alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,338 Commits 1 Branch 1 Tag
acaf251f0b805aee97d6effa9d482dadd0cc3a4b
Commit Graph
26 Commits
Author SHA1 Message Date
Tonis Tiigi acaf251f0b policy: verify BuildKit builder images 
Extend the built-in policy to validate signed moby/buildkit release and
floating tags before docker-container builders are created.

Pull the image first, inspect it through Docker, and bind verification to the
descriptor digest. Resolve signature attestations through the BuildKit API
embedded in the Docker daemon.

If pulling fails, use a local image while applying the same verification when
the containerd image store exposes an immutable descriptor. Keep the classic
image-store behavior unchanged because no descriptor is available.

Allow unmanaged repositories and digest-only references unchanged. Add the
allow-untrusted-image driver option as an explicit verification bypass.

Document the behavior and add policy, digest-pinning, and local fallback
coverage.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-07-20 18:22:41 -07:00
CrazyMax 4f6f49dd81 rm: allow removing builders with invalid config 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-06 12:04:37 +02:00
CrazyMax 48fd4cb3cc driver: only mount WSL libraries for local docker-container endpoints 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-08 09:39:11 +02:00
CrazyMax ed67ab795b driver: mount wsl lib folder for docker-container driver 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-07-21 16:47:20 +02:00
CrazyMax b606e2f6bb update golangci-lint to v2.1.5 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-05-13 16:54:43 +02:00
Tonis Tiigi d5d3d3d502 lint: apply x/tools/modernize fixes 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-03-07 16:37:24 -08:00
Tonis Tiigi 1c4b1a376c show CDI devices in builder inspection 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-02-11 14:52:33 -08:00
CrazyMax acf0216292 builder: move kube config handling to k8s driver package 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2024-08-07 14:01:33 +02:00
CrazyMax 4304d388ef driver: refactor GetDriver func to take init config 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2024-07-16 14:34:09 +02:00
CrazyMax 1dceb49a27 driver: allow arbitrary client opts 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2024-07-04 16:36:55 +02:00
Tonis Tiigi f374f64d2f vendor: update buildkit to f7bda278b7e2 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2024-07-02 22:24:55 -07:00
Tonis Tiigi 9428447cd2 lint: unusedwrite fixes 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2024-04-24 17:19:52 -07:00
CrazyMax b1490ed5ce tests: create remote with container helper 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2024-03-12 08:44:36 +01:00
CrazyMax 56fc68eb7e driver: make buildkitd "config" and "flags" names consistent 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2024-02-22 10:26:18 +01:00
CrazyMaxandCrazyMax 20c947990c ls: format opt 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-11-22 21:11:24 +01:00
CrazyMax 511e41386f driver(docker): opt to set additional dial meta to the client 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-10-17 01:01:17 +02:00
CrazyMax fd251d2a7b builder: use variadic options in LoadNodes func 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-10-17 00:45:50 +02:00
CrazyMax 197824c6f2 builder: set node worker ids 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-09-30 07:10:02 +02:00
CrazyMax 4384947be1 k8s: fix missing kubeconfig check from endpoint 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-07-15 21:51:56 +02:00
Tonis Tiigi 1138789f20 avoid extra client for history API detection 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2023-06-12 17:39:09 -07:00
CrazyMaxandGitHub a6b0959276 Merge pull request #1440 from crazy-max/gc-policies 
builder: add worker gc policies and labels
 2023-05-22 11:46:46 +02:00
CrazyMaxandTonis Tiigi 200058b505 build: support for saving local state by build ref 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2023-04-12 21:37:03 -07:00
CrazyMax 9753f63f57 builder: add worker gc policies and labels 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-02-11 22:56:15 +01:00
CrazyMax 49b3c0dba5 build: fix preferred platform not taken account 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-01-27 20:02:13 +01:00
CrazyMax cc01caaecb builder: enhance driver factory logic when loading drivers 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2022-12-06 12:13:41 +01:00
CrazyMaxandCrazyMax e7b5ee7518 mutualize builder logic 
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
 2022-12-06 12:13:41 +01:00