Tonis Tiigi
69adb50902
hack: unbreak upgrade to buster
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-07-22 16:38:21 -07:00
Akihiro Suda
d750cb188a
Merge pull request #1073 from tonistiigi/cni-net
...
add cni networking support
2019-07-19 10:47:27 +09:00
Tonis Tiigi
653c91e114
network: add non-lazy cni network init
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-07-12 11:00:02 -07:00
Tonis Tiigi
e7759a861b
client: add cni network tests
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-07-10 18:00:06 -07:00
Tonis Tiigi
bc7a6f2556
add cni networking support
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-07-10 14:42:30 -07:00
Tibor Vass
969be2068e
hack: fix runtime panic due to osuser build tag not set
...
Looks like due to a bug in Dockerfile frontend, only the BUILDKITD_TAGS
build arg was taken into account, not the env var.
Signed-off-by: Tibor Vass <tibor@docker.com>
2019-07-10 04:27:37 +00:00
Tibor Vass
477d7ef53d
hack: build buildkitd for windows in buildkit-flavored Dockerfile
...
This is not meant to produce any working Windows binary of buildkitd.
Purpose is to catch compile failures on windows early.
Signed-off-by: Tibor Vass <tibor@docker.com>
2019-07-09 23:38:42 +00:00
Akihiro Suda
bf220d3915
add buildctl-daemonless.sh
...
The script spawns ephemeral daemon for "daemonless" UX.
Usage:
docker run -it --rm \
--security-opt seccomp=unconfined --security-opt apparmor=unconfined \
-e BUILDKITD_FLAGS=--oci-worker-no-process-sandbox \
-v /path/to/dir:/tmp/work \
--entrypoint buildctl-daemonless.sh \
moby/buildkit:master-rootless \
build --frontend dockerfile.v0 --local context=/tmp/work --local dockerfile=/tmp/work
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-05-26 12:39:34 +09:00
Tonis Tiigi
dad1297d91
update runc to v1.0.0-rc8
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-05-15 14:22:42 -07:00
Akihiro Suda
0c52d361fd
bump up rootlesskit to v0.4.1
...
Now the child process is killed when the parent dies (rootless-containers/rootlesskit#66 )
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-05-15 20:56:38 +09:00
Sebastiaan van Stijn
ac7893837f
hack/binaries: add BUILDKITD_TAGS
...
This makes setting build-tags more convenient;
make binaries BUILDKITD_TAGS="$(cat frontend/dockerfile/release/experimental/tags)"
Based-on-patch-by: Tonis Tiigi <tonistiigi@gmail.com>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2019-04-20 21:22:55 +02:00
Tõnis Tiigi
3cf36fe946
Merge pull request #895 from chendave/mailbox
...
test: avoid the error message when creating a user
2019-03-30 02:30:49 -07:00
Akihiro Suda
1795cfa25b
test.Dockerfile: set BUILDKIT_HOST for rootless image
...
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-03-26 21:25:01 +09:00
Dave Chen
ed0c226cde
test: avoid the error message when creating a user
...
Run this command:
`docker build --tag davetest -f ./hack/dockerfiles/test.Dockerfile --target integration-tests`
Will throw this error message:
`Executing busybox-1.29.3-r10.trigger
OK: 184 MiB in 43 packages
Creating mailbox file: No such file or directory`
Not impact functionality but a little bit annoying.
Signed-off-by: Dave Chen <dave.chen@arm.com>
2019-03-22 21:03:18 -07:00
Akihiro Suda
cd89a8ce3d
go 1.12
...
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-03-17 04:38:23 +09:00
Akihiro Suda
05ccbce8f5
bump up runc (CVE-2019-5736)
...
0a8e4117e7
https://groups.google.com/a/opencontainers.org/forum/#!topic/dev/Tc1ELm-8oDI
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-02-11 23:41:25 +09:00
Tõnis Tiigi
ac64f29f63
Merge pull request #800 from tiborvass/gomod
...
Migrate to go mod
2019-02-01 11:13:41 -08:00
Tibor Vass
175506ff7f
hack: update scripts to be go mod compatible
...
Signed-off-by: Tibor Vass <tibor@docker.com>
2019-01-31 22:44:47 +00:00
Tonis Tiigi
aed586f558
travis: include win/darwin binaries in cross
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-01-30 15:38:06 -08:00
Akihiro Suda
b42582793a
bump up runc
...
Including critical security fix for `runc run --no-pivot` (unlikely to
affect BuildKit): https://github.com/opencontainers/runc/pull/1962
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-01-15 16:23:21 +09:00
Patrick Van Stee
f6c2487225
Isolate generated files for easier copying
...
Signed-off-by: Patrick Van Stee <patrick@vanstee.me>
2019-01-06 06:49:52 -05:00
Tõnis Tiigi
c471ab81af
Merge pull request #761 from AkihiroSuda/containerd-121
...
update containerd to v1.2.1, runc to v1.0.0-rc6
2018-12-28 14:46:53 +02:00
Akihiro Suda
6ed72d683f
update containerd to v1.2.1, runc to v1.0.0-rc6
...
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-12-26 19:48:01 +09:00
Tonis Tiigi
3926820e3a
update dockerfile repo location
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-12-03 11:06:17 +01:00
Akihiro Suda
1803138c38
update shadow to 20181125
...
shadow-maint/shadow@52c081b (20181028) caused a regression that results in
`newuidmap: open of uid_map failed: Permission denied`.
The regression was fixed in shadow-maint/shadow@59c2dab (20181125).
Note that docker.io/moby/buildkit images are not affected by the
regression, because we forgot to update the rootless-base-external
image when we updated the shadow package before.
Related: genuinetools/img#191 genuinetools/img#196
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-11-30 13:38:34 +09:00
Kunal Kushwaha
373dc26a4f
replace git: with https:
...
git ports are restricted by corporate proxies,
whereas https proto is always allowed
Signed-off-by: Kunal Kushwaha <kushwaha_kunal_v7@lab.ntt.co.jp>
2018-11-15 11:50:53 +09:00
Alice Frosi
a008ce3ccd
Set GOARCH=amd64 for building stage for darwin/windows
...
Signed-off-by: Alice Frosi <afrosi@de.ibm.com>
2018-11-08 12:50:22 +01:00
Akihiro Suda
3a7209cde2
unfork newuidmap/newgidmap
...
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-10-29 16:01:04 +09:00
Akihiro Suda
d4a617b695
test.buildkit.Dockerfile: fix rootless-base-external
...
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-10-17 01:21:16 +09:00
Akihiro Suda
0d80bd17a3
Merge pull request #687 from tonistiigi/dockerfile-testing
...
dockerfile: add testing external dockerfile features
2018-10-16 15:58:55 +09:00
Akihiro Suda
ed64652d71
rootless: use Giuseppe's newuidmap/newgidmap
...
Apply https://github.com/shadow-maint/shadow/pull/132 so that newuidmap/newgidmap
doesn't require CAP_SYS_ADMIN
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-10-16 15:11:05 +09:00
Tonis Tiigi
2f8f0194c2
hack: remove musl dependency
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-10-15 22:27:13 -07:00
Tonis Tiigi
706fa2556a
dockerfile: add testing external dockerfile features
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-10-15 22:27:07 -07:00
Akihiro Suda
048130d1d0
simplify rootless
...
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-10-16 14:05:58 +09:00
Tonis Tiigi
fb9e2c1030
vendor: update containerd to v1.2.0-rc.1
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-10-12 15:27:54 -07:00
Tonis Tiigi
fb5324c609
hack: add tarball release
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-10-11 11:57:27 -07:00
Tonis Tiigi
106834d708
hack: add git to rootless stage
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-10-11 10:23:15 -07:00
Tonis Tiigi
a74027cb41
hack: add release script
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-10-11 10:23:15 -07:00
Tonis Tiigi
ddfb7f77c9
hack: update test dockerfiles to buildkit
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-10-10 23:26:05 -07:00
Akihiro Suda
40c8b4828a
update rootlesskit
...
For fix subgid interpretation (rootless-containers/rootlesskit@7c48b83f9c )
Full changes: https://github.com/rootless-containers/rootlesskit/compare/20b0fc...d843aa
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-10-03 14:57:25 +09:00
Tonis Tiigi
0d84f6e163
hack: update buildkit dockerfiles to go1.11
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-09-17 10:41:33 -07:00
Tonis Tiigi
49fdb4c078
hack: prefer buildkit for generated files
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-09-17 10:35:59 -07:00
Tonis Tiigi
1dceb3b060
hack: refactor lint to use buildkit
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-09-17 10:35:59 -07:00
Akihiro Suda
bf571a519e
update Go to 1.11
...
For consistency with Moby (moby/moby#37358 )
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-09-15 14:25:11 +09:00
Akihiro Suda
2fa4c37854
update containerd (binary: v1.1.3, library: Aug 23, 2018)
...
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-08-23 16:21:55 +09:00
Akihiro Suda
864fa7465e
integration: rename "/opt/containerd-1.0/bin/containerd" worker to "containerd-1.0"
...
Having '/' in a worker name is confusing.
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-07-06 15:32:02 +09:00
Akihiro Suda
580dbe08b9
rootless: add integration tests
...
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-07-04 19:27:54 +09:00
Akihiro Suda
7bddb1d268
rootless: update Dockerfile
...
* AkihiroSuda/rootlesskit -> rootless-containers/rootlesskit
* /home/user/.local/run -> /run/user/1000
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-07-04 16:11:52 +09:00
Yuichiro Kaneko
9302734deb
Fix "cat: can't open '.tmp/ldflags': No such file or directory" errors
...
The error appears in
```
RUN go build -ldflags "$(cat .tmp/ldflags)" -o /buildctl.exe ./cmd/buildctl
```
and
```
RUN go build -ldflags "$(cat .tmp/ldflags)" -o /buildkitd.exe ./cmd/buildkitd
```
We ignore ".tmp" by ".dockerignore" file, so `COPY . .`
does not copy ".tmp".
This commit changes the image for "cross-windows" and removes
not needed instructions which are done by "buildkit-base".
This is follow up of https://github.com/moby/buildkit/pull/398
Signed-off-by: Yuichiro Kaneko <spiketeika@gmail.com>
2018-06-30 18:52:03 +09:00
Tonis Tiigi
347b6a3d74
hack: mitigate bug in old docker version
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-06-04 23:54:44 -07:00