diff --git a/build/opt.go b/build/opt.go index 4ec2e7f66..efaec8bd6 100644 --- a/build/opt.go +++ b/build/opt.go @@ -359,6 +359,11 @@ func toSolveOpt(ctx context.Context, node builder.Node, multiDriver bool, opt *O Config: cfg, }) cbs = append(cbs, p.CheckPolicy) + if popt.Strict { + if bopts.LLBCaps.Supports(pb.CapSourcePolicySession) != nil { + return nil, nil, errors.New("strict policy is not supported by the current BuildKit daemon, please upgrade to version v0.27+") + } + } } so.SourcePolicyProvider = policysession.NewPolicyProvider(policy.MultiPolicyCallback(cbs...)) }