Docker Engine 18.04.0-ce Release Notes (Continued) and Swarm Mode Updates

* Enable CRIU on non-amd64 architectures (v2). [moby/moby#36676](https://github.com/moby/moby/pull/36676) - Fixes intermittent client hang after closing stdin to attached container [moby/moby#36517](https://github.com/moby/moby/pull/36517) - Fix daemon panic on container export after restart [moby/moby#36586](https://github.com/moby/moby/pull/36586) - Follow-up fixes on multi-stage moby's Dockerfile. [moby/moby#36425](https://github.com/moby/moby/pull/36425) * Freeze busybox and latest glibc in Docker image. [moby/moby#36375](https://github.com/moby/moby/pull/36375) * If container will run as non root user, drop permitted, effective caps early. [moby/moby#36587](https://github.com/moby/moby/pull/36587) * Layer: remove metadata store interface. [moby/moby#36504](https://github.com/moby/moby/pull/36504) * Minor optimizations to dockerd. [moby/moby#36577](https://github.com/moby/moby/pull/36577) * Whitelist statx syscall. [moby/moby#36417](https://github.com/moby/moby/pull/36417) + Add missing error return for plugin creation. [moby/moby#36646](https://github.com/moby/moby/pull/36646) - Fix AppArmor not being applied to Exec processes. [moby/moby#36466](https://github.com/moby/moby/pull/36466) * Daemon/logger/ring.go: log error not instance. [moby/moby#36475](https://github.com/moby/moby/pull/36475) - Fix stats collector spinning CPU if no stats are collected. [moby/moby#36609](https://github.com/moby/moby/pull/36609) - Fix(distribution): digest cache should not be moved if it was an auth. [moby/moby#36509](https://github.com/moby/moby/pull/36509) - Make sure plugin container is removed on failure. [moby/moby#36715](https://github.com/moby/moby/pull/36715) * Bump to containerd 1.0.3. [moby/moby#36749](https://github.com/moby/moby/pull/36749) * Don't sort plugin mount slice. [moby/moby#36711](https://github.com/moby/moby/pull/36711) ### Swarm Mode * Fixes for synchronizing the dispatcher shutdown with in-progress rpcs. [moby/moby#36371](https://github.com/moby/moby/pull/36371) * Increase raft ElectionTick to 10xHeartbeatTick. [moby/moby#36672](https://github.com/moby/moby/pull/36672) * Make Swarm manager Raft quorum parameters configurable in daemon config. [moby/moby#36726](https://github.com/moby/moby/pull/36726) * Ingress network should not be attachable. [docker/swarmkit#2523](https://github.com/docker/swarmkit/pull/2523) * [manager/state] Add fernet as an option for raft encryption. [docker/swarmkit#2535](https://github.com/docker/swarmkit/pull/2535) * Log GRPC server errors. [docker/swarmkit#2541](https://github.com/docker/swarmkit/pull/2541) * Log leadership changes at the manager level. [docker/swarmkit#2542](https://github.com/docker/swarmkit/pull/2542) * Remove the containerd executor. [docker/swarmkit#2568](https://github.com/docker/swarmkit/pull/2568) * Agent: backoff session when no remotes are available. [docker/swarmkit#2570](https://github.com/docker/swarmkit/pull/2570) * [ca/manager] Remove root CA key encryption support entirely. [docker/swarmkit#2573](https://github.com/docker/swarmkit/pull/2573) - Fix agent logging race. [docker/swarmkit#2578](https://github.com/docker/swarmkit/pull/2578) * Adding logic to restore networks in order. [docker/swarmkit#2571](https://github.com/docker/swarmkit/pull/2571)

This section of the Docker Engine 18.04.0-ce release notes continues with updates including enabling CRIU on non-amd64 architectures, fixing client hangs, daemon panics, and AppArmor issues. Additional updates include freezing busybox and glibc versions in the Docker image, improvements to non-root user handling, and optimizations to dockerd. It also addresses plugin creation errors, bumps containerd to 1.0.3, and resolves issues with stats collection and distribution digest caching. The section concludes with Swarm Mode updates, including fixes for dispatcher shutdown synchronization, increased Raft election tick, and configurable Raft quorum parameters. Further Swarmkit enhancements involve ingress network updates, Raft encryption options, logging improvements, container executor removal, agent session backoff, CA key encryption removal, and network restoration logic.