Docker Engine 19.03.0: Client, API, Experimental, and Security Updates

* Added maximum replicas per node. [docker/cli#1612](https://github.com/docker/cli/pull/1612) * Added option to pull images quietly. [docker/cli#882](https://github.com/docker/cli/pull/882) * Added a separate `--domainname` flag. [docker/cli#1130](https://github.com/docker/cli/pull/1130) * Added support for secret drivers in `docker stack deploy`. [docker/cli#1783](https://github.com/docker/cli/pull/1783) * Added ability to use swarm `Configs` as `CredentialSpecs` on services. [docker/cli#1781](https://github.com/docker/cli/pull/1781) * Added `--security-opt systempaths=unconfined` support. [docker/cli#1808](https://github.com/docker/cli/pull/1808) * Added basic framework for writing and running CLI plugins. [docker/cli#1564](https://github.com/docker/cli/pull/1564) [docker/cli#1898](https://github.com/docker/cli/pull/1898) * Bumped Docker App to v0.8.0. [docker/docker-ce-packaging#341](https://github.com/docker/docker-ce-packaging/pull/341) * Added support for Docker buildx. [docker/docker-ce-packaging#336](https://github.com/docker/docker-ce-packaging/pull/336) * Added support for Docker Assemble v0.36.0. * Added support for Docker Cluster v1.0.0-rc2. * Added support for Docker Template v0.1.4. * Added support for Docker Registry v0.1.0-rc1. * Bumped google.golang.org/grpc to v1.20.1. [docker/cli#1884](https://github.com/docker/cli/pull/1884) * CLI changed to pass driver specific options to `docker run`. [docker/cli#1767](https://github.com/docker/cli/pull/1767) * Bumped Golang 1.12.5. [docker/cli#1875](https://github.com/docker/cli/pull/1875) * `docker system info` output now segregates information relevant to the client and daemon. [docker/cli#1638](https://github.com/docker/cli/pull/1638) * (Experimental) When targeting Kubernetes, added support for `x-pull-secret: some-pull-secret` in compose-files service configs. [docker/cli#1617](https://github.com/docker/cli/pull/1617) * (Experimental) When targeting Kubernetes, added support for `x-pull-policy: <Never|Always|IfNotPresent>` in compose-files service configs. [docker/cli#1617](https://github.com/docker/cli/pull/1617) * cp, save, export: Now preventing overwriting irregular files. [docker/cli#1515](https://github.com/docker/cli/pull/1515) * npipe volume type on stack file now allowed. [docker/cli#1195](https://github.com/docker/cli/pull/1195) * Fixed tty initial size error. [docker/cli#1529](https://github.com/docker/cli/pull/1529) * Fixed problem with labels copying value from environment variables. [docker/cli#1671](https://github.com/docker/cli/pull/1671) ### API * Updated API version to v1.40. [moby/moby#38089](https://github.com/moby/moby/pull/38089) * Added warnings to `/info` endpoint, and moved detection to the daemon. [moby/moby#37502](https://github.com/moby/moby/pull/37502) * Added HEAD support for `/_ping` endpoint. [moby/moby#38570](https://github.com/moby/moby/pull/38570) * Added `Cache-Control` headers to disable caching `/_ping` endpoint. [moby/moby#38569](https://github.com/moby/moby/pull/38569) * Added `containerd`, `runc`, and `docker-init` versions to `/version`. [moby/moby#37974](https://github.com/moby/moby/pull/37974) * Added undocumented `/grpc` endpoint and registered BuildKit's controller. [moby/moby#38990](https://github.com/moby/moby/pull/38990) ### Experimental * Enabled checkpoint/restore of containers with TTY. [moby/moby#38405](https://github.com/moby/moby/pull/38405) * LCOW: Added support for memory and CPU limits. [moby/moby#37296](https://github.com/moby/moby/pull/37296) * Windows: Added ContainerD runtime. [moby/moby#38541](https://github.com/moby/moby/pull/38541) * Windows: LCOW now requires Windows RS5+. [moby/moby#39108](https://github.com/moby/moby/pull/39108) ### Security * mount: added BindOptions.NonRecursive (API v1.40). [moby/moby#38003](https://github.com/moby/moby/pull/38003) * seccomp: whitelisted `io_pgetevents()`. [moby/moby#38895](https://github.com/moby/moby/pull/38895) * seccomp: `ptrace(2)` for 4.8+ kernels now allowed. [moby/moby#38137](https://github.com/moby/moby/pull/38137)

Docker Engine 19.03.0 updates include client, API, experimental, and security enhancements. Client: max replicas per node, quiet image pulls, separate `--domainname`, secret drivers in `docker stack deploy`, swarm Configs as CredentialSpecs, `--security-opt systempaths=unconfined`, CLI plugin framework, and updates to Docker App, Buildx, and other components. CLI options passed to `docker run`; `docker system info` segregates client/daemon info. Experimental: Kubernetes support for `x-pull-secret`/`x-pull-policy`. API: version v1.40, `/info` warnings, `/_ping` improvements, containerd/runc versions. Experimental features include checkpoint/restore with TTY, LCOW limits, Windows ContainerD runtime. Security: mount BindOptions.NonRecursive, `io_pgetevents()` whitelisted for seccomp.