Commit Graph

3020 Commits (a743d4ba02bb9f5b24078988f6f20401e5af043d)

Author SHA1 Message Date
Sebastiaan van Stijn a743d4ba02
Add "ALL_PROXY" to list of default args / proxy env-vars
Relates to a82fff6377/docs/packages.md (proxies)

> (..) the first four of these are the standard built-in build-arg options
> available for `docker build`
> (..) The last, `all_proxy`, is a standard var used for socks proxying. Since
> it is not built into `docker build`, if you want to use it, you will need to
> add the following line to the dockerfile:
>
>     ARG all_proxy

Given the we support all other commonly known proxy env-vars by default, it makes
sense to add this one as well.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2021-04-24 18:19:02 +02:00
Akihiro Suda 3b49f992ca
Merge pull request #2051 from tonistiigi/backlink-locks
remotecache: lock backlinks cache
2021-03-30 14:33:48 +09:00
Akihiro Suda fa5d295a06
Merge pull request #2050 from tonistiigi/token-seed
authprovider: allow errors on seed unmarshal
2021-03-30 14:33:18 +09:00
Tonis Tiigi 6157418c76 authprovider: allow errors on seed unmarshal
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-03-29 22:14:41 -07:00
Tonis Tiigi ba90a9ee33 remotecache: lock backlinks cache
Items may be reused by the cache resulting concurrent writes.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-03-29 22:13:40 -07:00
Tõnis Tiigi 90f2402f62
Merge pull request #2042 from thaJeztah/bump_moby
go.mod: update docker/docker and docker/cli to v20.10.5
2021-03-29 13:03:37 -07:00
Tõnis Tiigi 216f9bdb66
Merge pull request #2043 from aaronlehmann/retry-on-5xx
Add retry on image push 5xx errors
2021-03-29 13:03:16 -07:00
Tõnis Tiigi 4ace3fe93a
Merge pull request #2048 from thaJeztah/double_path_join
solve: remove duplicate filepath.Join
2021-03-29 12:59:35 -07:00
Sebastiaan van Stijn 292685db37
solve: remove duplicate filepath.Join
I saw these, and there was no comment in the code explaining if there was a reason
for this; these were added in 2be999ba52, but couldn't
find a mention about these particular lines in the review comments, and I couldn't
think of a special reason for it ':-)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2021-03-29 13:24:55 +02:00
Aaron Lehmann d3b96f4e31 Add retry on image push 5xx errors
Some registries can be flaky and return intermittent 5xx errors. This
change allows those errors to be retried, similarly to network-level
errors.

Note that this needs the upstream containerd fix
https://github.com/containerd/containerd/pull/5276 to work reliably.

This was tested with a registry that was modified to return 504 on every
other manifest PUT. Without the change, exports to the registry fail
every other attempt.  With the change and the related containerd change,
exports to the registry always succeed.

Signed-off-by: Aaron Lehmann <alehmann@netflix.com>
2021-03-26 18:13:45 -07:00
Sebastiaan van Stijn d23b1bbf2c
go.mod: update docker/docker and docker/cli to v20.10.5
includes updated seccomp profile

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2021-03-26 23:48:49 +01:00
Tõnis Tiigi 4e69662758
Merge pull request #2035 from AkihiroSuda/containerd-fuse-overlayfs-snapshotter
AkihiroSuda/containerd-fuse-overlayfs -> containerd/fuse-overlayfs-snapshotter
2021-03-23 23:51:53 -07:00
Akihiro Suda ba2ddc71a0
Merge pull request #2037 from tonistiigi/xxv2
update to new cross toolchain
2021-03-24 13:23:56 +09:00
Akihiro Suda 2219e6bf42
Merge pull request #2036 from earthly/vlad/retry
Retry on temporary network failures
2021-03-24 12:52:29 +09:00
Tonis Tiigi 77c9a2900d Dockerfile: add darwin/arm64 and windows/arm64 support
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-03-23 19:33:11 -07:00
Tonis Tiigi fce365f469 vendor: update x/sys to 1e4c9ba for windows/arm64 support
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-03-23 19:33:11 -07:00
Tonis Tiigi b4364bf4a7 update to new cross toolchain
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-03-23 19:33:11 -07:00
Vlad A. Ionescu ab76674b24 Retry on temporary network failures.
Signed-off-by: Vlad A. Ionescu <vladaionescu@users.noreply.github.com>
2021-03-23 17:28:04 -07:00
Akihiro Suda ad681c0154
AkihiroSuda/containerd-fuse-overlayfs -> containerd/fuse-overlayfs-snapshotter
The repo has been moved.

Also bumps up containerd library to v1.5.0-beta.4.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2021-03-23 18:43:01 +09:00
Akihiro Suda 8effd45b99
Merge pull request #2031 from tonistiigi/caps-contains
caps: add contains method
2021-03-22 15:36:34 +09:00
Tonis Tiigi 1d982af3b4 caps: add contains method
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-03-21 22:53:27 -07:00
Akihiro Suda 2b990eb801
Merge pull request #2024 from tonistiigi/cache-loop-export
remotecache: check loops on marshaling cache config
2021-03-22 14:07:44 +09:00
Tõnis Tiigi cfa948f185
Merge pull request #2029 from crazy-max/gh-checks
Disable GitHub Checks Patch Annotations
2021-03-19 09:44:56 -07:00
CrazyMax b21badaf6a
Disable GitHub Checks Patch Annotations
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-03-19 09:23:28 +01:00
Tonis Tiigi bee77d81b9 solver: check for edge dependency before merging
In some cases edges that depend on each other
can have identical cache keys. This happens for
example when empty layers are optimized out by
the differ between identical commands. We need to
detect this case and avoid merge.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-03-18 19:55:35 -07:00
Tonis Tiigi f3e88854a4 remotecache: validate remote cache for loops before export
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-03-16 23:08:42 -07:00
Tonis Tiigi a0ae7f4807 dockerfile: test cache export loop
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-03-16 23:08:42 -07:00
Akihiro Suda 4eca10a46c
Merge pull request #2020 from tonistiigi/push-tags
push: avoid overwriting tags on push
2021-03-16 10:47:52 +09:00
Tõnis Tiigi c5c2af712f
Merge pull request #1994 from kohtala/patch-1
Explain the cache identity
2021-03-14 21:54:37 -07:00
Tõnis Tiigi df582bd74c
Merge pull request #2021 from thaJeztah/bump_sys_mount
go.mod: moby/sys/mount v0.2.0, moby/sys/mountinfo v0.4.1
2021-03-14 21:52:45 -07:00
Tõnis Tiigi ae306d8b15
Merge pull request #2022 from thaJeztah/less_looping
security/entitlements.WithInsecureSpec() remove redundant loop
2021-03-14 21:52:26 -07:00
Sebastiaan van Stijn 1b4affddcd
security/entitlements.WithInsecureSpec() remove redundant loop
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2021-03-14 13:09:09 +01:00
Sebastiaan van Stijn 583b4679f6
go.mod: moby/sys/mount v0.2.0, moby/sys/mountinfo v0.4.1
github.com/moby/sys/mountinfo v0.4.1
-------------------------------------

- Fix PrefixFilter() being too greedy
- TestMountedBy*: add missing pre-checks
- Documentation improvements

github.com/moby/sys/mount v0.2.0
-------------------------------------

Breaking changes:

- Remove stub-implementations for Windows for Mount(), Unmount(), RecursiveUnmount(),
  MergeTmpfsOptions()

Fixes and improvements:

- go.mod: update github.com/moby/sys/mountinfo to v0.4.0
- use MNT_* flags from golang.org/x/sys/unix on freebsd
- add support for OpenBSD in addition to FreeBSD
- fix package overview documentation not showing
- RecursiveUnmount(): minor improvements

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2021-03-14 11:36:26 +01:00
Tonis Tiigi 1d7526b1bb push: avoid overwriting tags on push
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-03-12 13:45:01 -08:00
Tõnis Tiigi 2be23848e8
Merge pull request #2013 from AkihiroSuda/containerd-20210310
vendor containerd (requred for rootless overlayfs on kernel 5.11)
2021-03-10 19:00:09 -08:00
Akihiro Suda 13ea18ad08
vendor containerd (requred for rootless overlayfs on kernel 5.11)
Required for rootless overlayfs on kernel 5.11
https://github.com/containerd/containerd/pull/5076

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2021-03-10 13:51:27 +09:00
Marko Kohtala f2a6e83adc Explain the cache identity
One has doubt his guess of the obvious is correct unless it is mentioned in documentation.

Signed-off-by: Marko Kohtala <marko.kohtala@gmail.com>
2021-02-25 13:11:13 +02:00
Tõnis Tiigi c3f5c93e39
Merge pull request #1998 from tonistiigi/update-runc-rc93
Dockerfile: update runc to rc93
2021-02-24 15:20:49 -08:00
Tonis Tiigi da323d7728 Dockerfile: update runc to rc93
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-02-24 14:24:38 -08:00
Tibor Vass c775aec183
Merge pull request #1993 from tonistiigi/empty-layer-export-fix
allow skipping empty layer detection on cache export
2021-02-24 12:25:19 -08:00
Tõnis Tiigi 53b241f870
Merge pull request #1978 from ktock/stargz-snapshotter-v0.4.0
Bump stargz snapshotter to v0.4.1
2021-02-24 10:09:39 -08:00
Tonis Tiigi 29af1397e2 allow skipping empty layer detection on cache export
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-02-24 01:11:17 -08:00
ktock 072126f710 Bump stargz snapshotter to v0.4.1
Signed-off-by: ktock <ktokunaga.mail@gmail.com>
2021-02-24 12:09:14 +09:00
Akihiro Suda 661f60f2fe
Merge pull request #1989 from tonistiigi/revert-tcp-limit 2021-02-22 04:25:21 +09:00
Akihiro Suda c6c1d97c7e
Merge pull request #1987 from tonistiigi/git-token-scope 2021-02-22 04:24:44 +09:00
Tonis Tiigi 49c4ab46ad Revert "resolver: fix tcp connections limit"
This reverts commit 58dc579d57.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-02-20 12:15:25 -08:00
Tonis Tiigi 5bf64293f8 git: set token only for main remote access
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-02-19 00:25:35 -08:00
Akihiro Suda ddbed13a0b
Merge pull request #1986 from tonistiigi/tcp-conn-limit
resolver: fix tcp connections limit
2021-02-19 17:24:41 +09:00
Tonis Tiigi 58dc579d57 resolver: fix tcp connections limit
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2021-02-18 23:04:37 -08:00
Akihiro Suda 19d31737fb
Merge pull request #1963 from tonistiigi/release-count-fixes 2021-02-19 08:22:54 +09:00