Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: moby/buildkit
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 121ecd5
Choose a base ref
...
head repository: moby/buildkit
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: de56a3c
Choose a head ref
  • 7 commits
  • 22 files changed
  • 3 contributors

Commits on Mar 3, 2025

  1. vendor: update cdi to v0.8.1 for panic fix 

    Signed-off-by: Tonis Tiigi <[email protected]>
    @tonistiigi @crazy-max
    tonistiigi authored and crazy-max committed Mar 3, 2025
    Configuration menu
    Copy the full SHA
    547d083 View commit details
    Browse the repository at this point in the history

  2. vendor: update action-cache with longer azure retries 

    Signed-off-by: Tonis Tiigi <[email protected]>
    @tonistiigi @crazy-max
    tonistiigi authored and crazy-max committed Mar 3, 2025
    Configuration menu
    Copy the full SHA
    b15731b View commit details
    Browse the repository at this point in the history

Commits on Mar 4, 2025

  1. update binfmt to v9.2.2 

    Should help with segmentation fault on libc-bin

Signed-off-by: Tonis Tiigi <[email protected]>
    @tonistiigi @crazy-max
    tonistiigi authored and crazy-max committed Mar 4, 2025
    Configuration menu
    Copy the full SHA
    b1b594e View commit details
    Browse the repository at this point in the history

  2. rootless: update docs and examples 

    Fix issue 5763

- Discourage `--oci-worker-no-process-sandbox`, due to the leakage of
  the processes (by design).
  Instead, encourage setting `systempaths=unconfined` in `docker run`.
  This corresponds to `securityContext.procMount: Unmasked` in Kubernetes,
  however, the configuration is hard on Kubernetes, as it has to be used
  in conjunction with `hostUsers: false`.

- Remove `--device /dev/fuse`, as fuse-overlayfs is no longer used typically.

- Use the new Kubernetes struct for AppArmor

- Add a hint about `kernel.apparmor_restrict_unprivileged_userns`

- Remove `$` from command snippets for ease of copypasting

- Make `job.*.yaml` more practical

- Add `*.userns.yaml`. Needs `UserNamespaceSupport` feature gate to be enabled.

Signed-off-by: Akihiro Suda <[email protected]>
    @AkihiroSuda @crazy-max
    AkihiroSuda authored and crazy-max committed Mar 4, 2025
    Configuration menu
    Copy the full SHA
    bfe3c17 View commit details
    Browse the repository at this point in the history

  3. dockerfile: normalize platform in image config 

    Base image may use unnormalized platform so if platform
is inherited normalize needs to be called again.

Signed-off-by: Tonis Tiigi <[email protected]>
    @tonistiigi @crazy-max
    tonistiigi authored and crazy-max committed Mar 4, 2025
    Configuration menu
    Copy the full SHA
    2c40436 View commit details
    Browse the repository at this point in the history

  4. vendor: update containerd to v2.0.3 

    Brings in the gRPC message size fix for writing SBOMs.

Signed-off-by: Tonis Tiigi <[email protected]>
    @tonistiigi @crazy-max
    tonistiigi authored and crazy-max committed Mar 4, 2025
    Configuration menu
    Copy the full SHA
    cc210c8 View commit details
    Browse the repository at this point in the history

Commits on Mar 5, 2025

  1. Merge pull request #5803 from crazy-max/0.20_picks_0.20.1 

    [v0.20] cherry-picks for v0.20.1
    @crazy-max
    crazy-max authored Mar 5, 2025
    Configuration menu
    Copy the full SHA
    de56a3c View commit details
    Browse the repository at this point in the history
Loading