alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
3,797 Commits 1 Branch 1 Tag
30260ec935b91dfbdf8fad2cb8ae61fdbbdbaab3
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tonis Tiigi 30260ec935 policy: improve policy logging 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-16 11:48:55 -08:00
Tonis Tiigi 73f5b1f9c7 policy: update policy progress logic 
Fix the policy logger being open for the whole build.

In new logic logger is opened on-demand if there are logs,
remains open until timeout and is restarted if new logs
come after.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-16 11:48:55 -08:00
Tonis Tiigi 20405112c2 policy: allow image source without set platform 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-16 11:48:55 -08:00
Tonis Tiigi eaee6675fb policy: fix exposing signature kind and type 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-16 11:48:53 -08:00
Tõnis TiigiandGitHub bc5d652738 Merge pull request #3610 from tonistiigi/bake-var-flag 
bake: add --var flag for setting variable values
 2026-01-16 08:25:12 -08:00
Tõnis TiigiandGitHub 4682edf8bd Merge pull request #3609 from tonistiigi/dockerfile-worktree-fix 
Dockerfile: allow dev builds from git worktree
 2026-01-16 08:24:38 -08:00
Tonis Tiigi c5322ca727 bake: add --var flag for setting variable values 
This provides alternative way to set values for Bake
variables without adding them the global environment variables.
This can also be used then environment variable access
is disabled with BUILDX_BAKE_DISABLE_VARS_ENV_LOOKUP.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-15 23:17:28 -08:00
Tonis Tiigi 88359c58a0 tests: add TestBakeDisableEnvLookup 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-15 22:46:30 -08:00
Tonis Tiigi 38750e5958 Dockerfile: allow dev builds from git worktree 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit f24db9495537a9658b0defba34c10acd2ad61118)
 2026-01-15 17:24:44 -08:00
Tõnis TiigiandGitHub 8b1f6fd8c0 Merge pull request #3600 from crazy-max/ci-sigstore-darwin 
ci: don't upload signature bundle for darwin
 2026-01-15 16:49:25 -08:00
Tõnis TiigiandGitHub b9b24359ba Merge pull request #3595 from tonistiigi/bake-var-disable 
bake: allow disabling env lookup for bake
 2026-01-14 14:54:17 -08:00
Tonis Tiigi d27c7f8e9f bake: allow disabling env lookup for bake 
Allow bake to be run in a mode where the local environment
variable values can't be captured by bake definition.

In future we will likely also add --var k=v for alternative
way to pass values to variables.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 14:18:26 -08:00
Tõnis TiigiandGitHub efaf9daa21 Merge pull request #3594 from tonistiigi/vendor-buildkit-v0.27.0-rc1 
vendor: update buildkit to v0.27.0-rc1
 2026-01-14 13:58:10 -08:00
Tonis Tiigi d54f398c5d vendor: update buildkit to v0.27.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 13:36:15 -08:00
Tonis Tiigi c6ecdc08cf commands: implement policy test command 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 10:31:12 -08:00
Tõnis TiigiandGitHub 32b6b75478 Merge pull request #3593 from tonistiigi/opa-bake-tests 
policy: add policy to bake and improve test coverage
 2026-01-14 10:07:08 -08:00
Tonis Tiigi 9f1daffb32 policy: implement policy support for bake 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:34:23 -08:00
Tonis Tiigi 6f9a1cfb17 tests: add git based policy tests 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:34:15 -08:00
Tonis Tiigi 6d80e701f6 tests: add tests checking combinations of --policy flag 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:34:09 -08:00
Tonis Tiigi 071ce556a5 tests: add http based policy eval tests 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:34:01 -08:00
Tonis Tiigi 4b4f2aa682 tests: add http policy integration tests 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:33:49 -08:00
Tõnis TiigiandGitHub 5a5d59f503 Merge pull request #3539 from tonistiigi/opa-source-policy 
add rego integration to source policies
 2026-01-14 09:32:39 -08:00
Tonis Tiigi e5116c1555 tests: update policy tests matrix to require modern buildkit 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:35 -08:00
Tonis Tiigi 30b63522d1 tests: add policy eval integration tests 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:35 -08:00
Tonis Tiigi 02719d045c tests: add image and env based policy build tests 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:35 -08:00
Tonis Tiigi ae86c584b4 tests: add policy flag integration test 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:35 -08:00
Tonis Tiigi be42b48462 policy: implement policy logging via progress printer 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:34 -08:00
Tonis Tiigi 5ad09ce3eb commands: implement policy eval command 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:33 -08:00
Tonis Tiigi d232d4c392 commands: add stubs for policy commands 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:09:10 -08:00
Tonis Tiigi 61843e0031 policy: add strict policy config support 
Strict policy will fail if remote daemon doesn't support policy
verification.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:09:10 -08:00
Tonis Tiigi 0e1036bef5 policy: add multiple policy support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:09:10 -08:00
Tonis Tiigi 4af8cdb6af build: add --policy flag for controlling policy configuration 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:09:08 -08:00
Tonis Tiigi d0e9e8cab5 policy: add pin_image helper 
This helper can be used to pin images to specific digest to opt-out
out upgrades or replay old builds.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi df5d9eb8c2 policy: update verify_git_signature to take git object as parameter 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 8906b254d3 policy: move custom functions to separate file 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 87d4189039 policy: image signature verification support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi b2697ae933 policy: add git signature verification support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 1b7a5f2fa9 policy: add custom builtin load_json 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 70da643c58 policy: add helper modules loading 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 7247c1e38e policy: print debug helper 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 547f1ab36b policy: add custom builtins list and remove v0 compat 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:41 -08:00
Tonis Tiigi adb9386282 policy: remove http perm/uid/gid 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:41 -08:00
Tonis Tiigi 93341aaeee add rego integration to source policies 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:40 -08:00
Tõnis TiigiandGitHub ee2ecd0cc8 Merge pull request #3519 from vvoland/push-nounpack 
build: Don't unpack by default when pushing
 2026-01-14 09:01:24 -08:00
Tõnis TiigiandGitHub e33272c855 Merge pull request #3586 from crazy-max/update-github-builder 
ci: update docker github builder to latest
 2026-01-13 11:20:13 -08:00
Tõnis TiigiandGitHub 10784517c7 Merge pull request #3589 from crazy-max/alpine-3.23 
dockerfile: update alpine to 3.23
 2026-01-12 21:46:38 -08:00
Tõnis TiigiandGitHub 424fd833cb Merge pull request #3583 from jsternberg/oci-layout-at-sign-in-path 
build: handle at symbols in an oci-layout path
 2026-01-12 21:45:55 -08:00
Tonis Tiigi ded8307556 Dockerfile: update dev deps 
Hack scripts require make and bash that was missing
in the dev Dockerfile stage.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 26ffd457330d7880fa1c9693acfa4a6448407dd8)
 2026-01-11 22:00:16 -08:00
Tonis Tiigi c5154b3169 update linters for go1.25 base version 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-09 18:54:15 -08:00
Tõnis TiigiandGitHub ef0a7b333a Merge pull request #3581 from jsternberg/dap-breakpoint-reason 
dap: fill in breakpoint reason for being unverified
 2026-01-09 17:42:36 -08:00
Tõnis TiigiandGitHub 59bc18126a Merge pull request #3582 from thaJeztah/bump_cli2 
vendor: github.com/docker/cli v29.1.4
 2026-01-09 17:41:59 -08:00
Tõnis Tiigi 37e283ceb0 auth: add option to load docker config for specific repo/scope 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-07 11:45:04 -08:00
Tõnis TiigiandGitHub 752e0b2227 Merge pull request #3580 from thaJeztah/bump_containerd 
vendor: github.com/containerd/containerd/v2 v2.2.1
 2026-01-07 11:44:08 -08:00
Tõnis TiigiandGitHub 1fa2ad4fa4 Merge pull request #3579 from jsternberg/dap-named-reference-fix 
dap: fix the run mount input names
 2026-01-06 11:06:08 -08:00
Tõnis TiigiandGitHub 86abd75a6e Merge pull request #3569 from thaJeztah/bump_cli2 
vendor: github.com/docker/cli v29.1.3
 2026-01-06 11:05:44 -08:00
Tõnis TiigiandGitHub 5546d171a0 Merge pull request #3577 from crazy-max/bake-semver-stdlib 
bake: add semvercmp func to stdlib
 2026-01-06 10:17:34 -08:00
Tõnis TiigiandGitHub 191d050d81 Merge pull request #3578 from crazy-max/buildkit-0.26.3 
dockerfile: update buildkit to v0.26.3
 2026-01-05 18:09:43 -08:00
Tõnis TiigiandGitHub 2bcb098cbb Merge pull request #3566 from jsternberg/dap-build-integration-tests 
tests: add integration tests for `dap build`
 2025-12-17 09:41:34 -08:00
Tõnis TiigiandGitHub 590adceb63 Merge pull request #3554 from hsw/fix-debug-standalone 
commands: fix debug flag in standalone mode
 2025-12-12 16:07:35 -08:00
Tõnis TiigiandGitHub 73d46672e1 Merge pull request #3534 from cpuguy83/dap_bp_overlaps 
dap: Fix breakpoint overlap check
 2025-12-12 16:06:47 -08:00
Tõnis TiigiandGitHub c003c8617e Merge pull request #3558 from thaJeztah/bump_cli 
vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0
 2025-12-12 09:43:24 -08:00
Tõnis TiigiandGitHub d56379477e Merge pull request #3563 from thaJeztah/bump_aec 
vendor: github.com/morikuni/aec v1.1.0
 2025-12-11 09:38:55 -08:00
Tõnis TiigiandGitHub f72bd30200 Merge pull request #3548 from crazy-max/bake-contexts-override 
docs: named contexts override with bake
 2025-12-02 16:33:31 -08:00
Tõnis TiigiandGitHub a4a02b07e8 Merge pull request #3545 from thaJeztah/bump_moby 
vendor: docker/cli v29.1.1, moby/client v0.2.1
 2025-12-02 16:33:04 -08:00
Tõnis TiigiandGitHub e084a7f6b6 Merge pull request #3536 from crazy-max/fix-provnance-metadata 
fix empty provenance metadata for multi-platform builds
 2025-11-25 09:10:36 -08:00
Tõnis TiigiandGitHub 1aa6b6cad9 Merge pull request #3538 from crazy-max/update-freebsd-box 
ci: switch to bento/freebsd-14 vagrant box
 2025-11-25 08:14:15 -08:00
Tõnis TiigiandGitHub 3c9cd19e54 Merge pull request #3529 from tonistiigi/vendor-v0.26.1 
vendor: update buildkit to v0.26.1
 2025-11-17 16:30:12 +00:00
Tonis Tiigi 42a2be1c4b vendor: update buildkit to v0.26.1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-11-17 16:07:17 +00:00
Tõnis TiigiandGitHub dd0cd08119 Merge pull request #3524 from crazy-max/containerd-update 
vendor: update containerd to efd86f2b0bc2 (release/2.2)
 2025-11-17 16:02:42 +00:00
Tonis Tiigi 1fae6f4c2a build: avoid panic on linking to nil target 
Note that nil targets still do not work as buildkit
does not currently support build inputs with nil values.

But this gives cleaner error from buildkit instead of
panic on the client side.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-11-11 11:28:53 -08:00
Tonis Tiigi e9804322f8 imagetools: fix concurrent map write from containerd issue 
Workaround for containerd issue that can cause concurrent map
write when WithMediaTypeKeyPrefix is called in parallel
goroutines for context that originated from same base context.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-11-11 10:43:54 -08:00
Tõnis TiigiandGitHub 484a32f259 Merge pull request #3478 from crazy-max/fix-tar-output 
build: create parent directories for tar output in lazy writer
 2025-11-05 16:42:44 -08:00
Tonis Tiigi cc2a26c146 vendor: update buildkit v0.26.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-11-05 15:55:57 -08:00
Tõnis TiigiandGitHub 3ca6a43808 Merge pull request #3433 from tonistiigi/imagetools-create-referrers 
imagetools: support for creating attestations/signatures
 2025-11-05 15:35:09 -08:00
Tonis Tiigi 79b6474639 imagetools: add sigstore bundle v3 to supported referrer formats 
This was added after the initial version was written.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-11-05 14:00:05 -08:00
Tonis Tiigi e13cd5c9df imagetools: support for creating attestations/signatures 
Persist attestation manifest and any manifest cosign-based
signatures when creating new images.

When creating index from single-arch manifests where attestation
manifest is not inlined, it can be loaded from referrers API.
Note that for this to work the attestation manifest needs to be
in artifact type when image was built.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit aab8171f824d13d703e869107e1720ad71d24bff)
 2025-11-05 12:59:27 -08:00
Tonis Tiigi ae33cdc550 vendor: update buildkit to e18be41828 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-11-05 12:53:09 -08:00
Tõnis TiigiandGitHub 5f5beef2c2 Merge pull request #3500 from tonistiigi/update-containerd-v2.2.0-rc.1 
vendor: update containerd to v2.2.0-rc.1
 2025-11-05 10:53:22 -08:00
Tonis Tiigi faf30a2177 vendor: update containerd to v2.2.0-rc.1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-11-05 10:24:42 -08:00
Tõnis TiigiandGitHub cd38f981c7 Merge pull request #3488 from jsternberg/dap-step-out-skips-breakpoints 
dap: next and out now respect breakpoints
 2025-11-03 09:38:00 -08:00
Tõnis TiigiandGitHub b016ae3552 Merge pull request #3487 from jsternberg/dap-pause-non-existent-file 
dap: attempt to find multiple digests when a failure happens
 2025-10-29 16:11:32 -07:00
Tõnis TiigiandGitHub 00502c0199 Merge pull request #3483 from jsternberg/dap-eval-dependencies 
dap: refactor how steps are evaluated in the program
 2025-10-29 13:18:57 -07:00
Tõnis TiigiandGitHub 485e46b4f4 Merge pull request #3453 from crazy-max/mount-github-event 
docker-container: write github actions payload to container for provenance
 2025-10-24 10:46:07 -07:00
Tõnis TiigiandGitHub 805c377292 Merge pull request #3454 from jsternberg/buildx-tag-help 
docs: clarify cli help for the `--tag` option
 2025-10-23 12:11:33 -07:00
Tõnis TiigiandGitHub b006e0feca Merge pull request #3474 from crazy-max/doc-fix-bake-set 
docs: fix bake set flag note
 2025-10-22 08:49:07 -07:00
Tõnis TiigiandGitHub 41e725517d Merge pull request #3465 from crazy-max/go-1.25 
update to go 1.25
 2025-10-13 08:06:52 -07:00
Tonis Tiigi ba4935585c imagetools: silence warning for empty-type meditype used in artifacts 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-10-02 10:43:33 -07:00
Tonis Tiigi ef2b4436cb imagetools: fix possible broken chain copy on create 
When creating index from singe-arch manifests it
was possible for some of the internal manifests to not
be copies and cause error on pushing the index.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-10-02 10:36:48 -07:00
Tõnis TiigiandGitHub 51bed6f144 Merge pull request #3445 from jsternberg/buildkit-ref-update 
ci: update buildkit ref for ci
 2025-10-01 09:45:36 -07:00
Tõnis TiigiandGitHub 82584815c3 Merge pull request #3440 from crazy-max/fix-gitutil-test 
test: use temp dir for TestGit
 2025-09-29 11:18:15 -07:00
Tõnis TiigiandGitHub b4b698c088 Merge pull request #3436 from jsternberg/dap-file-explorer-fix 
dap: file explorer uses the wrong path when looking up mounts
 2025-09-24 08:23:42 -07:00
Tõnis TiigiandGitHub 285dd76b25 Merge pull request #3434 from tonistiigi/update-buildkit-v0.25.0-rc1 
vendor: update buildkit to v0.25.0-rc1
 2025-09-23 14:55:33 -07:00
Tonis Tiigi 3bea8ce3ad vendor: update buildkit to v0.25.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-09-23 13:32:44 -07:00
Tõnis TiigiandGitHub 40f318f9d8 Merge pull request #3431 from tonistiigi/progress-none 
add progress=none option
 2025-09-23 11:33:37 -07:00
Tõnis TiigiandGitHub 568c693972 Merge pull request #3430 from tonistiigi/imagetools-create-platforms 
imagetools: add platforms filter to imagetools create
 2025-09-23 08:47:52 -07:00
Tonis Tiigi f448f3e22b imagetools: add platforms filter to imagetools create 
Allows specifying platforms that should be included
in the new image, making it possible to reduce platforms
of existing multi-arch image. Previously the individual
image manifests needed to be used as sources, but that
dropped their related attestation manifests.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-09-23 08:10:11 -07:00
Tõnis TiigiandGitHub e4ca56fe62 Merge pull request #3432 from jsternberg/dap-plugin-guidelines 
docs: add plugin guideline requirements for dap plugins
 2025-09-22 10:47:24 -07:00
Tonis Tiigi 9c7b9628ef add progress=none option 
Currently there is no way to completely suppress the progress output.
We have --progress=quiet but it has additional effect of printing
image ID as a progress for historical reasons. --progress=none
behaves like quiet but without this extra output printing depending
on build output.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-09-22 10:10:20 -07:00
Tonis Tiigi 4ad48f7737 imagetools: variables name refactor 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-09-22 09:25:48 -07:00
Tõnis TiigiandGitHub bc8ede2d4c Merge pull request #3427 from glours/bump-compose-go-v2.9.0 
bump compose-go to version v2.9.0
 2025-09-19 14:36:35 -07:00