Commit Graph

2334 Commits (1f9599aba3bd5adecba0d112b9845f2943c8408a)

Author SHA1 Message Date
Darren Shepherd 6cc8a72665 fix containerd-cni-config-path typo
Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
2020-03-13 09:39:55 -07:00
Akihiro Suda a1bf12f806
Merge pull request #1303 from jingxiaolu/README_inline_cache
README.md: update description of inline cache use for output
2020-03-13 04:45:08 +09:00
Tõnis Tiigi b9ef26d15f
Merge pull request #1403 from Container-Projects/master
optimization debian package manager tweaks
2020-03-11 17:34:11 -07:00
Pratik Raj 2910de68b1 optimization debian package manager tweaks
By default, Ubuntu or Debian based "apt" or "apt-get" system installs recommended but not suggested packages .

By passing "--no-install-recommends" option, the user lets apt-get know not to consider recommended packages as a dependency to install.

This results in smaller downloads and installation of packages .

Refer to blog at [Ubuntu Blog](https://ubuntu.com/blog/we-reduced-our-docker-images-by-60-with-no-install-recommends) .

Signed-off-by: Pratik Raj <rajpratik71@gmail.com>
2020-03-11 15:27:54 +05:30
Akihiro Suda d36226a67e
Merge pull request #1404 from tonistiigi/rc-tagging
hack: allow rc releases without overwriting latest tags
2020-03-11 16:46:37 +09:00
Akihiro Suda b659d4f880
Merge pull request #1392 from AkihiroSuda/rootless-fix-buildplatform
Dockerfile: put fuse3 to rootless-base-internal
2020-03-11 16:41:59 +09:00
Akihiro Suda ccc689a87d Dockerfile: update tonistiigi/buildkit:rootless-base
https://github.com/moby/buildkit/pull/1392#issuecomment-597478241

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-03-11 16:12:27 +09:00
Tonis Tiigi c7f3036629 hack: allow rc releases without overwriting latest tags
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-03-10 23:04:38 -07:00
Akihiro Suda dc70bca748 Dockerfile: put fuse3 to rootless-base-internal
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-03-11 15:02:54 +09:00
Akihiro Suda b42528249a
Merge pull request #1295 from zabio3/bugfix/issue1242
support specifying a custom tag using --import-cache type=local
2020-03-11 13:10:22 +09:00
Akihiro Suda 0a08ab277f
Merge pull request #1397 from tonistiigi/registryhosts
resolver: update to new registryhosts based config
2020-03-11 13:08:50 +09:00
Tõnis Tiigi 40fd572f1a
Merge pull request #1400 from AkihiroSuda/rootless-move-out-of-experimental
rootless: graduate from experimental
2020-03-10 20:53:45 -07:00
Tõnis Tiigi 960494c95a
Merge pull request #1401 from AkihiroSuda/update-f31-inst
README.md: update Fedora 31 instruction
2020-03-10 20:51:54 -07:00
Tõnis Tiigi 943caea53a
Merge pull request #1399 from AkihiroSuda/rootlesskit-v091
update RootlessKit to v0.9.1
2020-03-10 20:51:13 -07:00
Akihiro Suda 9584b6e05b README.md: update Fedora 31 instruction
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-03-10 19:06:12 +09:00
Akihiro Suda 8b56fac46b rootless: graduate from experimental
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-03-10 12:04:53 +09:00
l00397676 8244958486 README.md: update description of inline cache use for output
Fix #1294

Signed-off-by: Lu Jingxiao <lujingxiao@huawei.com>
2020-03-10 09:59:23 +08:00
Akihiro Suda 436cd1e5da update RootlessKit to v0.9.1
Notable change: RootlessKit now prints warnings when the sysctl preconditions are not satisfied.

https://github.com/rootless-containers/rootlesskit/pull/122

https://github.com/rootless-containers/rootlesskit/releases

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-03-09 23:23:49 +09:00
zabio3 6f3a6e72d4 fix readme
https://github.com/moby/buildkit/issues/1242

Signed-off-by: Tomohiro Kusumoto <zabio1192@gmail.com>
2020-03-07 08:58:10 +09:00
Tonis Tiigi 2c3cf11fde resolver: update to new registryhosts based config
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-03-05 19:56:43 -08:00
Tõnis Tiigi a276ba731c
Merge pull request #1393 from tonistiigi/xattr-hash
contenthash: ignore system and security xattrs in calculation
2020-03-04 11:44:38 -08:00
Tonis Tiigi 81e711302a contenthash: ignore system and security xattrs in calculation
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-03-03 19:37:28 -08:00
Akihiro Suda 09900f32dc
Merge pull request #1382 from tonistiigi/cache-loop
solver: avoid recursive loop on cache-export
2020-03-03 18:37:49 +09:00
Tõnis Tiigi f1ecc7824e
Merge pull request #1384 from AkihiroSuda/fuse-overlayfs
rootless: support fuse-overlayfs
2020-03-02 22:38:45 -08:00
Tonis Tiigi 09e8a06c04 client: improve cache key loop test
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-03-02 22:35:59 -08:00
Anca Iordache 8c65b5bbd5 Tests build with local cache export
- to detect infinite loop caused by circular dependencies

Signed-off-by: Anca Iordache <anca.iordache@docker.com>
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-03-02 22:35:59 -08:00
Tonis Tiigi 0010996598 solver: avoid recursive loop on cache-export
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-03-02 22:35:59 -08:00
Akihiro Suda 9f90f5a985 rootless: support fuse-overlayfs
While real overlayfs is available only in Ubuntu and Debian kernels,
fuse-overlayfs is universally available for kernel >= 4.18.

For dockerized deployment, `--device /dev/fuse` needs to be added to
`docker run` flags.

Kubernetes deployment needs a custom device plugin that enables
`/dev/fuse`, e.g. https://github.com/honkiko/k8s-hostdev-plugin

Instead of a device plugin, the device can be also enabled by setting
`securityContext.privileged` to `true`.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-03-03 11:30:29 +09:00
Tõnis Tiigi 4d8d91bf49
Merge pull request #1379 from AkihiroSuda/update-containerd-20200225
vendor: update containerd (and various packages)
2020-02-27 21:06:18 -08:00
Akihiro Suda 7b579cdb98 vendor: update containerd (and various packages)
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-02-28 10:24:10 +09:00
Akihiro Suda b55d2ff985
Merge pull request #1381 from tonistiigi/platforms-detect
update supported platforms without restart
2020-02-28 01:16:11 +09:00
Tonis Tiigi d1458a6587 update supported platforms without restart
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-02-26 08:15:42 -08:00
Akihiro Suda bb2f21b233
Merge pull request #1376 from tonistiigi/go-113-support
update to go1.13
2020-02-25 10:59:58 +09:00
Tonis Tiigi a60ecfa4ae vendor: restore dependency versions
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-02-24 17:31:01 -08:00
Zach Badgett 1efe7b145d Fix docker dependencies
Signed-off-by: Zach Badgett <zach.badgett@gmail.com>
2020-02-24 15:47:32 -08:00
Zach Badgett 820200aa1d Fix go.mod to be compatible with go1.13
Signed-off-by: Zach Badgett <zach.badgett@gmail.com>
2020-02-24 15:44:11 -08:00
Tõnis Tiigi d75ed2b682
Merge pull request #1361 from hinshun/frontend-inputs
Implement CapFrontendInput to pass llb.States to frontends
2020-02-24 14:55:49 -08:00
Edgar Lee 5ec7bc7713 Change FrontendInputs in backend API definitions to *pb.Definition
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-02-24 14:38:01 -08:00
Edgar Lee b027a8572d Fix terminating op with non-zero output index, i.e. AddMount as final vertex
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-02-24 14:38:01 -08:00
Edgar Lee 7e0f923181 Implement CapFrontendInput to pass llb.States to frontends
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-02-24 14:38:01 -08:00
Tõnis Tiigi ae04ab49c4
Merge pull request #1375 from hinshun/non-refarray
Change wire format from ref arrays to singular refs while maintaining backwards compatibility
2020-02-24 14:32:22 -08:00
Edgar Lee 635e7f0ce0 Change wire format from ref arrays to singular refs while maintaining backwards compatibility
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-02-21 13:58:28 -08:00
Tõnis Tiigi 332cdb5e25
Merge pull request #1355 from tonistiigi/mounts-deadlock
ops: fix deadlock on releasing shared mounts
2020-02-21 10:34:57 -08:00
Tibor Vass adde225dcb
Merge pull request #1180 from Code0x58/expand-expansion
Expand shell variable expansion - add mandatory variables
2020-02-20 17:26:06 -08:00
Tõnis Tiigi 89978e7069
Merge pull request #1370 from thaJeztah/bump_crypto
vendor: golang.org/x/crypto v0.0.0-20200214034016-1d94cc7ab1c6
2020-02-19 10:16:01 -08:00
Sebastiaan van Stijn b1b5f2e626
vendor: golang.org/x/crypto v0.0.0-20200214034016-1d94cc7ab1c6
full diff: c2843e01d9...1d94cc7ab1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-02-19 13:01:06 +01:00
Akihiro Suda 2f5ad30ae5
Merge pull request #1351 from tonistiigi/security-devices
mount whitelist of devices on insecure security mode
2020-02-14 16:52:26 +09:00
Akihiro Suda 3c53f48f22
Merge pull request #1365 from tonistiigi/base-upt
dockerfile: update static base images
2020-02-13 15:52:11 +09:00
Tonis Tiigi eccae3e469 dockerfile: update static base images
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-02-12 22:02:10 -08:00
Akihiro Suda b5fb8c4428 Merge pull request #1356 from tonistiigi/lazy-results
solver: evaluate solve results lazily
2020-02-10 00:15:43 +09:00