20.10.6

(2021-06-29)

Components

Component

Version

Mirantis Container Runtime

20.10.6

containerd

1.4.6

runc

1.0.0-rc95

Client

  • Suppressed warnings for deprecated cgroups (docker/cli#3099).

  • The docker CLI now ignores SIGURG signals, and thus no longer sends them to containers on Linux. Starting with version 1.14, the Go runtime uses SIGURG signals internally as an interrupt to support preemptable syscalls. docker CLI previously forwarded these signals to the containers it was attached to (docker/cli#3107, moby/moby#42421).

Builder

  • Updated BuildKit to version 0.8.3-3-g244e8cde (moby/moby#42448).

    • Transformed relative mountpoints for exec mounts in the executor to work around a breaking change in runc version 1.0.0-rc94 and higher (moby/buildkit#2137).

    • Added retry on push 5xx errors (moby/buildkit#2043).

    • Fixed an issue wherein renaming a file copied using a COPY command with a wildcard did not invalidate the build-cache. This change invalidates existing build caches for copy commands that use a wildcard (moby/buildkit#2018).

    • Fixed an issue wherein the use of mounts did not invalidate the build-cache (moby/buildkit#2076).

  • Fixed an issue wherein MCR did not cache the FROM image when using legacy schema 1 images, resulting in build failures (moby/moby#42382).

Networking

  • Updated libnetwork to fix publishing ports on environments with the kernel boot parameter ipv6.disable=1 and a deadlock that caused internal DNS lookups to fail (moby/moby#42413).

  • Fixed an issue wherein overlapping IP addresses could occur due to nodes failing to clean up their old load balancer IP addresses (FIELD-3915).

Logging

  • Updated the hcsshim SDK to make daemon logs on Windows less verbose (moby/moby#42292).

Packaging

  • Updated containerd to version 1.4.6 and runc to version 1.0.0-rc95 to address CVE-2021-30465 (ENGINE-482).