Moby Engine v29.10.0-rc.1 introduces experimental native jobs and OpenAPI 3.2 support
Docker Engine adds experimental native support for one-shot and cron-scheduled workloads and migrates its API specification to OpenAPI 3.2.
Summary
The Moby project has released the v29.10.0-rc.1 pre-release of the Docker Engine, introducing several significant architectural and functional updates. A major addition is the experimental support for 'jobs,' which allows the daemon to natively manage one-shot and cron-scheduled workloads via an opt-in extension. Additionally, the Engine API specification has transitioned to OpenAPI 3.2, though a Swagger 2.0 version remains for backward compatibility.
This release also expands platform support by providing official packages for AlmaLinux, Oracle Linux, and Rocky Linux. For system administrators and developers, the update includes improved networking stability for nftables-based backends, enhanced rootless mode capabilities with SELinux, and updated core components including BuildKit v0.35.0-rc1 and the Go runtime 1.27.3.
Technical changes in Moby v29.10.0-rc.1
- Workload Management: Experimental support for native jobs is available through the
org.mobyproject.jobs.v0extension, enabling the daemon to handle scheduled and one-shot tasks. - API and Configuration: The Engine API has been updated to version 1.57, and users can now customize the embedded containerd using configuration files located in
/etc/docker/containerd.d/. - Networking and Security: The release improves nftables integration by allowing engines to join a Swarm and reduces port-publishing overhead through batched firewall updates; it also blocks obsolete socket families in default AppArmor and seccomp profiles.
- Platform and Runtime Updates: The release includes updates to BuildKit (v0.35.0-rc1) and the Go runtime (1.27.3), alongside improved ARM64 image selection logic to prefer higher-variant images supported by the host CPU.
- Rootless Improvements: Support for the overlay2 storage driver in rootless mode has been added for environments where SELinux is enabled.
Why it matters
The introduction of native job scheduling reduces the need for external orchestrators for simple periodic tasks. Furthermore, the expanded support for RHEL-based distributions like AlmaLinux and Rocky Linux, combined with improved nftables and rootless stability, strengthens Docker's reliability in enterprise and security-hardened Linux environments.
What to do
- To use experimental native jobs, enable the extension with
--enable-extension org.mobyproject.jobs.v0. - Users can customize the embedded containerd by using configuration files in
/etc/docker/containerd.d/.
Original reference: github.com →