CircleCI remote Docker images support policy
1 month ago
Overview
This document outlines the CircleCI remote Docker image release, update, and deprecation policy. This policy applies to all CircleCI remote Docker images built for the remote Docker feature (setup_remote_docker).
Release policy
The CircleCI remote Docker images are based on our Linux VM images with Docker installed for the purposes of providing a remote environment that can execute Docker commands within jobs on the Docker executor.
We aim to support the latest three versions of the Docker Engine that are classified as within Security Support status.
Remote Docker images will be updated when a patch version is released upstream. Tags will be redirected to the updated images automatically as described in the tagging section of this document. We will announce these releases on our Discuss Forum.
Tagging
We support various tags for the remote Docker environment to allow you to choose the type of remote Docker environment you require.
For the latest major version of Docker:
-
default: This image is the current stable image. Jobs will default to this if no tag is specified. -
edge: This tag is reserved for previews of new releases, which will initially point to this tag. The tag may include incremental updates relative to the current quarterly image release, which may change without notice, and is not recommended for production CI workloads.
For the previous major version of Docker, we support a single tag following the format of dockerXX, for example, docker27 for Docker 27. This tag will point to the latest patch version of the major release, and will be updated if any patch versions are issued upstream. We recommend using the default version.
Critical CVE patches
When critical CVEs are disclosed around the operating system or software stack of this image, we will investigate the impact this has on the image within the CircleCI execution environment. If customers are impacted by these CVEs we will push a patch fix to the released image(s), this image will supersede the original image.
Bug reports, issues, and PRs
You can file a support ticket with CircleCI Support for any issues or bugs found with the remote Docker images. Our support team will be able to escalate issues internally to the correct engineering team and provide updates on the issue.
Image lifespan / EOL
Image lifespan will generally follow the support status of Docker Engine by Docker. Once a new major version of Docker is released, we will begin the deprecation process of the oldest version that we support and schedule it to be removed. This allows us to maintain three versions of Docker Engine effectively.
Current Deprecation:
| Version | Support |
|---|---|
Docker 25 |
|
Docker 26 |
|
Docker 27 |
Set to |
Example: When Docker 28 is released:
| Version | Support |
|---|---|
Docker 25 |
Deprecated and removed |
Docker 26 |
|
Docker 27 |
Moved from |
Docker 28 |
Set to |
When an image is selected for deprecation and removal, we will create an announcement on our Discuss forum and along with additional outreach where possible.
We will also plan brownouts to ensure users are aware of the approaching removal of deprecated images. Generally, we will aim to start an EOL process within 3 months of a new version release
Exceptions
At any time, we reserve the right to work outside of the information in this document if the circumstances require. In the event that we are required to make an exception to the policy, we will aim to provide as much notice and clarity as possible. In these cases, an announcement will be posted on our Discuss Forum, along with additional outreach, such as an email notice, where possible.