mirror of
https://github.com/moby/buildkit.git
synced 2026-08-09 17:18:11 +00:00
3254832159
Add a build request option that rewrites default exec networking to an internal proxy network while preserving explicit none networking. Route HTTP and HTTPS traffic through a BuildKit-owned proxy namespace, enforce source policy checks for proxied requests, and inject a temporary CA into Linux rootfs trust bundles for HTTPS interception. Share namespace pooling between CNI and proxy providers, and cover proxy mode with unit and integration tests. Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
9 lines
219 B
Go
9 lines
219 B
Go
//go:build !linux
|
|
|
|
package executor
|
|
|
|
// InjectProxyCA is only implemented for Linux rootfs layouts.
|
|
func InjectProxyCA(rootfsPath string, caPEM []byte) (func() error, error) {
|
|
return func() error { return nil }, nil
|
|
}
|