Docker Engine 18.03.0-ce: Further Enhancements, Bug Fixes, and Swarm Mode Updates

- Fix "--node-generic-resource" singular/plural [moby/moby#36125](https://github.com/moby/moby/pull/36125) * Daemon.cleanupContainer: nullify container RWLayer upon release [moby/moby#36160](https://github.com/moby/moby/pull/36160) * Daemon: passdown the `--oom-kill-disable` option to containerd [moby/moby#36201](https://github.com/moby/moby/pull/36201) * Display a warn message when there is binding ports and net mode is host [moby/moby#35510](https://github.com/moby/moby/pull/35510) * Refresh containerd remotes on containerd restarted [moby/moby#36173](https://github.com/moby/moby/pull/36173) * Set daemon root to use shared propagation [moby/moby#36096](https://github.com/moby/moby/pull/36096) * Optimizations for recursive unmount [moby/moby#34379](https://github.com/moby/moby/pull/34379) * Perform plugin mounts in the runtime [moby/moby#35829](https://github.com/moby/moby/pull/35829) * Graphdriver: Fix RefCounter memory leak [moby/moby#36256](https://github.com/moby/moby/pull/36256) * Use continuity fs package for volume copy [moby/moby#36290](https://github.com/moby/moby/pull/36290) * Use proc/exe for reexec [moby/moby#36124](https://github.com/moby/moby/pull/36124) + Add API support for templated secrets and configs [moby/moby#33702](https://github.com/moby/moby/pull/33702) and [moby/moby#36366](https://github.com/moby/moby/pull/36366) * Use rslave propagation for mounts from daemon root [moby/moby#36055](https://github.com/moby/moby/pull/36055) + Add /proc/keys to masked paths [moby/moby#36368](https://github.com/moby/moby/pull/36368) * Bump Runc to 1.0.0-rc5 [moby/moby#36449](https://github.com/moby/moby/pull/36449) - Fixes `runc exec` on big-endian architectures [moby/moby#36449](https://github.com/moby/moby/pull/36449) * Use chroot when mount namespaces aren't provided [moby/moby#36449](https://github.com/moby/moby/pull/36449) - Fix systemd slice expansion so that it could be consumed by cAdvisor [moby/moby#36449](https://github.com/moby/moby/pull/36449) - Fix devices mounted with wrong uid/gid [moby/moby#36449](https://github.com/moby/moby/pull/36449) - Fix read-only containers with IPC private mounts `/dev/shm` read-only [moby/moby#36526](https://github.com/moby/moby/pull/36526) ### Swarm Mode * Replace EC Private Key with PKCS#8 PEMs [docker/swarmkit#2246](https://github.com/docker/swarmkit/pull/2246) * Fix IP overlap with empty EndpointSpec [docker/swarmkit #2505](https://github.com/docker/swarmkit/pull/2505) * Add support for Support SCTP port mapping [docker/swarmkit#2298](https://github.com/docker/swarmkit/pull/2298) * Do not reschedule tasks if only placement constraints change and are satisfied by the assigned node [docker/swarmkit#2496](https://github.com/docker/swarmkit/pull/2496) * Ensure task reaper stopChan is closed no more than once [docker/swarmkit #2491](https://github.com/docker/swarmkit/pull/2491) * Synchronization fixes [docker/swarmkit#2495](https://github.com/docker/swarmkit/pull/2495) * Add log message to indicate message send retry if streaming unimplemented [docker/swarmkit#2483](https://github.com/docker/swarmkit/pull/2483) * Debug logs for session, node events on dispatcher, heartbeats [docker/swarmkit#2486](https://github.com/docker/swarmkit/pull/2486) + Add swarm types to bash completion event type filter [docker/cli#888](https://github.com/docker/cli/pull/888) - Fix issue where network inspect does not show Created time for networks in swarm scope [moby/moby#36095](https://github.com/moby/moby/pull/36095)

This section outlines additional enhancements and bug fixes in Docker Engine 18.03.0-ce, including fixes for command-line options, daemon functionalities, memory leaks, and volume copying. It introduces API support for templated secrets and configurations and updates the Runc version. The updates also include fixes for `runc exec` on big-endian architectures, systemd slice expansion, device mounting, and read-only containers. Additionally, the section details updates to Swarm Mode, such as replacing EC Private Keys with PKCS#8 PEMs, fixing IP overlaps, adding SCTP port mapping support, preventing unnecessary task rescheduling, ensuring proper task reaper stop channel closure, synchronization fixes, adding log messages for message send retries, debug logs for session and node events, and swarm types to bash completion event type filter.