Justin Chadwell
2a000096fa
ci: update buildx release version in build pipeline
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
(cherry picked from commit bc1d590ca70b287433162ae65be790797b7b0e46)
Signed-off-by: Justin Chadwell <me@jedevc.com>
2023-01-24 11:50:53 +00:00
Tõnis Tiigi
b7781447d7
Merge pull request #1530 from thaJeztah/0.10_backport_update_buildkit
...
[0.10 backport] vendor: github.com/moby/buildkit v0.11.1
2023-01-24 00:50:03 -08:00
Sebastiaan van Stijn
f6ba0a23f8
vendor: github.com/moby/buildkit v0.11.1
...
full diff: https://github.com/moby/buildkit/compare/v0.11.0...v0.11.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 01e1c28dd9cec63c96139416e7a866cd659a90b5)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-01-18 20:58:27 +01:00
CrazyMax
bf4b95fc3a
Merge pull request #1524 from jedevc/v0.10-docs-reference-attest
...
[0.10] docs: add reference for new attest family of flags
2023-01-17 16:24:18 +01:00
Justin Chadwell
467586dc8d
docs: add reference for new attest family of flags
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
2023-01-17 13:48:19 +00:00
Tõnis Tiigi
8764628976
Merge pull request #1501 from tonistiigi/v0.10-picks
...
[v0.10] cherry-picks
2023-01-09 16:10:12 -08:00
Justin Chadwell
583fe71740
docs: update with new inspect output
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
(cherry picked from commit 9818055b0e190e5ff977afdd7dda2744018bf8fc)
2023-01-09 15:53:42 -08:00
Justin Chadwell
9fb3ff1a27
inspect: change additional spdxs to not have duplicates
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
(cherry picked from commit 484823c97d8155f4ff7d454ff394dd9595c642a3)
2023-01-09 15:53:37 -08:00
Justin Chadwell
9d4f38c5fa
inspect: provide access to multiple spdx documents
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
(cherry picked from commit 3ce17b01dc614f4224d7f13a993b6ba235dfdab9)
2023-01-09 15:53:34 -08:00
Justin Chadwell
793082f543
inspect: parse sbom and provenance into json structs
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
(cherry picked from commit e68c566c1c37dfbe77cd479a8bf2743ff4dee969)
2023-01-09 15:53:29 -08:00
Justin Chadwell
fe6f697205
inspect: break after first matching attestation
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
(cherry picked from commit 19d16aa941baa6b6bdd397029471edb7fea6e190)
2023-01-09 15:53:13 -08:00
Tonis Tiigi
fd3fb752d3
github: update CI to buildkit v0.11
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 571871b084d8c6ef1369cb740af01470e48b5dfd)
2023-01-09 15:52:51 -08:00
CrazyMax
7fcea64eb4
Merge pull request #1496 from thaJeztah/0.10_backport_docs_updates
...
[0.10 backport] update anchor-links and cli-docs-tool v0.5.1
2023-01-09 15:52:56 +01:00
Sebastiaan van Stijn
05e0ce4953
go.mod: update cli-docs-tool v0.5.1 and re-generate docs
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit c97500b11768a3ed8ff20388941b256be389dc84)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-01-09 13:05:27 +01:00
Sebastiaan van Stijn
f8d9d1e776
docs: update anchor links
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit b8285c17e606e10b77357cdb3e868f0798a834df)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-01-09 13:05:27 +01:00
CrazyMax
8a7a221a7f
imagetools inspect: handle provenance and sbom
...
use stub structs for SLSA/SBOM while waiting for
go-imageinspect library to be public.
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-06 16:33:47 -08:00
CrazyMax
e4db8d2a21
imagetools inspect: missing annotations key
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-06 16:33:47 -08:00
Justin Chadwell
7394853ddf
vendor: update buildkit to v0.11.0-rc4
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Signed-off-by: Justin Chadwell <me@jedevc.com>
2023-01-06 16:33:46 -08:00
Justin Chadwell
a8be6b576b
docs: update oci layout with tag resolution
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
2023-01-06 16:33:46 -08:00
Justin Chadwell
8b960ededd
build: refactor reference parsing for image layouts
...
We allow any valid image reference format for the oci-layout, not just
limiting to name@digest, we additionally allow images of the form
name:tag@digest now.
The name of the reference is used to find the local directory to lookup
the store in, while the tag and digest are attached to a random identity
to generate the dummy reference sent to the oci-layout context.
This separation of the target to replace and the value to replace it
with ensures that any tag or digest set in the client is properly sent
across to the server. The tag is used when a digest was not specified,
and it is resolved in the context of the local directory before being
sent, using the same helpers as we use for the local cache expoter.
Signed-off-by: Justin Chadwell <me@jedevc.com>
2023-01-06 16:33:46 -08:00
CrazyMax
4735a71fbd
e2e: use native k3s installation script
...
debianmaster/actions-k3s action gives some warnings in our e2e
workflow. This commit brings https://github.com/debianmaster/actions-k3s/blob/master/index.js
directly in the workflow through actions/github-script with
some changes to properly wait for nodes to be up.
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-06 16:33:46 -08:00
Tõnis Tiigi
37fce8cc06
Merge pull request #1489 from AkihiroSuda/cherrypick-1482-v0.10
...
[0.10] Propagate SOURCE_DATE_EPOCH from the client env
2023-01-05 23:45:21 -08:00
Akihiro Suda
82476ab039
Propagate SOURCE_DATE_EPOCH from the client env
...
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
(cherry picked from commit 0e6f5a155edb9abad48cd8fc12e7585b571ffa37)
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2023-01-05 08:48:27 +09:00
Tõnis Tiigi
88852e2330
Merge pull request #1480 from crazy-max/fix-badge
...
disable buildx experimental in pipeline
2022-12-16 10:28:20 -08:00
CrazyMax
6369c50614
disable buildx experimental in pipeline
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-16 18:53:46 +01:00
CrazyMax
a22d0a35a4
readme: fix status badge
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-16 17:52:30 +01:00
CrazyMax
c93c02df85
Merge pull request #1479 from jedevc/fixup-git-err-check-order
...
build: check error from toSolveOpt before adding FrontendAttrs
2022-12-16 16:28:17 +01:00
Justin Chadwell
e584c6e1a7
build: check error from toSolveOpt before adding FrontendAttrs
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
2022-12-16 12:19:33 +00:00
Tõnis Tiigi
64e4c19971
Merge pull request #1477 from crazy-max/git-wsl
...
build: lookup the right git binary on WSL
2022-12-15 18:00:52 -08:00
Tonis Tiigi
551b8f6785
git: do not show warnings if project does not use git
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2022-12-15 17:51:46 -08:00
Tõnis Tiigi
fbbe1c1b91
Merge pull request #1472 from crazy-max/ci-attest
...
ci: opt-in sbom and provenance
2022-12-15 17:38:13 -08:00
Tonis Tiigi
1a85745bf1
github: update buildkit image to v0.11-rc3
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2022-12-15 16:54:32 -08:00
CrazyMax
0d1fea8134
build: warn if git operation fails
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-15 23:40:19 +01:00
CrazyMax
19417e76e7
build: lookup the right git binary on WSL
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-15 21:16:37 +01:00
Tõnis Tiigi
53d88a79ef
Merge pull request #1475 from jedevc/attest-warn-duplicate
...
buildflags: error on duplicate attest field
2022-12-15 11:07:47 -08:00
Justin Chadwell
4c21b7e680
Merge pull request #1476 from jedevc/dont-filter-attestation-opts
...
build: forward all build opts everywhere
2022-12-15 19:05:39 +00:00
Justin Chadwell
a8f689c223
build: forward all build opts everywhere
...
All build options should be passed everywhere - the frontend and the
backend of buildkit should both be able to see all attestations, as well
as all other opts: e.g. epoch settings, and no-cache.
Signed-off-by: Justin Chadwell <me@jedevc.com>
2022-12-15 18:19:47 +00:00
CrazyMax
ba8e3f9bc5
ci: generate provenance and sbom for bin image
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-15 19:12:26 +01:00
CrazyMax
477200d1f9
ci: generate provenance and sbom for release binaries
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-15 19:12:25 +01:00
Tõnis Tiigi
662738a7e5
Merge pull request #1474 from crazy-max/fix-ci
...
ci: fix warnings
2022-12-15 09:29:25 -08:00
Justin Chadwell
f992b77535
buildflags: warn on duplicate attest field
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
2022-12-15 15:39:19 +00:00
CrazyMax
21b2f135b5
ci: update to ubuntu 22.04
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-15 14:34:03 +01:00
CrazyMax
71e6be5d99
ci: fix deprecated set-output syntax
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-15 14:24:02 +01:00
CrazyMax
df8e7d0a9a
Merge pull request #1473 from crazy-max/fix-docs-prerelease
...
ci: do not publish docs on prerelease
2022-12-15 14:22:07 +01:00
CrazyMax
64422a48d9
Merge pull request #1471 from crazy-max/fix-builder-factory
...
builder: check endpoint from store when loading factory
2022-12-15 14:19:20 +01:00
CrazyMax
04f9c62772
ci: do not publish docs on prerelease
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-15 14:16:45 +01:00
CrazyMax
2185d07f05
builder: check endpoint from store when loading factory
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-15 13:32:54 +01:00
CrazyMax
a49d28e00e
Merge pull request #1460 from crazy-max/docker-load
...
e2e: load to docker store
2022-12-15 10:35:29 +01:00
Tõnis Tiigi
629128c497
Merge pull request #1449 from crazy-max/bake-var-null
...
bake: support null arg and label value
2022-12-14 21:03:05 -08:00
Justin Chadwell
b741d26eb5
Merge pull request #1468 from crazy-max/fix-git-vcs-check
...
build: fix env vars check for vcs details
2022-12-14 12:51:29 +00:00
