Tonis Tiigi
1b7a5f2fa9
policy: add custom builtin load_json
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
70da643c58
policy: add helper modules loading
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
7247c1e38e
policy: print debug helper
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
547f1ab36b
policy: add custom builtins list and remove v0 compat
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:41 -08:00
Tonis Tiigi
adb9386282
policy: remove http perm/uid/gid
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:41 -08:00
Tonis Tiigi
93341aaeee
add rego integration to source policies
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:40 -08:00
Tõnis Tiigi and GitHub
ee2ecd0cc8
Merge pull request #3519 from vvoland/push-nounpack
...
build: Don't unpack by default when pushing
2026-01-14 09:01:24 -08:00
Tõnis Tiigi and GitHub
e33272c855
Merge pull request #3586 from crazy-max/update-github-builder
...
ci: update docker github builder to latest
2026-01-13 11:20:13 -08:00
Tõnis Tiigi and GitHub
10784517c7
Merge pull request #3589 from crazy-max/alpine-3.23
...
dockerfile: update alpine to 3.23
2026-01-12 21:46:38 -08:00
Tõnis Tiigi and GitHub
424fd833cb
Merge pull request #3583 from jsternberg/oci-layout-at-sign-in-path
...
build: handle at symbols in an oci-layout path
2026-01-12 21:45:55 -08:00
Tonis Tiigi
ded8307556
Dockerfile: update dev deps
...
Hack scripts require make and bash that was missing
in the dev Dockerfile stage.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
(cherry picked from commit 26ffd457330d7880fa1c9693acfa4a6448407dd8)
2026-01-11 22:00:16 -08:00
Tonis Tiigi
c5154b3169
update linters for go1.25 base version
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-09 18:54:15 -08:00
Tõnis Tiigi and GitHub
ef0a7b333a
Merge pull request #3581 from jsternberg/dap-breakpoint-reason
...
dap: fill in breakpoint reason for being unverified
2026-01-09 17:42:36 -08:00
Tõnis Tiigi and GitHub
59bc18126a
Merge pull request #3582 from thaJeztah/bump_cli2
...
vendor: github.com/docker/cli v29.1.4
2026-01-09 17:41:59 -08:00
Tõnis Tiigi
37e283ceb0
auth: add option to load docker config for specific repo/scope
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-07 11:45:04 -08:00
Tõnis Tiigi and GitHub
752e0b2227
Merge pull request #3580 from thaJeztah/bump_containerd
...
vendor: github.com/containerd/containerd/v2 v2.2.1
2026-01-07 11:44:08 -08:00
Tõnis Tiigi and GitHub
1fa2ad4fa4
Merge pull request #3579 from jsternberg/dap-named-reference-fix
...
dap: fix the run mount input names
2026-01-06 11:06:08 -08:00
Tõnis Tiigi and GitHub
86abd75a6e
Merge pull request #3569 from thaJeztah/bump_cli2
...
vendor: github.com/docker/cli v29.1.3
2026-01-06 11:05:44 -08:00
Tõnis Tiigi and GitHub
5546d171a0
Merge pull request #3577 from crazy-max/bake-semver-stdlib
...
bake: add semvercmp func to stdlib
2026-01-06 10:17:34 -08:00
Tõnis Tiigi and GitHub
191d050d81
Merge pull request #3578 from crazy-max/buildkit-0.26.3
...
dockerfile: update buildkit to v0.26.3
2026-01-05 18:09:43 -08:00
Tõnis Tiigi and GitHub
2bcb098cbb
Merge pull request #3566 from jsternberg/dap-build-integration-tests
...
tests: add integration tests for `dap build`
2025-12-17 09:41:34 -08:00
Tõnis Tiigi and GitHub
590adceb63
Merge pull request #3554 from hsw/fix-debug-standalone
...
commands: fix debug flag in standalone mode
2025-12-12 16:07:35 -08:00
Tõnis Tiigi and GitHub
73d46672e1
Merge pull request #3534 from cpuguy83/dap_bp_overlaps
...
dap: Fix breakpoint overlap check
2025-12-12 16:06:47 -08:00
Tõnis Tiigi and GitHub
c003c8617e
Merge pull request #3558 from thaJeztah/bump_cli
...
vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0
2025-12-12 09:43:24 -08:00
Tõnis Tiigi and GitHub
d56379477e
Merge pull request #3563 from thaJeztah/bump_aec
...
vendor: github.com/morikuni/aec v1.1.0
2025-12-11 09:38:55 -08:00
Tõnis Tiigi and GitHub
f72bd30200
Merge pull request #3548 from crazy-max/bake-contexts-override
...
docs: named contexts override with bake
2025-12-02 16:33:31 -08:00
Tõnis Tiigi and GitHub
a4a02b07e8
Merge pull request #3545 from thaJeztah/bump_moby
...
vendor: docker/cli v29.1.1, moby/client v0.2.1
2025-12-02 16:33:04 -08:00
Tõnis Tiigi and GitHub
e084a7f6b6
Merge pull request #3536 from crazy-max/fix-provnance-metadata
...
fix empty provenance metadata for multi-platform builds
2025-11-25 09:10:36 -08:00
Tõnis Tiigi and GitHub
1aa6b6cad9
Merge pull request #3538 from crazy-max/update-freebsd-box
...
ci: switch to bento/freebsd-14 vagrant box
2025-11-25 08:14:15 -08:00
Tõnis Tiigi and GitHub
3c9cd19e54
Merge pull request #3529 from tonistiigi/vendor-v0.26.1
...
vendor: update buildkit to v0.26.1
2025-11-17 16:30:12 +00:00
Tonis Tiigi
42a2be1c4b
vendor: update buildkit to v0.26.1
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-11-17 16:07:17 +00:00
Tõnis Tiigi and GitHub
dd0cd08119
Merge pull request #3524 from crazy-max/containerd-update
...
vendor: update containerd to efd86f2b0bc2 (release/2.2)
2025-11-17 16:02:42 +00:00
Tonis Tiigi
1fae6f4c2a
build: avoid panic on linking to nil target
...
Note that nil targets still do not work as buildkit
does not currently support build inputs with nil values.
But this gives cleaner error from buildkit instead of
panic on the client side.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-11-11 11:28:53 -08:00
Tonis Tiigi
e9804322f8
imagetools: fix concurrent map write from containerd issue
...
Workaround for containerd issue that can cause concurrent map
write when WithMediaTypeKeyPrefix is called in parallel
goroutines for context that originated from same base context.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-11-11 10:43:54 -08:00
Tõnis Tiigi and GitHub
484a32f259
Merge pull request #3478 from crazy-max/fix-tar-output
...
build: create parent directories for tar output in lazy writer
2025-11-05 16:42:44 -08:00
Tonis Tiigi
cc2a26c146
vendor: update buildkit v0.26.0-rc1
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-11-05 15:55:57 -08:00
Tõnis Tiigi and GitHub
3ca6a43808
Merge pull request #3433 from tonistiigi/imagetools-create-referrers
...
imagetools: support for creating attestations/signatures
2025-11-05 15:35:09 -08:00
Tonis Tiigi
79b6474639
imagetools: add sigstore bundle v3 to supported referrer formats
...
This was added after the initial version was written.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-11-05 14:00:05 -08:00
Tonis Tiigi
e13cd5c9df
imagetools: support for creating attestations/signatures
...
Persist attestation manifest and any manifest cosign-based
signatures when creating new images.
When creating index from single-arch manifests where attestation
manifest is not inlined, it can be loaded from referrers API.
Note that for this to work the attestation manifest needs to be
in artifact type when image was built.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
(cherry picked from commit aab8171f824d13d703e869107e1720ad71d24bff)
2025-11-05 12:59:27 -08:00
Tonis Tiigi
ae33cdc550
vendor: update buildkit to e18be41828
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-11-05 12:53:09 -08:00
Tõnis Tiigi and GitHub
5f5beef2c2
Merge pull request #3500 from tonistiigi/update-containerd-v2.2.0-rc.1
...
vendor: update containerd to v2.2.0-rc.1
2025-11-05 10:53:22 -08:00
Tonis Tiigi
faf30a2177
vendor: update containerd to v2.2.0-rc.1
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-11-05 10:24:42 -08:00
Tõnis Tiigi and GitHub
cd38f981c7
Merge pull request #3488 from jsternberg/dap-step-out-skips-breakpoints
...
dap: next and out now respect breakpoints
2025-11-03 09:38:00 -08:00
Tõnis Tiigi and GitHub
b016ae3552
Merge pull request #3487 from jsternberg/dap-pause-non-existent-file
...
dap: attempt to find multiple digests when a failure happens
2025-10-29 16:11:32 -07:00
Tõnis Tiigi and GitHub
00502c0199
Merge pull request #3483 from jsternberg/dap-eval-dependencies
...
dap: refactor how steps are evaluated in the program
2025-10-29 13:18:57 -07:00
Tõnis Tiigi and GitHub
485e46b4f4
Merge pull request #3453 from crazy-max/mount-github-event
...
docker-container: write github actions payload to container for provenance
2025-10-24 10:46:07 -07:00
Tõnis Tiigi and GitHub
805c377292
Merge pull request #3454 from jsternberg/buildx-tag-help
...
docs: clarify cli help for the `--tag` option
2025-10-23 12:11:33 -07:00
Tõnis Tiigi and GitHub
b006e0feca
Merge pull request #3474 from crazy-max/doc-fix-bake-set
...
docs: fix bake set flag note
2025-10-22 08:49:07 -07:00
Tõnis Tiigi and GitHub
41e725517d
Merge pull request #3465 from crazy-max/go-1.25
...
update to go 1.25
2025-10-13 08:06:52 -07:00
Tonis Tiigi
ba4935585c
imagetools: silence warning for empty-type meditype used in artifacts
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-10-02 10:43:33 -07:00
Tonis Tiigi
ef2b4436cb
imagetools: fix possible broken chain copy on create
...
When creating index from singe-arch manifests it
was possible for some of the internal manifests to not
be copies and cause error on pushing the index.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-10-02 10:36:48 -07:00
Tõnis Tiigi and GitHub
51bed6f144
Merge pull request #3445 from jsternberg/buildkit-ref-update
...
ci: update buildkit ref for ci
2025-10-01 09:45:36 -07:00
Tõnis Tiigi and GitHub
82584815c3
Merge pull request #3440 from crazy-max/fix-gitutil-test
...
test: use temp dir for TestGit
2025-09-29 11:18:15 -07:00
Tõnis Tiigi and GitHub
b4b698c088
Merge pull request #3436 from jsternberg/dap-file-explorer-fix
...
dap: file explorer uses the wrong path when looking up mounts
2025-09-24 08:23:42 -07:00
Tõnis Tiigi and GitHub
285dd76b25
Merge pull request #3434 from tonistiigi/update-buildkit-v0.25.0-rc1
...
vendor: update buildkit to v0.25.0-rc1
2025-09-23 14:55:33 -07:00
Tonis Tiigi
3bea8ce3ad
vendor: update buildkit to v0.25.0-rc1
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-09-23 13:32:44 -07:00
Tõnis Tiigi and GitHub
40f318f9d8
Merge pull request #3431 from tonistiigi/progress-none
...
add progress=none option
2025-09-23 11:33:37 -07:00
Tõnis Tiigi and GitHub
568c693972
Merge pull request #3430 from tonistiigi/imagetools-create-platforms
...
imagetools: add platforms filter to imagetools create
2025-09-23 08:47:52 -07:00
Tonis Tiigi
f448f3e22b
imagetools: add platforms filter to imagetools create
...
Allows specifying platforms that should be included
in the new image, making it possible to reduce platforms
of existing multi-arch image. Previously the individual
image manifests needed to be used as sources, but that
dropped their related attestation manifests.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-09-23 08:10:11 -07:00
Tõnis Tiigi and GitHub
e4ca56fe62
Merge pull request #3432 from jsternberg/dap-plugin-guidelines
...
docs: add plugin guideline requirements for dap plugins
2025-09-22 10:47:24 -07:00
Tonis Tiigi
9c7b9628ef
add progress=none option
...
Currently there is no way to completely suppress the progress output.
We have --progress=quiet but it has additional effect of printing
image ID as a progress for historical reasons. --progress=none
behaves like quiet but without this extra output printing depending
on build output.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-09-22 10:10:20 -07:00
Tonis Tiigi
4ad48f7737
imagetools: variables name refactor
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-09-22 09:25:48 -07:00
Tõnis Tiigi and GitHub
bc8ede2d4c
Merge pull request #3427 from glours/bump-compose-go-v2.9.0
...
bump compose-go to version v2.9.0
2025-09-19 14:36:35 -07:00
Tõnis Tiigi and GitHub
7c925fdda9
Merge pull request #3429 from thaJeztah/bump_cobra
...
vendor github.com/spf13/pflag v1.0.10, github.com/spf13/cobra v1.10.1
2025-09-19 14:36:05 -07:00
Tõnis Tiigi and GitHub
1422a30dde
Merge pull request #3318 from crazy-max/bump-hcl-deps
...
vendor: update hcl dependencies
2025-09-19 10:03:49 -07:00
Tõnis Tiigi and GitHub
77315f947e
Merge pull request #3410 from jsternberg/dap-file-explorer-on-error
...
dap: collect references for inputs to ensure the file explorer works on an error
2025-09-17 14:21:14 -07:00
Tõnis Tiigi and GitHub
f4e02addf1
Merge pull request #3408 from jsternberg/dap-better-location-resolution
...
dap: improve location resolution for duplicate digests
2025-09-10 13:26:03 -07:00
Tõnis Tiigi and GitHub
a67c877776
Merge pull request #3420 from aevesdocker/ENGDOCS-2991
...
docs: add variable 'description' attribute
2025-09-10 10:37:20 -07:00
Tõnis Tiigi and GitHub
3922da8029
Merge pull request #3418 from crazy-max/go-mod-1.24
...
go.mod: bump to go 1.24
2025-09-09 14:06:51 -07:00
Tõnis Tiigi and GitHub
6009087337
Merge pull request #3415 from tonistiigi/git-querystring-resolve
...
build: allow client side querystring resolution
2025-09-09 14:06:15 -07:00
Tonis Tiigi
5a3afbf839
build: set original url to attrs when replacef with input
...
Save original URL so it can be picked up from provenance attestation.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-09-09 11:08:00 -07:00
Tonis Tiigi
c737e84f94
build: allow client side querystring resolution
...
For the cases where frontend/buildkit doesn't support new
Git Querystring format, allow resolving the URL into LLB
on client side and then build from input.
Note that this produces slightly different provenance
where context is not set as string, so added opt-in
via environment variable for now.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-09-08 17:40:31 -07:00
Tõnis Tiigi and GitHub
ae4e7ee6a4
Merge pull request #3370 from thaJeztah/bump_engine
...
vendor: github.com/docker/docker, docker/cli v28.4.0
2025-09-05 14:23:53 -07:00
Tõnis Tiigi and GitHub
bafc4e207e
Merge pull request #3402 from jsternberg/dap-test-close-client
...
dap: ensure test client is closed on cleanup
2025-09-03 11:23:51 -07:00
Tõnis Tiigi and GitHub
2109c9d80d
Merge pull request #3399 from crazy-max/test-gitquerystring
...
test: git query string
2025-09-03 09:35:04 -07:00
Tonis Tiigi
5e6951c571
git querystring frontend capability detection
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-09-02 10:46:37 -07:00
Tõnis Tiigi and GitHub
d873cae872
Merge pull request #3392 from crazy-max/docs-du-filter
...
docs: list available filters for du and prune commands
2025-08-29 15:05:35 -07:00
Tõnis Tiigi and GitHub
4df89d89fc
Merge pull request #3397 from tonistiigi/update-buildkit-v0.24.0-rc2
...
vendor: update buildkit to v0.24.0-rc2
2025-08-29 15:04:27 -07:00
Tonis Tiigi
1f39ad2001
vendor: update buildkit to v0.24.0-rc2
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-08-29 14:49:16 -07:00
Tõnis Tiigi and GitHub
ce3592e4ab
Merge pull request #3390 from crazy-max/docs-du-fixes
...
docs: fixes for du command
2025-08-29 10:37:22 -07:00
Tõnis Tiigi and GitHub
67218bef58
Merge pull request #3394 from thaJeztah/check_DisableFlagsInUseLine
...
commands: verify that DisableFlagsInUseLine is set for all commands
2025-08-28 12:53:21 -07:00
Tõnis Tiigi and GitHub
bb41e835b6
Merge pull request #3375 from jsternberg/update-dap-docs
...
docs: update dap docs to reflect updates to the debugger
2025-08-27 15:03:15 -07:00
Tõnis Tiigi and GitHub
31a3fbf107
Merge pull request #3387 from tonistiigi/update-buildkit-v0.24.0-rc1
...
vendor: update buildkit to v0.24.0-rc1
2025-08-27 15:01:12 -07:00
Tonis Tiigi
440dc2a212
temp skip DAP test that panics in errgroup goroutine
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-08-27 14:38:37 -07:00
Tõnis Tiigi and GitHub
d94a6cf92a
Merge pull request #3377 from crazy-max/du-json
...
cmd: multiple formats output support for du command
2025-08-27 13:45:23 -07:00
Tonis Tiigi
ec3b99180b
vendor: update buildkit to v0.24.0-rc1
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-08-27 13:39:14 -07:00
Tõnis Tiigi and GitHub
df7c46b02d
Merge pull request #3384 from crazy-max/export-annotations-check
...
build: fail early if trying to export index annotations with moby exporter
2025-08-27 08:44:51 -07:00
Tõnis Tiigi and GitHub
026e55b376
Merge pull request #3386 from crazy-max/winsymlink0
...
restore junctions to have os.ModeSymlink flag set on Windows
2025-08-27 08:38:43 -07:00
Tõnis Tiigi and GitHub
177b980958
Merge pull request #3385 from marxarelli/feature/support-buildkit-syntax-arg
...
Add BUILDKIT_SYNTAX option handling
2025-08-27 03:19:45 +03:00
Tõnis Tiigi and GitHub
a6e198a341
Merge pull request #3301 from crazy-max/ci-matrix-subaction
...
ci(validate): use matrix subaction
2025-08-21 10:49:29 +03:00
Tõnis Tiigi and GitHub
bac71def78
Merge pull request #3366 from jsternberg/dap-detect-parent
...
dap: improve determination of the proper parent for certain ops
2025-08-18 18:34:57 +03:00
Tonis Tiigi
9f721e3190
kubernetes: add env driver opt to kubernetes
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-08-18 18:11:53 +03:00
Tõnis Tiigi and GitHub
8033908d09
Merge pull request #3371 from jsternberg/dap-nested-dockerfile-path
...
dap: look for base name of dockerfile name instead of path from context
2025-08-16 08:26:40 +03:00
Tõnis Tiigi and GitHub
10605b8c35
Merge pull request #3320 from crazy-max/mount-wsl-lib
...
driver: mount wsl lib folder for docker-container driver
2025-08-13 15:42:38 +03:00
Tõnis Tiigi and GitHub
4f9f47deec
Merge pull request #3341 from jsternberg/dap-persistent-exec
...
dap: make exec shell persistent across the build
2025-08-13 15:34:54 +03:00
Tõnis Tiigi and GitHub
c6d1e397a8
Merge pull request #3352 from crazy-max/compose-pull-nocache
...
bake: pull and no-cache support for compose
2025-08-11 11:55:06 +03:00
Tõnis Tiigi and GitHub
4c791dce97
Merge pull request #3325 from jsternberg/dap-alternate-stepping
...
dap: refactor how step in/step out works
2025-07-24 15:08:52 -07:00
Tõnis Tiigi and GitHub
4dd5dd5a6d
Merge pull request #3337 from glours/bump-compose-go-v2.8.1
...
bump compose-go to v2.8.1
2025-07-24 14:29:25 -07:00
Tõnis Tiigi and GitHub
f9be714a52
Merge pull request #3333 from crazy-max/compose-tests
...
compose integration tests
2025-07-24 14:22:55 -07:00
Tõnis Tiigi and GitHub
7d0efdc50e
Merge pull request #3330 from crazy-max/history-build-name-override
...
history: use built-in build-arg to override the build name
2025-07-22 16:33:21 -07:00