diff options
| author | Bruce Ashfield <bruce.ashfield@gmail.com> | 2025-10-17 12:01:59 -0400 |
|---|---|---|
| committer | Bruce Ashfield <bruce.ashfield@gmail.com> | 2025-10-18 13:33:14 -0400 |
| commit | 424f6c57016d8b2ff56e8ef9bbe2a980a3d2abc2 (patch) | |
| tree | 0d3f374178272b87f4debaaad0f107b14cd465bd | |
| parent | 5cbd89ca2609b6965df4431901f64405a9c6612f (diff) | |
| download | meta-virtualization-424f6c57016d8b2ff56e8ef9bbe2a980a3d2abc2.tar.gz | |
docker-moby: update to docker-v29.0.0-rc.1
Along with the listed updates, we also update the cli, adjust our build
path (it is now under moby), refresh patches and explicitly export
trimpath to avoid QA warnings.
Bumping moby to version docker-v29.0.0-rc.1-54-gd1a720cb15, which comprises the following commits:
5fa3c65682 client: Client.PluginList: add options-struct
aa36c44ef9 api/types/volume: move `UpdateOptions` to `client.VolumeUpdateOptions`
709336a2c3 api/types/network: EndpointSettings: make MacAddress "operational data"
e84bbc09b1 integration/container: fix daemon min API version
1caf3dd3b2 integration-cli: TestDockerCLIBuildSuite/TestBuildEmitsEvents: reduce logs
acfe4e8613 gha: add support for docker-v* tags
b87ed4512a integration/container: fix test using wrong daemon
ecd7551310 daemon/server/router/container: fix back-filling of top-level network fields
865cfe9a7f client: VolumesPrune: rewrite to use option structs and result
b11d9d410f client: NetworksPrune: rewrite to use option structs and result
0672a0f999 client: ImagesPrune: rewrite to use option structs and result
91323b7a35 client: ContainersPrune: rewrite to use option structs and result
d9a03a374f daemon: consolidate "log-level" and "log-format" options and flags
4e6c955e78 daemon/command: configureDaemonLogs: don't panic
06ff7d9cd4 daemon/config: add validateDaemonLogConfig function
c73fe6d26e daemon/config: move daemon log-config to a separate struct
a6cf5e19e8 daemon/command: remove placeholder
c584855329 daemon/command: configureProxyEnv: accept smaller struct
0a2ab376ff daemon/config: slight cleanup of Config struct
69702bd821 fix minor linting issues
3b075a79b9 api: remove image inspect `Parent`, `DockerVersion` from swagger docs
d62a521c7d daemon: initialize volumes if nil on decode
a65293c036 libnetwork/osl/kernel: ApplyOSTweaks: don't log errors if not found
adb4269928 api/types/image: remove deprecated Summary.VirtualSize field
2537eae6f3 api/types/container: remove support for config mac address
e77f116c9c integration: remove some version-gates for API < v1.44
2c59be7011 daemon: raise default minimum API version to v1.44
47fe719b33 api/types/build: remove deprecated BuildCache.Parent field
36f1c830bb add back replace rules and re-vendor
45caa74e3b api/types/sytem: remove deprecated DiskUsage.BuilderSize
a5d9619093 api/docs: remove BuildCache.Parent field for API v1.42 and up
e1722eb8d8 daemon/command: disable c8d snapshotter when userns remapping enabled
1aa73144f2 update to go1.25.3
5e9e261107 vendor: github.com/moby/moby/client v0.1.0-beta.2
01a19e9d95 vendor: github.com/moby/moby/api v1.52.0-beta.2
b1e57881c3 gha/labeler: disable sync-labels to preserve human-added labels
3848b16bca Removed all occurrences of wrapError in libcontainerd/remote
28018a51d8 update to go1.25.2
39cf847787 api: regenerate with go-swagger v0.33.1
b4c3b29245 Dockerfile: update to go-swagger v0.33.1 (for go1.25)
bbdd24d145 api/templates: align with go-swagger v1.32.3
b3f74e85aa Dockerfile: bump gotest.tools/gotestsum v1.13.0
ac3960a44c api/types/container: omit `Config.OnBuild` when empty
0ee0283c9d gha/labeler: Some more file-based rules
15289ad2dc client: Filters: add Clone method
a6206f2da9 dockerd-rootless: default MTU 65520 for slirp4netns
7e63d2a81b dockerd-rootless.sh: if no slirp4netns, try pasta
cfdb9068f0 client: ImagePullResponse: use sync.OnceValue
3c44bd67b2 client: ImagePullResponse: don't panic without reader
4210e4ad16 daemon/internal/netiputil: make "MaybeXXX" functions a function, not var
4c6e571d38 api/pkg/stdcopy: move stdWriter to daemon/internal
8cf0529a8c api/types/swarm: add documentation to clarify virtual IP address type
c2812dc285 api: fix swarm network field from addr to prefix
9912ccd7b3 Clean up bridge device on network create error
e6bac8983b introduce ImagePullResponse to manage JSONMessage stream decoding
7652f38c28 client: remove API-version compatibility for API < v1.44
7ea066c8d1 client: add Filters type
778e5bfad3 api/types/filters: move to daemon/internal
96b29f5a1f client: remove support for negotiating API version < v1.44 (docker 25.0)
ef5feb4992 vendor: golang.org/x/net v0.45.0
3f75e2116f vendor: golang.org/x mod v0.28, net v0.44, text v0.29, crypto v0.42, tools v0.37
6de0417884 vendor: golang.org/x/sync v0.17.0
4bc628581d vendor: golang.org/x/sys v0.36.0
9169ed2873 client: touch-up some godoc
04318e0d86 client: update some tests using obsolete API versions
ca9c5c6f7b vendor: github.com/moby/swarmkit/v2 v2.1.1
1b1608f2cd hack: add patch to buildkit tests
3c418bea4e vendor: update buildkit to v0.25.1
0aed907a86 update to go1.24.8
0cc04d0c5c Network restore, don't update config to match state
b1e20b6a3a api/types/system: remove deprecated Commit.Expected field
1a7d7cc015 builder: use proper percentage calculations for default gc policy
dbcbe87d52 ci: fix cache for go modules
f8d3c4e4a7 api/types/image: InspectResponse: remove deprecated Parent, DockerVersion
1a81903854 api/types/image: InspectResponse: remove deprecated fields
a8dd9c5025 daemon/pkg/plugin: stop propagating Plugin.Config.DockerVersion field
1d3687aeee ci: update gha cache attributes
a99b7947e1 daemon: stop propagating Image.DockerVersion field
f6e1bf2808 Rework Go mod tidy/vendor checks
45a728a13b image inspect: fix legacy fields for API < v1.52 response
fdd61821da use consistent alias for docker image spec
c4fda95bea api/types/plugin: deprecate Config.DockerVersion field
a9a1ac3c45 Dockerfile: update compose to v2.40.0
94ab6a9c5e Dockerfile: update buildx to v0.29.1
b9ac2cea0c Dockerfile: update cli to v28.5.0
222a3fe94e integration-cli: remove deprecated buildImage utility
bd8a99b400 api/types/image: InspectResponse: deprecate Parent, DockerVersion
288b9f033b integration-cli: remove deprecated buildImageSuccessfully utility
15bef6ff1a daemon/server: move GetImageOpts, ImageInspectOpts to imagebackend
95e77d6861 daemon/images: minor linting fixes
e204ba1dca daemon/internal/compat: add extra fields recursively, and don't replace
50269e6e39 api/types/swarm: remove `PortConfigProtocol`
ea76dbefeb api/types/swarm: deprecate PortConfigProtocol
c646091d57 api: move container port type to network package
038bfbfbd4 api: omit legacy fields from image inspect if not set
f289cb2d7c api: docs: sync v1.52 yaml
d6899ca5a5 api/types/registry: use netip types as appropriate
fd4329a620 api/types/container: use netip types as appropriate
d5c838dc5e internal: move sliceutil from daemon/internal
a90adb6dc1 api/types/network: use netip types as appropriate
ef31514a9f api/t/network: move IPAM validation to daemon
4d6a2be79d api/t/network: validate EndpointIPAMConfig in daemon
2da472b1a5 api/types/system: use netip types where appropriate
cc082add87 api/types/swarm: use netip types as appropriate
46ab36ae46 daemon/internal: move netiputil from libnetwork
470f5b50a5 internal/sliceutil: map nil to nil
df506c107e negociate content-type used by /events API
0ad35e3ef0 Add existence check for go.mod and go.sum files
cb3abacc52 api/types/container: add network port and port range types
c46704a80f client/build_prune: Wrap result in a struct
a35b3cd149 client/build_cancel: Add options struct
3f3bbe4430 vendor: github.com/moby/buildkit v0.25.0
9a32a7e0d1 daemon, client: remove version-gate for daemon-side AutoRemove
af5988238a client: reduce uses of obsolete API versions in tests
eafca64a6b daemon/server: implement image-inspect with "compat" package
51cbd2ed16 api: swagger: remove VirtualSize fields for API > v1.43
a7edbe8e5f api: remove support for `KernelMemoryTCP`
fb2f8115c8 api: deprecate `KernelMemoryTCP` support
eff4f064a3 daemon/libnetwork/internal/kvstore: remove unused ErrBackendNotSupported
1697aecbd5 daemon/libnetwork/internal/kvstore: remove unused BOLTDB and Backend type
94bcf89412 Eliminate warning about endpoint count store delete
08d014cac8 api/docs: remove email field from example auth
344ab458a1 api/types/registry: remove deprecated AuthConfig.Email field
3241d46525 client: Client.doRequest: adjust error matching for TLS1.3 handshake
b8fbd0539e vendor: github.com/deckarep/golang-set/v2 v2.8.0
178d697484 integration-cli: adjust TestHTTPSInfoRogueCert for TLS1.3 handshake
efa077848f api/types/storage: define generic `Storage` type for container inspect
77bf85647c contrib: add docker_client SELinux policy module to access socket in container
b48fcf6cdb client/checkpoint_list: Wrap result in a struct
646e068cf1 api/checkpoint: Don't return null if no checkpoints
38fb0dd10c Add build tag "no_libnftables"
062479f95c vendor: github.com/hashicorp/go-memdb v1.3.5
3912ffacd6 integration/nw: TestEmptyPortBindingsBC use context
e80e2908ba dockerversion: use t.Context() in tests
aca0adfb97 daemon: use t.Context() in tests
8905c3052b daemon/libnetwork: use t.Context() in tests
01f9186d6d daemon/logger: use t.Context() in tests
c1c9087404 daemon/containerd: use t.Context() in tests
544f8f53ed daemon/builder: use t.Context() in tests
415274d62a vendor: github.com/opencontainers/cgroups v0.0.5
73ed41ef79 vendor: github.com/coreos/go-systemd/v22 v22.6.0
0f393630f8 vendor: opencontainers/runtime-tools v0.9.1-0.20250523060157-0ea5ed0382a2
6db6de2c20 Use libnftables in dynamically linked binary
e8d3609031 hack: use custom ref for buildkit tests
21d2d55500 vendor: update buildkit to v0.25.0-rc1
de5e64b3bd Add option WithSetNsHandles for testutil SetupTestOSContextEx
0fb46d08ad api: docs: remove deprecated BridgeNfIptables, BridgeNfIp6tables
362d4d9538 testutil:SetupTestOSContext - don't leak namespaces, netlink handles
a32a53ae01 daemon/containerd: pass custom metaHeaders to resolver
2223b7f582 daemon/server/imagebackend: add PushOptions struct
9d53093db6 daemon/server/imagebackend: add PullOptions struct
cbafff64e4 project: mark 23.0 branch as unmaintained (EOL)
5d22d9bec9 integration/service: rename var to prevent shadowing
471f24bafc daemon/server/backend: CreateImageConfig: change "Pause" to "NoPause"
bad3dfe9cb client: ContainerCommitOptions: change "Pause" to "NoPause"
1135ab0283 Dockerfile: update xx to v1.7.0
f5847040cc client: Client.negotiateAPIVersionPing: trim v-prefix before handling
af3f971431 client: TestNegotiateAPIVersionAutomatic: gofumpt
a8cb35f01a client: TestPingHeadFallback: check method, path, and fix example response
87d1da50f0 test: migrate test api network get defaults and filter
d9cdfd2887 client: remove unused Client.HTTPClient() method
d4d93bf558 daemon/container: remove State.ExitCode() method
ee4b7a8374 daemon/container: remove NewState() constructor
d06f0d008d explicitly access Container.State.Health.Health
0df791cb72 explicitly access Container.State instead of through embedded struct
aa492314a1 ipams: Re-enable legacy remote plugins support
41a6ad5def client: remove deprecated ImageListOptions.ContainerCount
02c4bb6a0c daemon/config: More tests for DNS addresses
f7ed1b84d2 client: ImageList: don't discard reference filter on API < 1.25
d60b4ea278 client: fix version-gate for readonly-recursive mounts validation on service
0673d43663 client: remove "version" header for service create, update
9fc12daf80 client: remove version-gate for "--force" on "volume remove"
839c2709af client: WithMockClient: match version behavior of actual client
8f8a2db52c client: rename validateAPIVersion to validateServiceSpecForAPIVersion
0468dac252 client: Client.ContainerCreate: fix panic when passing a nil config
6d0551e13a api/types/network: CreateRequest: remove deprecated CheckDuplicate field
50ea842e17 client: separate exec methods to ExecAPIClient interface
94309db0aa daemon/server: Server.makeHTTPHandler: pass Route as argument
81506ad8b1 daemon/server/router: NewRoute: don't use un-keyed struct literal
82e5d3064a client: ImageBuildResponse: remove OSType field
5028ff1f40 integration-cli: remove startContainerGetOutput, runCommandWithOutput
2a867f0c4d daemon/server/backend: remove ExecInspect, ExecProcessConfig alias
ff21989215 api/types/container: move ExecInspect type to client
c1be6ef5de api/docs: remove KernelMemory option from old API versions
c5991341eb remove support for deprecated kernel memory limit
20d8342a4b move endpoint API version constraints to API server
b70c1a439d gha: add missing dependency to Windows workflows
18b289f9df daemon/server: fix requests not logged with --log-level=trace
839e46f97c client: remove support for API < v1.22 filter format
a83d91f427 API: /info: remove `SecurityOptions` re-formatting for API < 1.25
082b4e8d77 client: move ExecOptions to client
6a642300f0 client: move ExecStartOptions, ExecAttachOptions to client
c8c13fe058 API: /info: remove magic `<unknown>` values for API < 1.39
c600f62c25 api/docs: sync swagger and update changelog
6084882b98 client: tidy go.mod
2bb0443ae9 Release IPv6 address if unused due to sysctl setting
252659278e Configure addresses before adding them to DNS or /etc/hosts
18b8e369ae Split OS-specific code out of Sandbox.populateNetworkResources
a8b9eff902 Don't set up DNS in Network.createEndpoint
ddf10ee1cd Delay Endpoint config until the osSbox exists
b043980e6f daemon/config: remove deprecated CommonConfig.CorsHeaders
4c7deaf832 Windows containers: restore network name after reboot
9129094b98 Windows containers: report HNS network name in inspect
aa78f19066 ipvlan-l2: do not allocate a gateway address from IPAM
468e3521b0 macvlan: do not allocate a gateway address from IPAM
caae209d25 api/types/container: remove deprecated ExecOptions.Detach
19edf44896 daemon/config: remove deprecated Config.
fabe66322f builder/remotecontext: remove deprecated "Rel()" utility
cf243b64aa daemon: fix build after revendoring api module
c2c2b80e90 daemon: report IPAM status for Swarm networks
b092c8ca64 api/t/container: drop NetworkSettingsBase
fc1ff44bc2 api/t/container: drop DefaultNetworkSettings
d5d3716705 daemon/i/compat: disable HTML encoding
8efe6b0183 Add TestJoinError
73413ea693 bridge_linux_test.go: gofumpt
52c9cfd016 Use sbLeave to roll back on error from sbJoin
53390f85dd Put clearNetworkResources() inline in its only caller
916fa31ab5 Acquire Sandbox.joinLeaveMu for Endpoint force-Delete
a9db1e9a26 Endpoint.sbLeave: don't load ep from store
b192d06ec7 Remove network info from container when endpoint join fails
1b74b3e1ce api/types/events: Message: remove deprecated Status, ID, and From fields
5815eb82ee daemon/events: omit deprecated event fields on API >= v1.52
c4eb791dba daemon/events: remove tests for deprecated API fields
33a05ac344 daemon/internal: add "compat" package for legacy responses
3f86797d3f api,daemon: report IPAM status for network
ee8abb845d d/libnetwork: move uint128 to its own package
65ffac3dbf internal/iterutil: add Chain, Chain2 iterators
ee24728b1e go.mod: replace client
139b6464b5 api/docs: fix events example response
f8925bac6f daemon: Do not default to c8d image store on Windows
bdd0a2a970 gha: extract vm test to a separate workflow
8c8324b37f Dockerfile.windows: remove deprecated 7Zip4Powershell
9d2e74d43d gha: Add automatic PR labeling for modules
705f26010e client/image_inspect: Unexport ImageInspectOptions
67c8064bb3 client: remove ImageInspectWithAPIOpts function
5303799297 go.mod: re-add replace github.com/moby/moby/api
2f1015482f libnet/d/windows: ReleasePorts: use errors.Join
fc86411353 libnet/d/windows: inline releasePort
9efc1cc264 libnet/portmapper: rename, move PortMapper to portallocator
4b230a4909 internal/testutils: merge with internal/testutil
d3e45f8743 testutil: move back to internal
af677b61a5 libnet/portmapper: clean up windows port mapper
90f31c6c27 libnet/portmapper: remove dead field bridgeName
f6e5b3afc5 libnet/portmapper: drop unused NewWithPortAllocator
9e7de1b679 libnet/portmapper: remove unused field proxyPath
f6c59f9779 libnet/portmapper: merge mapper.go & mapper_windows.go
b48442db4c libnet/portmapper: remove dead DeleteForwardingTableEntry
32710d3e5e libnet/portmapper: remove dead AppendForwardingTableEntry
eb2e296711 daemon: GetContainerStats: use errdefs for error-type handling
97eceb266a errdefs: remove deprecated IsXXX utilities
2d73fed24e update AUTHORS
37de02378c Prepare release notes for v2.0.0-beta.0
de4ae66d08 Update client vendor to use tag
b5dde0234c add back replace
1499623a9d go.mod: update client to v0.1.0-beta.0
0525ae2aed api: image inspect: remove temporary backfill for Config fields
d98a8c59ab testutil/daemon: fail gracefully if DEST is unset
8995619b9d testutil/daemon: fix DOCKER_USERLANDPROXY env var
b5035def03 Prepare release notes for client/v0.1.0-beta.0
76964752d3 Update client api version to v1.52.0-beta
a1e3a109ee api/docs: sync v1.52 docs with latest
0fe1af95f3 api/docs: remove temporary "full" example for image config (v1.50, v1.51)
7bfbb6e8ca api/swagger: remove temporary "full" example for image config
2d1af4e4e4 api/types/build: move build options to client and backend
5232d82c1b daemon/server/backend: move build options to buildbackend
8b8a3cb14c api/types/image: move LoadResponse to client
a8afc2c6fb api/types/checkpoint: move checkpoint options to client
f1da80e8d3 contrib/check-config: check SCTP protocol option
d904f3b625 Prepare api/1.52.0-beta releases
4e30076e4d Add mailmap entry for Austin
e656f39952 api/t/network: generate more structs from Swagger
ea1c2530da api/t/network: generate Inspect, Summary structs
26e335b647 api/types/build: move `CachePruneOptions` to client mod
798abe8965 vendor: github.com/spf13/cobra v1.10.1
02a50be1f9 vendor: github.com/spf13/pflag v1.0.10
aaa9dd4e26 gha: skip "vm" checks if `ci/validate-only` label is set
ccf1363680 api/docs: update v1.52 docs with current swagger
c208f90796 api/templates: vendor structfield template
57ce548341 client: move container options together with their users
4d20b6fe56 api/types/container: move container options to client
c441b2ef19 api/types/image: make `InspectResponse.GraphDriver` optional
1a86389419 api/types/network: separate Summary from Inspect
f8bd170b2a daemon: validate args in network.New*Filter
ea1dfbda9e daemon: prune networks using network.Filter
f0d10ae733 d/network: filter networks individually
a4a90c2248 api: fix deprecation of "keep-storage" /build/prune query parameter
e46a991dc5 api: remove unused DefaultVersion, MinSupportedAPIVersion consts
30406d42e3 update to go1.24.7
e2e9f36c5f api/types/system: move `SecurityOpt` type and `DecodeSecurityOptions` to client
d47b0db4f9 vendor: update buildkit to v0.24.0
ca97d071b7 fix: client vendor with config struct changes
37d6a1909b libcontainerd/remote: wrapError: don't convert c8d errdefs error
36303969b9 libcontainerd/remote: container.NewTask: move vars to where used
f37094ad4f libnet/d/bridge: CreateEndpoint: use d.config directly
ae24edfc0d libnet/d/bridge: merge configure into newDriver
2436458227 libnet/d/bridge: Register: pass a Configuration struct
386a3a6bba libnet/config: mv config_{unsupported,windows}.go
18f2e61d08 libnet/config: rm config_freebsd.go
e099f1e409 daemon: Daemon.ContainerExecStart: fix typo in log field
6e512cc292 libnet/d/ipvlan: Register: remove unused config param
459f4f431d libnet/d/macvlan: Register: remove unused config param
43014a891b libnet/d/overlay: Register: remove unused config param
18efa5513d libnet: makeDriverConfig: drop support for label-based config
1470048e00 libnet: remove drivers_freebsd.go
4ea085187a libnet/d/bridge: export Configuration
7b75f355e5 daemon/srv/r/ctr: handlePortBindingsBC: fix warning
fbad7b568d libcontainerd/remote: task.Exec: log warning on cleanup failure
e67b3b0b90 libcontainerd/remote: task.Exec: rename processID -> execID
003e17ff5a libcontainerd/remote: task.Exec: preserve parent context during cleanup
167b0e9ea6 libcontainerd/remote: task.Exec: make defer error-handling more explicit
55c929c97f libcontainerd/remote: rename var that shadowed import
023ae2e218 contrib: remove udev rules for hiding loopback devices
0ca7ac3258 daemon: backfill empty PBs slices for backward compat
4d2a293ff3 libnet/drvapi: make NetworkAllocate optional
cbd04b6f08 libnet/cnmallocator: use a list of local netdrivers
478d1fc8ba Bump go.mod minimum-go-version to 1.24
269960a4c6 integration-cli: TestConcurrentPush: refactor to improve failure logs
8031b077bc gha/arm64: Setup qemu
ce338dec81 integration/internal: Print Buildkit logs
27fca93b65 c8d/history: Fix non-native platforms
ad830a47af integration/internal: Handle Buildkit in GetImageIDFromBody
f66f555ad4 graphdriver/windows: Potential fix for access denied
ea73c88d12 libnet/cnmallocator: rm drivers_darwin.go
18b21a32a1 libnet/cnmallocator: rm drivers_unsupported.go
60fa39d559 hack: temporarily use custom buildkit ref for testing
5682f65cca hack/dind-systemd: collect firewalld logs
03df89b84a hack/dind-systemd: enable firewalld debug logs
77ce202515 vendor: update buildkit to v0.24.0-rc2
3c83038936 hack: use heredocs in generate-swagger-api.sh
854ec0a1ad d/libn/internal/addrset: add popcount methods
b7c597ec35 api/t/ctr: deprecate DefaultNetworkSettings
c9fdad2552 daemon: marshal legacy `registry.ServiceConfig` extra fields for compatability
d0de293513 testutil/daemon: remove unused FindContainerIP
80bb864fd6 api/t/ctr: deprecate NetworkSettingsBase
16dc39136c api/t/ctr: deprecate NetworkSettingsBase.Bridge
20b679b4a6 client: Extract clientConfig for opt applying
9ddf9d87e7 client: Remove newMockClient
7cd089edd9 client/volume_test: Use functional option to create mock client
72e11d78d7 client/task_test: Use functional option to create mock client
a1e304f76c client/system_test: Use functional option to create mock client
407af72993 client/swarm_test: Use functional option to create mock client
124bba478a client/service_test: Use functional option to create mock client
98434a5ea4 client/secret_test: Use functional option to create mock client
c99f2eaf34 client/request_test: Use functional option to create mock client
8581a15c25 client/plugin_test: Use functional option to create mock client
0b577c703a client/ping_test: Use functional option to create mock client
d401228b43 client/options_test: Use functional option to create mock client
643e94ebf5 client/node_test: Use functional option to create mock client
5a82c3397e client/network_test: Use functional option to create mock client
be76beee8f client/image_test: Use functional option to create mock client
005a289703 client/distribution_test: Use functional option to create mock client
bc1d436aa9 client/container_test: Use functional option to create mock client
c70aac772e client/config_test: Use functional option to create mock client
6452807fb4 client/client_test: Use functional option to create mock client
a3d073e160 client/checkpoint_test: Use functional option to create mock client
17396e5d94 client: Add WithMockClient opt
09ecd74cf3 CI: add oraclelinux-8 for running tests with cgroup v1
1570ca934d Dockerfile: install fuse-overlayfs
e15c51a03d Makefile: propagate DOCKER_IGNORE_BR_NETFILTER_ERROR
ed78637b9a nftables: iterate over rules
9dc0c094e6 cmd/docker-proxy: set O_NONBLOCK unconditionally
12897011fa vendor: github.com/ishidawataru/sctp v0.0.0-20250829011129-4b890084db30
785ae9a0f9 Rework the interface to libnet/internal/nftables
cf913f5b0a d/cluster: use lockedManagerAction in more places
4b866fdcef d/cluster: add context param to lockedManagerAction
8839f53175 d/libnet: TestUserChain: fix error matching for nonexistent chains
fbde2bcb9a nftabler,nftablesdoc: stringify numerical dstnat prio
a4949b669e iptablesdoc: remove -n from iptables -L invocations
fc045ad139 libnet/pmapi: remove firewaller arg from Map/UnmapPorts
9b1c4ad3b1 libnet/pm/routed: don't set up firewall rules directly
9d9b05446c libnet/pm/nat: move back fw / proxy steps into the bridge driver
268e636b2b libnet/pmapi: let portmappers specify NAT/fwding rules
c6717f4387 libnetwork: provide endpoint name for IPAM drivers
5349095cd1 vendor: github.com/docker/go-events 605354379745 (main)
229a29649f vendor: github.com/moby/buildkit v0.24.0-rc1
071e6472db Unmap IPv4 addresses loaded from store
b721c4f4a8 daemon: minor touchups for backend system info response marshal
60c6e57b82 hack/make/test-integration: disable firewalld integration
1b4fcb8da7 api/types/network: move `CreateOptions` type to client module
b0b7260c77 ImageCache.restoreCachedImage: rename var that shadowed import
1e249cc309 api/types/network: move connect/disconnect options types to client module
3003c5fe45 d/libnet: fix CreateOptionIPAM capitalization
853aed171b api/types/image: move image option types to client
33066cddb1 api/types/swarm: move `SecretListOptions` type to client
33cdcd62f5 daemon: Daemon.getInspectData: also set Config
fae54e03af api/types/container: merge InspectResponse and ContainerJSONBase
c9a0c93b04 d/libnet: remove unused arg from CreateOptionIpam
b85c91f1b8 fix vendor
44972d7427 daemon: Daemon.getInspectData: inline struct-literals
94d0b10503 api/types/swarm: move `ServiceInspectOptions` type to client
a2291e5eac api/types/swarm: move `ServiceListOptions` type to client
3b1e16594b api/types/swarm: move `ServiceUpdateOptions` type to client
bb4125e89f api/types/swarm: move `ServiceCreateOptions` type to client
4dcc7af116 api/types/swarm: move `UpdateFlags` type to client
ad0fa5a872 api/types/swarm: move `TaskListOptions` type to client
2718f953f0 api/types/swarm: move `NodeRemoveOptions` to client
7d2b87e95f api/types/swarm: move `NodeListOptions` to client mod
b1260cd493 api/types/swarm: move `ConfigListOptions` to client
bdce1608c8 api: move authconfig package from types/registry to pkg
ff0e644c88 daemon/cluster: use authconfig package for decoding
9f1d8be252 docs/contributing: minor fixes
dbe19a506e fluentd logger: add read timeout configuration.
28ba0fcaae vendor: github.com/fluent/fluent-logger-golang v1.10.1
3bcaf1c4da vendor: github.com/tinylib/msgp v1.3.0
27b609b401 vendor: github.com/philhofer/fwd v1.2.0
1d6c7663c4 d/libnet/i/nftables: move golden files into subdir
28afa75c39 d/libnet: TestIptabler: move golden files into subdir
ce4a331287 d/libnet: TestNftabler: move golden files into subdir
c5e75cc485 daemon/containerd: remove convertError utility
6fbea5f5c1 image delete: inline some variables, and touch-up TODOs
7f8ce05f6e client: check for Digested reference instead of Canonical
eed354379c api: docs: update v1.52 swagger with latest changes
0de3d2ec51 Dockerfile: update rootlesskit to v2.3.5
70d096313f vendor: github.com/rootless-containers/rootlesskit/v2 v2.3.5
fe8516cf4b client: refactor `InspectOptions` to `NetworkInspectOptions`
5eaed0366c api/types/network: move `InspectOptions` to client mod
6084c6ae78 client: refactor `ListOptions` to `NetworkListOptions`
d6aa6ae9bd api/types/network: move `ListOptions` to client
d867f9f0f1 api/docs: update description for AuthConfig.Email field
6cfff7e880 api/types/registry: update deprecation comment for AuthConfig.Email
7aa50424e3 daemon: decouple daemon backend from client volume list options
9fc6a1e437 api/types/volume: refactor volume options to prune report
ee22a62dd5 client: refactor `ListOptions` to `VolumeListOptions`
c48585f104 api/types/volume: move `ListOptions` to client mod
56626a1222 api/types/system: move `DiskUsageOptions` to client mod
4665aa11ce client: refactor `SearchOptions` to `ImageSearchOptions`
40025bdf43 api/types/registry: move `SearchOptions` to client
e8d0aba254 vendor: golang.org/x/sync v0.16.0
60125b888c contrib: update dockerfiles to debian 13 "trixie"
39d4dbea9c Dockerfile: update debian frozen image to trixie-slim
15f92925f0 vendor: go.etcd.io/bbolt v1.4.3
eb9774cbf9 client: rename `ListOptions` type to `EventsListOptions`
d73dd4990c api/types/events: move `ListOptions` type to client
db72cc28c7 Rename test helper function input parameters to not shadow client package
f07d359043 client: rename `ResizeOptions` type to `ContainerResizeOptions`
882fd68b1b api/types/container: move `ResizeOptions` type to client
14262696d7 libnet/pa: OSAllocator: retry allocations
201968cc03 libnet/pa: OSAllocator: listen after bind
86ae7a56d2 daemon: Fix container restore with automatic driver selection
555e3939c9 daemon: Fix forceful switch to containerd image store
47bdbf5a4b client/pkg/jsonmessage: remove unused fields
c4e82bab70 api/types/volume: move `DiskUsage` type internal to daemon backend
0d61b55add api/types/image: move `DiskUsage` type internal to daemon backend
566c44edfe api/types/container: move `DiskUsage` type internal to daemon backend
d588092be2 api/types/build: move internal to daemon backend
eac4c43aaa integration/system: remove TestEventsBackwardsCompatible
b0d9a90f45 integration/system: add TestEventsNonBlocking
000f5e8d10 daemon: Daemon.ContainerStats: small cleanups
f4ae01a38a daemon/server/router/system: getEvents: use event consts for filtering
6b52a16f14 integration/network/bridge: add "generated" header to markdown docs
48557f72f9 daemon/libnetwork: TestUserChain: rename golden files
ff8364a39f hack/test/unit: use empty default values
fbd3cdc007 fix vendor
da2b1a2930 Fix image prune events for containerd backend
b68ff62ab7 daemon/libnetwork/bitmap: add OnesCount method
be7a769b69 Dockerfile: disable CGO for building utilities
8de606beb1 Dockerfile: remove trailing slashes for GOBIN
aa80ad2572 Copy the daemon/internal/timestamp package to internal client package
812aa46d81 Move the api/types/time package to internal daemon package
033ec8be44 daemon/router/image: initialize default authConfig
f0c069ffc9 gha: Add conditional skip for jobs with 'ci/validate-only' label
8013d80c24 hack/test/unit: run in the right module when TESTDIRS is used
97587945ef .github/workflows: Add kind label validation to PR workflow
d2e0895b9b daemon: deprecate env vars set by legacy links
b13ea83488 api: bump github.com/google/go-cmp v0.7.0
56c48e8708 d/libn/bitmap: tidy up constants, branchy math
82ba7fef17 api/types/container: rename Port to PortMapping
48038347d7 Match device driver on name and ignore capabilities
2aba802ae6 daemon: don't strong-type filters
a2aa7be724 vendor: go.etcd.io/bbolt v1.4.2
1c34ff94bc client: consistently use defer for ensureReaderClosed
f6b63e6013 client.sendRequest: clean-up logic for error-handling
2a4f70309d client.doRequest: improve GoDoc to clarify behavior
d69fde4c60 client: Client.Ping: improve error handling and fallback
b2e6fd31cf Restore DOCKER_DRIVER environment variable for storage driver configuration.
80294ddb60 client: make checkResponseErr a regular function
423980614e daemon: use slices.Clone, maps.Collect in some places
6505e8d605 daemon/libnetwork/types: rename StaticRoute.GetCopy to Copy
1e11e64c9c daemon/libnetwork/types: remove TransportPort.Equal()
561e14ea3f daemon/libnetwork/types: remove TransportPort.GetCopy()
385297ee40 daemon/libnetwork/types: remove unused IsIPNetValid utility
7960f742a2 daemon/libnetwork: Endpoint.CopyTo: use maps/slices.Clone
a82a68a445 daemon/libnetwork: replace endpointJoinInfo.CopyTo with Copy()
2d5100749d daemon/libnetwork: replace EndpointInterface.CopyTo with Copy()
80452e5d4a daemon/libnetwork/types: PortBinding.Equal: use non-pointer receiver
7d5312ab56 daemon/libnetwork/types: rename PortBinding.GetCopy to Copy and non-pointer
e387dc977e daemon/libnetwork/types: cleanup GetIPNetCopy, GetIPNetCanonical
68a94ecbb5 daemon/libnetwork/types: remove GetIPCopy; use slices.Clone
115b801a3b daemon/libnetwork/types: remove GetMacCopy; use slices.Clone
cfad3ed6b9 daemon/libnetwork: replace IpamInfo.CopyTo with IpamInfo.Copy()
2f74f245b6 daemon/libnetwork: replace IpamConf.CopyTo with IpamConf.Copy()
796a4ce952 daemon/libnet/drv/bridge: stubPortMapper.UnmapPorts: fix slices.Delete
a4fbbc1570 Add context to restore and load containers
85b79f83f4 Fix hardlink handling in containerd snapshot remap
ead007f1f1 Use native snapshotter for integration tests and run
99181f56ce Fix symlink evaluation to a directory that may not exist
4816383c0b Add environment variable to define the threshold
185ae7ec2c docs: api: Tweak type of ForceUpdate to uin64
c8173c5c1f api: swagger: Tweak type of ForceUpdate to uint64
0a89d98bad daemon/libnetwork/types: remove errdefs aliases
892ebd2f17 daemon/libnet/drivers/windows: small cleanup in error-handling
11094e27b0 api/types/network: modernize EndpointIPAMConfig.Copy, EndpointSettings.Copy
b48df69b02 daemon: Daemon.ContainerInspect: move vars closer to where used
582ee7ea57 daemon/builder/dockerfile: copyRunConfig: use slices/maps.Clone
0ded8645b6 Fix custom runtimes handling on Windows
aa6838ae54 vendor: go.uber.org/zap v1.27.0
daf843b72f vendor: go.uber.org/multierr v1.11.0
aa85a44139 vendor: github.com/google/btree v1.1.3
fe32e4a999 vendor: github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8
76fc74317a vendor: github.com/golang/gddo v0.0.0-20190904175337-72a348e765d2
632fb0c89a Update graphdriver check logic to account for disabling of snapshotter
b41babafaa Fix windows test graphdriver setting
8700bca2bf Update migration test to use graphdriver env
00463b9216 Fix containerd image count
7f87cf9d8a Check for snapshotter plugin availability
632de98f75 Enable containerd snapshotters by default
9f5f4f5a42 Add containerd migration to daemon startup
2fff6b442e check-config.sh: report IP forwarding sysctl state
f71e86eed5 rootless: enable IP forwarding
f802d8a08e When cleaning iptables rules, warn on filter-FORWARD DROP
67ffa47090 nftables: don't enable IP forwarding
7dfeee8460 Drop FirewallCleanerSetter interface
200a75b34a Return concrete types from NewNftabler/NewIptabler
050fbbccca chore: use errors.Join instead of github.com/hashicorp/go-multierror
96f8c6395e chore: enable use-any rule from revive
c6be4ad999 libnet/pa: don't set SO_REUSEADDR on UDP sockets
3862a0875c check for net.ErrClosed instead of "use of closed network connection"
9cae3fb167 docs/contributing: remove GIT_BRANCH image tag references
04d95003fd Stabilize TestSaveAndLoadPlatform integration test.
1f323d5035 client: README: add badges
662154a940 api: README: add badges
b4e353c02b README: add license and OpenSSF badge
df3aea43aa remove references to "vendor.mod"
98790830eb Deprecate api/types/strslice.StrSlice and remove its use
b25b421f97 update to go1.24.6
677c2a19d9 vendor: github.com/docker/go-connections v0.6.0
50789e2bab testutil/fakestorage: inline go code and remove contrib/httpserver
d49a354cb2 testutil/fakestorage: use local paths, fix port-mapping and optimize
8be1b2372a Dockerfile: update containerd binary to v1.7.28
b9b52d59b8 download-frozen-image-v2: Use curl -L
359a881cea download-frozen-image-v2: handle 307 responses without decimal
12c6345d3a libn/d/overlay: don't deref nil PeerRecord on error
dcaf8893a0 windows: do not forgot IPAM configuration when re-creating networks
0ad765c67d add back replace and vendor, tidy
f5f984eec6 Dockerfile: update runc binary to v1.3.0
234349d173 api/docs: sync v1.52 swagger with current version
833dc69ad9 docs: improve the description of the `outputs` parameter for `/build` endpoint
c145229828 update some fixtures in tests
90c3d29bfb go.mod: tidy
78ccee32b3 update various "doc" links in code
d82f50557e Bump api version in client and main module to v1.52.0-alpha.1
a0a7d9a3d7 Add release notes for client/v0.1.0-alpha.0
32ec26be6c Update client and main module api version to latest alpha tag
e30b8e3393 update golangci-lint settings
57256a9b62 fix error-capitalization
c13266d2c0 api/types: move plugin types to api/types/plugin
c17d43ae67 api/types: move ErrorResponse to common/ErrorResponse
15f78b752c daemon: make buildSandboxOptions, buildSandboxPlatformOptions more atomic
77c2e3279d daemon/libnetwork: Sandbox.EnableService/DisableService slight cleanup
bfce6556c4 client: use stdlib errors
3fe93532e4 client: tidy go.mod
3b14c5488f go.mod: github.com/containerd/containerd/v2 v2.1.4
259eb259bc go.mod: dario.cat/mergo v1.0.2
d8b622b315 go.mod: github.com/docker/go-events v0.0.0-20250114142523-c867878c5e32
8e63b55146 go.mod: github.com/fernet/fernet-go v0.0.0-20240119011108-303da6aec611
044234f847 api/docs: add v1.52 swagger
59e8fe8479 Prepare release notes for v1.52.0
dfac16c297 hack: Update cosmetic occurences of the old package name
83267a0fda go.mod: github.com/docker/docker v28.3.3
5b3e1a6425 go.mod: tidy
0ae3cb000e validate/pkgimports: Fix package name
22bd59010e hack: Fix dockerversion not being set correctly
79148460b0 hack/make.ps1: Replace old package name with moby/v2
2dcd8b8def golangci: Replace old package name with moby/v2
cad3a5775b docs: fix URI fragment by changing it to the existing subheading
778d8e3a26 libnet/d/bridge: handleFirewalldReloadNw: fix deadlock
519adb26c3 libnet/d/bridge: driver: un-embed mutex
752a3b302c api/pkg/stdcopy: add example
26cf610e6e api/pkg/stdcopy: improve docs
c010c84ade api/pkg/stdcopy: don't use iota for consts
195a6bbb1e client: touch-up godoc
e7c784c270 Dockerfile: add GO_SWAGGER_VERSION build-arg
908895b9c3 api: update "interface{}" to "any"
51bbc37f64 api/types/strslice: use slices.Equal
dab42db691 contrib: remove editorconfig
5fbbf040aa contrib: remove mac-install-bundle.sh
5a40d4ed9f contrib: remove syntax (Dockerfile syntax) files
62545ddf90 daemon/internal/image: remove image-spec markdown
4cfc260a5f TESTING.md fix links to gotest.tools, and some touch-ups
1205a15db1 libnetwork/types: define RouteType type
6aab881534 libnetwork/types: make Protocol consts strong-typed
ec5dbaf233 libnetwork/types: define IPFamily options using syscall.AF_XXX consts
95eeb0b3b0 libnetwork/types: define IPFamily type for IP-family consts
ee560a3b23 api/types: fix Plugin.Config.Interface.Types def'n
2783f80ecf api/types: generate with latest go-swagger
5365f08ae2 daemon/config: make DNSConfig.DNS a netip.Addr
a43198845b daemon/pkg/registry: un-export ResolveAuthConfig
5fbf680f5d daemon/pkg/registry: move newIndexInfo to search
6a7f0008a3 daemon/pkg/registry: move searchRepositories to where it's used
17d0ac56f3 daemon/pkg/registry: remove session; make searchRepositories a func
0c73c459b4 daemon/pkg/registry: un-export GetAuthConfigKey
eda6a499e3 router/distribution: fetchManifest; detach from distributionRouter
aac2623115 integration/container: TestCheckpoint: inline containerExec util
03991f4846 builder-next: puller.Snapshot: cleanup handling of v1 images
0156a42200 daemon/libnetwork/resolvconf: remove unused code
bbec7a5150 migrated test container API rename to docker/cli
1e499bae79 daemon: consolidate platform-specific inspectExecProcessConfig
49aa38e9e7 update links to swarmkit v2 docs
c98e5cb60b update github links to moby/moby
cf15d5bbc6 remove obsolete //go:build tags
02b3f1cd99 integration: remove stray "distribution" directory
297ea75204 check_config: add nftables modules to optional features
83357620e2 Update unit test script for windows
58c95cde9b Replace uses of code which requires 1.24+
900a0516de Update hack/test/unit for go module
1d571e619d Rename build package to moby v2 module
65867642d3 Remove go module workarounds
f74e5d48b3 Create github.com/moby/moby/v2 module
a954a0f4a2 Remove profiles
53bd828853 Remove libnetwork
e55d294ea7 api/types/registry: add TODO/note about empty authConfigs
8b68b977b1 Revert "api/types/registry: EncodeAuthConfig: use empty string for zero value"
5bbf3af980 daemon: fix linting S1016 (staticcheck) false positive
d58dc493fe replace direct uses of nat types for api/types/container aliases
494677f93f api/types/container: add aliases for go-connections/nat types
f3ba0b2dc2 client/pkg/jsonmessage: remove Stream interface
19edf5c53c client/pkg/jsonmessage: remove DisplayJSONMessagesToStream
fdaccdb233 pkg/jsonmessage: stop printing deprecated progressDetail, errorDetail
94ac102e4b api: remove deprecated NoBaseImageSpecifier
0d8ca8eefe Move pkg/jsonmessage to client/pkg/jsonmessage
d00ecdc479 Move pkg/streamformatter to api/pkg/streamformatter
66862e14d1 Move pkg/progress to api/pkg/progress
1da417980c Move api/stdcopy to api/pkg/stdcopy
ebef4a44fd Split streamformatter from jsonmessage
5a144c40e2 pkg/streamformatter: reduce jsonmessage.JSONMessage dependency
f4127d76c5 pkg/jsonmessage: move JSONProgress to api/types/jsonstream
0515e1c991 pkg/jsonmessage: move JSONError to api/types/jsonstream
9a52e474a3 pkg/jsonmessage: suppress unhandled errors
02fcde0c18 Add separate const for daemon httputils to avoid jsonmessage import
e257027903 pkg/jsonmessage: remove github.com/morikuni/aec dependency
d7082848a6 tidy vendor.mod
6c7e2909c2 api/types/filters: remove deprecated ToParamWithVersion
5535e81a79 pkg/system: move to daemon/internal
d94171bfaa pkg/system: make XattrError linux-only
aa9de914ca pkg/system: remove unused ErrNotSupportedPlatform
28b822d5b3 pkg/system: remove Lgetxattr, Lsetxattr stubs for non-Linux
450ac30e4a pkg/system: LUtimesNano: remove stub for non-Linux
03f44e6d14 pkg/system: MkdirAllWithACL: remove stubs and unused os.FileMode arg
6f9e099fd3 pkg/system: remove deprecated IsAbs
53a3085256 pkg/system: remove deprecated EscapeArgs
1313b8caff pkg/fileutils: move ReadSymlinkedDirectory to daemon
ae0a3d6918 pkg/fileutils: move ReadSymlinkedDirectory internal to daemon
bae46854c5 pkg/fileutils: remove unused CopyFile utility
46854ca5ab daemon/pkg/registry: remove copy of rootless.RunningWithRootlessKit
f1c65c1dd6 daemon/pkg/registry: Service.Auth: remove unused statusMessage return
f797ced96a daemon/pkg/registry: remove unused ParseRepositoryInfo, RepositoryInfo
e30d541da0 daemon/pkg/registry: remove unused ReadCertsDirectory
d80e16bb18 daemon/pkg/registry: remove unused ParseSearchIndexInfo
4c1ab68c6c daemon/builder/remotecontext: remove detection of system.XattrError
1dc53e8ec7 Update client go.mod
03d7f47f31 Update api go.mod
5bbb7182e7 Move logdriver to internal under daemon/logger
d7cfe97984 Update logdriver to remove proto definitions
f866621303 contrib/check-config: fix kernel version range check
df8d45c7c9 contrib/check-config: fix MEMCG_SWAP
ee24dcec3d Move swarm runtime plugin storage type to internal
86190e7366 Move swarm runtime plugin spec to swarm types
d761d9d358 pkg/rootless: move to daemon/internal
17959aff2c remove pkg/stdcopy as it has moved to the api module
c055c3e098 remove pkg/stringid as it has moved to the client module
76e2ca1d41 pkg/stack: move to daemon/internal
f78d595c96 runconfig: move to daemon/internal/runconfig
75bc4c5292 daemon/server/router/container: request sysInfo from daemon / backend
02867f9473 runconfig: rewrite ContainerDecoder to DecodeCreateRequest
5e567a3856 daemon/server/httputils: remove ContainerDecoder interface
ec3e83a7b5 api/types/container: move StateStatus, NewStateStatus internal again
667cb4bec8 fix vendor
26fda349b8 runconfig: remove exported errors
969b293778 iptables: remove SCTP checksum rule
e6298db297 cli/ is not in moby repo (anymore)
83510a26b3 api/types: move backend types to daemon/server
be27300c6e daemon/server/router/checkpoint: remove unused httputils.ContainerDecoder
b448dc5575 daemon/server/router/container: postCommit: only decode Config
6b4dfb0135 integration-cli: migrate TestPostContainersCreateShmSizeXXX to integration
617326a40c testutil, integration-cli: fix minor linting issues
da92ea2837 integration-cli/daemon: rewrite CheckActiveContainerCount with client
6adbeff449 integration-cli: remove parseEventTime utility
281a3f6c41 integration-cli: remove deprecaed inspectMountSourceField
6124c00827 integration-cli: buildImageSuccessfully: don't wrap buildImage
877529c62d integration-cli: remove deprecated inspectFieldWithError utility
68480dc11d integration-cli: remove createTmpFile utility
29a7d4039e integration-cli: remove deprecated inspectFieldMap utility
d100fd6a77 integration/system: remove "hdr" utility
97827e1a58 integration-cli: TestContainerAPIGetExport: fix minor linting issues
f73aba83dc client: TestContainerStats: fix minor linting issues
f67e6555bf api/types/container.StatsResponseReader: move to client
4dda328af8 client: rename files for system-commands to their canonical name
96a6884cb3 api/types: move DiskUsage types to api/types/system
82c069c857 api/types/system: move DiskUsage, DiskUsageOptions to api/types/backend
24aa86991c api/types: move PluginCreateOptions to client
b93ad81898 api/types: move plugin client options into client
44ae4cd2b7 api/types: move HijackedResponse into client
f491b70aa4 integration-cli: remove "requirement" package
ca1c5ee08f pkg/stringid: move to daemon, and provide copy in client
0abcdb7405 Update golangci for lazyregexp
6514282136 Move internal/testutils/networking to integration/internal/testutils/networking
14eb2770b9 Move internal/unshare to daemon/internal/unshare
28de87fb28 Move internal/unix_noeintr to daemon/internal/unix_noeintr
5b913b3ea0 Move internal/sliceutil to daemon/internal/sliceutil
20cc1a6203 Move internal/rootless to daemon/internal/rootless
8042010175 Move internal/platform to daemon/internal/platform
c3b0e0130a Move internal/otelutil to daemon/internal/otelutil
b62b542c2e Move internal/opts to daemon/internal/opts
713d7f5ed1 Move internal/nlwrap to daemon/libnetwork/nlwrap
fd21e3b935 Move internal/multierror to daemon/internal/multierror
baea1c5092 Move internal/ioutils to daemon/internal/ioutils
50743e3f38 Move internal/containerfs to daemon/internal/containerfs
ca9c4dffb7 Move internal/cleanups to daemon/internal/cleanups
222b2b8b2f Move internal/lazyregexp to daemon/internal/lazyregexp
9566272f30 Move pkg/tarsum to daemon/builder/remotecontext/internal/tarsum
ca5d2348d0 Move pkg/idtools to daemon/internal/idtools
7bfb804dbe Move registry to daemon/pkg/registry
f1f83dae55 Move reference to daemon/internal/refstore
c74ba95583 Move oci to daemon/pkg/oci
f24455c90b Move image to daemon/internal/image
1ff6011e04 Move distribution to daemon/internal/distribution
fa9a3c383d Move layer to daemon/internal/layer
3003c56c57 Delete TestRunDNSOptionsBasedOnHostResolvConf
3205fcf6c7 pkg/stringid: TruncateID: touch-up doc
6ed00d5044 registry: ConvertToHostname: use strings.Cut
547a2db21d registry: TestNewIndexInfo: inline testIndexInfo (thelper)
5ea78575e7 registry: fix assorted gocritic issues
406ee2feb5 registry: translateV2AuthError: fix singleCaseSwitch (gocritic)
ecb0354da5 registry: isCIDRMatch: fix captLocal (gocritic)
1ceda96864 registry: serviceConfig.loadInsecureRegistries: fix ifElseChain (gocritic)
d4e85443ff registry: remove deprecated RepositoryInfo.Class field
cc2d564a9e registry: remove deprecated RepositoryInfo.Official field
38453db513 contrib: remove gitdm
0d9304c9e1 docs: remove old rootless placeholder
a1f68bf5a6 overlay: Reload Ingress iptables rules in swarm mode
8b208f1b95 libnetwork: split programIngress() and dependent functions on Add and Del functions
50e6f4c4cb libnetwork: refactor ingress chain management for improved rule handling and initialization
4f0485e45f libnetwork: add FlushChain methods for improved iptables management
262c32565b libnetwork: refactor rule management to use Ensure method for Append and Insert operations
19a8083866 libnetwork: refactor iptable functions to include table parameter for improved rule management
c2e2e7fe24 libnetwork: extract plumpIngressProxy steps in a separate function
51ed289b06 libnetwork: extract programIngressPorts steps in a separate functions
752758ae77 libnetwork: extract creation/initiation of INGRESS-DOCKER chains in separate function
07393071ad bridge: Reapply endpoint iptables rules on firewalld reload
6d457d9695 bridge: Trigger firewalld reload during bridge integration tests
f1a97bda3d api/types/container: remove deprecated Stats type
4d5a7289a0 api: move docs to api module
bdcf4e8c85 adjust minimum API-version for multiple platforms on save/load
a401c0c046 runconfig: update fixtures for TestDecodeContainerConfig
1378604cc3 integration-cli: remove tests for pre-docker 1.7 clients
8d8bbefb90 client: remove deprecated CommonAPIClient interface
728f0769e1 client: remove deprecated ImageInspectWithRaw
2f200f9e05 client: remove deprecated IsErrNotFound helper
5ed9891eed client: remove deprecated ErrorConnectionFailed helper
a0fa5da2ab client: remove deprecated NewClient and NewEnvClient functions
30322dd649 client: fix example, and update refs to old modules
4859497098 pkg/stdcopy: fix missing alias for stdcopy.Systemerr
01c7b4233c hack/validate: remove obsolete exception
b91ebbde6d Refactor containerd platform matchers.
fcc8209e12 Add support for multiple platforms in image export and loading.
2303e6bff6 client: Client.doRequest: add special handling for DNS resolution errors
67596f01e2 client: Client.doRequest: add special handling for "not found" errors
462d0ff5aa client: Client.doRequest: simplify permission check and unwrap error
7072acac79 client: Client.doRequest: preserve wrapped error
3b4fbaacd7 client: Client.doRequest: use early return
cf1695bef1 Add option --bridge-accept-fwmark
2a342079c6 api/types/container: add missing type for exec-inspect response.
a600da91f4 profiles/apparmor, seccomp: migrate to separate module
30752f0780 Always allow access to routed endpoints
4538a1de0a libnetwork: handle coalesced endpoint events
e1a586a9a7 libnetwork/d/overlay: handle coalesced peer updates
8340e109de libn/d/win/overlay: dedupe NetworkDB definitions
c7b93702b9 libn/d/overlay: extract hashable address types
844023f794 libnetwork/driverapi: make EventNotify optional
69c3c56eba libn/networkdb: report prev value in update events
34fb2486ef test: migrate test api client version old not supported
cc9e6a13a2 api/types/swarm/runtime: remove module path for generating proto
76c1afeb97 api/types/plugins/logdriver: remove module path for generating proto
85ecf8c0f4 api: update references to old module name
a17a2e8f3d api/stdcopy: touch-up godoc
5b8ef1aff2 api: remove redundant //go:build lines
260cc008f4 fix vendor
4e246efcd1 libnet/d/bridge: mv portmapper to libnet/pms/{nat,routed}
289ef96d8b libnet/d/bridge/i/rlkclient: move to libnet/i/rlkclient
41cd92f6c0 libnet/portmapperapi: add PortMapper interface, registry
afb231d027 libnet/d/bridge: add a new Hairpin config flag
6f59a8e665 libnet/d/bridge: call setChildHostIP while binding
43f384c452 libnet/d/bridge: connectivityConfiguration: use PortBindingReq type
aa36cc5d25 libnet/d/bridge: move portBinding to portmapperapi
429818f969 libnet/d/bridge: move portBindingReq to portmapperapi
090c319f2e Don't allow the daemon to start with nftables and Swarm enabled
26e487db78 testutil: Fix sense of hasFwBackendArg check
6e7a2c830d Add Health attribute on the docker ps command
c4f9616c4a client: cleanup encoding body and add test-coverage
024414b47e integration: rename vars that shadowed import
20d594fb79 deprecate pkg/stdcopy, move to api/stdcopy
f651a5d5e9 registry: remove uses of lazyregexp
b33b4bd290 internal/testutils/networking: rm uses of lazyregexp
daa991c3d8 testutil/environment: don't use regex for string-matching error
0dc3193b2b integration-cli: remove uses of lazyregexp
6f9758047d fix: add create log stream awslog driver log option to validate list
c47afd41c8 Create github.com/moby/moby/client module
afd6487b2e Create github.com/moby/moby/api module
135cea2a10 Update test-unit for client module
7e708a5416 Update unit tests for api module
0971099c5f Add options to vendor to add and remove replace
eab076f217 Gocompat tests no longer needed with go modules
c469e5ebab daemon/server: rename vars that shadowed imports
61b19a494a oci: deprecate SetCapabilities
b9196ed703 oci: fix godoc for SetCapabilities, TweakCapabilities
5c683e8603 oci: sort defaultLinuxMaskedPaths
0433def57d internal/platform: remove NumProcs() stub for Linux
1a504f68fd Add nftables+firewalld tests to CI
02d7a3026a Support nftables+firewalld
d95dceb3b1 build: device entitlement support
655dbe69d0 pkg/tailfile: rename vars that shadowed type
a089c51160 pkg/idtools: remove deprecated functions and types
3bc64b312e runconfig: decodeContainerConfig: fix godoc referencing wrong type
ab5d348b77 integration-cli: remove uses of "runconfig"
0c3185a835 daemon: killProcessDirectly: use "WithFields" for logging
1cc42643ae hack/buildkit-ref: temporarily bump BuildKit to head of v0.23 branch
18e463a082 api/types: remove deprecated RequestPrivilegeFunc type
a3920ae6a0 api/types: remove deprecated IDResponse type
3e5a06179e api/types: remove deprecated container-inspect types
8347b05435 api/types: remove deprecated Container type
f050df0329 api/types: remove deprecated ContainerState type
7abeb4d5a4 api/types: remove deprecated container-networksettings types
c5a2194b5d api/types: remove deprecated container Health types
76bf0e2929 api/types: remove deprecated MountPoint
207db8792e api/types: remove deprecated Port
fa8177ba7a api/types: remove deprecated GraphDriverData
836ec65d5f api/types: remove deprecated ImageInspect, RootFS
7d3459e7fb api/types: remove deprecated SecretCreateResponse, SecretListOptions
68744c8b05 api/types: remove deprecated ConfigCreateResponse, ConfigListOptions
33f07ff3f4 api/types: remove deprecated NodeListOptions, NodeRemoveOptions
f13796d2af api/types: remove deprecated TaskListOptions
72b1e11264 api/types: remove deprecated ServiceCreateOptions
3faead6fc1 api/types: remove deprecated ServiceUpdateOptions
55ad118eaf api/types: remove deprecated ServiceListOptions, ServiceInspectOptions
91558ae3f3 api/types: remove deprecated SwarmUnlockKeyResponse
74fe646ac2 api/types: remove deprecated build-cache types
3eac6e7888 api/types: remove deprecated BuildResult
088cb2ffa6 api/types: remove deprecated build-related types
1359046a36 pkg/process: call out that "Zombie" is only supported on Linux
94618ac3ab pkg/process: separate exported funcs from implementation
a88e13f4f9 client: fix datarace when accessing cli.Version field
e6cdf24bcd windows: include labels when re-creating non-default nat networks
d4e026fe20 Wait for container dependencies upon daemon start up
39ab393274 Add daemon option --firewall-backend
7b9bd987bf api: deprecate NoBaseImageSpecifier
a632b8495b daemon: define default (and maximum) API version
2b17ab0ec6 libnet/internal/resolvconf: fix naming of error (errname)
aa757e591d libnet/internal/resolvconf: don't use rc.WriteFile in tests
8d54d36bce libnet/internal/resolvconf: fix naming of error
60a3a28a04 libnet/internal/resolvconf: minor optimizations
f22a3dfdb7 libnet/internal/resolvconf: optimize Generate() without text/template
0775ab6661 libnet/internal/resolvconf: add benchmark for Generate()
41da5700a4 client: define default (and maximum) API version
b54bde4376 Move testutils image load to integration internal
b83f36877f Move internal/mod to daemon/internal/builder-next/worker/mod
af86e80825 Move daemon/build to daemon/builder/backend
7d48302134 Move builder to daemon/builder
6ff9bea6a7 Move builder/builder-next to daemon/internal/builder-next
3a447bc079 api/types/registry: EncodeAuthConfig: use empty string for zero value
472e09ac47 api/types/registry: DecodeAuthConfig: add early returns and improve errors
6865032baa api/types/registry: add BenchmarkDecodeAuthConfig
c1b95c0ca2 ci/windows: Always run tests with c8d
967daa627a integration: Skip TestRunMountImageMultipleTimes on Windows
a615ec798d builder/remotecontext/git: fix linting issues
6a8654a808 api: bump to 1.52
ac5f464649 libnetwork/networkdb: improve quality of randomness
5799deb853 libnetwork/networkdb: test quality of mRandomNodes
d8730dc1d3 libnetwork/networkdb: add convergence test
7771a38896 Remove integration test using daemon internals
17d5f731f1 Move internal/safepath to daemon/volume/safepath
7edd7c68b1 Move internal/mounttree to daemon/internal/mounttree
daeaac0d3c Move internal/directory to daemon/internal/directory
33d824b838 Move quota to daemon/internal/quota
04f5276267 Move volume to daemon/volume
fdd9ae3465 libnet/internal/resolvconf: use slices.Clone
b1ce0c89f0 client: always send (empty) body on push
50d2dafc7f libnet/portallocator: introduce OSAllocator
14bd3451d8 client: ContainerExecAttach: update GoDoc links
830e0d79f5 vendor: github.com/opencontainers/cgroups v0.0.4
d66cf14a87 registry: replace pkg/homedir.GetConfigHome for os.UserConfigDir
14d9be4978 daemon: Fix mounting same image multiple times with different destinations
a28f031298 Fix libnetwork proto generation
b1884b6bba Restore libnetwork/resolvconf
3b5f7c2a29 Move internal/modprobe to daemon/libnetwork/internal/modprobe
7f4713a364 Move internal/maputil to daemon/libnetwork/internal/maputil
22ed8b1327 hack/make/test-docker-py: split test-exclusions to separate lines
7a720df61f Move libnetwork to daemon/libnetwork
f05652867d Move opts to daemon/pkg/opts
fb2117987d Dockerfile: upgrade Delve to v1.25.0
18438f3c13 Dockerfile: update compose to v2.38.2
8c3e10a011 Dockerfile: update buildx to v0.25.0
4dee288b51 Dockerfile: update cli to v28.3.2
9bcb12aa48 daemon: ContainerExtractToDir: make AllowOverwriteDirWithFile opt-in
fd8fec18cd integration/container: XFAIL flaky TestExecResize on Windows
4a8d77c958 api/types/container: remove deprecated ContainerTopOKBody alias
3d8d9c2bb3 api/types/container: remove deprecated ContainerUpdateOKBody alias
f8a2550a22 pkg/system: deprecate IsAbs and move internal
63bada41e5 pkg/system: deprecate EscapeArgs and move internal
0fc1493654 pkg/system: remove EnableContainerdRuntime, ContainerdRuntimeSupported
a327a9f341 integration-cli: fix flaky TestRestartStoppedContainer
59d5743a43 testutil/daemon: Daemon.Stop() don't log when already stopped
1c8b09ccf6 integration-cli: TestDockerNetworkHostModeUngracefulDaemonRestart start, not restart
9e69fc567e testutil/daemon: remove string-matching for error
cf41e9ac60 testutil/daemon: gofumpt
d6c90dcb87 integration/container: fix flaky TestRemoveContainerWithVolume
d30e61bff4 api/types/registry: add some tests for encoding/decoding authconfig
c31368fffb Don't raise an error when stopping a stopped docker-proxy
f6b3b257c8 implement test api images history integration test on dedicated file
669163c416 remove test api images history integration cli test suite
04dbcddd6a migrate test api images history integration cli test to integration test
adad33b30e Fix expected results for nftablesdoc tests
dde698a2e8 integration/container: add basic test for ContainerInspectWithRaw
16ed75572f client: TestContainerInspectWithEmptyID test both inspect variants
7f602d3b94 When switching between iptables/nftables, delete old rules
a5e3f39770 integration/container: avoid ContainerInspectWithRaw with "size"
88b67eb2fc integration/container: cleanup TestCreateWithCustomReadonlyPaths
bd091c1a9d integration/container: cleanup TestCreateWithCustomMaskedPaths
779052873d Add nftablesdoc
ad579b8a1d daemon/container: remove deprecated IsValidStateString
312eebde49 daemon/container: remove deprecated IsValidHealthString
e9fb208e87 daemon/container: remove deprecated StateStatus, WaitCondition
0d24798529 daemon/graphdriver: remove error or deprecated graphdriver-plugins
7767525ccd daemon/graphdriver: remove deprecated GetDriver()
1fe4a0a7ad daemon/graphdriver: remove redundant init()
bd8f9c3c1b registry: remove deprecated APIEndpoint.AllowNondistributableArtifacts
65d424e126 registry: remove deprecated APIEndpoint.Official
7252c3c78d registry: remove deprecated APIEndpoint.TrimHostName
11a18d3b00 api/types/registry: remove deprecated fields for non-distributable artifacts
b3e513f80a registry: remove deprecated Service.ResolveRepository()
5862b926f5 registry: remove deprecated SetCertsDir and unify CertsDir code
924cd22d1d registry: remove deprecated HostCertsDir
178416334f Run CI tests with nftables
ea29dffaa5 daemon/server: remove compatibility with API v1.4 auth-config on push
54e67d0054 daemon: AuthenticateToRegistry: remove statusMessage return
e8396af484 nftabler: add per-port rules
b677c1a671 Replace integration import test use of image type
d90277372f libn/d/overlay: drop obsolete writeToStore comment
30b9480107 Create legacy links during endpoint Join
dd9e289b6e Don't pass sandbox options to ProgramExternalConnectivity
4f7afb8ac9 Remove libnet's logic to track a driver's port mapping state
89d3419093 libnetwork/d/overlay: fix logical race conditions
843cd96725 libn/d/overlay: fix encryption race conditions
a1d299749c libn/d/overlay: inline secMapWalk into only caller
74713e1a7d libnetwork/d/overlay: un-embed mutexes
a05080c26c libnet/d/bridge: split NATed and routed port mappings
d229c1ba31 libnet/d/bridge: norm pb reqs before forming groups
e2034267f6 nftabler: add per-endpoint rules
b5bf89c315 libnet/d/bridge: pass SCTP sock to the proxy
0a047e825c update to go1.24.5
0ea28fede0 integration/networking: increase context timeout for attach
c833bd598e vendor: github.com/ishidawataru/sctp v0.0.0-20250708014235-1989182a9425
03a662b80e vendor: code.cloudfoundry.org/clock v1.37.0
08bde5edfa libnetwork/networkdb: fix broadcast queue deadlocks
aff444df86 libn/networkdb: make TestNetworkDBIslands not flaky
1e1be54d3e libn/networkdb: prevent spurious rejoins in tests
21d9109750 libn/networkdb: stop forging tombstone entries
428dbe617a nftabler: add network level rules
a55fede2d4 Pass context to nftables functions
1c5d6d1ee3 Mark iptabler/nftabler golden results as generated
ee6a6b061f daemon/pkg/plugin: remove dependency on legacy distribution package
09689298e3 distribution: fix detection of v1 images and remove libtrust dependency
ac9d5a6068 integration-cli: TestPullFailsWithAlteredLayer: use OCI manifest
fd47ccef7b integration-cli: TestPullFailsWithAlteredManifest: use OCI manifest
4e818970e2 integration-cli: TestPullManifestList: use OCI media-types
f6ef56a0bc integration-cli: TestPullManifestList: rewrite using OCI types
51d6687754 api: swagger: Tweak type of GwPriority to integer
bfc0c7cff5 docs: api: Tweak type of GwPriority to integer
557b5d60d3 layer: remove LogReleaseMetadata utility
7d18f65eb2 distribution/xfer: improve test reporting
291872e086 remove type conversions
ade244f97d deprecate layer.CreateChainID for OCI identity
10e9ab66f9 image/tarexport: inline validateManifest utility
471f173170 image/tarexport: improve error messages for invalid archives
033750cf80 image/tarexport: remove suport for loading v0/v1 images
ebfafa1561 contrib: add Wireshark plugins for NetworkDB
aae26b80fe Remove client buildkit dep
e93e15afb0 Replace use of env test util with standard library call
4754c15e2b Dockerfile: bump gotest.tools/gotestsum v1.12.3 (for go1.25)
fa4f3c979f gha: remove GO_VERSION build-arg from builds
136c0e591b image: RootFS.Clone: simplify
aea776332b pkg/stack: suppress some unhandled errors
e32d26cb59 libnet/diag: remove /stackdump endpoint
a881e9e057 Remember port binding state in the bridge driver
7ea50c14d6 Remote network driver: remember gateway state
054738bce3 Pass gateway endpoint ids to ProgramExternalConnectivity
07e5be0a18 image: remove special handling for legacy "layers+base" windows images
5efd2286da vendor: update buildkit to v0.23.2
e1b70074ec distribution/xfer: LayerDownloadManager.Download: remove initialRootFS arg
173436c702 distribution/xfer: rename var that shadowed type
0683bc6355 fix some inconsistency in import aliases
d207ee97ff daemon/listeners: extract utility for DACL, and improve docs
18dc570918 remove project dev "reports"
93bbd21d82 rename codecov.yml to .codecov.yml
ce3c8785dc restartmanager: move to daemon/internal
256f96ef59 remove VENDORING.md
717188201a contrib: remove mkimage-xxx scripts
3f8630cb84 internal/usergroup: move to daemon/internal
cbe6e31487 internal/usergroup: move windows consts to builder/dockerfile
8dbe0f45a9 integration-cli: debug TestPushToCentralRegistryUnauthorized
5fe253cd79 builder/dockerfile: BuildFromConfig: combine loops
a30b63eafc integration-cli: remove uses of deprecated dockerCmdWithResult utility
90f9ce14f1 Move libcontainerd to daemon/internal/libcontainerd
3ee8c1e3a9 Move libcontainerd/types to daemon/internal/libcontainerd/types
841a369b8f Move libcontainerd/supervisor to daemon/internal/libcontainerd/supervisor
fe959261d3 Move libcontainerd/shimopts to daemon/internal/libcontainerd/shimopts
4e8bd050bf Move libcontainerd/remote to daemon/internal/libcontainerd/remote
dd1656e6bc Move libcontainerd/queue to daemon/internal/libcontainerd/queue
6835f367e5 Move libcontainerd/local to daemon/internal/libcontainerd/local
5419eb1efc Move container to daemon/container
a02ba3c7df Move container/stream to daemon/internal/stream
9d9cb00d50 Move container/stream/bytespipe to daemon/internal/stream/bytespipe
3581b982f7 Move plugin to daemon/pkg/plugin
1c700c876f Move plugin/v2 to daemon/pkg/plugin/v2
f5ceed8719 Move plugin/executor/containerd to daemon/internal/plugin/executor/containerd
0b2582dc8f Move internal/metrics to daemon/internal/metrics
87238882e0 Move api/server to daemon/server
3a6e3f85c6 Move api/server/backend/build to daemon/build
79f802d46a Move api/server/httputils to daemon/server/httputils
c7a87f0dee Move api/server/httpstatus to daemon/server/httpstatus
d64bd2cceb Move api/server/middleware to daemon/server/middleware
72a020fcd8 Move api/server/router to daemon/server/router
f293628f55 Move api/server/router/volume to daemon/server/router/volume
15c8007064 Move api/server/router/system to daemon/server/router/system
45172bbf23 Move api/server/router/swarm to daemon/server/router/swarm
f6ba5a5241 Move api/server/router/session to daemon/server/router/session
3eb5fe0277 Move api/server/router/plugin to daemon/server/router/plugin
baa58ddc6a Move api/server/router/network to daemon/server/router/network
0cbb4ac8e6 Move api/server/router/image to daemon/server/router/image
a063389af7 Move api/server/router/grpc to daemon/server/router/grpc
9ff489863c Move api/server/router/distribution to daemon/server/router/distribution
ced7798ed8 Move api/server/router/debug to daemon/server/router/debug
3a9db5fbd6 Move api/server/router/container to daemon/server/router/container
fcf3ff1b2f client: remove getDockerOS utility in favor of "Ostype" header
d6136b660f Move api/server/router/checkpoint to daemon/server/router/checkpoint
31b6886eb1 Move api/server/router/build to daemon/server/router/build
1c0d381f4e client: client.tryImagePush: accept registry.RequestAuthConfig
ca0afe91b9 client: client.tryImageCreate: accept registry.RequestAuthConfig
79b4e18883 client: add staticAuth utility
871543a8c5 client: Client.ServiceUpdate: don't manually construct header value
a824db247f Add progress aux emitter to build backend
374fa24a53 Add multierror function to api network
0964fa01ba Remove dependency on testutil from client
58404b0c28 Remove dependency on httputil for client hijack test
e7289e7e02 hack: check windows resources are set in the binary
44623fb856 cmd: use dockerfile to generate win event messages
0ea20c9f72 cmd: fix winresources and move them out cli package
6b8afec95b fix redefines-builtin-id from revive
90ab64cbda fix increment-decrement from revive
381d9d0723 fix use-errors-new from revive
f0136d1dba fix superfluous-else from revive
369c8f828e fix var-declaration from revive
d72f219a11 gha/bin-image: update tags comment
b40fe5cb8b pluginrpc-gen: align generator with generated
f8fcc20c3b Update maintainer info for austinvazquez
38b98bcf68 gha/bin-image: add major and minor version image tags
057e35dd65 libnetwork/d/overlay: ref-count encryption params
1c2b744ca2 libnetwork/d/overlay: properly model peer db
59437f56f9 libnetwork/d/overlay: refactor peer db impl
33139da522 Split part of dockerd main to command under daemon
98047c5190 Move cmd/dockerd/trap to daemon/command/trap
ea11b5f3fe Move cmd/dockerd/debug to daemon/command/debug
53475e1adf integration/container: TestCreateByImageID: minor improvements
fcf666f9b0 dockerfile: update govulncheck to v1.1.4
8c067c5223 client: Client.addHeaders: remove special handling for api < 1.25
ef50844a0b docs: cut api docs for v1.51
5a02e7f4e3 vendor: update buildkit to v0.23.1
b466c35da1 Update containerd to v2.1.3
7a12bbe5d3 libn/d/overlay: delete FDB entry from AF_BRIDGE
1d8545d60c daemon/config: Validate: add missing validation for registry mirrors
307c18598d registry: ValidateMirror: improve validation for missing schemes
a90da2edc3 vendor: github.com/opencontainers/cgroups v0.0.3
a7f01d238e libnetwork: fix flaky Swarm service DNS
062082ec9b daemon: containerStop: fix ordering of "stop" and "die" events
bf002e51a0 Split [Program|Revoke]ExternalConnectivity out of libnet driverapi
4ccbca1efe Add TestRoutedNonGateway
d85513e1a3 daemon: LogContainerEventWithAttributes: minor optimisation
ec185e57cf Test Nftabler params
e43968d7ed vendor: github.com/moby/buildkit v0.23.0
0c182d4d57 api/types/container: deprecate ExecOptions.Detach
126f99d776 Add a way to undo nftables.Enable(), for unit tests
1289519b03 vendor: update buildkit to v0.13.0-rc2
c3ac979ecf vendor: github.com/moby/swarmkit/v2 v2.0.0
4891396da6 docs(client/ContainerExecAttach): add a mention to stdcopy.StdCopy
b7ef527bdc pkg/idtools: deprecate IdentityMapping, Identity.Chown
66e9cd97f2 remove deprecated pkg/archive, pkg/chrootarchive
d06c22f27d remove deprecated pkg/reexec
98015c21ec remove deprecated pkg/atomicwriter
cf91441a1b pkg/ioutils: remove deprecated atomicwriter functions
1f0e9077e4 remove deprecated pkg/parsers
c66abe486b nftabler: add mirrored WSL2 loopback0 workaround
d31956b2f7 Add an outline nftabler
04618dfc0b remove deprecated pkg/platform
f1e93a1770 pkg/system: remove deprecated MkdirAll
ce31bf3f0b gha: dco: bump alpine to 3.22
1ad9599da7 Drop DOCKER-ISOLATION rules
2d60b8eacd vendor: github.com/moby/swarmkit/v2 v2.0.0-20250613170222-a45be3cac15c
6ec6e0991a libnetwork/networkdb: prioritize local broadcasts
e9a7154909 libnetwork/networkdb: improve TestCRUDTableEntries
dbb0d88109 libn/networkdb: use distinct type for own networks
51f31826ee libnetwork/networkdb: don't clear queue on rejoin
30b27ab6ea libnetwork/networkdb: drop id field from network
9316396db0 gha: run windows 2025 on PRs, 2022 scheduled
6f484d0d4c gha: update to windows 2022 / 2025
0a30b98447 gha: lower timeouts on "build" and "merge" steps
accbfde61e client: use go-winio.DialPipe directly
df6b405796 libnetwork/d/overlay: drop initEncryption function
713f887698 libnetwork/d/overlay: drop checkEncryption function
cb4e7b2f03 libnetwork/d/overlay: make setupEncryption a method
0d893252ac libnetwork/d/overlay: checkEncryption: drop isLocal param
4b1c1236b9 libnetwork/d/overlay: peerdb: drop isLocal param
48e0b24ff7 libnetwork/d/overlay: elide vtep for local peers
a9e2d6d06e libnetwork/d/overlay: filter local peers explicitly
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
4 files changed, 23 insertions, 17 deletions
diff --git a/recipes-containers/docker/docker-moby_git.bb b/recipes-containers/docker/docker-moby_git.bb index 47ded68c..0078ab6d 100644 --- a/recipes-containers/docker/docker-moby_git.bb +++ b/recipes-containers/docker/docker-moby_git.bb | |||
| @@ -44,8 +44,8 @@ DESCRIPTION = "Linux container runtime \ | |||
| 44 | # so we get that tag, and make it our SRCREVS: | 44 | # so we get that tag, and make it our SRCREVS: |
| 45 | # | 45 | # |
| 46 | 46 | ||
| 47 | SRCREV_moby = "80947b5724c59fb08eb5489fca622411235ecbb4" | 47 | SRCREV_moby = "d1a720cb15d99821e7b96197b0f01ffea33b7356" |
| 48 | SRCREV_cli = "b0d1d9471156ec95aad5c929513718ad89b0309b" | 48 | SRCREV_cli = "171a9b70b2736c719019393259ecebdcac47bead" |
| 49 | SRCREV_FORMAT = "moby" | 49 | SRCREV_FORMAT = "moby" |
| 50 | SRC_URI = "\ | 50 | SRC_URI = "\ |
| 51 | git://github.com/moby/moby.git;nobranch=1;name=moby;protocol=https;destsuffix=${GO_SRCURI_DESTSUFFIX} \ | 51 | git://github.com/moby/moby.git;nobranch=1;name=moby;protocol=https;destsuffix=${GO_SRCURI_DESTSUFFIX} \ |
| @@ -64,7 +64,7 @@ require docker.inc | |||
| 64 | LICENSE = "Apache-2.0" | 64 | LICENSE = "Apache-2.0" |
| 65 | LIC_FILES_CHKSUM = "file://src/import/LICENSE;md5=4859e97a9c7780e77972d989f0823f28" | 65 | LIC_FILES_CHKSUM = "file://src/import/LICENSE;md5=4859e97a9c7780e77972d989f0823f28" |
| 66 | 66 | ||
| 67 | DOCKER_VERSION = "28.3.3" | 67 | DOCKER_VERSION = "29.0.0-rc.1" |
| 68 | PV = "${DOCKER_VERSION}+git${SRCREV_moby}" | 68 | PV = "${DOCKER_VERSION}+git${SRCREV_moby}" |
| 69 | 69 | ||
| 70 | CVE_PRODUCT = "docker mobyproject:moby" | 70 | CVE_PRODUCT = "docker mobyproject:moby" |
diff --git a/recipes-containers/docker/docker.inc b/recipes-containers/docker/docker.inc index c464bc3c..99535a77 100644 --- a/recipes-containers/docker/docker.inc +++ b/recipes-containers/docker/docker.inc | |||
| @@ -3,6 +3,8 @@ DEPENDS = " \ | |||
| 3 | sqlite3 \ | 3 | sqlite3 \ |
| 4 | libtool-native \ | 4 | libtool-native \ |
| 5 | libtool \ | 5 | libtool \ |
| 6 | nftables \ | ||
| 7 | libnftnl \ | ||
| 6 | " | 8 | " |
| 7 | 9 | ||
| 8 | DEPENDS:append:class-target = " lvm2" | 10 | DEPENDS:append:class-target = " lvm2" |
| @@ -57,7 +59,7 @@ do_configure[noexec] = "1" | |||
| 57 | # Export for possible use in Makefiles, default value comes from go.bbclass | 59 | # Export for possible use in Makefiles, default value comes from go.bbclass |
| 58 | export GO_LINKSHARED | 60 | export GO_LINKSHARED |
| 59 | 61 | ||
| 60 | DOCKER_PKG = "github.com/docker/docker" | 62 | DOCKER_PKG = "github.com/moby/moby/v2" |
| 61 | # in order to exclude devicemapper and btrfs - https://github.com/docker/docker/issues/14056 | 63 | # in order to exclude devicemapper and btrfs - https://github.com/docker/docker/issues/14056 |
| 62 | BUILD_TAGS ?= "exclude_graphdriver_btrfs exclude_graphdriver_devicemapper" | 64 | BUILD_TAGS ?= "exclude_graphdriver_btrfs exclude_graphdriver_devicemapper" |
| 63 | 65 | ||
| @@ -68,8 +70,8 @@ do_compile() { | |||
| 68 | cd ${S}/src/import | 70 | cd ${S}/src/import |
| 69 | rm -rf .gopath | 71 | rm -rf .gopath |
| 70 | mkdir -p .gopath/src/"$(dirname "${DOCKER_PKG}")" | 72 | mkdir -p .gopath/src/"$(dirname "${DOCKER_PKG}")" |
| 71 | ln -sf ../../../.. .gopath/src/"${DOCKER_PKG}" | 73 | ln -sf ../../../../.. .gopath/src/"${DOCKER_PKG}" |
| 72 | 74 | ||
| 73 | mkdir -p .gopath/src/github.com/docker | 75 | mkdir -p .gopath/src/github.com/docker |
| 74 | ln -sf ${S}/cli .gopath/src/github.com/docker/cli | 76 | ln -sf ${S}/cli .gopath/src/github.com/docker/cli |
| 75 | 77 | ||
| @@ -86,6 +88,7 @@ do_compile() { | |||
| 86 | export GO111MODULE=off | 88 | export GO111MODULE=off |
| 87 | 89 | ||
| 88 | export DISABLE_WARN_OUTSIDE_CONTAINER=1 | 90 | export DISABLE_WARN_OUTSIDE_CONTAINER=1 |
| 91 | export BUILDFLAGS="-trimpath" | ||
| 89 | 92 | ||
| 90 | cd ${S}/src/import/ | 93 | cd ${S}/src/import/ |
| 91 | 94 | ||
| @@ -95,10 +98,11 @@ do_compile() { | |||
| 95 | VERSION="${DOCKER_VERSION}" DOCKER_GITCOMMIT="${DOCKER_COMMIT}" ./hack/make.sh dynbinary | 98 | VERSION="${DOCKER_VERSION}" DOCKER_GITCOMMIT="${DOCKER_COMMIT}" ./hack/make.sh dynbinary |
| 96 | 99 | ||
| 97 | # build the cli | 100 | # build the cli |
| 98 | cd ${S}/src/import/.gopath/src/github.com/docker/cli | 101 | cd ${S}/cli |
| 99 | export CFLAGS="" | 102 | export CFLAGS="" |
| 100 | export LDFLAGS="" | 103 | export LDFLAGS="" |
| 101 | export DOCKER_VERSION=${DOCKER_VERSION} | 104 | export DOCKER_VERSION=${DOCKER_VERSION} |
| 105 | export BUILDFLAGS="-trimpath" | ||
| 102 | VERSION="${DOCKER_VERSION}" DOCKER_GITCOMMIT="${DOCKER_COMMIT}" make dynbinary | 106 | VERSION="${DOCKER_VERSION}" DOCKER_GITCOMMIT="${DOCKER_COMMIT}" make dynbinary |
| 103 | } | 107 | } |
| 104 | 108 | ||
diff --git a/recipes-containers/docker/files/0001-check-config-make-CONFIG_MEMCG_SWAP-conditional.patch b/recipes-containers/docker/files/0001-check-config-make-CONFIG_MEMCG_SWAP-conditional.patch index 95ba2225..b7fe5775 100644 --- a/recipes-containers/docker/files/0001-check-config-make-CONFIG_MEMCG_SWAP-conditional.patch +++ b/recipes-containers/docker/files/0001-check-config-make-CONFIG_MEMCG_SWAP-conditional.patch | |||
| @@ -40,14 +40,16 @@ Index: import/contrib/check-config.sh | |||
| 40 | =================================================================== | 40 | =================================================================== |
| 41 | --- import.orig/contrib/check-config.sh | 41 | --- import.orig/contrib/check-config.sh |
| 42 | +++ import/contrib/check-config.sh | 42 | +++ import/contrib/check-config.sh |
| 43 | @@ -246,7 +246,9 @@ echo 'Optional Features:' | 43 | @@ -253,9 +253,11 @@ echo 'Optional Features:' |
| 44 | check_flags CGROUP_PIDS | 44 | check_flags SECCOMP_FILTER |
| 45 | } | 45 | } |
| 46 | { | 46 | { |
| 47 | - check_flags MEMCG_SWAP | 47 | - check_flags CGROUP_PIDS |
| 48 | + if [ "$kernelMajor" -lt 6 ] || [ "$kernelMajor" -eq 6 -a "$kernelMinor" -le 1 ]; then | 48 | + if [ "$kernelMajor" -lt 6 ] || [ "$kernelMajor" -eq 6 -a "$kernelMinor" -le 1 ]; then |
| 49 | + check_flags MEMCG_SWAP | 49 | + check_flags CGROUP_PIDS |
| 50 | } | ||
| 51 | { | ||
| 50 | + fi | 52 | + fi |
| 51 | # Kernel v5.8+ removes MEMCG_SWAP_ENABLED. | 53 | # Kernel v5.8+ removes MEMCG_SWAP_ENABLED and deprecates MEMCG_SWAP. |
| 52 | if [ "$kernelMajor" -lt 5 ] || [ "$kernelMajor" -eq 5 -a "$kernelMinor" -le 8 ]; then | 54 | if [ "$kernelMajor" -lt 5 ] || [ "$kernelMajor" -eq 5 -a "$kernelMinor" -lt 8 ]; then |
| 53 | CODE=${EXITCODE} | 55 | CODE=${EXITCODE} |
diff --git a/recipes-containers/docker/files/0001-dynbinary-use-go-cross-compiler.patch b/recipes-containers/docker/files/0001-dynbinary-use-go-cross-compiler.patch index e3f20a3a..948f5ce8 100644 --- a/recipes-containers/docker/files/0001-dynbinary-use-go-cross-compiler.patch +++ b/recipes-containers/docker/files/0001-dynbinary-use-go-cross-compiler.patch | |||
| @@ -102,8 +102,8 @@ Index: import/hack/make/.binary | |||
| 102 | if [ -n "$DOCKER_DEBUG" ]; then | 102 | if [ -n "$DOCKER_DEBUG" ]; then |
| 103 | set -x | 103 | set -x |
| 104 | fi | 104 | fi |
| 105 | - ./hack/with-go-mod.sh go build -mod=vendor -modfile=vendor.mod -o "$DEST/$BINARY_FULLNAME" "${BUILDFLAGS[@]}" -ldflags "$LDFLAGS $LDFLAGS_STATIC $DOCKER_LDFLAGS" -gcflags="${GCFLAGS}" "$GO_PACKAGE" | 105 | - go build -o "$DEST/$BINARY_FULLNAME" "${BUILDFLAGS[@]}" -ldflags "$LDFLAGS $LDFLAGS_STATIC $DOCKER_LDFLAGS" -gcflags="${GCFLAGS}" "$GO_PACKAGE" |
| 106 | + ./hack/with-go-mod.sh ${GO} build -trimpath -mod=vendor -modfile=vendor.mod -o "$DEST/$BINARY_FULLNAME" "${BUILDFLAGS[@]}" -ldflags "$LDFLAGS $LDFLAGS_STATIC $DOCKER_LDFLAGS" -gcflags="${GCFLAGS}" "$GO_PACKAGE" | 106 | + $GO build -o "$DEST/$BINARY_FULLNAME" "${BUILDFLAGS[@]}" -ldflags "$LDFLAGS $LDFLAGS_STATIC $DOCKER_LDFLAGS" -gcflags="${GCFLAGS}" "$GO_PACKAGE" |
| 107 | ) | ||
| 108 | 107 | ||
| 109 | echo "Created binary: $DEST/$BINARY_FULLNAME" | 108 | # Verify that the built binary contains windows resources |
| 109 | if [ "$(go env GOOS)" = "windows" ]; then | ||