Skip to content

29.2.0 is available as a Debian update but it is a RC? #51874

@chriscroome

Description

@chriscroome

Description

Run apt update && apt upgrade -y and this happens:

About to upgrade 'docker-ce:amd64/bookworm docker-ce-cli:amd64/bookworm docker-ce-rootless-extras:amd64/bookworm'
The following packages will be upgraded: 
  docker-ce docker-ce-cli docker-ce-rootless-extras 
3 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 45.0 MB of archives. After unpacking 6,664 kB will be used.
Do you want to continue? [Y/n/?] y
Get: 1 https://download.docker.com/linux/debian bookworm/stable amd64 docker-ce-cli amd64 5:29.2.0~rc.2-1~debian.12~bookworm [16.3 MB]
Get: 2 https://download.docker.com/linux/debian bookworm/stable amd64 docker-ce amd64 5:29.2.0~rc.2-1~debian.12~bookworm [22.3 MB]
Get: 3 https://download.docker.com/linux/debian bookworm/stable amd64 docker-ce-rootless-extras amd64 5:29.2.0~rc.2-1~debian.12~bookworm [6,384 kB]
Fetched 45.0 MB in 1s (48.2 MB/s)                    
Reading changelogs... Done
(Reading database ... 101428 files and directories currently installed.)
Preparing to unpack .../docker-ce-cli_5%3a29.2.0~rc.2-1~debian.12~bookworm_amd64.deb ...
Unpacking docker-ce-cli (5:29.2.0~rc.2-1~debian.12~bookworm) over (5:29.1.5-1~debian.12~bookworm) ...
Preparing to unpack .../docker-ce_5%3a29.2.0~rc.2-1~debian.12~bookworm_amd64.deb ...
Unpacking docker-ce (5:29.2.0~rc.2-1~debian.12~bookworm) over (5:29.1.5-1~debian.12~bookworm) ...
Preparing to unpack .../docker-ce-rootless-extras_5%3a29.2.0~rc.2-1~debian.12~bookworm_amd64.deb ...
Unpacking docker-ce-rootless-extras (5:29.2.0~rc.2-1~debian.12~bookworm) over (5:29.1.5-1~debian.12~bookworm) ...
Setting up docker-ce-cli (5:29.2.0~rc.2-1~debian.12~bookworm) ...
Setting up docker-ce-rootless-extras (5:29.2.0~rc.2-1~debian.12~bookworm) ...
Setting up docker-ce (5:29.2.0~rc.2-1~debian.12~bookworm) ...
Processing triggers for man-db (2.11.2-2) ...
Scanning processes...                                                                                                                                                                                                                                                           
Scanning linux images...                                                                                                                                                                                                                                                        

Running kernel seems to be up-to-date.

No services need to be restarted.

No containers need to be restarted.

No user sessions are running outdated binaries.

No VM guests are running outdated hypervisor (qemu) binaries on this host.
                                         
Current status: 0 (-3) upgradable.
Freed 0 B of disk space                  
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

With a /etc/apt/sources.list.d/docker.sources file containing:

Allow-Downgrade-To-Insecure: no
Allow-Insecure: no
Allow-Weak: no
Architectures: amd64
Check-Date: yes
Check-Valid-Until: yes
Components: stable
Enabled: yes
X-Repolib-Name: docker
Signed-By: /etc/apt/keyrings/docker.gpg
Suites: bookworm
Types: deb
URIs: https://download.docker.com/linux/debian

This is a RC version:

Shouldn’t it only be available for testing not production systems?

Reproduce

  1. apt get update
  2. apt get upgrade

Expected behavior

Only non-RC versions should be available via apt repo?

docker version

Client: Docker Engine - Community
 Version:           29.2.0-rc.2
 API version:       1.53
 Go version:        go1.25.6
 Git commit:        d5ed037
 Built:             Mon Jan 19 12:06:14 2026
 OS/Arch:           linux/amd64
 Context:           default

Server: Docker Engine - Community
 Engine:
  Version:          29.2.0-rc.2
  API version:      1.53 (minimum version 1.44)
  Go version:       go1.25.6
  Git commit:       f164e50
  Built:            Mon Jan 19 12:06:14 2026
  OS/Arch:          linux/amd64
  Experimental:     true
 containerd:
  Version:          v2.2.1
  GitCommit:        dea7da592f5d1d2b7755e3a161be07f43fad8f75
 runc:
  Version:          1.3.4
  GitCommit:        v1.3.4-0-gd6d73eb8
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

docker info

Client: Docker Engine - Community
 Version:    29.2.0-rc.2
 Context:    default
 Debug Mode: false
 Plugins:
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.30.1
    Path:     /usr/libexec/docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v5.0.1
    Path:     /usr/libexec/docker/cli-plugins/docker-compose

Server:
 Containers: 18
  Running: 18
  Paused: 0
  Stopped: 0
 Images: 23
 Server Version: 29.2.0-rc.2
 Storage Driver: overlay2
  Backing Filesystem: extfs
  Supports d_type: true
  Using metacopy: false
  Native Overlay Diff: true
  userxattr: false
 Logging Driver: syslog
 Cgroup Driver: systemd
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 CDI spec directories:
  /etc/cdi
  /var/run/cdi
 Swarm: inactive
 Runtimes: runc io.containerd.runc.v2
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: dea7da592f5d1d2b7755e3a161be07f43fad8f75
 runc version: v1.3.4-0-gd6d73eb8
 init version: de40ad0
 Security Options:
  apparmor
  seccomp
   Profile: builtin
  cgroupns
 Kernel Version: 6.1.0-42-amd64
 Operating System: Debian GNU/Linux 12 (bookworm)
 OSType: linux
 Architecture: x86_64
 CPUs: 2
 Total Memory: 5.827GiB
 Name: testmail.mailcoop.uk
 ID: 48367d0d-7155-4ea6-86bc-e4ffdb5b25cf
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Experimental: true
 Insecure Registries:
  ::1/128
  127.0.0.0/8
 Live Restore Enabled: false
 Firewall Backend: iptables

Additional Info

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugBugs are bugs. The cause may or may not be known at triage time so debugging may be needed.status/0-triage

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions