alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,388 Commits 1 Branch 1 Tag
1d8dde89b8aba914e05e45366770736fea1fd690
Commit Graph
438 Commits
Author SHA1 Message Date
CrazyMaxandGitHub af5a9bb16e Merge pull request #3882 from mvanhorn/docs/3556-bake-set-ssh-syntax 
docs: document inline --set override syntax for ssh and composable attributes
 2026-07-27 10:41:21 +02:00
Matt Van Horn 118884e052 docs: use homedir() in the bake ssh --set example 
Signed-off-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
 2026-07-25 08:27:46 -07:00
Tõnis TiigiandGitHub efd9aa1dea Merge pull request #3965 from crazy-max/docs-bake-output-fix 
docs: fix typo for bake output override
 2026-07-22 10:25:28 -07:00
Tõnis TiigiandGitHub 40962144b8 Merge pull request #3961 from tonistiigi/buildkit-default-policy 
policy: verify BuildKit builder images
 2026-07-22 10:25:06 -07:00
CrazyMax 178013a423 docs: fix typo for bake output override 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-22 15:08:57 +02:00
CrazyMaxandGitHub 5c10fb7184 Merge pull request #3962 from crazy-max/bake-secret-source-override 
bake: allow overriding declared secret sources
 2026-07-22 14:36:50 +02:00
CrazyMax febb45afe2 bake: allow overriding declared secret sources 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-21 12:20:36 +02:00
CrazyMax bc32533b6e bake: align compose path base with compose 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-21 11:25:55 +02:00
CrazyMax 1dc55abd89 bake: make file-relative paths definition-scoped 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-21 11:25:55 +02:00
CrazyMaxandCrazyMax b38d1004e3 bake: add file-relative path opt-in 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-21 11:25:55 +02:00
Tonis Tiigi acaf251f0b policy: verify BuildKit builder images 
Extend the built-in policy to validate signed moby/buildkit release and
floating tags before docker-container builders are created.

Pull the image first, inspect it through Docker, and bind verification to the
descriptor digest. Resolve signature attestations through the BuildKit API
embedded in the Docker daemon.

If pulling fails, use a local image while applying the same verification when
the containerd image store exposes an immutable descriptor. Keep the classic
image-store behavior unchanged because no descriptor is available.

Allow unmanaged repositories and digest-only references unchanged. Add the
allow-untrusted-image driver option as an explicit verification bypass.

Document the behavior and add policy, digest-pinning, and local fallback
coverage.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-07-20 18:22:41 -07:00
Jiří Moravčík 9b37d78c89 build: improve resource limits output and docs 
Signed-off-by: Jiří Moravčík <jiri.moravcik@gmail.com>
 2026-06-11 11:18:35 +02:00
CrazyMax b6e1b7328f build: gate local delete outputs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-10 16:41:10 +02:00
CrazyMaxandCrazyMax 473c6ef306 bake: requires explicit allow for local output delete mode 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-10 16:41:09 +02:00
Jiří Moravčík 80b2293881 build: Add per-step CPU and memory resource limits 
Port of moby/buildkit#6569 to buildx. Adds --memory, --memory-swap,
--cpu-shares, --cpu-period, --cpu-quota, --cpuset-cpus, and --cpuset-mems
flags to build, plus the equivalent bake target attributes and compose
x-bake fields.

Signed-off-by: Jiří Moravčík <jiri.moravcik@gmail.com>
 2026-06-08 15:39:14 +02:00
Matt Van Horn aabd19eb6b docs: document inline --set override syntax for ssh and composable attributes 
Signed-off-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
 2026-06-03 01:56:58 -07:00
CrazyMax da8fa45c1c bake: global policy evaluation options 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-05-07 11:11:59 +02:00
CrazyMax 92905a8f5a bake: support unix output in formattimestamp 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-25 11:59:24 +01:00
CrazyMax 2798e134e9 bake: add formattimestamp and tighten unix timestamp parsing 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-25 11:46:49 +01:00
CrazyMax 11395747a6 bake: add unixtimestampparse function 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-25 11:46:48 +01:00
Tõnis TiigiandGitHub 7ac8168016 Merge pull request #3738 from tonistiigi/policy-eval-upt 
Updated for policy eval
 2026-03-24 17:08:04 -07:00
Tõnis TiigiandGitHub be5de2c200 Merge pull request #3736 from jsternberg/dap-general-availability 
dap: make dap generally available
 2026-03-24 17:07:38 -07:00
Tonis Tiigi 64cd4136d9 policy: support reading policy from stdin via --file - 
Allow passing policy content through stdin by specifying
"--file -" in the eval command. This enables piping policy
data without requiring a file on disk.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-23 11:13:46 -07:00
Jonathan A. Sternberg a8d359a9ca dap: make dap generally available 
Removes the experimental flags and bits for dap and deletes some dead
code that somehow made its way this far without anyone noticing.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-03-23 10:43:27 -05:00
rishabh 0dede5c898 docs: add example for --list=variables with variable descriptions 
Signed-off-by: rishabh <rishank69@gmail.com>
 2026-03-23 12:04:02 +08:00
rishabh 8bcf041190 docs: clarify Bake environment variable override behavior 
Signed-off-by: rishabh <rishank69@gmail.com>

docs: address review feedback on bake env lookup

Signed-off-by: rishabh <rishank69@gmail.com>
 2026-03-18 22:51:13 +08:00
CrazyMaxandGitHub 7bc8c698b4 Merge pull request #3665 from crazy-max/builder-timeout 
commands: make builder status timeouts configurable across cli flows
 2026-02-24 18:35:17 +01:00
CrazyMax f4cc8638c0 commands: make builder status timeouts configurable across cli flows 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-24 17:54:12 +01:00
Akhil ManojandCrazyMax 1f69c574eb Docs: update --file flag to clarify input options 
Expand the buildx build doc to include details on the supported input
options for the --file flag: local file path, remote URL, and stdin. Add
examples for each input type to enhance user understanding.

Signed-off-by: Akhil Manoj <akhil.manoj2003@gmail.com>
Signed-off-by: Akhil Manoj <manoja2@vcu.edu>
 2026-02-23 11:34:38 +01:00
Tõnis TiigiandGitHub bcb8583078 Merge pull request #3638 from crazy-max/imagetools-create-digest 
imagetools: metadata-file flag
 2026-02-11 10:59:38 -08:00
CrazyMax a2f3c6a1b8 imagetools: metadata-file flag 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-10 13:52:00 +01:00
Sebastiaan van Stijn 76355684bc docs: fix typo 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-08 18:13:50 +01:00
Tonis Tiigi d0e4db27e0 commands: remove policy json-schema stub 
Remove stub for now so we don't ship it in a release.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-16 12:48:46 -08:00
Tonis Tiigi c5322ca727 bake: add --var flag for setting variable values 
This provides alternative way to set values for Bake
variables without adding them the global environment variables.
This can also be used then environment variable access
is disabled with BUILDX_BAKE_DISABLE_VARS_ENV_LOOKUP.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-15 23:17:28 -08:00
Tonis Tiigi c6ecdc08cf commands: implement policy test command 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 10:31:12 -08:00
Tonis Tiigi 9f1daffb32 policy: implement policy support for bake 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:34:23 -08:00
Tonis Tiigi 5ad09ce3eb commands: implement policy eval command 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:33 -08:00
Paweł Gronowski 41a1782b35 build: Don't unpack by default when pushing 
Automatically set `unpack=false` for registry exports unless explicitly
overridden by the user.

This applies to:

- `registry` exporter type (converted to `image` exporter with `push=true`)
- `--push` flag usage with image exporters

Users can still explicitly set `unpack=true` if they need local image
storage alongside registry push.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-01-14 16:04:45 +01:00
Tonis Tiigi c5154b3169 update linters for go1.25 base version 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-09 18:54:15 -08:00
CrazyMax 3836aeb949 bake: add semvercmp func to stdlib 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-06 09:34:10 +01:00
CrazyMax 9173ef69ec docs: named contexts override with bake 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-28 15:05:47 +01:00
David Karlsson 8f883df6de docs: remove unnecessary custom anchors and heading in bake stdlib 
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
 2025-11-17 11:20:01 +01:00
Justin Chadwell a516d3fb37 docs: document using build contexts to override syntax directive 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2025-11-11 16:15:47 +00:00
Roberto Castellotti 7253a04b2a docs: fix typo in bake reference 
Signed-off-by: Roberto Castellotti <me@rcastellotti.dev>
 2025-10-30 19:06:20 +01:00
Tõnis TiigiandGitHub 805c377292 Merge pull request #3454 from jsternberg/buildx-tag-help 
docs: clarify cli help for the `--tag` option
 2025-10-23 12:11:33 -07:00
CrazyMax 399af8eeb9 docs: fix bake set flag note 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-17 13:17:56 +02:00
Remy Suen 7898cee6b5 Correct no-cache attribute to be a boolean 
The documentation is incorrect because no-cache needs to be a boolean.

Signed-off-by: Remy Suen <remy.suen@docker.com>
 2025-10-16 17:06:43 -04:00
aevesdocker 7e67a00323 docs: update --set 
Signed-off-by: aevesdocker <allie.sadler@docker.com>
 2025-10-14 10:20:07 +01:00
Jonathan A. Sternberg ec01355b03 docs: clarify cli help for the --tag option 
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2025-10-06 12:46:59 -05:00
CrazyMaxandGitHub c7b50dcca3 Merge pull request #3435 from aevesdocker/ENGDOCS-2996 
Docs: examples for each bake standard library functions
 2025-10-01 12:46:39 +02:00