Commit Graph

2806 Commits (0bd43aa1dc505b096f81f9e7cc7a42579185b5ca)

Author SHA1 Message Date
ktock 0bd43aa1dc Check remote snapshot availability only for stargz
Signed-off-by: ktock <ktokunaga.mail@gmail.com>
2020-11-21 15:05:12 +09:00
Tõnis Tiigi 0caddb1c72
Merge pull request #1819 from andreabolognani/nsswitch
images: Create simple /etc/nsswitch.conf file
2020-11-20 08:36:09 -08:00
Andrea Bolognani a4f57b1203 images: Create simple /etc/nsswitch.conf file
This is a workaround for

  https://github.com/golang/go/issues/35305

which makes it possible to successfully push to a local registry
using

  $ docker buildx build --push --tag localhost:5000/foo .

assuming, of course, that the builder instance currently in use
has been created using

  $ docker buildx create --driver-opt network=host

The workaround is no longer going to be necessary once Go 1.16
is used for builds.

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
2020-11-20 13:58:47 +01:00
Tõnis Tiigi fcb87e6b8c
Merge pull request #1807 from thaJeztah/switch_seccomp
executor: switch to docker seccomp profile
2020-11-18 20:30:42 -08:00
Tõnis Tiigi 96ff02ea74
Merge pull request #1814 from alexcb/SplitHostPort-where-have-you-been-all-my-life
Fix sshkeyscan to work with ipv6
2020-11-18 19:03:56 -08:00
Tõnis Tiigi 8896a9c9f1
Merge pull request #1812 from thaJeztah/update_crypto_ssh
vendor: golang.org/x/crypto v0.0.0-20201117144127-c1f2f97bffc9
2020-11-18 18:10:47 -08:00
Alex Couture-Beil 88580ad989 Fix sshkeyscan to work with ipv6
- make use of standard net.SplitHostPort and net.JoinHostPort functions

Signed-off-by: Alex Couture-Beil <alex@earthly.dev>
2020-11-18 09:19:49 -08:00
Sebastiaan van Stijn 59fe00c380
vendor: golang.org/x/crypto v0.0.0-20201117144127-c1f2f97bffc9
full diff: 75b288015a...c1f2f97bff

relevant changes:

- ssh: improve error message for KeyboardInteractiveChallenge
- ssh: remove slow unnecessary diffie-hellman-group-exchange primality check

other changes (not in vendor);

- ssh/terminal: replace with a golang.org/x/term wrapper
    - Deprecates ssh/terminal in favor of golang.org/x/term
- ssh/terminal: add support for zos
- ssh/terminal: bump x/term dependency to fix js/nacl
- pkcs12: document that we use the wrong PEM type
- pkcs12: drop PKCS#12 attributes with unknown OIDs
- nacl/auth: use Size instead of KeySize for Sum output
- ocsp: Improve documentation for ParseResponse and ParseResponseForCert
- sha3: remove go:nocheckptr annotation

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-11-18 12:28:12 +01:00
Akihiro Suda cb18878641
Merge pull request #1810 from tonistiigi/alpine-platform-fix
dockerfile: fix base stage platform for exported image
2020-11-18 18:37:03 +09:00
Sebastiaan van Stijn a1a85daeb5
executor: switch to docker seccomp profile
While we try to keep the containerd and docker seccomp profiles in sync,
they may not always be; this switches the executor to use the docker
seccomp profile, so that buildkit (when vendored in docker) will use
the same default seccomp profile as is used for containers.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-11-18 10:05:36 +01:00
Tonis Tiigi 0061b397bd dockerfile: fix base stage platform for exported image
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-11-17 23:49:54 -08:00
Tõnis Tiigi 6b9513025a
Merge pull request #1808 from thaJeztah/reduce_deps
copy  containerd.UnknownExitStatus to local const
2020-11-17 18:05:30 -08:00
Tõnis Tiigi 22024f20f0
Merge pull request #1806 from thaJeztah/bump_containerd
vendor: containerd v1.4.1-0.20201117152358-0edc412565dc
2020-11-17 18:03:29 -08:00
Tibor Vass 86a7d617a2
Merge pull request #1809 from tonistiigi/alpine-version
Dockerfile: define alpine version with build arg
2020-11-17 18:02:35 -08:00
Tonis Tiigi 5754ebdf60 Dockerfile: define alpine version with build arg
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-11-17 17:40:47 -08:00
Tonis Tiigi 442c105a8f Revert "Dockerfile: use ARG for Alpine version"
This reverts commit d2cea325e2.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-11-17 17:38:15 -08:00
Sebastiaan van Stijn 67bcfe699a
copy containerd.UnknownExitStatus to local const
Copy this const to a local constant to prevent importing the containerd
client in the front-end.

For consistency, I also updated the executor code to use the same const,
although not strictly needed.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-11-18 00:11:09 +01:00
Tibor Vass 264dfb0a53
Merge pull request #1805 from tonistiigi/experimental-to-labs
dockerfile: rename experimental channel to labs
2020-11-17 11:07:17 -08:00
Sebastiaan van Stijn 7c54953f85
vendor: containerd v1.4.1-0.20201117152358-0edc412565dc
full diff: d4e78200d6...0edc412565

- seccomp: add `pidfd_open` and `pidfd_send_signal`
- seccomp: add `pidfd_getfd` syscall (gated by `CAP_SYS_PTRACE`)
- docker: don’t hide pusher response error

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-11-17 17:36:42 +01:00
Tõnis Tiigi 71cf6f5f3d
Merge pull request #1804 from thaJeztah/bump_fsutil
vendor: github.com/tonistiigi/fsutil v0.0.0-20201103201449-0834f99b7b85
2020-11-17 07:55:30 -08:00
Tonis Tiigi 81f74a9c89 dockerfile: rename experimental channel to labs
Experimental name confuses users as backwards compatibility
rules are different for other tools called experimental.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-11-17 07:42:50 -08:00
Sebastiaan van Stijn bdac8056b4
vendor: github.com/tonistiigi/fsutil v0.0.0-20201103201449-0834f99b7b85
full diff: c3ed55f3b4...0834f99b7b

- copy: use Clonefileat from golang.org/x/sys/unix on macOS
- go.mod: update opencontainers/go-digest v1.0.0
- Add github action CI
- github: test go1.15

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-11-17 11:43:20 +01:00
Tõnis Tiigi 2aa3e0bd42
Merge pull request #1395 from lugeng/fix-load-metadata
dockerfile build:  fix not exit when meet error in load config metadata
2020-11-17 00:30:06 -08:00
Tõnis Tiigi e1bcd44859
Merge pull request #1803 from alexcb/fix-auto-keyscan-for-ports-100-or-greater
fix assumption that ssh port must be 2 digits
2020-11-17 00:02:53 -08:00
Tõnis Tiigi 3581c46b37
Merge pull request #1802 from alexcb/fix-git-url-parsing
Fix parsing ssh-based git sources
2020-11-16 20:12:31 -08:00
Tõnis Tiigi 5e5f527e06
Merge pull request #1732 from hinshun/exec-error
Allow gateway exec-ing into a failed solve with an exec op
2020-11-16 19:13:11 -08:00
岁丰 adca74632e dockerfile build: return error when meet error in load config metadata
Signed-off-by: genglu <genglu.gl@antfin.com>
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-11-16 17:16:02 -08:00
Alex Couture-Beil ccac4d664e fix assumption that ssh port must be 2 digits
Signed-off-by: Alex Couture-Beil <alex@earthly.dev>
2020-11-16 17:02:40 -08:00
Alex Couture-Beil 4bf1852a08 differentiate git protocol vs git over ssh protocol
Signed-off-by: Alex Couture-Beil <alex@earthly.dev>
2020-11-16 15:04:37 -08:00
Tõnis Tiigi 5ebb088b68
Merge pull request #1799 from tonistiigi/use-pigz
Dockerfile: use pigz to uncompress
2020-11-16 14:04:33 -08:00
Edgar Lee fa8a02c861 Fix optional cast for WithOp when unit testing
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-11-16 13:37:30 -08:00
Alex Couture-Beil 3c73a22430 Add default ssh mount and keyscans when missing
Signed-off-by: Alex Couture-Beil <alex@earthly.dev>
2020-11-16 13:23:37 -08:00
Edgar Lee 1240dd7795 Return committed readonly inputs and actives in exec error in MountIDs
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-11-16 13:21:23 -08:00
Alex Couture-Beil 11f2a61ae1 Fix parsing ssh-based git sources
Signed-off-by: Alex Couture-Beil <alex@earthly.dev>
2020-11-16 12:33:34 -08:00
Tõnis Tiigi 8dc3a54a78
Merge pull request #1782 from alexcb/acb-other-git-user
SSH-based auth for llb.Git operations
2020-11-16 10:53:44 -08:00
Tonis Tiigi 2abe963e59 Dockerfile: use pigz to uncompress
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-11-16 08:56:46 -08:00
Akihiro Suda 9369d53678
Merge pull request #1801 from thaJeztah/go_winio
vendor: github.com/Microsoft/go-winio v0.4.15
2020-11-17 01:36:55 +09:00
Sebastiaan van Stijn 6b8f1d96b7
vendor: github.com/Microsoft/go-winio v0.4.15
github.com/Microsoft/go-winio v0.4.15 was tagged; same commit as was
already vendored, so no code-changes.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-11-16 14:19:57 +01:00
Akihiro Suda a846452fa1
Merge pull request #1791 from tonistiigi/push-pull-retry
add retry handlers to push/pull
2020-11-16 13:28:07 +09:00
Tonis Tiigi cf8babde54 progress: refactor logger handler to better reuse
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-11-15 13:33:58 -08:00
Tõnis Tiigi c70058095b
Merge pull request #1795 from afbjorklund/prefix
Use standard Makefile install variables
2020-11-14 21:33:43 -08:00
Edgar Lee 3ba6cd7bc2 Fix ExecError.EachRef invoking callback with possibly nil solver.Results
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-11-13 23:20:41 -08:00
Edgar Lee 4c0ca1719f Fix container release not capturing closure of loop variable
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-11-13 22:58:49 -08:00
Edgar Lee dfaf613996 Parallelize unlazying ref proxy in the gateway forwarder
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-11-13 22:14:05 -08:00
Edgar Lee c33bcd61a2 Rename OutputIDs to MountIDs
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-11-13 22:05:13 -08:00
Edgar Lee bcff7baf60 Allow scratch mounts with gateway.RunContainer
- Plumb default worker by adding GetDefault() to frontend.WorkerInfos
- To avoid cyclic dependency, refactor frontend.WorkerInfos to worker.Infos
- Refactor gateway.NewContainer to share code with llbsolver/ops/exec.go

Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-11-13 22:05:13 -08:00
Edgar Lee a459eb4927 Return exec error for errors returned before executor
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-11-13 22:05:13 -08:00
Edgar Lee bbc3f6df4c Improve file action client test by adding test matrix
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-11-13 22:05:13 -08:00
Edgar Lee 7e1dc9bec1 Refactor to file action indexed outputs
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-11-13 22:05:13 -08:00
Edgar Lee 2d23d0cc43 Fix lint and unit tests for fileopsolver
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-11-13 22:05:13 -08:00