alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
3,752 Commits 1 Branch 1 Tag
adb938628224761e6574900917ca3ee31cba798b
Commit Graph
3752 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tonis Tiigi adb9386282 policy: remove http perm/uid/gid 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:41 -08:00
Tonis Tiigi 93341aaeee add rego integration to source policies 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:40 -08:00
Tõnis TiigiandGitHub ee2ecd0cc8 Merge pull request #3519 from vvoland/push-nounpack 
build: Don't unpack by default when pushing
 2026-01-14 09:01:24 -08:00
Paweł Gronowski 41a1782b35 build: Don't unpack by default when pushing 
Automatically set `unpack=false` for registry exports unless explicitly
overridden by the user.

This applies to:

- `registry` exporter type (converted to `image` exporter with `push=true`)
- `--push` flag usage with image exporters

Users can still explicitly set `unpack=true` if they need local image
storage alongside registry push.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-01-14 16:04:45 +01:00
Tõnis TiigiandGitHub e33272c855 Merge pull request #3586 from crazy-max/update-github-builder 
ci: update docker github builder to latest
 2026-01-13 11:20:13 -08:00
CrazyMaxandGitHub 90bacba395 Merge pull request #3591 from docker/dependabot/github_actions/actions/download-artifact-7 
build(deps): bump actions/download-artifact from 6 to 7
 2026-01-13 09:19:56 +01:00
Tõnis TiigiandGitHub 10784517c7 Merge pull request #3589 from crazy-max/alpine-3.23 
dockerfile: update alpine to 3.23
 2026-01-12 21:46:38 -08:00
Tõnis TiigiandGitHub 424fd833cb Merge pull request #3583 from jsternberg/oci-layout-at-sign-in-path 
build: handle at symbols in an oci-layout path
 2026-01-12 21:45:55 -08:00
dependabot[bot]andGitHub a837bb2b4c build(deps): bump actions/download-artifact from 6 to 7 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-12 22:41:17 +00:00
Jonathan A. Sternberg 2e76c05592 build: handle at symbols in an oci-layout path 
The buildx command line will now handle `@` symbols in the
`oci-layout://` path when used with named contexts. Instead of
assuming the `@` symbol is part of the reference digest, it will first
check that it is a valid reference digest. Otherwise, it will assume
it's part of the file path.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-01-12 11:19:51 -06:00
CrazyMaxandGitHub d24f69f1ad Merge pull request #3588 from crazy-max/clean-hack-scripts 
hack: move build opts to the dockerfile
 2026-01-12 11:24:47 +01:00
CrazyMaxandGitHub f86f07d74f Merge pull request #3587 from tonistiigi/dev-deps-update 
Dockerfile: update dev deps
 2026-01-12 10:05:22 +01:00
CrazyMax 2bde2f528b dockerfile: update alpine to 3.23 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-12 09:54:45 +01:00
CrazyMax 2012e4de35 hack: move build opts to the dockerfile 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-12 09:45:52 +01:00
Tonis Tiigi ded8307556 Dockerfile: update dev deps 
Hack scripts require make and bash that was missing
in the dev Dockerfile stage.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 26ffd457330d7880fa1c9693acfa4a6448407dd8)
 2026-01-11 22:00:16 -08:00
CrazyMax ac273ea570 ci: update docker github builder to latest 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-11 14:42:40 +01:00
CrazyMaxandGitHub ffe9b27c99 Merge pull request #3520 from crazy-max/bin-image-github-builder 
ci: use docker github builder to build bin image and binaries
 2026-01-11 00:14:03 +01:00
CrazyMaxandGitHub 2406c8cc80 Merge pull request #3584 from tonistiigi/go1.25-lint 
update linters for go1.25 base version
 2026-01-11 00:12:22 +01:00
Tonis Tiigi c5154b3169 update linters for go1.25 base version 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-09 18:54:15 -08:00
Tõnis TiigiandGitHub ef0a7b333a Merge pull request #3581 from jsternberg/dap-breakpoint-reason 
dap: fill in breakpoint reason for being unverified
 2026-01-09 17:42:36 -08:00
Tõnis TiigiandGitHub 59bc18126a Merge pull request #3582 from thaJeztah/bump_cli2 
vendor: github.com/docker/cli v29.1.4
 2026-01-09 17:41:59 -08:00
CrazyMax 481e798a35 ci: update docker github builder to latest 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-09 17:35:41 +01:00
Sebastiaan van Stijn e419caae8b vendor: github.com/docker/cli v29.1.4 
no changes in vendored files

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-09 10:55:10 +01:00
Jonathan A. Sternberg 8ad75dc485 dap: fill in breakpoint reason for being unverified 
When a breakpoint fails to be verified, it will switch the reason to
"failed". It starts off the reason as "pending".

The `reason` field for a breakpoint was added some time after the last
release of `go-dap` which has only been updated once in the last year so
this uses the `main` branch version which contains the field.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-01-08 15:21:54 -06:00
CrazyMaxandGitHub 8037f199db Merge pull request #3562 from tonistiigi/docker-config-scope-workaround 
auth: add option to load docker config for specific repo/scope
 2026-01-08 11:22:52 +01:00
Tõnis Tiigi 37e283ceb0 auth: add option to load docker config for specific repo/scope 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-07 11:45:04 -08:00
CrazyMaxandTonis Tiigi c3514fea5d vendor: github.com/moby/buildkit@master ed6dc749ce40b9fdc308676d10343fd00f56c717 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-07 11:45:01 -08:00
Tõnis TiigiandGitHub 752e0b2227 Merge pull request #3580 from thaJeztah/bump_containerd 
vendor: github.com/containerd/containerd/v2 v2.2.1
 2026-01-07 11:44:08 -08:00
Sebastiaan van Stijn 7762411537 vendor: github.com/containerd/containerd/v2 v2.2.1 
The pull request that was needed has been released now as part of v2.2.1;
full diff: https://github.com/containerd/containerd/compare/efd86f2b0bc2...v2.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-07 11:33:39 +01:00
Tõnis TiigiandGitHub 1fa2ad4fa4 Merge pull request #3579 from jsternberg/dap-named-reference-fix 
dap: fix the run mount input names
 2026-01-06 11:06:08 -08:00
Tõnis TiigiandGitHub 86abd75a6e Merge pull request #3569 from thaJeztah/bump_cli2 
vendor: github.com/docker/cli v29.1.3
 2026-01-06 11:05:44 -08:00
Jonathan A. Sternberg 19eadba5fc dap: fix the run mount input names 
The mounts for exec operations was misconstruing most input names as the
root mount because it was using the wrong input index to match with the
exec mounts.

The correct input index is now being used so bind mounts and other types
of mounts should now show the correct mount destination rather than only
showing the root mount.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-01-06 12:29:51 -06:00
Tõnis TiigiandGitHub 5546d171a0 Merge pull request #3577 from crazy-max/bake-semver-stdlib 
bake: add semvercmp func to stdlib
 2026-01-06 10:17:34 -08:00
CrazyMax 3836aeb949 bake: add semvercmp func to stdlib 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-06 09:34:10 +01:00
Akihiro SudaandGitHub 66f4f62159 Merge pull request #3493 from Guimove/fix-k8s-tls-retry-2668 
driver/kubernetes: Add retry logic for transient TLS connection errors
 2026-01-06 14:31:10 +08:00
Tõnis TiigiandGitHub 191d050d81 Merge pull request #3578 from crazy-max/buildkit-0.26.3 
dockerfile: update buildkit to v0.26.3
 2026-01-05 18:09:43 -08:00
guimove e758a6b917 driver/kubernetes: Add retry logic for transient TLS connection errors 
Fixes #2668

When Kubernetes marks nodes as "Ready" before their Certificate Signing
Requests (CSRs) are approved, the buildx kubernetes driver can fail to
connect to builder pods with transient TLS errors like:
  - "tls: internal error"
  - "context deadline exceeded"
  - "use of closed network connection"
  - "i/o timeout"

This is particularly problematic on EKS clusters with ARM64 nodes under
heavy load, where multiple builders are being spawned simultaneously.

This commit adds retry logic with exponential backoff to the Dial()
function in the kubernetes driver. The implementation:
  - Attempts up to 5 connection retries
  - Uses exponential backoff starting at 500ms, capped at 10s
  - Only retries on known transient connection errors
  - Uses errors.Is/errors.As for proper error type checking
  - Logs retry attempts using logrus for visibility
  - Respects context cancellation

This allows buildx to gracefully handle the race condition where pods
are marked as Running before their TLS certificates are fully ready.

Signed-off-by: guimove <dasilva.guillaume@live.fr>
 2026-01-05 17:46:10 +01:00
CrazyMax 0c941467b2 dockerfile: update buildkit to v0.26.3 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-05 15:05:48 +01:00
CrazyMax 8be050fbc2 ci: use docker github builder to build binaries 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-12-18 10:07:47 +01:00
CrazyMax 6796cd063e ci: use docker github builder to build bin image 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-12-18 10:06:03 +01:00
Tõnis TiigiandGitHub 2bcb098cbb Merge pull request #3566 from jsternberg/dap-build-integration-tests 
tests: add integration tests for `dap build`
 2025-12-17 09:41:34 -08:00
Jonathan A. Sternberg fdfba3014d tests: add integration tests for dap build 
This adds integration tests for the `dap build` command to test various
behavior associated with the command. We start the build and the
integration test acts as a dap client to send requests and check that
the output is what we expect.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2025-12-17 10:56:30 -06:00
CrazyMaxandGitHub e794584a3f Merge pull request #3561 from docker/dependabot/github_actions/peter-evans/create-pull-request-8.0.0 
build(deps): bump peter-evans/create-pull-request from 7.0.9 to 8.0.0
 2025-12-16 17:18:08 +01:00
CrazyMaxandGitHub 29076c3f98 Merge pull request #3573 from docker/dependabot/github_actions/actions/download-artifact-7 
build(deps): bump actions/download-artifact from 6 to 7
 2025-12-16 17:11:52 +01:00
CrazyMaxandGitHub b6d76b0a16 Merge pull request #3572 from docker/dependabot/github_actions/actions/upload-artifact-6 
build(deps): bump actions/upload-artifact from 5 to 6
 2025-12-16 17:11:34 +01:00
Sebastiaan van Stijn 77571f56f2 vendor: github.com/docker/cli v29.1.3 
full diff: https://github.com/docker/cli/compare/v29.1.2...v29.1.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-16 11:08:53 +01:00
Sebastiaan van Stijn 3bc50aece8 vendor: github.com/klauspost/compress v1.18.2 
No changes in vendored code

Fixes a regression in v1.18.1 that resulted in invalid flate/zip/gzip encoding.
The v1.18.1 tag has been retracted.

full diff: https://github.com/klauspost/compress/compare/v1.18.1...v1.18.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-16 11:08:52 +01:00
dependabot[bot]andGitHub a02f395415 build(deps): bump actions/download-artifact from 6 to 7 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-15 18:06:32 +00:00
dependabot[bot]andGitHub 77fad74d4a build(deps): bump actions/upload-artifact from 5 to 6 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-15 18:06:27 +00:00
CrazyMaxandGitHub 150cc839f2 Merge pull request #3570 from docker/dependabot/github_actions/actions/cache-5 
build(deps): bump actions/cache from 4 to 5
 2025-12-15 15:49:36 +01:00