Commit Graph

1530 Commits (3cba03783c0a5a733d0d86d181fdd8d95d912033)

Author SHA1 Message Date
Tõnis Tiigi 3cba03783c
Merge pull request #615 from AkihiroSuda/export-cache-local
support local cache exporter and importer
2019-01-18 10:55:02 -08:00
Akihiro Suda 6e7617e889 support local cache exporter and importer
Export:

  $ buildctl build ... --export-cache type=local,store=/path/to/output-dir

Import:

  $ buildctl build ... --import-cache type=local,store=/path/to/input-dir

Impact on CLI:
* Old (deprecated but still effective): `--export-cache localhost:5000/myrepo:buildcache --export-cache-opt mode=max`
* New: `--export-cache type=registry,ref=localhost:5000/myrepo:buildcache,mode=max`

Impact on API:
* New fields are added to control.proto and gateway.proto. The daemon
internally translates old API calls to the new ones.
* While new API can be used for `registry` caches, the client continues
to use the legacy API for `registry` caches to ensure compatibility with
old daemons.
* To import `local` caches with a frontend, the frontend needs to support
a new frontend opt `cache-imports`.

Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-01-19 02:38:26 +09:00
Akihiro Suda 78212e3f72
Merge pull request #782 from AkihiroSuda/runc20190115
bump up runc
2019-01-15 17:26:23 +09:00
Akihiro Suda b42582793a bump up runc
Including critical security fix for `runc run --no-pivot` (unlikely to
affect BuildKit): https://github.com/opencontainers/runc/pull/1962

Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-01-15 16:23:21 +09:00
Tõnis Tiigi 4e75ff6854
Merge pull request #768 from AkihiroSuda/procless
support --oci-worker-no-process-sandbox
2019-01-12 10:17:55 -08:00
Akihiro Suda c54f4a986d support --oci-worker-no-process-sandbox
Note that this mode allows build executor containers to kill (and potentially ptrace) an arbitrary process in the BuildKit host namespace.
This mode should be enabled only when the BuildKit is running in a container as an unprivileged user.

Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-01-08 10:42:52 +09:00
Tõnis Tiigi a4e0df83f8
Merge pull request #772 from vanstee/clean-generated-files-export
`make generated-files` only copies over generated files from scratch container
2019-01-06 12:38:05 -08:00
Patrick Van Stee f6c2487225
Isolate generated files for easier copying
Signed-off-by: Patrick Van Stee <patrick@vanstee.me>
2019-01-06 06:49:52 -05:00
Tõnis Tiigi 34ff9c2366
Merge pull request #771 from LinuxMercedes/error-on-empty-dockerfile
Have parser error on dockerfiles without instructions
2019-01-04 16:33:08 -08:00
linuxmercedes 2ec7d53b00 Parser errors on dockerfiles without instructions
See https://github.com/moby/moby/pull/38487 for more discussion.

Signed-off-by: Natasha Jarus <linuxmercedes@gmail.com>
2019-01-04 13:44:52 -06:00
Akihiro Suda 03a86f1071
Merge pull request #767 from tonistiigi/dockerfile-uid-mode
dockerfile: allow setting file mode/uid for ssh and secrets
2019-01-04 09:59:49 +09:00
Tonis Tiigi b521aae3ea dockerfile: allow setting file mode/uid for secrets
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-01-03 11:13:40 -08:00
Tonis Tiigi 2529762ae7 dockerfile: allow setting file mode/uid for ssh socket
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-01-03 11:13:34 -08:00
Tõnis Tiigi c471ab81af
Merge pull request #761 from AkihiroSuda/containerd-121
update containerd to v1.2.1, runc to v1.0.0-rc6
2018-12-28 14:46:53 +02:00
Akihiro Suda 6ed72d683f update containerd to v1.2.1, runc to v1.0.0-rc6
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-12-26 19:48:01 +09:00
Tõnis Tiigi d1f5d3a65f
Merge pull request #456 from thaJeztah/add_maintainers
Add MAINTAINERS, AUTHORS files
2018-12-17 14:08:55 +00:00
Tõnis Tiigi b9086f5563
Merge pull request #755 from thaJeztah/add_contributing
Add CONTRIBUTING, CODE_OF_CONDUCT
2018-12-17 14:08:24 +00:00
Sebastiaan van Stijn 96e86fb1b3
Add CONTRIBUTING, CODE_OF_CONDUCT
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-12-17 12:44:29 +01:00
Tõnis Tiigi ab95e52589
Merge pull request #754 from thaJeztah/improve_experimental_docs
docs: make experimental frontend features better discoverable
2018-12-17 10:58:53 +00:00
Sebastiaan van Stijn bcf8180540
docs: make experimental frontend features better discoverable
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-12-14 12:57:43 +01:00
Tõnis Tiigi 41759a49c0
Merge pull request #747 from Quasilyte/patch-1
snapshot: fix impossible condition
2018-12-11 10:30:13 +00:00
Iskander (Alex) Sharipov e9fc4f63f1
snapshot: fix impossible condition
The `err == nil` is probably a typo of `err1 != nil`.
Found using gocritic linter `badCond` checker.
2018-12-11 01:36:13 +03:00
Tõnis Tiigi d9f7592067
Merge pull request #745 from tonistiigi/nonewpriv
oci: avoid nonewprivileges in default spec
2018-12-10 11:38:10 +00:00
Tonis Tiigi 09742778eb oci: avoid nonewprivileges in default spec
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-12-10 10:58:12 +00:00
Akihiro Suda 1952fa934d
Merge pull request #743 from tonistiigi/update-dockerfile-repo
update dockerfile repo location
2018-12-03 20:38:05 +09:00
Tonis Tiigi 3926820e3a update dockerfile repo location
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-12-03 11:06:17 +01:00
Tõnis Tiigi 5b7f75914f
Merge pull request #738 from AkihiroSuda/shadow-20181125
update shadow to 20181125
2018-12-02 13:36:00 +00:00
Sebastiaan van Stijn 7adf7139e6
Add MAINTAINERS, AUTHORS files
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-12-02 14:32:28 +01:00
Akihiro Suda 1803138c38 update shadow to 20181125
shadow-maint/shadow@52c081b (20181028) caused a regression that results in
`newuidmap: open of uid_map failed: Permission denied`.

The regression was fixed in shadow-maint/shadow@59c2dab (20181125).

Note that docker.io/moby/buildkit images are not affected by the
regression, because we forgot to update the rootless-base-external
image when we updated the shadow package before.

Related: genuinetools/img#191 genuinetools/img#196

Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-11-30 13:38:34 +09:00
Tõnis Tiigi 75c4dffb61
Merge pull request #737 from AkihiroSuda/allow-without-git
worker/base: allow running without `git` installed
2018-11-28 22:36:07 -08:00
Tõnis Tiigi 222b028d58
Merge pull request #736 from fuweid/reading
dockerfile2llb/pipe: remove the useless assignment
2018-11-28 22:33:42 -08:00
Wei Fu 2a7287a189 dockerfile2llb/pipe: remove the useless assignment
Signed-off-by: Wei Fu <fuweid89@gmail.com>
2018-11-28 19:44:53 +08:00
Akihiro Suda a62e7cf1e0 worker/base: allow running without `git` installed
genuinetools/img#195

Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-11-28 18:43:43 +09:00
Akihiro Suda 8cf9bec86a
Merge pull request #730 from tonistiigi/no-cache-fix
buildctl: fix frontends ignore-cache setting
2018-11-21 12:35:10 +09:00
Akihiro Suda df642989fd
Merge pull request #731 from tonistiigi/buildctl-import-cache
buildctl: allow import-cache on frontend builds
2018-11-21 12:33:36 +09:00
Akihiro Suda e59b01bf82
Merge pull request #733 from tonistiigi/dockerfile-symlink
dockerfile: allow symlinks on reading Dockerfile
2018-11-21 12:32:08 +09:00
Tonis Tiigi 2e3058e62c dockerfile: allow symlinks on reading Dockerfile
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-11-20 18:15:41 -08:00
Tonis Tiigi 478f417eb8 buildctl: allow import-cache on frontend builds
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-11-20 17:54:05 -08:00
Tibor Vass bf8c057e68
Merge pull request #727 from tonistiigi/add-fix
dockerfile: avoid urls in context filter
2018-11-20 16:47:31 -08:00
Tonis Tiigi b3092ab51c buildctl: fix frontends ignore-cache setting
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-11-20 15:53:14 -08:00
Akihiro Suda f2f4b534d4
Merge pull request #729 from tonistiigi/session-context
llbsolver: keep session for context calls
2018-11-20 11:56:35 +09:00
Tõnis Tiigi ef00d305f7
Merge pull request #728 from tonistiigi/docs-update
dockerfile: document more mount options
2018-11-19 17:54:51 -08:00
Tonis Tiigi f6a896157b llbsolver: keep session for context calls
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-11-19 15:24:35 -08:00
Tonis Tiigi b3e4cdf0d8 dockerfile: document more mount options
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-11-19 10:10:10 -08:00
Tonis Tiigi c840e7967f dockerfile: avoid urls in context filter
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-11-18 12:36:26 -08:00
Tõnis Tiigi 594f95bc1d
Merge pull request #722 from kunalkushwaha/fix-git-2-http
replace git: with https:
2018-11-18 11:27:38 -08:00
Tõnis Tiigi 71da3f8c20
Merge pull request #725 from ondrej-fabry/patch-1
Correct trivial typos
2018-11-18 11:26:14 -08:00
Ondrej Fabry 7218446f8e
Correct trivial typos
Signed-off-by: Ondrej Fabry <ofabry@cisco.com>
2018-11-18 00:10:57 +01:00
Kunal Kushwaha 373dc26a4f replace git: with https:
git ports are restricted by corporate proxies,
whereas https proto is always allowed

Signed-off-by: Kunal Kushwaha <kushwaha_kunal_v7@lab.ntt.co.jp>
2018-11-15 11:50:53 +09:00
Tõnis Tiigi 471f506e80
Merge pull request #718 from tonistiigi/update-dockerfile-ref
dockerfile: update image refs
2018-11-08 10:10:38 -08:00