Commit Graph

3619 Commits (2633c96baca04c59e1a09815fc3a74073bb1c9e8)

Author SHA1 Message Date
Tonis Tiigi 962c287b1b gha: fix handling removed blobs on reexport
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-10-28 20:30:48 -07:00
Tõnis Tiigi b33357bcd2
Merge pull request #2430 from crazy-max/cgroup-parent
cgroup-parent support
2021-10-28 10:21:03 -07:00
CrazyMax 54b8ff2fc8
go fmt: add //go:build
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-10-28 13:26:43 +02:00
Tõnis Tiigi 4b86211bed
Merge pull request #2405 from ktock/cachecompression
Propagate compression options to the inline cache export
2021-10-27 20:58:53 -07:00
Tõnis Tiigi 8a8b4cbf17
Merge pull request #2427 from crazy-max/update-containerd
update to containerd v1.6.0-beta.1
2021-10-27 18:27:36 -07:00
Tõnis Tiigi 9b95d30c4f
Merge pull request #2431 from jmacelroy/master
Handling parsing of multiple scopes combined in a single string.
2021-10-27 18:23:30 -07:00
Jacob MacElroy 5279e683a5 Handling parsing of multiple scopes combined in a single string.
It is possible for challenge headers to contain multiple scopes in a single string. This change ensures that this case is handled when parsing the scopes by splitting out scopes combined in a single string.

Signed-off-by: Jacob MacElroy <jacob@okteto.com>
2021-10-27 16:32:36 -06:00
CrazyMax c82ef274bf
cgroup-parent support
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-10-27 23:50:20 +02:00
Tonis Tiigi e82ccdf958 containerdexecutor: fix setting user
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-10-27 11:26:10 -07:00
Tonis Tiigi e3ca502c09 client: improve checks for user test
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-10-27 11:06:45 -07:00
Tonis Tiigi 58ecc5ce14 executor: make sure supplementary groups are set for unset user
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-10-27 11:03:37 -07:00
CrazyMax 7b171f6b6a
update to containerd v1.6.0-beta.1
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-10-26 22:48:51 +02:00
Tõnis Tiigi 33fb83eb71
Merge pull request #2425 from sipsma/refinalize
Re-add Finalize method to ImmutableRef.
2021-10-25 15:24:36 -07:00
Erik Sipsma 3adb271954 Re-add Finalize method to ImmutableRef.
It turns out that while Buildkit code did not need this method to
be public, moby code does still use it, so we have to re-add it
after its removal in #2216 (commit b85ef15).

This commit is not a revert because some of the changes are
still desireable, namely the removal of the "commit" parameter
which didn't serve any purpose.

Signed-off-by: Erik Sipsma <erik@sipsma.dev>
2021-10-25 10:51:30 -07:00
Kohei Tokunaga f9e0346b34 Propagate compression options to the inline cache export
Co-authored-by: Tonis Tiigi <tonistiigi@gmail.com>
Signed-off-by: Kohei Tokunaga <ktokunaga.mail@gmail.com>
2021-10-22 15:43:32 +09:00
Akihiro Suda f352ee857b
Merge pull request #2410 from tonistiigi/exporter-sync-fix
solver: fix exporters unsafely sharing records
2021-10-21 17:18:02 +09:00
CrazyMax 8778943ac3
Merge pull request #2422 from crazy-max/fix-tmpfs-size
use bytes as given size for tmpfs mount
2021-10-19 20:58:19 +02:00
CrazyMax 94378a87b4
use `opts.MemBytes` for tmpfs size run mount instruction
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-10-19 20:16:01 +02:00
CrazyMax 954c4721f7
use bytes as given size for tmpfs mount
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-10-19 19:47:17 +02:00
Tõnis Tiigi 41c0a18147
Merge pull request #2411 from crazy-max/tpmfs-size
add size to tmpfs mounts
2021-10-18 13:26:44 -07:00
CrazyMax 32d95c8ece
deduplicate mounts
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-10-18 10:54:53 +02:00
CrazyMax 87e1fa7ecb
add size to tmpfs mounts
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-10-18 10:54:52 +02:00
Akihiro Suda 9dd4ec0f48
Merge pull request #2419 from tonistiigi/session-dialer
client: allow setting custom dialer for session endpoint
2021-10-18 13:45:31 +09:00
Tonis Tiigi 1c51e87e16 client: allow setting custom dialer for session endpoint
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-10-17 20:21:28 -07:00
Tõnis Tiigi cbf808fb09
Merge pull request #2394 from smira/insecure-capabilities
fix: provide only available capabilities to insecure environment
2021-10-15 17:08:29 -07:00
Andrey Smirnov a5d1cfc1e4
fix: provide only available capabilities to insecure environment
The problem this change is trying to fix are the environments where some
capabilities are already dropped, so they can't be granted to the
job with `--security=insecure`.

I know that probably fixed set of capabilities was implemented to
provide a stable build environment, but at the same time this breaks
environments with reduced capabilities.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-10-15 19:57:32 +03:00
Tonis Tiigi 4cec7a064c solver: fix exporters unsafely sharing records
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-10-08 19:51:11 -07:00
Tõnis Tiigi ba673bbdab
Merge pull request #2395 from jmacelroy/master
Creating tcp socket without using go-connections.
2021-10-08 14:00:08 -07:00
Tõnis Tiigi 7671a84fc2
Merge pull request #2398 from crazy-max/ulimit
Add support for ulimit
2021-10-08 10:50:44 -07:00
Tõnis Tiigi c46f7ad20c
Merge pull request #2399 from AkihiroSuda/update-multiplatform-docs
README.md: improve "Building multi-platform images" section
2021-10-08 10:44:33 -07:00
CrazyMax 4e32ae5630
Add support for ulimit
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-10-08 11:50:09 +02:00
Akihiro Suda 6813db907b
README.md: improve "Building multi-platform images" section
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2021-10-08 16:21:27 +09:00
Akihiro Suda b8462c3b7c
Merge pull request #2403 from tonistiigi/push-deadlock
limited: fix possible deadlock when pushhandler calls fetcher
2021-10-07 16:58:37 +09:00
Tonis Tiigi 7153f5a9bb limited: fix possible deadlock when pushhandler calls fetcher
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-10-06 22:46:37 -07:00
Tonis Tiigi 28250bf74e git: make fetch with keep-git-dir more deterministic
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-10-05 23:59:33 -07:00
Tõnis Tiigi b2ff444122
Merge pull request #2243 from crazy-max/gha-cache
Use gha cache on CI
2021-10-05 15:52:38 -07:00
Tõnis Tiigi 91ecc991c3
Merge pull request #2393 from ktock/converter-uncompressed-annotation
converter: make sure uncompressed digest annotation is set
2021-10-05 15:52:03 -07:00
Jacob MacElroy 6d396b9684 Creating tcp socket without using go-connections.
Signed-off-by: Jacob MacElroy <jacob@okteto.com>
2021-10-05 12:28:17 -06:00
CrazyMax ec65f412b6
Use gha cache on CI
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-10-05 10:51:48 +02:00
Kohei Tokunaga 5c27a53a15 Converter: make sure uncompressed digest annotation is set
Signed-off-by: Kohei Tokunaga <ktokunaga.mail@gmail.com>
2021-10-05 15:02:05 +09:00
Tõnis Tiigi 78e88560e1
Merge pull request #2387 from tonistiigi/gha-fixes
fixes for github actions cache
2021-10-04 08:53:08 -07:00
Akihiro Suda 10947b040c
Merge pull request #2388 from ktock/containerd-overlaydiff-bufcopy
Differ: write diff to the content store over bufio writer
2021-10-04 17:05:49 +09:00
Tõnis Tiigi ee1ad6893a
Merge pull request #2390 from ktock/overlaydiff-fuse-overlayfs
Do not enable overlayfs differ for fuse-overlayfs-snapshotter
2021-10-03 22:03:44 -07:00
Kohei Tokunaga 9ffd7f24cb Do not enable overlayfs differ for fuse-overlayfs-snapshotter
Signed-off-by: Kohei Tokunaga <ktokunaga.mail@gmail.com>
2021-10-04 13:50:05 +09:00
Kohei Tokunaga 4f3e74c0ca Differ: write diff to the content store over bufio writer
Signed-off-by: Kohei Tokunaga <ktokunaga.mail@gmail.com>
2021-10-04 11:43:00 +09:00
Tonis Tiigi 25d5c1f0fe vendor: update go-actions-cache to 4d48f2ff
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-10-02 14:54:36 -07:00
Tonis Tiigi c13f5de2fb solver: make sure previous error gets reset
This happens for example when cache loading fails
but then fallback step execution succeeds. 

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-10-02 14:52:14 -07:00
Tonis Tiigi 066a011c01 gha: handle missing blob gracefully
FromRemote now calls CheckDescriptor to validate
if the blob still exists. Otherwise cache loading
fallback does not get triggered because cache is
actually lazily pulled in only on exporting phase.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-10-02 14:52:09 -07:00
Tõnis Tiigi d429b0b326
Merge pull request #2385 from venturehacks/panic_failed_to_get_edge
don't cast Value when pipe is errored
2021-10-02 14:06:59 -07:00
Maxime Lagresle e76cfcfa22
don't cast Value when pipe is errored
Signed-off-by: Maxime Lagresle <maxime@angel.co>
2021-10-02 11:08:27 +02:00