SUSE-RU-2015:1386-1: Recommended update for Docker

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for Docker
______________________________________________________________________________

Announcement ID:    SUSE-RU-2015:1386-1
Rating:             low
References:         #935570 #938156 
Affected Products:
                    SUSE Linux Enterprise Module for Containers 12
______________________________________________________________________________

   An update that has two recommended fixes can now be
   installed.

Description:

   This update for Docker provides version 1.7.1 with various fixes and
   improvements (bsc#935570, bsc#938156):

   - Runtime
     + Fix default user spawning exec process with docker exec
     + Make --bridge=none not to configure the network bridge
     + Publish networking stats properly
     + Fix implicit devicemapper selection with static binaries
     + Fix socket connections that hung intermittently
     + Fix bridge interface creation on CentOS/RHEL 6.6
     + Fix local dns lookups added to resolv.conf
     + Fix copy command mounting volumes
     + Fix read/write privileges in volumes mounted with --volumes-from
     + Experimental feature: support for out-of-process volume plugins
     + The userland proxy can be disabled in favor of hairpin NAT using the
       daemon’s `--userland-proxy=false` flag
     + The `exec` command supports the `-u|--user` flag to specify the new
       process owner
     + Default gateway for containers can be specified daemon-wide using the
       `--default-gateway` and `--default-gateway-v6` flags
     + The CPU CFS (Completely Fair Scheduler) quota can be set in `docker
       run` using `--cpu-quota`
     + Container block IO can be controlled in `docker run`
       using`--blkio-weight`
     + ZFS support
     + The `docker logs` command supports a `--since` argument
     + UTS namespace can be shared with the host with `docker run --uts=host`

   - Remote API
     + Fix unmarshalling of Command and Entrypoint
     + Set limit for minimum client version supported
     + Validate port specification
     + Return proper errors when attach/reattach fail

   - Distribution
     + Fix pulling private images
     + Fix fallback between registry V2 and V1
     + Client support for v2 mirroring support for the official registry

   - Quality
     + Networking stack was entirely rewritten as part of the libnetwork
       effort
     + Engine internals refactoring
     + Volumes code was entirely rewritten to support the plugins effort
     + Sending SIGUSR1 to a daemon will dump all goroutines stacks without
       exiting

   - Build
     + Support ${variable:-value} and ${variable:+value} syntax for
       environment variables
     + Support resource management flags `--cgroup-parent`, `--cpu-period`,
       `--cpu-quota`, `--cpuset-cpus`, `--cpuset-mems`
     + git context changes with branches and directories
     + The .dockerignore file support exclusion rules

   - Bugfixes
     + Firewalld is now supported and will automatically be used when
       available
     + mounting --device recursively


Patch Instructions:

   To install this SUSE Recommended Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Module for Containers 12:

      zypper in -t patch SUSE-SLE-Module-Containers-12-2015-400=1

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Module for Containers 12 (x86_64):

      docker-1.7.1-40.1
      docker-debuginfo-1.7.1-40.1
      docker-debugsource-1.7.1-40.1


References:

   https://bugzilla.suse.com/935570
   https://bugzilla.suse.com/938156