instruction: Create a Dockerfile for fundamentals
output: ```dockerfile
  from silently returning with no error message when subuid/subgid system requirements are not satisfied. moby/moby#50059containerd image store: Fix docker push not creating a tag on the remote repository. moby/moby#50199containerd image store: Improve handling of errors returned by the token server during docker pull/push. moby/moby#50176Packaging updatesAllow customizing containerd service name for OpenRC. moby/moby#50156Update BuildKit to v0.23.1. moby/moby#50243Update Buildx to v0.25.0. docker/docker-ce-packaging#1217Update Compose to v2.37.2. docker/docker-ce-packaging#1219Update Docker Model CLI plugin to v0.1.30. docker/docker-ce-packaging#1218Update Go runtime to 1.24.4. docker/docker-ce-packaging#1213, moby/moby#50153, docker/cli#6124NetworkingRevert Swarm related changes added in 28.2.x builds, due to a regression reported in https://github.com/moby/moby/issues/50129. moby/moby#50169Revert: Fix an issue where docker network inspect --verbose could sometimes crash the daemon (https://github.com/moby/moby/pull/49937).Revert: Fix an issue where the load-balancer IP address for an overlay network would not be released in certain cases if the Swarm was lacking an ingress network (https://github.com/moby/moby/pull/49948).Revert: Improve the reliability of NetworkDB in busy clusters and lossy networks (https://github.com/moby/moby/pull/49932).Revert: Improvements to the reliability and convergence speed of NetworkDB (https://github.com/moby/moby/pull/49939).Fix an issue that could cause container startup to fail, or lead to failed UDP port mappings, when some container ports are mapped to 0.0.0.0 and others are mapped to specific host addresses. moby/moby#50054The network inspect response for an overlay network now reports that EnableIPv4 is true. moby/moby#50147Windows: Improve daemon startup time in cases where the host has networks of type "Mirrored". moby/moby#50155Windows: Make sure docker system prune and docker network prune only remove networks created by Docker. moby/moby#50154APIUpdate API version to 1.51. moby/moby#50145GET /images/json now sets the value of the Containers field for all images to the count of containers using the image. moby/moby#50146DeprecationsEmpty/nil image config fields in the GET /images/{name}/json response are now deprecated and will be removed in v29.0. docker/cli#6129api/types/container: deprecate ExecOptions.Detach. This field is not used, and will be removed in a future release. moby/moby#50219pkg/idtools: deprecate IdentityMapping and Identity.Chown. moby/moby#5021028.2.22025-05-30For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:docker/cli, 28.2.2 milestonemoby/moby, 28.2.2 milestoneBug fixes and enhancementscontainerd image store: Fix a regression causing docker build --push to fail. This reverts the fix for docker build not persisting overridden images as dangling. moby/moby#50105NetworkingWhen creating the iptables DOCKER-USER chain, do not add an explicit RETURN rule, allowing users to append as well as insert their own rules. Existing rules are not removed on upgrade, but it won't be replaced after a reboot. moby/moby#5009828.2.12025-05-29Packaging updatesFix packaging regression in v28.2.0 which broke creating the docker group/user on fresh installations. docker-ce-packaging#120928.2.02025-05-28For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:docker/cli, 28.2.0 milestonemoby/moby, 28.2.0 milestone
  NoteRHEL packages are currently not available and will be released later.NewAdd {{.Platform}} as formatting option for docker ps to show the platform of the image the container is running. docker/cli#6042Add support for relative parent paths (../) on bind mount sources when using docker run/create with -v/--volume or --mount type=bind options. docker/cli#4966CDI is now enabled by default. moby/moby#49963Show discovered CDI devices in docker info. docker/cli#6078docker image rm: add --platform option to remove a variant
  ```