Docker 25 Upgrade

Docker version 20.10 reached its end-of-life in December 2023 and will not receive any further security updates.

On June 12, 2024, AL2 will update from Docker 20.10.25 to 25.0.3 in US East (N. Virginia) region. US West (Oregon) region will be updated on June 13, 2024, US East (N. Virginia) on June 17, 2024, and the remainder of regions on June 19, 2024. A security advisory will not be applied to the initial release of Docker 25. This means running yum update --security at first boot will not automatically update your instance. Newly launched instances that install Docker from the Amazon Linux RPM repositories will get Docker 25.0.3. If you cannot update the AMI you use for your EC2 instances, you can run sudo yum update docker to update to Docker 25.0.3.

As of July 2nd, 2024, Amazon Linux has observed an instance of operational impact during the deployment of Docker 25. Docker versions later than version 23 now use BuildKit; which improves build performance by maintaining a build cache. When customers delete the docker rmi, secondary build layers are maintained in the build cache. Resulting in hosts running high numbers of image builds and exhausted disk usage. Customers experiencing this issue are able to mitigate by running docker system prune -f.

On September 3rd, 2024, we will be adding a security advisory which will cause instances that run yum update --security to install the updated Docker version.

If you do not want to upgrade to Docker 25 prior, you should lock your docker package to the version you are currently using.

If you cannot upgrade to Docker version 25 by this date, or have questions please contact AWS Support so we may assist.

Key Docker 25 release dates:

● 2024-06-12 — release to Asia Pacific (Sydney)

● 2024-06-13 — release to US West (Oregon)

● 2024-06-17 — release to US East (N. Virginia)

● 2024-06-19 — release globally

● 2024-09-03 — release Docker 25 security advisories