dilim/buildkit
1
0
Fork 0
mirror of https://github.com/moby/buildkit.git synced 2026-08-12 22:16:54 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,186 Commits 31 Branches 330 Tags
bb503ddd80c532436fe5cc622f15ff8ffe74df33
Commit Graph

107 Commits

Author SHA1 Message Date
Justin Chadwell
bb503ddd80 docs: add auto-generated sections to buildctl.md 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2023-03-27 16:23:50 +01:00
CrazyMax
5e0b7853e3 Merge pull request #3582 from crazy-max/deprecate-buildinfo 
remove buildinfo
 2023-03-13 14:52:33 +00:00
CrazyMax
6d9c24dc3a remove buildinfo 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-03-10 09:46:52 +01:00
CrazyMax
b646761e0f buildinfo: add BUILDKIT_BUILDINFO build arg 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-03-10 09:45:46 +01:00
CrazyMax
031b9f61fc buildinfo: mark as deprecated 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-03-10 09:45:46 +01:00
CrazyMax
3cb5ac6829 docs: deprecated features page 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-03-10 09:45:32 +01:00
Akihiro Suda
c67176ae94 rootless: guide for Bottlerocket OS (sysctl -w user.max_user_namespaces=N) 
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2023-03-09 21:09:58 +09:00
Kohei Tokunaga
d76dd6a54f stargz-snapshotter: graduate from experimental 
Signed-off-by: Kohei Tokunaga <ktokunaga.mail@gmail.com>
 2023-02-15 11:39:21 +09:00
CrazyMax
f72b31fcfa Merge pull request #3333 from ktock/stargz-snapshotter-rootless 
docs: Enable rootless for stargz-snapshotter
 2023-01-30 16:01:27 +01:00
Akihiro Suda
984bcf9e8b docs/build-repro.md: add the SOURCE_DATE_EPOCH section 
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2023-01-11 21:37:19 +09:00
Akihiro Suda
1624cde07b docs: master -> 0.11 
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2023-01-10 11:53:35 +09:00
Tonis Tiigi
5f010c46a8 github: update CI to buildkit version 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2023-01-09 11:40:41 -08:00
Justin Chadwell
2948389c3e attestation: only supplement file data for the core scan 
Previously, we would attempt to add file data for every single
SBOM - however, if these SBOMs were taken of layers that were not
exported, then these could be wrong.

To workaround this, for the file layer details to be added to the
resulting SBOM, we require that the scanner add a metadata property to
indicate the default value. This is configurable, since in the future we
may want behavior that allows the frontend to specify no file layers, or
wants an SBOM with layers other than the default.

Signed-off-by: Justin Chadwell <me@jedevc.com>
 2023-01-05 14:13:25 +00:00
Justin Chadwell
1433d809b1 docs: add index page for attestations 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2023-01-05 13:39:09 +00:00
Justin Chadwell
4cfa60eebd docs: move attestation docs to dedicated directory 
There are quite a few pages dedicated to describing attestations, so for
easier organization, we can move them all to a single location.

Signed-off-by: Justin Chadwell <me@jedevc.com>
 2023-01-05 13:38:19 +00:00
Justin Chadwell
5845707046 docs: rename slsa.md to slsa-provenance.md 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2023-01-05 12:37:30 +00:00
Justin Chadwell
618e8f219a docs: tidy up json examples for slsa definitions 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2023-01-05 10:56:11 +00:00
Justin Chadwell
065e6a5938 docs: add cross-linking between slsa pages 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2023-01-05 10:49:23 +00:00
David Karlsson
4664605c4d docs: slsa review updates 
Signed-off-by: David Karlsson <david.karlsson@docker.com>
 2023-01-04 10:06:04 +00:00
David Karlsson
ea715c8fca docs: moved slsa definitions to a separate page 
Signed-off-by: David Karlsson <david.karlsson@docker.com>
 2023-01-04 10:05:46 +00:00
David Karlsson
066091a500 docs: slsa editorial fixes 
Signed-off-by: David Karlsson <david.karlsson@docker.com>
 2023-01-04 10:05:46 +00:00
Tonis Tiigi
9c212c25bd docs: add filename to provenance attestation 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2023-01-04 10:05:46 +00:00
Tonis Tiigi
c1963ec9df docs: update hermetic field after it was moved in implementation 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2023-01-04 10:05:46 +00:00
Tonis Tiigi
4d807dd994 docs: update provenance docs 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2023-01-04 10:05:46 +00:00
Justin Chadwell
b7a4bca657 docs: add slsa provenance documentation 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2023-01-04 10:05:46 +00:00
JordanGoasdoue
7f6767014f chore: update buildkitd.toml docs with mirror path example 
Signed-off-by: JordanGoasdoue <jordan.goasdoue@dailymotion.com>
 2022-12-20 15:49:26 +01:00
Brian Goff
adea592577 doc: build-repro: Any source can be made reproducible 
Signed-off-by: Brian Goff <cpuguy83@gmail.com>
 2022-12-13 13:02:15 -08:00
Brian Goff
18939126f8 Fix some typos 
Signed-off-by: Brian Goff <cpuguy83@gmail.com>
 2022-12-13 13:02:14 -08:00
Brian Goff
7526659ab0 Update source pinning to use proposed policy 
Signed-off-by: Brian Goff <cpuguy83@gmail.com>
 2022-12-13 13:01:54 -08:00
Akihiro Suda
0d3f71ee18 llbsolver: support pinning sources 
Alternative to PR 2816 ("dockerfile: support Dockerfile.pin for pinning sources")

This version is implemented on the llbsolver side and agnostic to the LLB frontends.
See `solver/llbsolver/vertex.go:loadLLB()`.

See `docs/build-repro.md` for the usage.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2022-12-13 13:01:54 -08:00
Tõnis Tiigi
ed041ab3f4 Merge pull request #3339 from tonistiigi/history-api-logs 
history api: support for logs of completed builds
 2022-12-13 09:17:11 -08:00
Avi Deitcher
0d8237023a start of documentation for buildctl 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2022-12-13 13:07:44 +00:00
Tonis Tiigi
301ea54fb8 history api: deletion and pinning support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2022-12-12 22:15:40 -08:00
Justin Chadwell
db5489f7a1 docs: add user-facing attestation docs 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2022-11-29 16:24:04 +00:00
Justin Chadwell
8fbc904b95 docs: add integration docs for the sbom generator protocol 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2022-11-29 16:24:04 +00:00
Kohei Tokunaga
8b132188aa docs: Enable rootless for stargz-snapshotter 
Signed-off-by: Kohei Tokunaga <ktokunaga.mail@gmail.com>
 2022-11-29 11:25:47 +09:00
Akihiro Suda
ae97234682 moby/moby/master -> moby/moby/v20.10.21 
Some tests were depending on the sha256sum of https://raw.githubusercontent.com/moby/moby/master/README.md

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2022-11-11 10:31:11 +09:00
Tõnis Tiigi
5b7315c381 Merge pull request #2581 from imeoer/nydus-compression-type 
Support for exporting nydus compression type
 2022-11-07 22:21:33 -08:00
CrazyMax
d4633cf842 fix link to community slack 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2022-11-06 10:37:06 +01:00
Yan Song
ab6e8bb010 doc: add usage for nydus compression type 
Introduce nydus image and show that how to export nydus image, and
add known limitations.

Signed-off-by: Yan Song <imeoer@linux.alibaba.com>
 2022-11-01 10:47:20 +00:00
CrazyMax
e9658ad7d0 docs: update buildkitd.toml page 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2022-10-28 06:34:54 +02:00
Tonis Tiigi
875fa2f11d docs: add links to architecture overview session 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2022-10-24 23:53:16 -07:00
Tõnis Tiigi
f2c41e15cb Merge pull request #3097 from AkihiroSuda/gcos-rootless 
rootless: support Google Container-Optimized OS (Fix ` Options:[rbind ro]}]: operation not permitted` errors)
 2022-09-30 12:58:43 -07:00
Tonis Tiigi
5de827e2b8 docs: update attestation storage examples 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2022-09-23 11:53:01 -07:00
Justin Chadwell
5dc9a8872f docs: add attestation storage details 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2022-09-23 14:11:53 +01:00
Aaron Lehmann
f57dc7f11b Rename netns-pool-size to cni-pool-size 
Signed-off-by: Aaron Lehmann <alehmann@netflix.com>
 2022-09-14 07:08:31 -07:00
Aaron Lehmann
588a72d04c Add network namespace pool support 
This adds netNSPoolSize pool options which allow setting a target
network namespace pool size. buildkitd will create this number of
network namespaces at startup (without blocking). When a container
execution finishes, the network namespace gets returned to the pool. If
the pool goes above the target size, there is a grace period to allow
network namespaces to be reused, and if this passes without reuse, the
extra namespaces will be released.

Signed-off-by: Aaron Lehmann <alehmann@netflix.com>
 2022-09-14 07:08:31 -07:00
Akihiro Suda
b36488e323 rootless: support Google Container-Optimized OS 
Dockerfile has `VOLUME /home/user/.local/share/buildkit` by default too,
but the default VOLUME does not work with rootless on Google's Container-Optimized OS
as it is mounted with `nosuid,nodev`.

So the volume has to be explicitly mounted as an `emptyDir` volume.

Tested with GKE Autopilot 1.24.3-gke.200 (kernel 5.10.123+, containerd 1.6.6).

Fix issue 879

Thanks to Andrew Grigorev (ei-grad) and Ben Cressey (bcressey).

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2022-09-09 17:15:46 +09:00
Justin Chadwell
07357d69d7 docs: add bind mount output info to dockerfile->llb docs 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2022-08-16 12:48:26 +01:00
Justin Chadwell
2f2faaff31 docs: reword request lifecycle diagrams to mermaid 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2022-08-16 12:38:40 +01:00