Release Notes

Important

The version numbering scheme for Mirantis Container Runtime 20.10 is independent and dissimilar from that in use by the upstream Moby and Docker CLI projects. As such, Mirantis recommends that users consult the MCR 20.10 patch release notes to determine Mirantis-specific changes and improvements.

Considerations

  • In developing MCR 20.10.x, Mirantis has been transitioning from legacy Docker Hub-issued licenses to JWT licenses, as detailed below:

    • Versions 20.10.0 to 20.10.6: Docker Hub licenses and JWT licenses

    • Versions 20.10.7 and later: JWT licenses only

    Using a JWT license with an MKE instance that manages MCR causes the engine to log error messages in the daemon log file, though MCR does not fail. This applies to MKE 3.4.x versions prior to 3.4.6 and MKE 3.3.x versions prior to 3.3.13.

  • CentOS 8 entered EOL status as of 31-December-2021. For this reason, Mirantis no longer supports CentOS 8 for all versions of MCR. We encourage customers who are using CentOS 8 to migrate onto any one of the supported operating systems, as further bug fixes will not be forthcoming. Refer to the MCR 20.10 Compatibility Matrix for more information.

MCR 20.10.21 current

Patch release for MCR 20.10 introducing the following updates:

  • Updated containerd to version 1.6.25-rc.1.

  • Updated Golang to version 1.20.10m1.

MCR 20.10.20

Patch release for MCR 20.10 introducing the following updates:

  • Updated containerd to version 1.6.22.

  • Updated Golang to version 1.19.12.

MCR 20.10.19

Patch release for MCR 20.10 introducing the following updates:

  • Updated containerd to version 1.6.22.

  • CVE fixes.

MCR 20.10.18

Patch release for MCR 20.10 introducing the following updates:

  • Updated Fipster (Go runtime) to version go1.19.10m1.

  • Updated Docker Buildx to version 0.10.5.

  • Updated containerd to version 1.6.21.

  • Updated cri-dockerd to version 0.3.4.

  • CVE fixes.

MCR 20.10.17

Patch release for MCR 20.10 introducing the following key features:

  • Updated Fipster (Go runtime) to version go1.19.8m1.

  • Updated containerd to version 1.6.20.

  • CVE fixes.

MCR 20.10.16

Patch release for MCR 20.10 introducing the following key features:

  • Updated Fipster (Go runtime) to version go1.19.7m3.

  • Updated Docker Buildx to version 0.10.4.

  • Updated containerd to version 1.6.19.

  • Updated cri-dockerd to version 0.3.1.

  • CVE fixes.

MCR 20.10.15

Patch release for MCR 20.10 introducing the following key features:

  • Updated Golang to version 1.18.10.

  • Updated docker buildx to version 0.10.0.

  • Added support for Oracle Linux 8.

MCR 20.10.14

Patch release for MCR 20.10 introducing the following key features:

  • Updated Golang to version 1.18.7.

MCR 20.10.13

Patch release for MCR 20.10 introducing the following key features:

  • Updated Golang to version 1.17.13.

  • Added support for Windows Server 2022.

MCR 20.10.12

Patch release for MCR 20.10 introducing the following key features:

  • Updated containerd to 1.6.6.

  • Added rootless mode for many Linux distributions.

  • Updated docker buildx to version 0.8.2.

MCR 20.10.11

Patch release for MCR 20.10 introducing the following key features:

  • Updated the etcd dependency to prevent the daemon from incorrectly holding file locks.

  • Support added for Rocky Linux 8.

  • Updated the Golang runtime to Go version 1.16.15.

MCR 20.10.10

Patch release for MCR 20.10 introducing the following key features:

  • Updated docker buildx to version 0.7.1.

  • Updated the Golang runtime to Go version 1.16.13.

MCR 20.10.9

Patch release for MCR 20.10 introducing the following key features:

  • Created parent directories inside a chroot during docker cp to prevent a specially-crafted container from changing permissions of existing files in the host filesystem.

  • Locked down file permissions to prevent unprivileged users from discovering and executing programs in /var/lib/docker.

  • Added support for clone3 syscall in the default seccomp policy, to support running containers based on recent versions of Ubuntu.

MCR 20.10.8

Patch release for MCR 20.10 introducing the following key feature:

  • MCR now prints a warning when using the --platform option to pull a single-arch image that does not match the specified architecture.

MCR 20.10.7

Patch release for MCR 20.10 introducing the following key feature:

  • MCR now accepts only JWT licenses. To upgrade MCR, customers using a Docker Hub-issued license must first replace it with the new license version.

MCR 20.10.6

Patch release for MCR 20.10 introducing the following key features:

  • Suppressed warnings for deprecated cgroups.

  • The docker CLI now ignores SIGURG signals, and thus no longer sends them to containers on Linux.

  • Updated BuildKit to version 0.8.3-3-g244e8cde.

MCR 20.10.5

Patch release for MCR 20.10 introducing the following key feature:

  • Added a technical preview for cri-docker (previously known as dockershim).

MCR 20.10.4

Patch release for MCR 20.10 introducing the following key feature:

  • MCR confirms that AppArmor and SELinux profiles are applied when building with BuildKit.

MCR 20.10.0

Patch release for MCR 20.10 introducing the following key features:

  • Support for cgroups v2 which limits process resource usage (such as CPU, memory, and disk). MCR uses cgroups in conjunction with Linux namespaces to isolate processes inside containers.

  • Support for using docker logs to read container logs, regardless of the configured logging driver or plugin.

  • Support for Ubuntu 20.04.

  • CLI improvements.