Commit Graph
3835 Commits
Author SHA1 Message Date
Tõnis TiigiandGitHub 32e47355af Merge pull request #3627 from tonistiigi/imagetools-auth
imagetools: use dockerconfig for auth
2026-02-03 13:14:33 -05:00
CrazyMaxandGitHub 0a62a9eb7d Merge pull request #3635 from crazy-max/update-github-builder
ci: update docker/github-builder to v1
2026-01-30 16:05:11 +01:00
CrazyMax f6060808a4 ci: update docker/github-builder to v1
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-01-29 23:35:35 +01:00
CrazyMaxandGitHub b7bb516036 Merge pull request #3634 from crazy-max/update-buildkit
dockerfile: update buildkit to v0.27.1
2026-01-29 13:45:18 +01:00
CrazyMax 210de91d49 dockerfile: update buildkit to v0.27.1
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-01-29 12:42:23 +01:00
Tõnis TiigiandGitHub d88bf660ce Merge pull request #3633 from jsternberg/debugger-build-metrics
commands: adds metrics associated with the debugger
2026-01-28 13:14:47 -08:00
Jonathan A. Sternberg 3e0e9333c2 commands: adds metrics associated with the debugger
Add metrics associated with the debugger that are reported through the
metrics writer. This adds a few attributes that are only added when a
debugger is used with either the `debug` command or `dap` command.

At the moment, these metrics show up the exact same as a build and we
can't identify if something is using `dap` or `debug` since they use the
same code path.

This also adds a new available metric that can be utilized by plugins to
report additional information. The metrics will check if an environment
variable `BUILDX_DAP_USER_AGENT` is sent and that will get included in
the metrics if they are enabled.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2026-01-28 14:05:11 -06:00
Tõnis TiigiandGitHub 694bd9ad16 Merge pull request #3623 from tonistiigi/imagetools-request-fixes
imagetools: avoid excessive HTTP requests on create
2026-01-28 09:13:03 -08:00
Tonis Tiigi 87c77aca7b imagetools: avoid trying to load attestations inline references
When creating resulting image index it is wasteful
to check for attestations for the descriptors in original
index what were already attestation for subject manifest.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-28 08:28:29 -08:00
Tonis Tiigi 510369170a imagetools: fix excessive copies on create command
Currently needed manifests were filtered out and then
copied in a loop, but for each copy still the full
unfiltered descriptor was copied instead of single
manifest, resulting multiple push attempts for same
descriptor.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-28 08:27:17 -08:00
CrazyMaxandGitHub 841017f665 Merge pull request #3629 from thaJeztah/errs_alias
use consistent alias for stdlib "errors"
2026-01-27 12:58:14 +01:00
CrazyMaxandGitHub fd4fbd0be8 Merge pull request #3626 from thaJeztah/native_multierror
commands/history: rewrite with stdlib multi-errors
2026-01-27 12:53:12 +01:00
Sebastiaan van Stijn 3eee42b002 use consistent alias for stdlib "errors"
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-27 11:14:27 +01:00
CrazyMaxandGitHub 715580be70 Merge pull request #3620 from docker/dependabot/github_actions/peter-evans/create-pull-request-8.1.0
build(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0
2026-01-27 10:46:04 +01:00
CrazyMaxandGitHub 1c8879c65e Merge pull request #3624 from tonistiigi/remove-context-override
imagetools: remove temp workaround for fixed containerd bug
2026-01-27 10:43:53 +01:00
CrazyMaxandGitHub 3b3895d884 Merge pull request #3622 from tonistiigi/buildkit-v0.27.0
Dockerfile: update buildkit to v0.27.0
2026-01-27 09:20:00 +01:00
Tonis Tiigi 27dde04ab5 imagetools: use dockerconfig for auth
Enables fallback for DHI and Scout registries and
repo/scope specific credentials like supported for builds.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-26 10:15:14 -08:00
Tonis Tiigi e254cf1985 auth: create new authorizer for imagetools
Based on containerd Authorizer.

Removed unused RefreshToken, fixed error handling.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-26 10:14:21 -08:00
Sebastiaan van Stijn 39ee64df71 commands/history: rewrite with stdlib multi-errors
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-26 12:53:33 +01:00
Tonis Tiigi 8f71a4805e imagetools: remove temp workaround for fixed containerd bug
The issue has been fixed in containerd/containerd#12508

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-23 09:50:20 -08:00
Tonis Tiigi df56af4e0c Dockerfile: update buildkit to v0.27.0
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-21 17:05:40 -08:00
Tõnis TiigiandGitHub 44945d71ff Merge pull request #3621 from tonistiigi/vendor-buildkit-v0.27
vendor: update buildkit to v0.27.0
2026-01-21 14:48:45 -08:00
Tonis Tiigi 08e5e8ebf2 vendor: update buildkit to v0.27.0
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-21 14:32:32 -08:00
dependabot[bot]andGitHub 23ceeffc69 build(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 8.0.0 to 8.1.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/98357b18bf14b5342f975ff684046ec3b2a07725...c0f553fe549906ede9cf27b5156039d195d2ece0)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-21 18:33:13 +00:00
Tõnis TiigiandGitHub 79763c61b3 Merge pull request #3616 from thaJeztah/bump_cli
vendor: github.com/docker/cli v29.1.5
2026-01-20 10:22:06 -08:00
Sebastiaan van Stijn 0d343eff2d vendor: github.com/docker/cli v29.1.5
no changes in code

full diff: https://github.com/docker/cli/compare/v29.1.4...v29.1.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-19 13:08:21 +01:00
Tõnis TiigiandGitHub 9c33ef3ed3 Merge pull request #3612 from tonistiigi/dhi-auth
dockerconfig: add fallback for loading DHI and Scout credentials
2026-01-16 14:27:54 -08:00
Tõnis TiigiandGitHub 9567f7f4d2 Merge pull request #3614 from tonistiigi/policy-json-stub
commands: remove policy json-schema stub
2026-01-16 14:27:33 -08:00
Tõnis TiigiandGitHub 3dabbc568b Merge pull request #3615 from tonistiigi/vendor-buildkit-v0.27.0-rc2
vendor: update buildkit to v0.27.0-rc2
2026-01-16 14:13:10 -08:00
Tonis Tiigi 3fd58dff71 vendor: update buildkit to v0.27.0-rc2
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 13:56:16 -08:00
Tõnis TiigiandGitHub 819ae5d3e1 Merge pull request #3611 from tonistiigi/policy-update-v0.31-rc2
Updates and fixes to policy support
2026-01-16 12:52:06 -08:00
Tonis Tiigi d0e4db27e0 commands: remove policy json-schema stub
Remove stub for now so we don't ship it in a release.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 12:48:46 -08:00
Tonis Tiigi f764c6f025 dockerconfig: add fallback for loading DHI and Scout credentials
These are also Docker managed registries with same users.

Fall back to main hostname if not logged in to exact domain.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 12:45:05 -08:00
Tonis Tiigi 89fdef17e6 policy: fixes for image source handling
- Make sure tag is added to image reference as
containerd reference parser refuses to parse otherwise.

- When attestation is asked from non-index, return
nil instead of error. This is for consistency as likely
to fail in BuildKit before that is fixed separately.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 12:12:41 -08:00
Tonis Tiigi 535da79d62 policy: build policy deny messages with error
Supported from Buildkit v0.27.0-rc1

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:56 -08:00
Tonis Tiigi db9c0c2532 policy: update unknown collection
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:56 -08:00
Tonis Tiigi 86885cd8a2 policy: add docker_github_builder_tag builtin helper
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:55 -08:00
Tonis Tiigi 1d19f3e2dd policy: add docker_github_builder builtin helper
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:55 -08:00
Tonis Tiigi 30260ec935 policy: improve policy logging
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:55 -08:00
Tonis Tiigi 73f5b1f9c7 policy: update policy progress logic
Fix the policy logger being open for the whole build.

In new logic logger is opened on-demand if there are logs,
remains open until timeout and is restarted if new logs
come after.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:55 -08:00
Tonis Tiigi 20405112c2 policy: allow image source without set platform
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:55 -08:00
Tonis Tiigi eaee6675fb policy: fix exposing signature kind and type
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:53 -08:00
Tõnis TiigiandGitHub bc5d652738 Merge pull request #3610 from tonistiigi/bake-var-flag
bake: add --var flag for setting variable values
2026-01-16 08:25:12 -08:00
Tõnis TiigiandGitHub 4682edf8bd Merge pull request #3609 from tonistiigi/dockerfile-worktree-fix
Dockerfile: allow dev builds from git worktree
2026-01-16 08:24:38 -08:00
Tonis Tiigi c5322ca727 bake: add --var flag for setting variable values
This provides alternative way to set values for Bake
variables without adding them the global environment variables.
This can also be used then environment variable access
is disabled with BUILDX_BAKE_DISABLE_VARS_ENV_LOOKUP.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-15 23:17:28 -08:00
Tonis Tiigi 88359c58a0 tests: add TestBakeDisableEnvLookup
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-15 22:46:30 -08:00
Tonis Tiigi 38750e5958 Dockerfile: allow dev builds from git worktree
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit f24db9495537a9658b0defba34c10acd2ad61118)
2026-01-15 17:24:44 -08:00
Tõnis TiigiandGitHub 8b1f6fd8c0 Merge pull request #3600 from crazy-max/ci-sigstore-darwin
ci: don't upload signature bundle for darwin
2026-01-15 16:49:25 -08:00
CrazyMax f79f69b449 ci: don't upload signature bundle for darwin
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-01-15 12:20:48 +01:00
CrazyMaxandGitHub 9e1b08f7ca Merge pull request #3592 from tonistiigi/opa-source-policy-test-cmd
policy: add policy test command
2026-01-15 12:16:00 +01:00