330d6b73de
Merge pull request #362 from tonistiigi/labels
...
dockerfile: add test for labels
2018-05-04 09:52:17 +02:00
f9d1e4c32c
dockerfile: add test for labels
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-05-03 16:24:26 -07:00
cd0e7e8fd6
Merge pull request #355 from tonistiigi/mounts-update
...
snapshot: update mounts to mountable interface
2018-05-01 17:56:46 -07:00
e671c79369
Merge pull request #358 from tonistiigi/snapshotter-race
...
snapshotter: avoid snapshot removal race
2018-05-01 13:08:02 +09:00
0e42bcebe6
Merge pull request #357 from tonistiigi/unlock-bug
...
cache: fix refs unlocking bug
2018-05-01 13:00:10 +09:00
752c9d6140
Merge pull request #359 from tonistiigi/remove-context
...
Remove net/context
2018-05-01 12:58:31 +09:00
e24e194078
remove net/context references
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-30 18:10:54 -07:00
8b7e611c96
vendor: update net to go1.10
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-30 18:05:55 -07:00
e86ef986d4
Merge pull request #356 from ijc/update-go-digest
...
Bump to latest go-digest.
2018-04-30 15:54:57 -07:00
d7f8a4e1a4
snapshotter: avoid snapshot removal race
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-30 15:46:01 -07:00
a7e72f85e9
cache: fix refs unlocking bug
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-30 15:42:03 -07:00
2d04aed1d3
Bump to latest go-digest.
...
This renames the license file (so automated tooling can find it, which I care
about) and also pulls in some documentation and comment changes, plus some
functional changes:
PR#33 -- future-proof the algorithm field.
PR#34 -- disallow upper case in hex portion.
No changes appear to be required to buildkit code.
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-04-30 21:49:17 +01:00
2af19a8847
Merge pull request #352 from tonistiigi/case-insensitive-tests
...
dockerfile: add tests for case insensitive targets
2018-04-28 11:17:44 +09:00
566e28c174
snapshot: update mounts to mountable interface
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-27 17:58:24 -07:00
e5e8755dff
dockerfile: add tests for case insensitive targets
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-27 10:08:27 -07:00
61ff7dfcdd
Merge pull request #348 from tonistiigi/multi-key
...
solver: add support for multiple cache keys
2018-04-25 17:16:40 +09:00
3468d866e2
solver: add support for multiple cache keys
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-24 16:12:25 -07:00
8426766504
Merge pull request #347 from tonistiigi/fix-copy-vars
...
dockerfile: fix context path detection for var substitution
2018-04-24 12:19:15 +09:00
864adf02dd
dockerfile: fix context path detection for var substitution
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-23 11:37:53 -07:00
7e7655c582
Merge pull request #346 from tonistiigi/skip-manifest-resolve
...
dockerfile: allow skipping resolving manifest
2018-04-20 14:17:50 +09:00
8b85812dda
dockerfile: allow skipping resolving manifest
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-19 21:39:58 -07:00
c478340035
Merge pull request #344 from tonistiigi/runc-cmd-fix
...
runc: set command name from config
2018-04-19 11:24:35 +09:00
bab967b352
runc: set command name from config
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-18 17:01:20 -07:00
cf9188cee1
Merge pull request #341 from tonistiigi/authprovider
...
session: separate authprovider to package
2018-04-18 13:27:00 +09:00
93de570051
Merge pull request #342 from tonistiigi/runc-command
...
runc: make command name configurable
2018-04-18 13:26:41 +09:00
2dba0488c8
runc: make command name configurable
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-17 20:39:19 -07:00
7ac9599c8f
session: separate authprovider to package
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-17 20:36:23 -07:00
4d4f369838
Merge pull request #338 from tonistiigi/cachekey-refactor
...
solver-next: cachekey refactor
2018-04-17 12:53:21 +09:00
fc2b7c558a
Merge pull request #339 from tonistiigi/dockerfile-copy
...
dockerfile: copy only files that are used
2018-04-14 22:28:15 +09:00
0b203b21df
dockerfile: copy only files that are used
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-13 21:13:29 -07:00
1a3c680e91
Merge pull request #337 from tonistiigi/push-provider
...
util: make push depend on provider
2018-04-14 12:57:44 +09:00
64b9daabc7
boltdbcache: add missing methods
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-13 14:43:29 -07:00
01bb816d91
solver: add missing progress handlers
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-13 14:43:29 -07:00
747dff007b
solver: reimplement edge index with tests
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-13 14:43:23 -07:00
659a21bda9
solver: update exporter tests to check targets
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-13 14:40:06 -07:00
32f7a01fe7
solver: remove CacheKey interface
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-13 14:39:57 -07:00
7e18e4a579
util: make push depend on provider
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-13 14:35:55 -07:00
243f742ac2
Merge pull request #336 from ijc/configure-unix-socket-group-ownership
...
buildkitd: allow setting group of /var/run/buildkit/buildkitd.sock
2018-04-12 10:22:41 -07:00
7b739d32a7
buildkitd: allow setting group ownership of /var/run/buildkit/buildkitd.sock
...
While buildkitd needs to run as root (since both workers currently imply that)
there's no reason to enforce running the client as root, it works just fine (in
my slightly limited testing) as non-root so long as it has access to the sock
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-04-11 14:34:39 +01:00
ef8e683ffa
Merge pull request #335 from tonistiigi/git-cancellation
...
git: fix cancellation on blocking remotes
2018-04-11 14:06:50 +09:00
641fdea51b
git: fix cancellation on blocking remotes
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-04-10 17:55:18 -07:00
89f8bc1c02
Merge pull request #329 from AkihiroSuda/containerd-20180403
...
update containerd (binary: v1.0.3, library: Apr 3, 2018)
2018-04-04 10:05:42 -07:00
126f91dea7
update containerd (binary: v1.0.3, library: Apr 3, 2018)
...
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-04-04 17:22:20 +09:00
aabfa3b84a
Merge pull request #324 from ijc/readonly-rootfs-execop
...
Make llb.ReadonlyRootFS usable with common container images
2018-04-04 11:43:44 +09:00
2aa3554778
Merge pull request #330 from ijc/bump-protobuf
...
Consolidate gogoproto versions
2018-04-03 10:01:47 -07:00
8a51342bd5
Correct instructional message
...
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-04-03 13:45:50 +01:00
ec18d4ead1
generate-files: auto sync gogo version to vendor.conf
...
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-04-03 13:45:50 +01:00
d9b64588cb
Regenerate protobuf go file with gogoproto v0.5
...
This matches the version in vendor.conf, the previous version was `v0.5~25`
according to `git describe`.
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-04-03 13:45:50 +01:00
2e6adc027d
Reduce code duplication with a closure.
...
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-04-03 11:13:15 +01:00
ddae5a6ea4
Make llb.ReadonlyRootFS usable with common container images
...
e.g. with busybox image:
OCI runtime create failed: container_linux.go:348:
starting container process caused "process_linux.go:402:
container init caused \"rootfs_linux.go:58:
mounting \\\"proc\\\" to rootfs \\\"/.../rootfs\\\" at \\\"/proc\\\"
caused \\\"mkdir /.../rootfs/proc: read-only file system\\\"\"": unknown
This is because we were setting the underlying snapshot readonly so the various
mountpoints (here /proc) cannot be created. This would not be necessary if
those mountpoints were present in images but they typically are not.
The right way to get around this (used e.g. by `ctr`) is to use a writeable
snapshot but to set root readonly in the OCI spec. In this configuration the
rootfs is writeable when mounts are processed but is then made readonly by the
runtime (runc) just before entering the user specified binary within the
container.
This involved a surprising amount of plumbing.
Use this new found ability in the dockerfile converter's `dispatchCopy`
function.
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-04-03 11:04:07 +01:00
Vincent Demeester
Tonis Tiigi
Akihiro Suda
Ian Campbell
Akihiro Suda