Docker 1.3 released

Docker 1.3 released

Docker 1.3 has been officially released. New features include Image Signature, process injection, new creation and running of container commands, security options, and directory sharing on Mac OS. In particular, security improvements have become a highlight of local release.

Image Signature

Allows you to verify the image publisher and image file.

Process Injection

In addition to viewing in-container applications through nsinit and nsenter, you can use more convenient docker exec commands. This will bring convenience to the container debug.

For example

$ docker exec ubuntu_bash -itbash 

Run the bash command in the ubuntu_bash container.

New create and run container commands create and start

The traditional docker run creates a container and runs it. Now you can use create and start for fine-grained control.

For example, first create a container (not in the running state ):

$ docker create -t -i fedora bash 6d8af538ec541dd581ebc2a24153a28329acb5268abe5ef868c1f1a261221752 

Then, let it run:

$ docker start -a -i 6d8af538ec5 

bash-4.2#




Security Options

Run--security-optTo specify system security options, including SELinux and apparmor labels. For example

$ docker run --security-opt label:type:svirt_apache -i -tcentos \ bash 

This function will be greatly reduced--privilegedTo improve the security of containers.

Shared directory on Mac OS X 

Based on boot2docker, you can directly share directories between local MAC systems and containers, for example,

$ docker run -v /Users/bob/myapp/src:/src [...] 

Will be directly mounted locally/Users/bob/myapp/srcDirectory to the container.

For more improvements, refer to https://github.com/docker/docker/issues? Q = milestone % 3a1. 3.0.

Docker 1.3 released