decimals in docker images output [#26303](https://github.com/docker/docker/pull/26303)
  - Add --dns-option to docker run [#28186](https://github.com/docker/docker/pull/28186)
  - Add Image ID to container commit event [#28128](https://github.com/docker/docker/pull/28128)
  - Add external binaries version to docker info [#27955](https://github.com/docker/docker/pull/27955)
  - Add information for Manager Addresses in the output of docker info [#28042](https://github.com/docker/docker/pull/28042)
  - Add a new reference filter for docker images [#27872](https://github.com/docker/docker/pull/27872)
  - Add --experimental daemon flag to enable experimental features, instead of shipping them in a separate build [#27223](https://github.com/docker/docker/pull/27223)
  - Add a --shutdown-timeout daemon flag to specify the default timeout (in seconds) to stop containers gracefully before daemon exit [#23036](https://github.com/docker/docker/pull/23036)
  - Add --stop-timeout to specify the timeout value (in seconds) for individual containers to stop [#22566](https://github.com/docker/docker/pull/22566)
  - Add a new daemon flag --userland-proxy-path to allow configuring the userland proxy instead of using the hardcoded docker-proxy from $PATH [#26882](https://github.com/docker/docker/pull/26882)
  - Add boolean flag --init on dockerd and on docker run to use [tini](https://github.com/krallin/tini) a zombie-reaping init process as PID 1 [#26061](https://github.com/docker/docker/pull/26061) [#28037](https://github.com/docker/docker/pull/28037)
  - Add a new daemon flag --init-path to allow configuring the path to the docker-init binary [#26941](https://github.com/docker/docker/pull/26941)
  - Add support for live reloading insecure registry in configuration [#22337](https://github.com/docker/docker/pull/22337)
  - Add support for storage-opt size on Windows daemons [#23391](https://github.com/docker/docker/pull/23391)
  - Improve reliability of docker run --rm by moving it from the client to the daemon  [#20848](https://github.com/docker/docker/pull/20848)
  - Add support for --cpu-rt-period and --cpu-rt-runtime flags, allowing containers to run real-time threads when CONFIG_RT_GROUP_SCHED is enabled in the kernel [#23430](https://github.com/docker/docker/pull/23430)
  - Allow parallel stop, pause, unpause [#24761](https://github.com/docker/docker/pull/24761) / [#26778](https://github.com/docker/docker/pull/26778)
  - Implement XFS quota for overlay2 [#24771](https://github.com/docker/docker/pull/24771)
  - Fix partial/full filter issue in service tasks --filter [#24850](https://github.com/docker/docker/pull/24850)
  - Allow engine to run inside a user namespace [#25672](https://github.com/docker/docker/pull/25672)
  - Fix a race condition between device deferred removal and resume device, when using the devicemapper graphdriver [#23497](https://github.com/docker/docker/pull/23497)
  - Add docker stats support in Windows [#25737](https://github.com/docker/docker/pull/25737)
  - Allow using --pid=host and --net=host when --userns=host [#25771](https://github.com/docker/docker/pull/25771)
  - (experimental) Add metrics (Prometheus) output for basic container, image, and daemon operations [#25820](https://github.com/docker/docker/pull/25820)
  - Fix issue in docker stats with NetworkDisabled=true [#25905](https://github.com/docker/docker/pull/25905)
  - Add docker top support in Windows [#25891](https://github.com/docker/docker/pull/25891)
  - Record pid of exec'd process [#27470](https://github.com/docker/docker/pull/27470)
  - Add support for looking up user/groups via getent [#27599](https://github.com/docker/docker/pull/27599)
  - Add new docker system command with df and prune subcommands for system resource management, as well as docker {container,image,volume,network} prune subcommands [#26108](https://github.com/docker/docker/pull/26108) [#27525](https://github.com/docker/docker/pull/27525) / [#27525](https://github.com/docker/docker/pull/27525)
  - Fix an issue where containers could not be stopped or killed by setting xfs max_retries to 0 upon ENOSPC with devicemapper [#26212](https://github.com/docker/docker/pull/26212)
  - Fix docker cp failing to copy to a container's volume dir on CentOS with devicemapper [#28047](https://github.com/docker/docker/pull/28047)
  - Promote overlay(2) graphdriver [#27932](https://github.com/docker/docker/pull/27932)
  - Add --seccomp-profile daemon flag to specify a path to a seccomp profile that overrides the default [#26276](https://github.com/docker/docker/pull/26276)
  - Fix ulimits in docker inspect when --default-ulimit is set on daemon [#26405](https://github.com/docker/docker/pull/26405)
  - Add workaround for overlay issues during build in older kernels [#28138](https://github.com/docker/docker/pull/28138)
  - Add TERM environment variable on docker exec -t [#26461](https://github.com/docker/docker/pull/26461)
  - Honor a container’s --stop-signal setting upon docker kill [#26464](https://github.com/docker/docker/pull/26464)
  - Add secret management [#27794](https://github.com/docker/docker/pull/27794)
  - Add support for templating service options (hostname, mounts, and environment variables) [#28025](https://github.com/docker/docker/pull/28025)
  - Display the endpoint mode in the output of docker service inspect --pretty [#26906](https://github.com/docker/docker/pull/26906)
  - Make docker service ps output more bearable by shortening service IDs in task names [#28088](https://github.com/docker/docker/pull/28088)
  - Make docker node ps default to the current node [#25214](https://github.com/docker/docker/pull/25214)
  - Add --dns, --dns-opt, and --dns-search to service create. [#27567](https://github.com/docker/docker/pull/27567)
  - Add --force to docker service update [#27596](https://github.com/docker/docker/pull/27596)
  - Add --health-* and --no-healthcheck flags to docker service create and docker service update [#27369](https://github.com/docker/docker/pull/27369)
  - Add -q to docker service ps [#27654](https://github.com/docker/docker/pull/27654)
  - Display number of global services in docker service ls [#27710](https://github.com/docker/docker/pull/27710)
  - Remove --name flag from docker service update. This flag is only functional on docker service create, so was removed from the update command [#26988](https://github.com/docker/docker/pull/26988)
  - Fix worker nodes failing to recover because of transient networking issues [#26646](https://github.com/docker/docker/issues/26646)
  - Add support for health aware load balancing and DNS records [#27279](https://github.com/docker/docker/pull/27279)
  - Add --hostname to docker service create [#27857](https://github.com/docker/docker/pull/27857)
  - Add --host to docker service create, and --host-add, --host-rm to docker service update [#28031](https://github.com/docker/docker/pull/28031)
  - Add --tty flag to docker service create/update [#28076](https://github.com/docker/docker/pull/28076)
  - Autodetect, store, and expose node IP address as seen by the manager [#27910](https://github.com/docker/docker/pull/27910)
  - Encryption at rest of manager keys and raft data [#27967](https://github.com/docker/docker/pull/27967)
  - Add --update-max-failure-ratio, --update-monitor and --rollback flags to docker service update [#26421](https://github.com/docker/docker/pull/26421)
  - Fix an issue with address autodiscovery on docker swarm init running inside a container [#26457](https://github.com/docker/docker/pull/26457)
  - (experimental) Add docker service logs command to view logs for a service [#28089](https://github.com/docker/docker/pull/28089)
  - Pin images by digest for docker service create and update [#28173](https://github.com/docker/docker/pull/28173)
  - Add short (-f) flag for docker node rm --force and docker swarm leave --force [#28196](https://github.com/docker/docker/pull/28196)
  - Add options to customize Raft snapshots (--max-snapshots, --snapshot-interval) [#27997](https://github.com/docker/docker/pull/27997)
  - Don't repull image if pinned by digest [#28265](https://github.com/docker/docker/pull/28265)
  - Swarm-mode support for Windows [#27838](https://github.com/docker/docker/pull/27838)
  - Allow hostname to be updated on service [#28771](https://github.com/docker/docker/pull/28771)
  - Support v2 plugins [#29433](https://github.com/docker/docker/pull/29433)
  - Add content trust for services [#29469](https://github.com/docker/docker/pull/29469)
  - Add support for labels on volumes [#21270](https://github.com/docker/docker/pull/21270)
  - Add support for filtering volumes by label [#25628](https://github.com/docker/docker/pull/25628)
  - Add a --force flag in docker volume rm to forcefully purge the data of the volume that has already been deleted [#23436](https://github.com/docker/docker/pull/23436)
  - Enhance docker volume inspect to show all options used when creating the volume [#26671](https://github.com/docker/docker/pull/26671)
  - Add support for local NFS volumes to resolve hostnames [#27329](https://github.com/docker/docker/pull/27329)
  - Fix selinux labeling of volumes shared in a container [#23024](https://github.com/docker/docker/pull/23024)
  - Prohibit /sys/firmware/** from being accessed with apparmor [#26618](https://github.com/docker/docker/pull/26618)
  - Marked the docker daemon command as deprecated. The daemon is moved to a separate binary (dockerd), and should be used instead [#26834](https://github.com/docker/docker/pull/26834)
  - Deprecate unversioned API endpoints [#28208](https://github.com/docker/docker/pull/28208)
  - Remove Ubuntu 15.10 (Wily Werewolf) as supported platform. Ubuntu 15.10 is EOL, and no longer receives updates [#27042](https://github.com/docker/docker/pull/27042)
  - Remove Fedora 22 as supported platform. Fedora 22 is EOL, and no longer receives updates [#27432](https://github.com/docker/docker/pull/27432)
  - Remove Fedora 23 as supported platform. Fedora 23 is EOL, and no longer receives updates [#29455](https://github.com/docker/docker/pull/29455)
  - Deprecate the repo:shortid syntax on docker pull [#27207](https://github.com/docker/docker/pull/27207)
  - Deprecate backing filesystem without d_type for overlay and overlay2 storage drivers [#27433](https://github.com/docker/docker/pull/27433)
  - Deprecate MAINTAINER in Dockerfile [#25466](https://github.com/docker/docker/pull/25466)
  - Deprecate filter param for endpoint /images/json [#27872](https://github.com/docker/docker/pull/27872)
  - Deprecate setting duplicate engine labels [#24533](https://github.com/docker/docker/pull/24533)
  - Deprecate "top-level" network information in NetworkSettings [#28437](https://github.com/docker/docker/pull/28437)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 1.13.1
changelog:
  - Do not require a custom build of tini [#28454](https://github.com/docker/docker/pull/28454)
  - Upgrade to Go 1.7.5 [#30489](https://github.com/docker/docker/pull/30489)
  - Support secrets in docker stack deploy with compose file [#30144](https://github.com/docker/docker/pull/30144)
  - Fix size issue in docker system df [#30378](https://github.com/docker/docker/pull/30378)
  - Fix error on docker inspect when Swarm certificates were expired. [#29246](https://github.com/docker/docker/pull/29246)
  - Fix deadlock on v1 plugin with activate error [#30408](https://github.com/docker/docker/pull/30408)
  - Fix SELinux regression [#30649](https://github.com/docker/docker/pull/30649)
  - Support global scoped network plugins (v2) in swarm mode [#30332](https://github.com/docker/docker/pull/30332)
  - Add docker plugin upgrade [#29414](https://github.com/docker/docker/pull/29414)
  - Fix small regression with old plugins in Windows [#30150](https://github.com/docker/docker/pull/30150)
  - Fix warning on Windows [#30730](https://github.com/docker/docker/pull/30730)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 17.03.0-ce
changelog:
  - Fix panic in docker stats --format [#30776](https://github.com/docker/docker/pull/30776)
  - Update various bash and zsh completion scripts [#30823](https://github.com/docker/docker/pull/30823), [#30945](https://github.com/docker/docker/pull/30945) and more...
  - Block obsolete socket families in default seccomp profile - mitigates unpatched kernels' CVE-2017-6074 [#29076](https://github.com/docker/docker/pull/29076)
  - Fix bug on overlay encryption keys rotation in cross-datacenter swarm [#30727](https://github.com/docker/docker/pull/30727)
  - Fix side effect panic in overlay encryption and network control plane communication failure ("No installed keys could decrypt the message") on frequent swarm leader re-election [#25608](https://github.com/docker/docker/pull/25608)
  - Several fixes around system responsiveness and datapath programming when using overlay network with external kv-store [docker/libnetwork#1639](https://github.com/docker/libnetwork/pull/1639), [docker/libnetwork#1632](https://github.com/docker/libnetwork/pull/1632) and more...
  - Discard incoming plain vxlan packets for encrypted overlay network [#31170](https://github.com/docker/docker/pull/31170)
  - Release the network attachment on allocation failure [#31073](https://github.com/docker/docker/pull/31073)
  - Fix port allocation when multiple published ports map to the same target port [docker/swarmkit#1835](https://github.com/docker/swarmkit/pull/1835)
  - Fix a deadlock in docker logs [#30223](https://github.com/docker/docker/pull/30223)
  - Fix cpu spin waiting for log write events [#31070](https://github.com/docker/docker/pull/31070)
  - Fix a possible crash when using journald [#31231](https://github.com/docker/docker/pull/31231) [#31263](https://github.com/docker/docker/pull/31231)
  - Fix a panic on close of nil channel [#31274](https://github.com/docker/docker/pull/31274)
  - Fix duplicate mount point for --volumes-from in docker run [#29563](https://github.com/docker/docker/pull/29563)
  - Fix --cache-from does not cache last step [#31189](https://github.com/docker/docker/pull/31189)
  - Shutdown leaks an error when the container was never started [#31279](https://github.com/docker/docker/pull/31279)
  - Fix possibility of tasks getting stuck in the "NEW" state during a leader failover [docker/swarmkit#1938](https://github.com/docker/swarmkit/pull/1938)
  - Fix extraneous task creations for global services that led to confusing replica counts in docker service ls [docker/swarmkit#1957](https://github.com/docker/swarmkit/pull/1957)
  - Fix problem that made rolling updates slow when task-history-limit was set to 1 [docker/swarmkit#1948](https://github.com/docker/swarmkit/pull/1948)
  - Restart tasks elsewhere, if appropriate, when they are shut down as a result of nodes no longer satisfying constraints [docker/swarmkit#1958](https://github.com/docker/swarmkit/pull/1958)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 17.03.1-ce
changelog:
  - Fix autoremove on older api [#31692](https://github.com/docker/docker/pull/31692)
  - Fix default network customization for a stack [#31258](https://github.com/docker/docker/pull/31258/)
  - Correct CPU usage calculation in presence of offline CPUs and newer Linux [#31802](https://github.com/docker/docker/pull/31802)
  - Fix issue where service healthcheck is {} in remote API [#30197](https://github.com/docker/docker/pull/30197)
  - Update runc to 54296cf40ad8143b62dbcaa1d90e520a2136ddfe [#3166](https://github.com/docker/docker/pull/31666)
  - Ignore cgroup2 mountpoints [opencontainers/runc#1266](https://github.com/opencontainers/runc/pull/1266)
  - Update containerd to 595e75c212d19a81d2b808a518fe1afc1391dad5 [#31662](https://github.com/docker/docker/pull/31662)
  - Register healtcheck service before calling restore() [docker/containerd#609](https://github.com/docker/containerd/pull/609)
  - Fix docker exec not working after unattended upgrades that reload apparmor profiles [#31773](https://github.com/docker/docker/pull/31773)
  - Fix unmounting layer without merge dir with Overlay2 [#31069](https://github.com/docker/docker/pull/31069)
  - Do not ignore "volume in use" errors when force-delete [#31450](https://github.com/docker/docker/pull/31450)
  - Update swarmkit to 17756457ad6dc4d8a639a1f0b7a85d1b65a617bb [#31807](https://github.com/docker/docker/pull/31807)
  - Scheduler now correctly considers tasks which have been assigned to a node but aren't yet running [docker/swarmkit#1980](https://github.com/docker/swarmkit/pull/1980)
  - Allow removal of a network when only dead tasks reference it [docker/swarmkit#2018](https://github.com/docker/swarmkit/pull/2018)
  - Retry failed network allocations less aggressively [docker/swarmkit#2021](https://github.com/docker/swarmkit/pull/2021)
  - Avoid network allocation for tasks that are no longer running [docker/swarmkit#2017](https://github.com/docker/swarmkit/pull/2017)
  - Bookkeeping fixes inside network allocator allocator [docker/swarmkit#2019](https://github.com/docker/swarmkit/pull/2019) [docker/swarmkit#2020](https://github.com/docker/swarmkit/pull/2020)
  - Cleanup HCS on restore [#31503](https://github.com/docker/docker/pull/31503)


author: Oracle USA <ol-ovm-info_ww@oracle.com> - 17.03.1-ce-1.0.1
changelog:
  - Enable configuration of Docker daemon via sysconfig [orabug 21804877]
  - Require UEK4 for docker 1.9 [orabug 22235639 22235645]
  - Add docker.conf for prelink [orabug 25147708]
  - Update oracle linux selinux policy to match upstream [orabug 25653794]
  - Use dockerd instead of docker daemon as it is deprecreated [orabug 25653794]


author: <jesse.butler@oracle.com> 17.06.2.ol-1.0.1
changelog:
  - add docker-storage-config utility
  - build updated docker-engine package for Oracle Linux 7
  - bump version to 17.06.2-ce


author: <jesse.butler@oracle.com> 17.06.2.ol-1.0.1
changelog:
  - Update docker-engine package for upstream 17.06.2 [orabug 26673768]
  - Migrate to new "ol"-based versioning
  - add docker-storage-config utility


author: <laszlo.peter@oracle.com> 18.03.1.ol-0.0.6
changelog:
  - obsolete/provide the docker package [orabug 28216396]
  - Fix docker plugin reference resolution [orabug 28376247]


author: <jesse.butler@oracle.com> 17.03.1-ce-3.0.1
changelog:
  - Update docker-engine package for upstream 17.03.1
  - Enable configuration of Docker daemon via sysconfig [orabug 21804877]
  - Require UEK4 for docker 1.9 [orabug 22235639 22235645]
  - Add docker.conf for prelink [orabug 25147708]
  - Update oracle linux selinux policy to match upstream [orabug 25653794]
  - Use dockerd instead of docker daemon as it is deprecated [orabug 25653794]


author: Manjunath Patil <manjunath.b.patil@oracle.com> [1-4]
changelog:
  - BUILDINFO: commit=fd8081c061be2b12528dc0239e422a7e114f879f
  - changes to build pkgs on OL8
  - release fdr-1-4


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.10.2-1.0.2.dev
changelog:
  - kubeadm-setup.sh join now changes for 1.10.2
  - Fix pause-amd64 to be 3.1
  - Upstream modification for Oracle


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.10.5-2.3.4
changelog:
  - [CVE-2019-1002100] Limit the number of operations in a single json patch to be 10,000
  - Fixup kubeadm-setup.sh, kubeadm-registry.sh and image


author: Muminul Islam <muminul.islam@oracle.com> - 1.10.5-2.7.4
changelog:
  - [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: `kubectl --http-cache=<world-accessible dir>`
  - creates world-writeable cached schema files


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.11.3-1.0.2
changelog:
  - Change 10-kubeadm.conf for v1.11+
  - Add /etc/sysconfig/kubelet
  - Upstream modification for Oracle
  - Fix build failure


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.11.3-1.0.6
changelog:
  - Additional fixes for v1.11
  - Add coredns image upload for kubeadm-registry.sh
  - Don't print all of the join message
  - Need to fix up imageRepository for upgrade


author: Ivin Sony <ivin.sony@oracle.com> - 1.11.3.2.6.2
changelog:
  - [OLCNE-384] [CVE-2019-11243] rest.AnonymousClientConfig() does not remove the serviceaccount credentials from config created by rest.InClusterConfig()


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.12.10-1.0.12
changelog:
  - CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements
  - CVE-2020-8555: Half-Blind SSRF in kube-controller-manager


author: Thomas Tanaka <thomas.tanaka@orcle.com> - 1.12.10-1.0.13
changelog:
  - CVE-2020-8559: Privilege escalation from compromised node to cluster
  - CVE-2020-8557: Node disk DOS by writing to container /etc/hosts


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.12.3-2.0.3
changelog:
  - [Orabug 29039439] check for master/worker should be early.
  - [Orabug 29043634] include v1.9.11 image to kubeadm-registry.sh.


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.9.1-1.0.1.dev
changelog:
  - Fix kubeadm-setup.sh for v1.9.1
  - Fix kubeadm-registry.sh for v1.9.1
  - Upstream modifications for Oracle
  - Update to v1.9.1


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.9.1-1.0.8.dev
changelog:
  - Properly take care of KUBE_REPO_PREFIX for worker upgrade
  - In restart case, take care of no image case


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.9.1-2.1.3.dev
changelog:
  - Ensure that the runtime mounts RO volumes read-only [CVE-2017-1002102]
  - Update Dashboard version to v1.8.3 [CVE-2017-1002102]
  - Fix nested volume mounts for read-only API data volumes [CVE-2017-1002102]
  - Fixed kubeadm-setup.sh and kubeadm-registry.sh
  - Add feature gate for subpath [CVE-2017-1002101]
  - Add subpath e2e tests [CVE-2017-1002101]
  - Lock subPath volumes [CVE-2017-1002101]


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.9.11-2.1.1
changelog:
  - Fix kubeadm-registry.sh
  - Use golang 1.9.3
  - [CVE-2018-1002105] Handle error responses from backends
  - Bump to v1.9.11


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 0.0.1-2.0.1
changelog:
  - Remove "firewall-cmd --reload" as it can hangs OCI
  - Fix some errors reported by Shubham
  - Error out if options is not currently supported in HandleEtcdOps
  - Fix down issue
  - Dump log output to /var/log/kubeadm-ha-setup


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 0.0.1-2.0.7
changelog:
  - Adding a 3rd party license file
  - [Orabug 29152516] Backup and restore /var/lib/kubelet/kubeadm-flags.env too
  - Cleanup kube-ipvs0 interface too
  - More code cleanup
  - Use map for checking kernel module
  - Fix client joining errors
  - Addressing Tom Cocozzello's review


author: Tom Cocozzello <tom.cocozzello@oracle.com> - 0.0.2-1.0.22
changelog:
  - The Trim function doesn't work for replacing strings
  - Upgrade should use the pause container instead of pause-amd64


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 0.0.2-1.0.70
changelog:
  - Enhance image tag read to depend on kubeadm-registry.sh for CVE release
    CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements
    CVE-2020-8555: Half-Blind SSRF in kube-controller-manager


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 3.0-6
changelog:
  - disable python binding build
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>


author: Alexandre Khodakovski <alexandre.khodakovski@oracle.com> - 3.1-1
changelog:
  - Reviewed-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Added ovmjson library (to be used instead of cJSON.c in ovmd and xenstoreprovider). [bug 21877857]


author: Alexandre Khodakovski <alexandre.khodakovski@oracle.com> - 3.1-2
changelog:
  - Reviewed-by: Annie Li <annie.li@oracle.com>
    Sync libovmjson with Windows version (Linux code is not affected). [bug 21877857]


author: Alexandre Khodakovski <alexandre.khodakovski@oracle.com> - 3.1-3
changelog:
  - Reviewed-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Added debug build mode, fixed compiler warnings, added json_size.


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.7.0-3.el6
changelog:
  - BUILDINFO: commit=8d86f5510b6c05f6ac985e1ad44ad74a421dc5ee
  - RPM build: fix OL7 RPM build error for "tools/libs/toollog/xtl_core.c" (Zhigang Wang)  
  - xen.spec: move COPYING to libxenstore RPM (Zhigang Wang)  
  - xen.spec: cleanup: make commands and variables usage consistent (Zhigang Wang)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.7.0-4.el6
changelog:
  - BUILDINFO: commit=fb87cd9fa980c4daebc490c2280342ebf80e21c4
  - xen.spec: s/CONFIG_XSPLICE/CONFIG_LIVEPATCH/ (Konrad Rzeszutek Wilk)  
  - livepatch: Add support for shadow variables. (Ross Lagerwall)  
  - livepach: Add .livepatch.hooks functions and test-case (Ross Lagerwall)  
  - Revert "xsplice: Add .xsplice.hooks functions and test-case" (Konrad Rzeszutek Wilk)  
  - Revert "xsplice: Add support for shadow variables." (Konrad Rzeszutek Wilk)


author: Frank Deng <frank.deng@oracle.com> 1.1.0-4
changelog:
  - Not to do oracle-validated during OS configuration [bug 9460839]
  - Template config scripts take args from kernel cmdline or config file
    [bug 9847943]


author: Fredrick He <fredrick.he@oracle.com> - 1.1.0-7
changelog:
  - update the reset-password.patch
    call the passwd reset function if no product specific config script
    add the passwd cleanup function in ovm_cleanup_os


author: Srinivas Maturi <srinivas.maturi@oracle.com> - 1.1.0-9
changelog:
  - Rename package as ol-template-config, obsoletes ovm-template-config <= 1.1.0
    and conflicts ovm-template-config <= 1.1.0


author: Tianyue Lan <tianyue.lan@oracle.com> - 1.1.0-11
changelog:
  - RFC 1912 is informational, it does say that 127.0.0.1 should have the name "localhost", 
    without any attached domain. [orabug 16619882]


author: Yu Zhou <yu.zhou@oracle.com> - 1.1.0-12
changelog:
  - Rename oraclevm-template to ol-template-config
  - Use systemd service instead of SysV init script
  - Fix network config and ssh connection problem


author: Manjunath Patil <manjunath.b.patil@oracle.com> [0.1-5]
changelog:
  - BUILDINFO: commit=4e6d1dc7741b7b40f4171bdaeaa7737518f37694
  - Orabug: 31793813 - remove release string from oled version


author: Thomas Woerner <twoerner@redhat.com> 2.1.30-11.RHEL4.1
changelog:
  - latest Xpm patches: CAN-2004-0914 (#134631)
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library (#134631)


author: Thomas Woerner <twoerner@redhat.com> 2.1.30-11.RHEL4.2
changelog:
  - allow to write XPM files with absolute path names again (#140815)
  - new patch for tmpnam in imake (only used for build)


author: Vasundhara V <vasundhara.venkatasubramanian@oracle.com> [1.0-3.el7]
changelog:
  - Fix compat-libstdc++-33 package dependency [Orabug 28079892]
   - Add gdbm to 64 bit section
   - Removed ifarch i386 section added the compat-db47, libXi, libXtst, libXrender to 32 bit section


author: Vasundhara V <vasundhara.venkatasubramanian@oracle.com> [1.0-3.el7]
changelog:
  - Fix compat-libstdc++-33 package dependency [Orabug: 28079892]
   - Add gdbm to 64 bit section
   - Removed ifarch i386 section added the compat-db47, libXi, libXtst, libXrender to 32 bit section


author: Vasundhara V <vasundhara.venkatasubramanian@oracle.com> [1.0-5]
changelog:
  - Removed openmotif and added motif, motif-devel to the dependencies [Orabug: 30082983]
   - Add kernel.msgmax, net.ipv4.tcp_tw_recycle [Orabug: 30082893]


author: Gurudas Pai <gurudas.pai@oracle.com> [1.0-1.el6]
changelog:
  - Renamed rpm to oracle-rdbms-server-11gR2-preinstall
        - Included xorg-x11-utils xorg-x11-xauth as dependency bz13653
        - Included kernel-uek as dependency.
        - fs.aio-max-nr=1048576 to match document,bz13653
        - kernel.shmall=2097152 to match document,bz13653
        - kernel.shmmax=536870912 to match document,bz13653
        - nofile soft = 1024 to match document,bz13653
        - nofile hard = 65536 to match document,bz13653
        - nproc soft = 2047 to match document,bz13653
        - nproc hard = 16384 to match document,bz13653
        - stack soft = 10240 to match document,bz13653
        - stack hard = 10240 to match document,bz13653


author: Gurudas Pai <gurudas.pai@oracle.com> [1.0-2.el6]
changelog:
  - kernel.shmall=1073741824 as per bz7256 
        - kernel.shmmax=4398046511104 as per bz7256
        - stack hard = 32768 as per doc max limit


author: Gurudas Pai <gurudas.pai@oracle.com> [1.0-8.el6]
changelog:
  - Disable THP 1557478.1, bug17029612
        - update license to GPLv2.
        - Increase nproc soft limit to 16384, orabug15971421
        - Do not change values if it is already higher
        - fix rpm remove issue of missing updates.
        - fix warning in build of preinstall bz15552


author: Carl Davis <carl.davis@oracle.com> - 8.2.0
changelog:
  - nfsiostat-sysstat replaces iostat -n (Linux only)
  - pidstat added (Linux only)
  - pidstat -d added (active process i/o) (Linux only)
  - ip and ss replaces netstat(Linux only)
  - ip -s -s addr replaces ifconfig -a (Linux only)
  - corrected physical cpu config (Linux only)
  - add xentop (Linux only)


author: Sushmita Bhattacharya <sushmita.bhattacharya@oracle.com> - 8.3.0-4
changelog:
  - Update default config parameters for oswatcher. Also daemon-reload after install [Orabug: 30823577]


author: Cesar Roque <cesar.roque@oracle.com> - 8.3.0-5
changelog:
  - Fix for potential tmp directory removal [Orabug: 30754201]
  - Fix for extra scripts not running [Orabug: 31030490]


author: Cesar Roque <cesar.roque@oracle.com> - 8.3.0-5
changelog:
  - Initial OL8 version [Orabug: 30357804]
  - Fix for potential tmp directory removal [Orabug: 30754201]
  - Fix for extra scripts not running [Orabug: 31030490]


author: Cesar Roque <cesar.roque@oracle.com> - 9.0.0-1
changelog:
  - Update to oswatcher 9.0.0-1 [Orabug: 31693814]
  - Fix scripts paths on OSWatcher.sh to match the oswatcher9 paths [Orabug: 31693828]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 3.7-6.el7
changelog:
  - Do not guess hostname IP when user already provides hosts pairs
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Joe Jin <joe.jin@oracle.com> [bug 22866798]


author: Alexandre Khodakovski <alexandre.khodakovski@oracle.com> - 3.7-4.el7
changelog:
  Use ovmjson library from libovmapi package instead of cJSON.c in ovmd and xenstoreprovider. [bug 21877857]
  Reviewed-by: Zhigang Wang <zhigang.x.wang@oracle.com>


author: Alexandre Khodakovski <alexandre.khodakovski@oracle.com> - 3.7-5.el7
changelog:
  - Removed "goto fail" from sendAliveEvent and sendIPChangeInfoMessage
    Reviewed-by: Zhigang Wang <zhigang.x.wang@oracle.com>


author: Alexandre Khodakovski <alexandre.khodakovski@oracle.com> - 3.7-10.el7
changelog:
  - Oracle-Bug: 27250922
    Fixed deadlock between ovmd and ovm-template-config on attempt to exchange parameters.


author: Alexandre Khodakovski <alexandre.khodakovski@oracle.com> - 3.7-11.el7
changelog:
  - Oracle-Bug: 27250922
    Implemented a workaround for unexpected startup script termination during boot process.


author: Susan Kamm-Worrell <susan.kamm-worrell@oracle.com> - 3.7-13.el7
changelog:
  - Oracle-Bug: 27923102
    ovmd-3.7:
    Replaced select with fgets which is restartable after a signal.
    Outchild pipe needs to be kept open to write ovmapi data.
    xenstoreprovider:
    Added restart to SIGIO sa_flags so that syscalls can be restarted after event handling.
    Signed-off-by: Paul Benoit <paul.x.benoit@oracle.com>


author: Srinivasa Naravaram <srini.naravaram@oracle.com> - 3.7-14.el7
changelog:
  - Oracle-Bug: 30000304
    Changed ovmd_network_info.name size from 8 chars to 64 chars to allow  longer
    network interface names. This is needed because network interface name can be
    longer in Exalogic env using EMOC. Guest network interface names are long
    strings rather then simple "eth1" like.
    Signed-off-by: Srinivasa Naravaram <srini.naravaram@oracle.com>
    Reviewed by: Adnan Misherfi <adnan.misherfi@oracle.com>


author: Till Maas <opensource@till.name> - 2.3.3-2
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.13.3-1
changelog:
  - Updated to 2.13.3
  - Note that this version changes register_image's virtualization_type parameter
  - Fixed auto-scaling PropagateAtLaunch parsing (#1011682)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.1-4
changelog:
  - Fix cheetah enough that it will pass its unittests on python-2.6.  This has
    actually been broken since py-2.5 and this fix is only a workaround.


author: Dan Callaghan <dcallagh@redhat.com> - 17.5-1
changelog:
  - upstream release 17.5: 
    http://docs.gunicorn.org/en/R17.5/2013-news.html#r17-5-2013-07-03 
    (version numbering scheme has changed to drop the initial 0)


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.0-1
changelog:
  - Update to 2.0.
  - Adjusted source URL.
  - License changed to BSD only.
  - Upstream now provides a script to run markdown from the cmdline.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.0.1-3
changelog:
  - Add requirement on python-elementtree, which was a separate package
    before Python 2.5.
  - Re-add changelog entries accidentally removed earlier.


author: Ralph Bean <rbean@redhat.com> - 0.6.1-1
changelog:
  - New upstream version
  - Added support for python3
  - Included README, COPYING, and CHANGELOG in docs


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.6.0-1
changelog:
  - Update to 2.6.0 which changes some messages thrown by exceptions to match
    with json module in python3.3 stdlib.  Probably safe for older releases but
    the python3 version there is 3.2 so there's also not any real need yet.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.1.0-1
changelog:
  - Update to 3.1.0 in Rawhide.
  - Build the python3 subpackage
  - Update to new-style filtering of provides


author: Tomas Orsava <torsava@redhat.com> - 8.1.2-1
changelog:
  - Update to 8.1.2
  - Moved to a new PyPI URL format
  - Updated the prefix-stripping patch because of upstream changes in pip/wheel.py


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-18
changelog:
  - SAPInstance: add reload-action
  - LVM-activate: support LVs from same VG
  - Remove grpc from bundle

    Resolves: rhbz#1642069
    Resolves: rhbz#1667413
    Resolves: rhbz#1683629


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-20
changelog:
  - IPsrcaddr: add proto and table parameters
  - iSCSILogicalUnit: only create iqn when it doesnt exist

    Resolves: rhbz#1504055
    Resolves: rhbz#1598969


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-22
changelog:
  - IPsrcaddr: make proto optional to fix regression when used without
    NetworkManager

    Resolves: rhbz#1504055


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-23
changelog:
  - aws-vpc-move-ip: add multi route-table support and fix issue
    w/multiple NICs

    Resolves: rhbz#1697558


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:1.0.0-16.rc4.gite6516b3
changelog:
  - install bash completion to correct location
  - remove shebang from bash completion gh#1679
  - correct rpmlint issues


author: Michael Calunod <michael.calunod@oracle.com> - 1.0.0-19.rc5.git4bb1fe4.0.4.el7
changelog:
  - fixing version (Michael Calunod)  
  - adding nokem to buildargs in spec file. (Michael Calunod)  
  - cgroups: nokmem: error out on explicitly-set kmemcg limits (Aleksa Sarai)  
  - libcontainer: ability to compile without kmem (Kir Kolyshkin)


author: Avi Miller <avi.miller@oracle.com> - 0.1.3-4
changelog:
  - Fix incorrect path in logrotate script
  - Set logrotate to compress uln-yum-mirror logs on a daily basis


author: Avi Miller <avi.miller@oracle.com> - 0.1.4-1
changelog:
  - Set hardlinkpy to ensure filenames are identical
  - Exclude cache and metadata directories from hardlinking to improve scanning performance
  - Set yum-arch to quiet to reduce log output


author: Avi Miller <avi.miller@oracle.com> - 0.1.5-1
changelog:
  - Check physical memory and disable the "--update" parameter to createrepo if less than 6GB. This should avoid OOM-killer on large repos


author: Avi Miller <avi.miller@oracle.com> - 0.2.0-1
changelog:
  - Escape the disablerepo parameter for yum makecache
  - Shift yum makecache to occur only on Oracle Linux 5


author: Avi Miller <avi.miller@oracle.com> - 0.2.1-1
changelog:
  - Set createrepo and modifyrepo to use simple filenames [orabug 17608573]
  - expose the EXTRA_ARGS in the sysconfig script


author: Avi Miller <avi.miller@oracle.com> - 0.3.0-1
changelog:
  - Added support for Oracle Linux 7
  - Modified the logic for creating local paths for repos to make them more readable


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 3.0-9
changelog:
  - add dependency for kmod-ovmapi-uek
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 3.0-10
changelog:
  - Remove kmod-ovmapi-uek dependency.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>
    Signed-off-by: Tianyue Lan <tianyue.lan@oracle.com> [bug 15981576]


author: Alexandre Khodakovski <alexandre.khodakovski@oracle.com> - 3.0-13
changelog:
  - Reviewed-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Use ovmjson library from libovmapi package instead of cJSON.c. [bug 21877857]


author: Alexandre Khodakovski <alexandre.khodakovski@oracle.com> - 3.0-15
changelog:
  - Reviewed-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Added debug build mode, fixed compiler warnings.


author: Alexandre Khodakovski <alexandre.khodakovski@oracle.com> - 3.0-17
changelog:
  - Reviewed-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Random signals could be blocked within xs_AsyncHandler. [bug 22638859]


author: Susan Kamm-Worrell <susan.kamm-worrell@oracle.com> - 3.0-19
changelog:
  - Oracle-Bug: 27923102
     ovmd-3.7:
     Replaced select with fgets which is restartable after a signal.
     Outchild pipe needs to be kept open to write ovmapi data.
     xenstoreprovider:
     Added restart to SIGIO sa_flags so that syscalls can be restarted after event handling.
    Signed-off-by: Paul Benoit <paul.x.benoit@oracle.com>


