Docker Engine 17.06 Release Notes (continued) - Runtime, Security, Swarm Mode, and Deprecation

* Update containerd to d24f39e203aa6be4944f06dd0fe38a618a36c764 [#33007](https://github.com/moby/moby/pull/33007) * Update runc to 992a5be178a62e026f4069f443c6164912adbf09 [#33007](https://github.com/moby/moby/pull/33007) + Add option to auto-configure blkdev for devmapper [#31104](https://github.com/moby/moby/pull/31104) + Add log driver list to `docker info` [#32540](https://github.com/moby/moby/pull/32540) + Add API endpoint to allow retrieving an image manifest [#32061](https://github.com/moby/moby/pull/32061) * Do not remove container from memory on error with `forceremove` [#31012](https://github.com/moby/moby/pull/31012) + Add support for metric plugins [#32874](https://github.com/moby/moby/pull/32874) * Return an error when an invalid filter is given to `prune` commands [#33023](https://github.com/moby/moby/pull/33023) + Add daemon option to allow pushing foreign layers [#33151](https://github.com/moby/moby/pull/33151) - Fix an issue preventing containerd to be restarted after it died [#32986](https://github.com/moby/moby/pull/32986) + Add cluster events to Docker event stream. [#32421](https://github.com/moby/moby/pull/32421) + Add support for DNS search on windows [#33311](https://github.com/moby/moby/pull/33311) * Upgrade to Go 1.8.3 [#33387](https://github.com/moby/moby/pull/33387) - Prevent a containerd crash when journald is restarted [#containerd/930](https://github.com/containerd/containerd/pull/930) - Fix healthcheck failures due to invalid environment variables [#33249](https://github.com/moby/moby/pull/33249) - Prevent a directory to be created in lieu of the daemon socket when a container mounting it is to be restarted during a shutdown [#30348](https://github.com/moby/moby/pull/33330) - Prevent a container to be restarted upon stop if its stop signal is set to `SIGKILL` [#33335](https://github.com/moby/moby/pull/33335) - Ensure log drivers get passed the same filename to both StartLogging and StopLogging endpoints [#33583](https://github.com/moby/moby/pull/33583) - Remove daemon data structure dump on `SIGUSR1` to avoid a panic [#33598](https://github.com/moby/moby/pull/33598) ### Security + Allow personality with UNAME26 bit set in default seccomp profile [#32965](https://github.com/moby/moby/pull/32965) ### Swarm Mode + Add an option to allow specifying a different interface for the data traffic (as opposed to control traffic) [#32717](https://github.com/moby/moby/pull/32717) * Allow specifying a secret location within the container [#32571](https://github.com/moby/moby/pull/32571) + Add support for secrets on Windows [#32208](https://github.com/moby/moby/pull/32208) + Add TLS Info to swarm info and node info endpoint [#32875](https://github.com/moby/moby/pull/32875) + Add support for services to carry arbitrary config objects [#32336](https://github.com/moby/moby/pull/32336), [#docker/cli/45](https://github.com/docker/cli/pull/45),[#33169](https://github.com/moby/moby/pull/33169) + Add API to rotate swarm CA certificate [#32993](https://github.com/moby/moby/pull/32993) * Service digest pining is now handled client side [#32388](https://github.com/moby/moby/pull/32388), [#33239](https://github.com/moby/moby/pull/33239) + Placement now also take platform in account [#33144](https://github.com/moby/moby/pull/33144) - Fix possible hang when joining fails [#docker-ce/19](https://github.com/docker/docker-ce/pull/19) - Fix an issue preventing external CA to be accepted [#33341](https://github.com/moby/moby/pull/33341) - Fix possible orchestration panic in mixed version clusters [#swarmkit/2233](https://github.com/docker/swarmkit/pull/2233) - Avoid assigning duplicate IPs during initialization [#swarmkit/2237](https://github.com/docker/swarmkit/pull/2237) ### Deprecation * Disable legacy registry (v1) by default [#33629](https://github.com/moby/moby/pull/33629)

This section of the Docker Engine 17.06 release notes covers updates to Runtime, Security, Swarm Mode, and Deprecation. Runtime updates include containerd and runc updates, blkdev auto-configuration, log driver listing in docker info, image manifest API addition, metric plugins support, and foreign layer pushing. Security enhancements involve seccomp profile adjustments. Swarm Mode updates include data traffic interface options, secret location specification, Windows secrets support, TLS info addition, arbitrary config objects, swarm CA certificate rotation API, and platform-aware placement. Deprecation highlights the disabling of the legacy registry (v1) by default.