moby/moby v20.10.7

on GitHub

20.10.7

Client

• Suppress warnings for deprecated cgroups docker/cli#3099.
• Prevent sending SIGURG signals to container on Linux and macOS. The Go runtime
  (starting with Go 1.14) uses SIGURG signals internally as an interrupt to
  support preemptable syscalls. In situations where the Docker CLI was attached
  to a container, these interrupts were forwarded to the container. This fix
  changes the Docker CLI to ignore SIGURG signals docker/cli#3107,
  moby/moby#42421.

Builder

• Update BuildKit to version v0.8.3-3-g244e8cde moby/moby#42448:
  • Transform relative mountpoints for exec mounts in the executor to work around
    a breaking change in runc v1.0.0-rc94 and up. moby/buildkit#2137.
  • Add retry on image push 5xx errors. moby/buildkit#2043.
  • Fix build-cache not being invalidated when renaming a file that is copied using
    a COPY command with a wildcard. Note that this change invalidates
    existing build caches for copy commands that use a wildcard. moby/buildkit#2018.
  • Fix build-cache not being invalidated when using mounts moby/buildkit#2076.
• Fix build failures when FROM image is not cached when using legacy schema 1 images moby/moby#42382.

Logging

• Update the hcsshim SDK to make daemon logs on Windows less verbose moby/moby#42292.

Rootless

• Fix capabilities not being honored when an image was built on a daemon with
  user-namespaces enabled moby/moby#42352.

Networking

• Update libnetwork to fix publishing ports on environments with kernel boot
  parameter ipv6.disable=1, and to fix a deadlock causing internal DNS lookups
  to fail moby/moby#42413.

Contrib

• Update rootlesskit to v0.14.2 to fix a timeout when starting the userland proxy
  with the slirp4netns port driver moby/moby#42294.
• Fix "Device or resource busy" errors when running docker-in-docker on a rootless
  daemon moby/moby#42342.

Packaging

• Update containerd to v1.4.6, runc v1.0.0-rc95 to address CVE-2021-30465
  moby/moby#42398, moby/moby#42395,
  ocker/containerd-packaging#234
• Update containerd to v1.4.5, runc v1.0.0-rc94 moby/moby#42372,
  moby/moby#42388, docker/containerd-packaging#232.
• Update Docker Scan plugin packages (docker-scan-plugin) to v0.8 docker/docker-ce-packaging#545.