alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
3,766 Commits 1 Branch 1 Tag
5ad09ce3ebc125e50b037a01c5fce4bc25c35c0f
Commit Graph
3766 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tonis Tiigi 5ad09ce3eb commands: implement policy eval command 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:33 -08:00
Tonis Tiigi d232d4c392 commands: add stubs for policy commands 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:09:10 -08:00
Tonis Tiigi 61843e0031 policy: add strict policy config support 
Strict policy will fail if remote daemon doesn't support policy
verification.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:09:10 -08:00
Tonis Tiigi 0e1036bef5 policy: add multiple policy support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:09:10 -08:00
Tonis Tiigi 4af8cdb6af build: add --policy flag for controlling policy configuration 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:09:08 -08:00
Tonis Tiigi d0e9e8cab5 policy: add pin_image helper 
This helper can be used to pin images to specific digest to opt-out
out upgrades or replay old builds.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi df5d9eb8c2 policy: update verify_git_signature to take git object as parameter 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 8906b254d3 policy: move custom functions to separate file 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 87d4189039 policy: image signature verification support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi b2697ae933 policy: add git signature verification support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 1b7a5f2fa9 policy: add custom builtin load_json 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 70da643c58 policy: add helper modules loading 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 7247c1e38e policy: print debug helper 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 547f1ab36b policy: add custom builtins list and remove v0 compat 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:41 -08:00
Tonis Tiigi adb9386282 policy: remove http perm/uid/gid 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:41 -08:00
Tonis Tiigi 93341aaeee add rego integration to source policies 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:40 -08:00
Tõnis TiigiandGitHub ee2ecd0cc8 Merge pull request #3519 from vvoland/push-nounpack 
build: Don't unpack by default when pushing
 2026-01-14 09:01:24 -08:00
Paweł Gronowski 41a1782b35 build: Don't unpack by default when pushing 
Automatically set `unpack=false` for registry exports unless explicitly
overridden by the user.

This applies to:

- `registry` exporter type (converted to `image` exporter with `push=true`)
- `--push` flag usage with image exporters

Users can still explicitly set `unpack=true` if they need local image
storage alongside registry push.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-01-14 16:04:45 +01:00
Tõnis TiigiandGitHub e33272c855 Merge pull request #3586 from crazy-max/update-github-builder 
ci: update docker github builder to latest
 2026-01-13 11:20:13 -08:00
CrazyMaxandGitHub 90bacba395 Merge pull request #3591 from docker/dependabot/github_actions/actions/download-artifact-7 
build(deps): bump actions/download-artifact from 6 to 7
 2026-01-13 09:19:56 +01:00
Tõnis TiigiandGitHub 10784517c7 Merge pull request #3589 from crazy-max/alpine-3.23 
dockerfile: update alpine to 3.23
 2026-01-12 21:46:38 -08:00
Tõnis TiigiandGitHub 424fd833cb Merge pull request #3583 from jsternberg/oci-layout-at-sign-in-path 
build: handle at symbols in an oci-layout path
 2026-01-12 21:45:55 -08:00
dependabot[bot]andGitHub a837bb2b4c build(deps): bump actions/download-artifact from 6 to 7 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-12 22:41:17 +00:00
Jonathan A. Sternberg 2e76c05592 build: handle at symbols in an oci-layout path 
The buildx command line will now handle `@` symbols in the
`oci-layout://` path when used with named contexts. Instead of
assuming the `@` symbol is part of the reference digest, it will first
check that it is a valid reference digest. Otherwise, it will assume
it's part of the file path.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-01-12 11:19:51 -06:00
CrazyMaxandGitHub d24f69f1ad Merge pull request #3588 from crazy-max/clean-hack-scripts 
hack: move build opts to the dockerfile
 2026-01-12 11:24:47 +01:00
CrazyMaxandGitHub f86f07d74f Merge pull request #3587 from tonistiigi/dev-deps-update 
Dockerfile: update dev deps
 2026-01-12 10:05:22 +01:00
CrazyMax 2bde2f528b dockerfile: update alpine to 3.23 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-12 09:54:45 +01:00
CrazyMax 2012e4de35 hack: move build opts to the dockerfile 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-12 09:45:52 +01:00
Tonis Tiigi ded8307556 Dockerfile: update dev deps 
Hack scripts require make and bash that was missing
in the dev Dockerfile stage.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 26ffd457330d7880fa1c9693acfa4a6448407dd8)
 2026-01-11 22:00:16 -08:00
CrazyMax ac273ea570 ci: update docker github builder to latest 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-11 14:42:40 +01:00
CrazyMaxandGitHub ffe9b27c99 Merge pull request #3520 from crazy-max/bin-image-github-builder 
ci: use docker github builder to build bin image and binaries
 2026-01-11 00:14:03 +01:00
CrazyMaxandGitHub 2406c8cc80 Merge pull request #3584 from tonistiigi/go1.25-lint 
update linters for go1.25 base version
 2026-01-11 00:12:22 +01:00
Tonis Tiigi c5154b3169 update linters for go1.25 base version 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-09 18:54:15 -08:00
Tõnis TiigiandGitHub ef0a7b333a Merge pull request #3581 from jsternberg/dap-breakpoint-reason 
dap: fill in breakpoint reason for being unverified
 2026-01-09 17:42:36 -08:00
Tõnis TiigiandGitHub 59bc18126a Merge pull request #3582 from thaJeztah/bump_cli2 
vendor: github.com/docker/cli v29.1.4
 2026-01-09 17:41:59 -08:00
CrazyMax 481e798a35 ci: update docker github builder to latest 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-09 17:35:41 +01:00
Sebastiaan van Stijn e419caae8b vendor: github.com/docker/cli v29.1.4 
no changes in vendored files

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-09 10:55:10 +01:00
Jonathan A. Sternberg 8ad75dc485 dap: fill in breakpoint reason for being unverified 
When a breakpoint fails to be verified, it will switch the reason to
"failed". It starts off the reason as "pending".

The `reason` field for a breakpoint was added some time after the last
release of `go-dap` which has only been updated once in the last year so
this uses the `main` branch version which contains the field.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-01-08 15:21:54 -06:00
CrazyMaxandGitHub 8037f199db Merge pull request #3562 from tonistiigi/docker-config-scope-workaround 
auth: add option to load docker config for specific repo/scope
 2026-01-08 11:22:52 +01:00
Tõnis Tiigi 37e283ceb0 auth: add option to load docker config for specific repo/scope 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-07 11:45:04 -08:00
CrazyMaxandTonis Tiigi c3514fea5d vendor: github.com/moby/buildkit@master ed6dc749ce40b9fdc308676d10343fd00f56c717 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-07 11:45:01 -08:00
Tõnis TiigiandGitHub 752e0b2227 Merge pull request #3580 from thaJeztah/bump_containerd 
vendor: github.com/containerd/containerd/v2 v2.2.1
 2026-01-07 11:44:08 -08:00
Sebastiaan van Stijn 7762411537 vendor: github.com/containerd/containerd/v2 v2.2.1 
The pull request that was needed has been released now as part of v2.2.1;
full diff: https://github.com/containerd/containerd/compare/efd86f2b0bc2...v2.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-07 11:33:39 +01:00
Tõnis TiigiandGitHub 1fa2ad4fa4 Merge pull request #3579 from jsternberg/dap-named-reference-fix 
dap: fix the run mount input names
 2026-01-06 11:06:08 -08:00
Tõnis TiigiandGitHub 86abd75a6e Merge pull request #3569 from thaJeztah/bump_cli2 
vendor: github.com/docker/cli v29.1.3
 2026-01-06 11:05:44 -08:00
Jonathan A. Sternberg 19eadba5fc dap: fix the run mount input names 
The mounts for exec operations was misconstruing most input names as the
root mount because it was using the wrong input index to match with the
exec mounts.

The correct input index is now being used so bind mounts and other types
of mounts should now show the correct mount destination rather than only
showing the root mount.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-01-06 12:29:51 -06:00
Tõnis TiigiandGitHub 5546d171a0 Merge pull request #3577 from crazy-max/bake-semver-stdlib 
bake: add semvercmp func to stdlib
 2026-01-06 10:17:34 -08:00
CrazyMax 3836aeb949 bake: add semvercmp func to stdlib 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-06 09:34:10 +01:00
Akihiro SudaandGitHub 66f4f62159 Merge pull request #3493 from Guimove/fix-k8s-tls-retry-2668 
driver/kubernetes: Add retry logic for transient TLS connection errors
 2026-01-06 14:31:10 +08:00
Tõnis TiigiandGitHub 191d050d81 Merge pull request #3578 from crazy-max/buildkit-0.26.3 
dockerfile: update buildkit to v0.26.3
 2026-01-05 18:09:43 -08:00