Rename the second "Image and container layers on-disk" section heading to
"Image and container layers on-disk (legacy overlay driver)" to distinguish
it from the overlay2 section above it. Fixes#18191.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
Remove the "Docker Offload Beta" product-stage label from the trial
expiration note (the product is Early Access, not Beta). Simplify
the time-relative phrase "from the time they are granted".
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
The release note of 4.65 mention `dhictl` which seems confusing to users
as the `dhictl` when bundled in DD is a cli-plugin available as `docker
dhi`.
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
---------
Co-authored-by: Allie Sadler <102604716+aevesdocker@users.noreply.github.com>
The previous text listed "SSO is enabled" as a condition for company
owners occupying seats without explaining why or how. Expand both the
FAQ and the company owners page to clarify that SSO causes seat
occupancy because signing in via SSO automatically adds the owner as
an organization member.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
The existing warning says standalone is "not recommended" but gives
no guidance on what to use instead. Add links to Docker Desktop and
the Compose plugin as the preferred alternatives, and clarify that
standalone is only appropriate when neither option is available.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
## Description
Fixes a typo in the What's next page description by changing "hep" to
"help".
## Related issues or tickets
N/A
## Reviews
Docs-only, single-file change aligned with CONTRIBUTING.md general
guidelines.
Validation/testing: not run locally; no behavior change.
- [ ] Technical review
- [x] Editorial review
- [ ] Product review
Co-authored-by: rohan436 <rohan.santhoshkumar@googlemail.com>
## Summary
Removed stale version-specific note from GPU documentation.
## Changes
- Removed outdated note stating Docker Model Runner is available
starting with Docker Desktop 4.54 from
`content/manuals/desktop/features/gpu.md`
Fixes#24189
---
🤖 Generated with [Docker Agent](https://github.com/docker/docker-agent)
Co-authored-by: dvdksn <35727626+dvdksn@users.noreply.github.com>
<!--Delete sections as needed -->
## Description
Internal feedback reported that the deprecated auth endpoint does not
support OATs.
Updated to new auth endpoint.
Upon testing the rest of the flow, the repositories endpoint has the
following error, `token issued from organization access token is not
allowed`.
The current flow does not appear to work with OATs. Updated to PAT and
tested that it worked.
https://deploy-preview-24396--docsdocker.netlify.app/docker-hub/repos/manage/export/
## Related issues or tickets
https://docker.slack.com/archives/C04300R4G5U/p1773779041999559
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
---------
Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
<!--Delete sections as needed -->
## Description
Documents OAT (Organization Access Token) support for authenticating to
the dhi.io registry, which was previously undocumented. Adds guidance
for CI/CD workflows where org-scoped tokens are preferred over personal
credentials.
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
<!--Delete sections as needed -->
## Description
This PR adds a guide that shows how to secure a Backstage developer
portal container using Docker Hardened Images, covering native module
compilation, multi-stage builds, Socket Firewall protection, and
distroless runtime images
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
Add a brief mention of the embedded DNS server IP address (127.0.0.11)
to the DNS services section of the networking overview. Notes that
there is no IPv6 equivalent and that applications like Nginx can use
this address for explicit DNS configuration.
Fixes#20532
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
This change was automatically generated by the documentation agent team
in response to issue #23189.
🤖 Generated with cagent
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
<!--Delete sections as needed -->
## Description
The DHI static image has no adduser package, plus it already runs as a
nonroot user. Removed that section from the Dockerfile.
## Related issues or tickets
Closes#24362
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Editorial review
Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
<!--Delete sections as needed -->
## Description
Added latest blog about DHI system packages announcement.
https://deploy-preview-24385--docsdocker.netlify.app/dhi/resources/#blog-posts
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Editorial review
Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
<!--Delete sections as needed -->
## Description
This guide explains how to deploy Docker Hardened Images in OpenShift
environments. It covers Security Context Constraints (SCCs), arbitrary
user ID assignment, file permission requirements, and best practices for
both runtime and development image variants.
<!-- Tell us what you did and why -->
Added new guide: content/guides/dhi-openshift.md
## Related issues or tickets
Supersedes #24293 (closed due to fork deletion)
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
Previously reviewed and approved by @dvdksn in #24293
@craig-osterhout was requested for review before the PR was closed
No content changes from the previously approved version
<!-- List applicable reviews (optionally @tag reviewers) -->
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
Align link targets with internal naming convention for sibling index
page.
Closes#24373
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
Co-authored-by: Geetansh <croso2024@outlook.com>
Co-authored-by: Codex Opus 4.6 <noreply@anthropic.com>
<!--Delete sections as needed -->
## Description
4GB isn't really enough to do anything on windows, let alone run docker
on top of that, so I've updated it to 8GB.
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
<!--Delete sections as needed -->
## Description
Fixes https://github.com/docker/docs/issues/24367 and does a small tidy
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
## Summary
Fixed incomplete sentence in Docker Desktop networking documentation.
## Changes
- Corrected grammatically incorrect sentence in "How containers connect
to the internet" section by changing "view and these networks" to "view
and manage these networks"
Fixes#24374
---
🤖 Generated with [Docker Agent](https://github.com/docker/docker-agent)
Co-authored-by: aevesdocker <102604716+aevesdocker@users.noreply.github.com>
<!--Delete sections as needed -->
## Description
Added a note about repackaging to increase context as discussed with
@brandonh6k in #24243
## Related issues or tickets
#24243
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
<!--Delete sections as needed -->
## Description
Updated the "Build Docker image" step in the GitHub Actions workflow
example under "Automate DHI scanning in CI/CD with Docker Scout" to
include `--provenance=mode=max`, `--sbom=true`, and `--push` flags.
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
