1ec543e384
solver: exclude randomized cache keys from exporter
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-01-18 11:19:25 -08:00
3cba03783c
Merge pull request #615 from AkihiroSuda/export-cache-local
...
support local cache exporter and importer
2019-01-18 10:55:02 -08:00
6e7617e889
support local cache exporter and importer
...
Export:
$ buildctl build ... --export-cache type=local,store=/path/to/output-dir
Import:
$ buildctl build ... --import-cache type=local,store=/path/to/input-dir
Impact on CLI:
* Old (deprecated but still effective): `--export-cache localhost:5000/myrepo:buildcache --export-cache-opt mode=max`
* New: `--export-cache type=registry,ref=localhost:5000/myrepo:buildcache,mode=max`
Impact on API:
* New fields are added to control.proto and gateway.proto. The daemon
internally translates old API calls to the new ones.
* While new API can be used for `registry` caches, the client continues
to use the legacy API for `registry` caches to ensure compatibility with
old daemons.
* To import `local` caches with a frontend, the frontend needs to support
a new frontend opt `cache-imports`.
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-01-19 02:38:26 +09:00
78212e3f72
Merge pull request #782 from AkihiroSuda/runc20190115
...
bump up runc
2019-01-15 17:26:23 +09:00
b42582793a
bump up runc
...
Including critical security fix for `runc run --no-pivot` (unlikely to
affect BuildKit): https://github.com/opencontainers/runc/pull/1962
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-01-15 16:23:21 +09:00
4e75ff6854
Merge pull request #768 from AkihiroSuda/procless
...
support --oci-worker-no-process-sandbox
2019-01-12 10:17:55 -08:00
c54f4a986d
support --oci-worker-no-process-sandbox
...
Note that this mode allows build executor containers to kill (and potentially ptrace) an arbitrary process in the BuildKit host namespace.
This mode should be enabled only when the BuildKit is running in a container as an unprivileged user.
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-01-08 10:42:52 +09:00
a4e0df83f8
Merge pull request #772 from vanstee/clean-generated-files-export
...
`make generated-files` only copies over generated files from scratch container
2019-01-06 12:38:05 -08:00
f6c2487225
Isolate generated files for easier copying
...
Signed-off-by: Patrick Van Stee <patrick@vanstee.me>
2019-01-06 06:49:52 -05:00
34ff9c2366
Merge pull request #771 from LinuxMercedes/error-on-empty-dockerfile
...
Have parser error on dockerfiles without instructions
2019-01-04 16:33:08 -08:00
2ec7d53b00
Parser errors on dockerfiles without instructions
...
See https://github.com/moby/moby/pull/38487 for more discussion.
Signed-off-by: Natasha Jarus <linuxmercedes@gmail.com>
2019-01-04 13:44:52 -06:00
03a86f1071
Merge pull request #767 from tonistiigi/dockerfile-uid-mode
...
dockerfile: allow setting file mode/uid for ssh and secrets
2019-01-04 09:59:49 +09:00
b521aae3ea
dockerfile: allow setting file mode/uid for secrets
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-01-03 11:13:40 -08:00
2529762ae7
dockerfile: allow setting file mode/uid for ssh socket
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-01-03 11:13:34 -08:00
c471ab81af
Merge pull request #761 from AkihiroSuda/containerd-121
...
update containerd to v1.2.1, runc to v1.0.0-rc6
2018-12-28 14:46:53 +02:00
6ed72d683f
update containerd to v1.2.1, runc to v1.0.0-rc6
...
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-12-26 19:48:01 +09:00
d1f5d3a65f
Merge pull request #456 from thaJeztah/add_maintainers
...
Add MAINTAINERS, AUTHORS files
2018-12-17 14:08:55 +00:00
b9086f5563
Merge pull request #755 from thaJeztah/add_contributing
...
Add CONTRIBUTING, CODE_OF_CONDUCT
2018-12-17 14:08:24 +00:00
96e86fb1b3
Add CONTRIBUTING, CODE_OF_CONDUCT
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-12-17 12:44:29 +01:00
ab95e52589
Merge pull request #754 from thaJeztah/improve_experimental_docs
...
docs: make experimental frontend features better discoverable
2018-12-17 10:58:53 +00:00
bcf8180540
docs: make experimental frontend features better discoverable
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-12-14 12:57:43 +01:00
41759a49c0
Merge pull request #747 from Quasilyte/patch-1
...
snapshot: fix impossible condition
2018-12-11 10:30:13 +00:00
e9fc4f63f1
snapshot: fix impossible condition
...
The `err == nil` is probably a typo of `err1 != nil`.
Found using gocritic linter `badCond` checker.
2018-12-11 01:36:13 +03:00
d9f7592067
Merge pull request #745 from tonistiigi/nonewpriv
...
oci: avoid nonewprivileges in default spec
2018-12-10 11:38:10 +00:00
09742778eb
oci: avoid nonewprivileges in default spec
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-12-10 10:58:12 +00:00
1952fa934d
Merge pull request #743 from tonistiigi/update-dockerfile-repo
...
update dockerfile repo location
2018-12-03 20:38:05 +09:00
3926820e3a
update dockerfile repo location
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-12-03 11:06:17 +01:00
5b7f75914f
Merge pull request #738 from AkihiroSuda/shadow-20181125
...
update shadow to 20181125
2018-12-02 13:36:00 +00:00
7adf7139e6
Add MAINTAINERS, AUTHORS files
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-12-02 14:32:28 +01:00
1803138c38
update shadow to 20181125
...
shadow-maint/shadow@52c081b (20181028) caused a regression that results in
`newuidmap: open of uid_map failed: Permission denied`.
The regression was fixed in shadow-maint/shadow@59c2dab (20181125).
Note that docker.io/moby/buildkit images are not affected by the
regression, because we forgot to update the rootless-base-external
image when we updated the shadow package before.
Related: genuinetools/img#191 genuinetools/img#196
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-11-30 13:38:34 +09:00
75c4dffb61
Merge pull request #737 from AkihiroSuda/allow-without-git
...
worker/base: allow running without `git` installed
2018-11-28 22:36:07 -08:00
222b028d58
Merge pull request #736 from fuweid/reading
...
dockerfile2llb/pipe: remove the useless assignment
2018-11-28 22:33:42 -08:00
2a7287a189
dockerfile2llb/pipe: remove the useless assignment
...
Signed-off-by: Wei Fu <fuweid89@gmail.com>
2018-11-28 19:44:53 +08:00
a62e7cf1e0
worker/base: allow running without `git` installed
...
genuinetools/img#195
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-11-28 18:43:43 +09:00
8cf9bec86a
Merge pull request #730 from tonistiigi/no-cache-fix
...
buildctl: fix frontends ignore-cache setting
2018-11-21 12:35:10 +09:00
df642989fd
Merge pull request #731 from tonistiigi/buildctl-import-cache
...
buildctl: allow import-cache on frontend builds
2018-11-21 12:33:36 +09:00
e59b01bf82
Merge pull request #733 from tonistiigi/dockerfile-symlink
...
dockerfile: allow symlinks on reading Dockerfile
2018-11-21 12:32:08 +09:00
2e3058e62c
dockerfile: allow symlinks on reading Dockerfile
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-11-20 18:15:41 -08:00
478f417eb8
buildctl: allow import-cache on frontend builds
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-11-20 17:54:05 -08:00
bf8c057e68
Merge pull request #727 from tonistiigi/add-fix
...
dockerfile: avoid urls in context filter
2018-11-20 16:47:31 -08:00
b3092ab51c
buildctl: fix frontends ignore-cache setting
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-11-20 15:53:14 -08:00
f2f4b534d4
Merge pull request #729 from tonistiigi/session-context
...
llbsolver: keep session for context calls
2018-11-20 11:56:35 +09:00
ef00d305f7
Merge pull request #728 from tonistiigi/docs-update
...
dockerfile: document more mount options
2018-11-19 17:54:51 -08:00
f6a896157b
llbsolver: keep session for context calls
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-11-19 15:24:35 -08:00
b3e4cdf0d8
dockerfile: document more mount options
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-11-19 10:10:10 -08:00
c840e7967f
dockerfile: avoid urls in context filter
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-11-18 12:36:26 -08:00
594f95bc1d
Merge pull request #722 from kunalkushwaha/fix-git-2-http
...
replace git: with https:
2018-11-18 11:27:38 -08:00
71da3f8c20
Merge pull request #725 from ondrej-fabry/patch-1
...
Correct trivial typos
2018-11-18 11:26:14 -08:00
7218446f8e
Correct trivial typos
...
Signed-off-by: Ondrej Fabry <ofabry@cisco.com>
2018-11-18 00:10:57 +01:00
373dc26a4f
replace git: with https:
...
git ports are restricted by corporate proxies,
whereas https proto is always allowed
Signed-off-by: Kunal Kushwaha <kushwaha_kunal_v7@lab.ntt.co.jp>
2018-11-15 11:50:53 +09:00
Tonis Tiigi
Akihiro Suda
Akihiro Suda
Patrick Van Stee
linuxmercedes
Sebastiaan van Stijn
Iskander (Alex) Sharipov
Wei Fu
Tibor Vass
Ondrej Fabry
Kunal Kushwaha