# Docker Engine docker-v29.8.0-rc.1 — v29.8.0-rc.1

- Product: Docker Engine (https://whatsnew.fyi/product/docker)
- Vendor: Docker
- Date: 2026-08-28
- Version: docker-v29.8.0-rc.1
- Original notes: https://github.com/moby/moby/releases/tag/docker-v29.8.0-rc.1
- Permalink: https://whatsnew.fyi/product/docker/releases/docker-v29.8.0-rc.1
- Labels: Pre-release

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Fix docker image inspect reporting a smaller image size than docker image ls for containerd image store
- **fixed** — Do not log expected image signature identity misses as errors for containerd image store images
- **changed** — dockerd now uses the embedded containerd if no system containerd service is configured and containerd is not installed
- **fixed** — Fix GET /images/{name}/json not including unpacked snapshot usage in Size when using the containerd image store
- **fixed** — Fix NRI container metadata so Container.Args includes the resolved executable as argv[0], matching the process launched in the container
- **fixed** — Fix Swarm service creation failing when an automatically generated name is already in use
- **fixed** — Fix docker ps sorting published ports lexicographically instead of numerically
- **security** — Reject checkpoint IDs containing path separators to prevent access outside the container checkpoint directory
- **changed** — Update BuildKit to v0.33.0-rc1
- **changed** — Update containerd (static binaries) to v2.3.4
- **changed** — Update Go runtime to 1.26.7
- **changed** — Update runc (in static binaries) to v1.5.1
- **fixed** — Fix docker network inspect failing to find a healthy Swarm network when another Swarm network could not be allocated
- **fixed** — Fix a node gossiping a superseded value for a Swarm service discovery entry after concurrent updates to the same key
- **fixed** — Fix Swarm service names failing to resolve on a node indefinitely after it misses a network membership announcement
- **fixed** — Fix Swarm service names failing to resolve on healthy nodes after a transient node failure
- **changed** — Reduce gossip traffic generated by a node that repeatedly disconnects and rejoins the cluster
- **added** — Remote network-driver plugins can now set the container-side interface name via the DstName field in their Join response
- **added** — Reserve network names "container" and "container:" to prevent creation of unusable networks
- **changed** — Spread the daemon's periodic Swarm overlay network gossip and synchronization work over time, avoiding recurring bursts of CPU and network usage

##### 29.8.0-rc.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

- [docker/cli, 29.8.0 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A29.8.0)
- [moby/moby, 29.8.0 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A29.8.0)

###### Bug fixes and enhancements

- containerd image store: Fix `docker image inspect` reporting a smaller image size than `docker image ls`. [moby/moby#53426](https://github.com/moby/moby/pull/53426)
- Do not log expected image signature identity misses as errors for containerd image store images. [moby/moby#53495](https://github.com/moby/moby/pull/53495)
- dockerd now uses the embedded containerd if no system containerd service is configured and containerd is not installed. [moby/moby#53388](https://github.com/moby/moby/pull/53388)
- Fix `GET /images/{name}/json` not including unpacked snapshot usage in `Size` when using the containerd image store. [moby/moby#53426](https://github.com/moby/moby/pull/53426)
- Fix NRI container metadata so `Container.Args` includes the resolved executable as `argv[0]`, matching the process launched in the container instead of only the Docker `Cmd`. [moby/moby#53423](https://github.com/moby/moby/pull/53423)
- Fix Swarm service creation failing when an automatically generated name is already in use. [moby/moby#53468](https://github.com/moby/moby/pull/53468)
- Fixed `docker ps` sorting published ports lexicographically instead of numerically. [docker/cli#7144](https://github.com/docker/cli/pull/7144)
- Reject checkpoint IDs containing path separators to prevent access outside the container checkpoint directory. [moby/moby#53377](https://github.com/moby/moby/pull/53377)

###### Packaging updates

- Update BuildKit to [v0.33.0-rc1](https://github.com/moby/buildkit/releases/tag/v0.33.0-rc1). [moby/moby#53476](https://github.com/moby/moby/pull/53476)
- Update containerd (static binaries) to [v2.3.4](https://github.com/containerd/containerd/releases/tag/v2.3.4). [moby/moby#53409](https://github.com/moby/moby/pull/53409)
- Update Go runtime to [1.26.7](https://go.dev/doc/devel/release#go1.26.7). [docker/cli#7224](https://github.com/docker/cli/pull/7224), [moby/moby#53413](https://github.com/moby/moby/pull/53413)
- Update runc (in static binaries) to [v1.5.1](https://github.com/opencontainers/runc/releases/tag/v1.5.1). [moby/moby#52306](https://github.com/moby/moby/pull/52306)

###### Networking

- Fix `docker network inspect` failing to find a healthy Swarm network when another Swarm network could not be allocated. [moby/moby#53325](https://github.com/moby/moby/pull/53325)
- Fix a node gossiping a superseded value for a Swarm service discovery entry after concurrent updates to the same key. [moby/moby#53479](https://github.com/moby/moby/pull/53479)
- Fix Swarm service names failing to resolve on a node indefinitely after it misses a network membership announcement. [moby/moby#53437](https://github.com/moby/moby/pull/53437)
- Fix Swarm service names failing to resolve on healthy nodes after a transient node failure. [moby/moby#53142](https://github.com/moby/moby/pull/53142)
- Reduce gossip traffic generated by a node that repeatedly disconnects and rejoins the cluster. [moby/moby#53479](https://github.com/moby/moby/pull/53479)
- Remote network-driver plugins can now set the container-side interface name via the `DstName` field in their `Join` response. [moby/moby#52866](https://github.com/moby/moby/pull/52866)
- Reserve network names "container" and "container:" to prevent creation of unusable networks. [moby/moby#51973](https://github.com/moby/moby/pull/51973)
- Spread the daemon's periodic Swarm overlay network gossip and synchronization work over time, avoiding recurring bursts of CPU and network usage. [moby/moby#53475](https://github.com/moby/moby/pull/53475)

###### Rootless

- Fix `--disable-host-loopback` not being enforced for the `

_[Truncated at 4000 characters — full notes: https://github.com/moby/moby/releases/tag/docker-v29.8.0-rc.1]_