alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
3,911 Commits 1 Branch 1 Tag
989b8637c94258fbd7924211907c73d5376d4b33
Commit Graph
3911 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
CrazyMaxandGitHub 989b8637c9 Merge pull request #3674 from tonistiigi/policy-fs-refs-fix 
build: ref-count policy FS lifecycle
 2026-02-27 15:52:36 +01:00
CrazyMaxandGitHub e43156d54a Merge pull request #3662 from tonistiigi/policy-recursive-materials 
policy: add recursive provenance material resolution
 2026-02-27 15:51:51 +01:00
CrazyMaxandGitHub a88af0e2ae Merge pull request #3675 from tonistiigi/policy-filename-fix 
build: normalize policy env filename default
 2026-02-27 15:33:02 +01:00
Tonis Tiigi f3a1249560 build: normalize policy env filename default 
Use cleaned DockerfilePath basename for policy env filename and fall back
to Dockerfile when the path resolves to dot or root.

Previously filename could be reported as "." on default cases.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 21:13:03 -08:00
Tonis Tiigi 9ef416b258 build: ref-count policy FS lifecycle 
Make memoized policy FS ref-counted so repeated get()/close() pairs don't
prematurely close shared handles.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 18:48:38 -08:00
Tonis Tiigi 1c4a436a0d policy: match parent unknown keys in collectUnknowns 
Allow child refs from partial evaluation to match allowed parent keys on
path boundaries and return canonical unknowns for metadata resolution.

Add tests for parent-child matching and boundary safety cases.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 17:12:18 -08:00
Tonis Tiigi 73ea669465 vendor: update buildkit to ecde33610015 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 17:06:30 -08:00
Tonis Tiigi 88cba2c367 policy: avoid stale invalid field warnings in eval 
Track fields reloaded during eval --print resolution loops and filter
final invalid-field warnings against that set.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 09:14:31 -08:00
Tonis Tiigi 4880756a0f policy: simplify recursive material resolution 
Unify root/material unknown resolution with recursive Input traversal.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 09:14:25 -08:00
Tõnis TiigiandGitHub f35e45c307 Merge pull request #3667 from tonistiigi/20260224-update-buildkit 
vendor: update buildkit to v0.28.0-rc1
 2026-02-24 14:36:03 -08:00
Tonis Tiigi dd2a620465 vendor: update buildkit to v0.28.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-24 14:19:34 -08:00
CrazyMaxandGitHub 8967e9f760 Merge pull request #3666 from crazy-max/docker-29.2 
dockerfile: update to docker 29.2
 2026-02-24 19:17:22 +01:00
CrazyMax 246e1090a0 dockerfile: update to docker 29.2 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-24 18:36:40 +01:00
CrazyMaxandGitHub 989bab0739 Merge pull request #3648 from crazy-max/bake-auth-token-domain 
bake: derive git auth host from remote URL
 2026-02-24 18:35:36 +01:00
CrazyMaxandGitHub 7bc8c698b4 Merge pull request #3665 from crazy-max/builder-timeout 
commands: make builder status timeouts configurable across cli flows
 2026-02-24 18:35:17 +01:00
Tõnis TiigiandGitHub 2809ca78d7 Merge pull request #3661 from tonistiigi/policy-remote-fs 
build: resolve policy files for builds from remote context
 2026-02-24 09:21:24 -08:00
CrazyMax 26c7ae6fbf bake: derive git auth host from remote URL 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-24 18:09:52 +01:00
CrazyMax f4cc8638c0 commands: make builder status timeouts configurable across cli flows 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-24 17:54:12 +01:00
Tõnis TiigiandGitHub 9607bbab9a Merge pull request #3451 from AkhilManoj03/3121-improve-file-flag-docs 
Docs: document remote URL support for --file flag in buildx build
 2026-02-24 07:52:20 -08:00
CrazyMaxandGitHub 6248145bef Merge pull request #3663 from dvdksn/update-docs-upstream-workflow 
chore: update target path for cli yaml in docs-release workflow
 2026-02-24 09:11:40 +01:00
David Karlsson 9b096a83f4 chore: update target path for cli yaml in docs-release workflow 
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
 2026-02-24 08:55:25 +01:00
Tonis Tiigi b62fc30524 build: resolve policy files from context state and unified FS 
Support remote context policy files via resolved context state and cwd:// override.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-23 16:22:19 -08:00
Tõnis TiigiandGitHub 5830f90beb Merge pull request #3657 from tonistiigi/policy-artifact-verification 
policy: add artifact attestation and github attestation builtin support
 2026-02-23 09:15:43 -08:00
Akhil ManojandCrazyMax 1f69c574eb Docs: update --file flag to clarify input options 
Expand the buildx build doc to include details on the supported input
options for the --file flag: local file path, remote URL, and stdin. Add
examples for each input type to enhance user understanding.

Signed-off-by: Akhil Manoj <akhil.manoj2003@gmail.com>
Signed-off-by: Akhil Manoj <manoja2@vcu.edu>
 2026-02-23 11:34:38 +01:00
Tõnis TiigiandGitHub 268f1c7e4a Merge pull request #3450 from jsternberg/dap-container-fs-requests 
dap: utilize the container filesystem for the file explorer
 2026-02-22 21:50:28 -08:00
Tõnis TiigiandGitHub 5683e9f04f Merge pull request #3470 from yzewei/tests_fix 
tests: replace aaa/bbb node names with descriptive builder names
 2026-02-22 21:49:34 -08:00
Tõnis TiigiandGitHub 6476f0e7c3 Merge pull request #3660 from crazy-max/ci-bump-runner 
ci: update macos and windows runners to latest
 2026-02-20 10:29:40 -08:00
Tonis Tiigi 10c5f00efa sourcemeta: unblock concurrent resolver open waiters 
Prevent concurrent ResolveSourceMetadata calls from hanging while
waiting for resolver initialization.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-20 08:56:41 -08:00
Tonis Tiigi 5c3551beeb policy: add GitHub attestation verification 
Add github_attestation and github_release_attestation policy support.
Fetch GitHub attestation bundles (including bundle_url .json.sn decode)
and verify against input.http.checksum.

Wire source metadata resolver progress through resolver options and add
ResolveState support for policy HTTP attestation fetches.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-20 08:56:40 -08:00
Tonis Tiigi ac9e4c512c policy: add artifact attestation builtin support 
Add artifact_attestation(http, filename) and wire verifier support for
artifact bundle checks. Add docker_github_builder_bundle helper rule.

Handle runtime unknown http.checksum after eval so metadata resolve is
requested when checksum is missing.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-20 08:56:39 -08:00
Tõnis TiigiandGitHub 7d3b6988c2 Merge pull request #3656 from tonistiigi/policy-error 
policy: mark policy progress vertex on DENY build failures
 2026-02-20 08:56:28 -08:00
CrazyMax 160c429cc7 ci: update macos and windows runners to latest 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-20 09:53:45 +01:00
Tonis Tiigi 9f59d5b789 policy: add progress vertex error integration test 
Refactor policy error unit tests to table-driven subtests with slug names.
Add rawjson integration coverage to verify policy vertex captures DENY build
errors in progress output.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-19 18:13:58 -08:00
Tonis Tiigi 048ebea483 policy: mark policy progress vertex on DENY build failures 
Track denied source identifiers during policy evaluation and flag the policy
progress vertex as failed when BuildKit returns a matching DENY error pattern.

This improves the progress output of policy error and shows last
policy logs with the build error.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-18 17:19:54 -08:00
CrazyMaxandGitHub a0103f4278 Merge pull request #3653 from tonistiigi/util-sourcemeta-resolver 
policy: separate sourcemetaresolver utility to reusable pkg
 2026-02-17 10:11:36 +01:00
CrazyMaxandGitHub fc98162f2d Merge pull request #3655 from tonistiigi/q-call-empty-line 
build: avoid empty line when -q used with --call
 2026-02-16 16:59:12 +01:00
Tonis Tiigi 499261eed5 build: avoid empty line when -q used with --call 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-13 17:11:35 -08:00
Tonis Tiigi dce5289722 policy: separate sourcemetaresolver utility to reusable pkg 
Turn the current utility used by policy helper commands that
allows getting gateway.Client lazily into reusable package.

This is preparation for using this utility also in the policy
verification, outside of commands.

Only expose SourceMetaResolver as other methods of gateway client
are not needed atm by any callers.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-13 13:59:33 -08:00
Tõnis TiigiandGitHub 044e152008 Merge pull request #3652 from tonistiigi/policy-provenance-0 
policy: add image.provenance input type
 2026-02-13 11:09:01 -08:00
Tonis Tiigi 8d605dcd87 policy: add image.provenance input type 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-12 11:59:06 -08:00
CrazyMaxandGitHub 53882aec96 Merge pull request #3649 from tonistiigi/update-buildkit-dev 
vendor: update buildkit to v0.28-dev-9836771d0c5b
 2026-02-12 10:06:45 +01:00
Tonis Tiigi a5b712b275 confutil: fix toml rewriting in new package 
Seems marshalling the typed struct causes empty fields
e.g. gcpolicy = [] that (old versions of?) BuildKit do no allow.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-11 21:47:11 -08:00
Tõnis TiigiandGitHub bcb8583078 Merge pull request #3638 from crazy-max/imagetools-create-digest 
imagetools: metadata-file flag
 2026-02-11 10:59:38 -08:00
Tõnis TiigiandGitHub 7940a9650d Merge pull request #3646 from crazy-max/urlutil 
history: don't import build package
 2026-02-11 10:59:05 -08:00
CrazyMax 7899695fa6 history: don't import build package 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-11 10:29:47 +01:00
CrazyMaxandGitHub 9bfd2a4b5c Merge pull request #3462 from crazy-max/bake-input-context 
bake: set input:context for remote builds
 2026-02-11 09:41:30 +01:00
Tonis Tiigi 9d803b0d87 vendor: update buildkit to v0.28-dev-9836771d0c5b 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-10 11:59:30 -08:00
Tõnis TiigiandGitHub cd841238b8 Merge pull request #3647 from tonistiigi/policy-test-updates 
policy: update unit tests and normalize input keys
 2026-02-10 11:53:31 -08:00
CrazyMax a2f3c6a1b8 imagetools: metadata-file flag 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-10 13:52:00 +01:00
Tonis Tiigi edd2461190 policy: add unit tests for AddUknowns 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-09 18:27:35 -08:00