f7bd5b99da
build: use copy for BuildWithResultHandler loop vars
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
(cherry picked from commit 347417ee12
2023-01-26 13:36:57 +01:00
8c14407fa2
imagetools: silence intoto warnings
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
(cherry picked from commit 7145e021f9
2023-01-26 13:36:57 +01:00
5245a2b3ff
rm: do not check for context builders when removing inactive
...
This change has been introduced in e7b5ee7518crazy-max@users.noreply.github.com >
(cherry picked from commit 6cd0c11ab1
2023-01-26 13:36:28 +01:00
44d99d4573
build: mark capabilities request as internal
...
So it doesn't show up in the History API.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
(cherry picked from commit be55b41427
2023-01-26 13:35:46 +01:00
14942a266e
docs: fix broken link in buildx_bake CLI reference
...
Signed-off-by: David Karlsson <david.karlsson@docker.com >
(cherry picked from commit ba8fa6c403
2023-01-26 13:33:13 +01:00
123febf107
ci: fix typo in docs-release workflow
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
(cherry picked from commit 523a16aa35
2023-01-26 13:32:58 +01:00
3f5f7c5228
fix the directory of the buildx binary
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com >
(cherry picked from commit edb16f8aab
2023-01-26 13:32:34 +01:00
6d935625a6
Merge pull request #1546 from jedevc/v0.10-inspect-lazy-attestations
...
[v0.10] Lazily load attestation data in imagetools inspect
2023-01-24 12:41:13 +00:00
e640dc6041
Merge pull request #1545 from jedevc/v0.10-error-on-attestations-docker
...
[v0.10] build: error when using docker exporter and attestations
2023-01-24 12:41:03 +00:00
08244b12b5
Merge pull request #1544 from jedevc/v0.10-bump-ci
...
[v0.10] Bump Buildx and BuildKit versions in GitHub actions
2023-01-24 12:40:52 +00:00
78d8b926db
inspect: lazily load attestation data
...
Delay loading the attestation data immediately, and only compute it upon
request. We do this using a deferred function which allows to define the
computation in the same place as before, but perform the computation
later.
With this patch, we ensure that the attestation data is only pulled from
the remote if it is actually referenced in the format string -
otherwise, we can skip it, for improved performance.
Signed-off-by: Justin Chadwell <me@jedevc.com >
2023-01-24 12:10:57 +00:00
19291d900e
inspect: move attestation loading to struct methods
...
This refactor ensures that the attestations are not output in the JSON
output for "{{ json . }}", and additionally allows future refactors to
dynamically load the attestation contents, ensuring faster performance
when attestations are not used in the output.
Signed-off-by: Justin Chadwell <me@jedevc.com >
2023-01-24 12:10:57 +00:00
ed9b4a7169
build: error when using docker exporter and attestations
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
(cherry picked from commit 43a748fd15me@jedevc.com >
2023-01-24 12:07:43 +00:00
033d5629c0
build: avoid compatability error when attestations disabled
...
We should avoid erroring with attestations support compatability errors
when a user has specified --provenance=false.
A user may wish to enable --provenance=false that works across buildkit
versions, but currently it will fail on old versions - this patch fixes
this, to silently ignore the provenance flag for this check if it's set
to disabled.
Signed-off-by: Justin Chadwell <me@jedevc.com >
(cherry picked from commit 15a80b56b5me@jedevc.com >
2023-01-24 12:07:34 +00:00
7cd5add568
ci: update buildkit release version in build pipeline
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
(cherry picked from commit c1ab55a3f2me@jedevc.com >
2023-01-24 11:50:58 +00:00
2a000096fa
ci: update buildx release version in build pipeline
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
(cherry picked from commit bc1d590ca7me@jedevc.com >
2023-01-24 11:50:53 +00:00
b7781447d7
Merge pull request #1530 from thaJeztah/0.10_backport_update_buildkit
...
[0.10 backport] vendor: github.com/moby/buildkit v0.11.1
2023-01-24 00:50:03 -08:00
f6ba0a23f8
vendor: github.com/moby/buildkit v0.11.1
...
full diff: https://github.com/moby/buildkit/compare/v0.11.0...v0.11.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
(cherry picked from commit 01e1c28dd9github@gone.nl >
2023-01-18 20:58:27 +01:00
bf4b95fc3a
Merge pull request #1524 from jedevc/v0.10-docs-reference-attest
...
[0.10] docs: add reference for new attest family of flags
2023-01-17 16:24:18 +01:00
467586dc8d
docs: add reference for new attest family of flags
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
2023-01-17 13:48:19 +00:00
8764628976
Merge pull request #1501 from tonistiigi/v0.10-picks
...
[v0.10] cherry-picks
2023-01-09 16:10:12 -08:00
583fe71740
docs: update with new inspect output
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
(cherry picked from commit 9818055b0e
2023-01-09 15:53:42 -08:00
9fb3ff1a27
inspect: change additional spdxs to not have duplicates
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
(cherry picked from commit 484823c97d
2023-01-09 15:53:37 -08:00
9d4f38c5fa
inspect: provide access to multiple spdx documents
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
(cherry picked from commit 3ce17b01dc
2023-01-09 15:53:34 -08:00
793082f543
inspect: parse sbom and provenance into json structs
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
(cherry picked from commit e68c566c1c
2023-01-09 15:53:29 -08:00
fe6f697205
inspect: break after first matching attestation
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
(cherry picked from commit 19d16aa941
2023-01-09 15:53:13 -08:00
fd3fb752d3
github: update CI to buildkit v0.11
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
(cherry picked from commit 571871b084
2023-01-09 15:52:51 -08:00
7fcea64eb4
Merge pull request #1496 from thaJeztah/0.10_backport_docs_updates
...
[0.10 backport] update anchor-links and cli-docs-tool v0.5.1
2023-01-09 15:52:56 +01:00
05e0ce4953
go.mod: update cli-docs-tool v0.5.1 and re-generate docs
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
(cherry picked from commit c97500b117github@gone.nl >
2023-01-09 13:05:27 +01:00
f8d9d1e776
docs: update anchor links
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
(cherry picked from commit b8285c17e6github@gone.nl >
2023-01-09 13:05:27 +01:00
8a7a221a7f
imagetools inspect: handle provenance and sbom
...
use stub structs for SLSA/SBOM while waiting for
go-imageinspect library to be public.
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-01-06 16:33:47 -08:00
e4db8d2a21
imagetools inspect: missing annotations key
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-01-06 16:33:47 -08:00
7394853ddf
vendor: update buildkit to v0.11.0-rc4
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
Signed-off-by: Justin Chadwell <me@jedevc.com >
2023-01-06 16:33:46 -08:00
a8be6b576b
docs: update oci layout with tag resolution
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
2023-01-06 16:33:46 -08:00
8b960ededd
build: refactor reference parsing for image layouts
...
We allow any valid image reference format for the oci-layout, not just
limiting to name@digest, we additionally allow images of the form
name:tag@digest now.
The name of the reference is used to find the local directory to lookup
the store in, while the tag and digest are attached to a random identity
to generate the dummy reference sent to the oci-layout context.
This separation of the target to replace and the value to replace it
with ensures that any tag or digest set in the client is properly sent
across to the server. The tag is used when a digest was not specified,
and it is resolved in the context of the local directory before being
sent, using the same helpers as we use for the local cache expoter.
Signed-off-by: Justin Chadwell <me@jedevc.com >
2023-01-06 16:33:46 -08:00
4735a71fbd
e2e: use native k3s installation script
...
debianmaster/actions-k3s action gives some warnings in our e2e
workflow. This commit brings https://github.com/debianmaster/actions-k3s/blob/master/index.js
directly in the workflow through actions/github-script with
some changes to properly wait for nodes to be up.
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-01-06 16:33:46 -08:00
37fce8cc06
Merge pull request #1489 from AkihiroSuda/cherrypick-1482-v0.10
...
[0.10] Propagate SOURCE_DATE_EPOCH from the client env
2023-01-05 23:45:21 -08:00
82476ab039
Propagate SOURCE_DATE_EPOCH from the client env
...
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
(cherry picked from commit 0e6f5a155eakihiro.suda.cz@hco.ntt.co.jp >
2023-01-05 08:48:27 +09:00
88852e2330
Merge pull request #1480 from crazy-max/fix-badge
...
disable buildx experimental in pipeline
2022-12-16 10:28:20 -08:00
6369c50614
disable buildx experimental in pipeline
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-12-16 18:53:46 +01:00
a22d0a35a4
readme: fix status badge
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-12-16 17:52:30 +01:00
c93c02df85
Merge pull request #1479 from jedevc/fixup-git-err-check-order
...
build: check error from toSolveOpt before adding FrontendAttrs
2022-12-16 16:28:17 +01:00
e584c6e1a7
build: check error from toSolveOpt before adding FrontendAttrs
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
2022-12-16 12:19:33 +00:00
64e4c19971
Merge pull request #1477 from crazy-max/git-wsl
...
build: lookup the right git binary on WSL
2022-12-15 18:00:52 -08:00
551b8f6785
git: do not show warnings if project does not use git
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2022-12-15 17:51:46 -08:00
fbbe1c1b91
Merge pull request #1472 from crazy-max/ci-attest
...
ci: opt-in sbom and provenance
2022-12-15 17:38:13 -08:00
1a85745bf1
github: update buildkit image to v0.11-rc3
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2022-12-15 16:54:32 -08:00
0d1fea8134
build: warn if git operation fails
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-12-15 23:40:19 +01:00
19417e76e7
build: lookup the right git binary on WSL
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-12-15 21:16:37 +01:00
53d88a79ef
Merge pull request #1475 from jedevc/attest-warn-duplicate
...
buildflags: error on duplicate attest field
2022-12-15 11:07:47 -08:00
