mirror of https://github.com/docker/docs.git
Merge pull request #21350 from dvdksn/vendor-buildkit-354f2d13c905c05b0c4f44ff9c2d1e61430212bc
vendor: github.com/moby/buildkit 354f2d13c905c05b0c4f44ff9c2d1e61430212bc
This commit is contained in:
commit
ce9fa9cd67
|
@ -943,7 +943,6 @@ The command is run in the host's network environment (similar to
|
||||||
> which needs to be enabled when starting the buildkitd daemon with
|
> which needs to be enabled when starting the buildkitd daemon with
|
||||||
> `--allow-insecure-entitlement network.host` flag or in [buildkitd config](https://github.com/moby/buildkit/blob/master/docs/buildkitd.toml.md),
|
> `--allow-insecure-entitlement network.host` flag or in [buildkitd config](https://github.com/moby/buildkit/blob/master/docs/buildkitd.toml.md),
|
||||||
> and for a build request with [`--allow network.host` flag](https://docs.docker.com/engine/reference/commandline/buildx_build/#allow).
|
> and for a build request with [`--allow network.host` flag](https://docs.docker.com/engine/reference/commandline/buildx_build/#allow).
|
||||||
{ .warning }
|
|
||||||
|
|
||||||
### RUN --security
|
### RUN --security
|
||||||
|
|
||||||
|
@ -964,7 +963,6 @@ This is equivalent to running `docker run --privileged`.
|
||||||
> enabled when starting the buildkitd daemon with
|
> enabled when starting the buildkitd daemon with
|
||||||
> `--allow-insecure-entitlement security.insecure` flag or in [buildkitd config](https://github.com/moby/buildkit/blob/master/docs/buildkitd.toml.md),
|
> `--allow-insecure-entitlement security.insecure` flag or in [buildkitd config](https://github.com/moby/buildkit/blob/master/docs/buildkitd.toml.md),
|
||||||
> and for a build request with [`--allow security.insecure` flag](https://docs.docker.com/engine/reference/commandline/buildx_build/#allow).
|
> and for a build request with [`--allow security.insecure` flag](https://docs.docker.com/engine/reference/commandline/buildx_build/#allow).
|
||||||
{ .warning }
|
|
||||||
|
|
||||||
Default sandbox mode can be activated via `--security=sandbox`, but that is no-op.
|
Default sandbox mode can be activated via `--security=sandbox`, but that is no-op.
|
||||||
|
|
||||||
|
@ -2261,7 +2259,6 @@ runtime, runs the relevant `ENTRYPOINT` and `CMD` commands.
|
||||||
>
|
>
|
||||||
> On Windows, the user must be created first if it's not a built-in account.
|
> On Windows, the user must be created first if it's not a built-in account.
|
||||||
> This can be done with the `net user` command called as part of a Dockerfile.
|
> This can be done with the `net user` command called as part of a Dockerfile.
|
||||||
{ .warning }
|
|
||||||
|
|
||||||
```dockerfile
|
```dockerfile
|
||||||
FROM microsoft/windowsservercore
|
FROM microsoft/windowsservercore
|
||||||
|
@ -2332,7 +2329,6 @@ flag.
|
||||||
>
|
>
|
||||||
> Refer to the [`RUN --mount=type=secret`](#run---mounttypesecret) section to
|
> Refer to the [`RUN --mount=type=secret`](#run---mounttypesecret) section to
|
||||||
> learn about secure ways to use secrets when building images.
|
> learn about secure ways to use secrets when building images.
|
||||||
{ .warning }
|
|
||||||
|
|
||||||
A Dockerfile may include one or more `ARG` instructions. For example,
|
A Dockerfile may include one or more `ARG` instructions. For example,
|
||||||
the following is a valid Dockerfile:
|
the following is a valid Dockerfile:
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: ConsistentInstructionCasing
|
title: ConsistentInstructionCasing
|
||||||
description: All commands within the Dockerfile should use the same casing (either upper or lower)
|
description: >-
|
||||||
|
All commands within the Dockerfile should use the same casing (either upper or lower)
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/consistent-instruction-casing/
|
- /go/dockerfile/rule/consistent-instruction-casing/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: CopyIgnoredFile
|
title: CopyIgnoredFile
|
||||||
description: Attempting to Copy file that is excluded by .dockerignore
|
description: >-
|
||||||
|
Attempting to Copy file that is excluded by .dockerignore
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/copy-ignored-file/
|
- /go/dockerfile/rule/copy-ignored-file/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: DuplicateStageName
|
title: DuplicateStageName
|
||||||
description: Stage names should be unique
|
description: >-
|
||||||
|
Stage names should be unique
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/duplicate-stage-name/
|
- /go/dockerfile/rule/duplicate-stage-name/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: FromAsCasing
|
title: FromAsCasing
|
||||||
description: The 'as' keyword should match the case of the 'from' keyword
|
description: >-
|
||||||
|
The 'as' keyword should match the case of the 'from' keyword
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/from-as-casing/
|
- /go/dockerfile/rule/from-as-casing/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: FromPlatformFlagConstDisallowed
|
title: FromPlatformFlagConstDisallowed
|
||||||
description: FROM --platform flag should not use a constant value
|
description: >-
|
||||||
|
FROM --platform flag should not use a constant value
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/from-platform-flag-const-disallowed/
|
- /go/dockerfile/rule/from-platform-flag-const-disallowed/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: InvalidDefaultArgInFrom
|
title: InvalidDefaultArgInFrom
|
||||||
description: Default value for global ARG results in an empty or invalid base image name
|
description: >-
|
||||||
|
Default value for global ARG results in an empty or invalid base image name
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/invalid-default-arg-in-from/
|
- /go/dockerfile/rule/invalid-default-arg-in-from/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: InvalidDefinitionDescription
|
title: InvalidDefinitionDescription
|
||||||
description: "Comment for build stage or argument should follow the format: `# <arg/stage name> <description>`. If this is not intended to be a description comment, add an empty line or comment between the instruction and the comment."
|
description: >-
|
||||||
|
Comment for build stage or argument should follow the format: `# <arg/stage name> <description>`. If this is not intended to be a description comment, add an empty line or comment between the instruction and the comment.
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/invalid-definition-description/
|
- /go/dockerfile/rule/invalid-definition-description/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: JSONArgsRecommended
|
title: JSONArgsRecommended
|
||||||
description: JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals
|
description: >-
|
||||||
|
JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/json-args-recommended/
|
- /go/dockerfile/rule/json-args-recommended/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: LegacyKeyValueFormat
|
title: LegacyKeyValueFormat
|
||||||
description: Legacy key/value format with whitespace separator should not be used
|
description: >-
|
||||||
|
Legacy key/value format with whitespace separator should not be used
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/legacy-key-value-format/
|
- /go/dockerfile/rule/legacy-key-value-format/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: MaintainerDeprecated
|
title: MaintainerDeprecated
|
||||||
description: The MAINTAINER instruction is deprecated, use a label instead to define an image author
|
description: >-
|
||||||
|
The MAINTAINER instruction is deprecated, use a label instead to define an image author
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/maintainer-deprecated/
|
- /go/dockerfile/rule/maintainer-deprecated/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: MultipleInstructionsDisallowed
|
title: MultipleInstructionsDisallowed
|
||||||
description: Multiple instructions of the same type should not be used in the same stage
|
description: >-
|
||||||
|
Multiple instructions of the same type should not be used in the same stage
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/multiple-instructions-disallowed/
|
- /go/dockerfile/rule/multiple-instructions-disallowed/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: NoEmptyContinuation
|
title: NoEmptyContinuation
|
||||||
description: Empty continuation lines will become errors in a future release
|
description: >-
|
||||||
|
Empty continuation lines will become errors in a future release
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/no-empty-continuation/
|
- /go/dockerfile/rule/no-empty-continuation/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: RedundantTargetPlatform
|
title: RedundantTargetPlatform
|
||||||
description: Setting platform to predefined $TARGETPLATFORM in FROM is redundant as this is the default behavior
|
description: >-
|
||||||
|
Setting platform to predefined $TARGETPLATFORM in FROM is redundant as this is the default behavior
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/redundant-target-platform/
|
- /go/dockerfile/rule/redundant-target-platform/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: ReservedStageName
|
title: ReservedStageName
|
||||||
description: Reserved words should not be used as stage names
|
description: >-
|
||||||
|
Reserved words should not be used as stage names
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/reserved-stage-name/
|
- /go/dockerfile/rule/reserved-stage-name/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: SecretsUsedInArgOrEnv
|
title: SecretsUsedInArgOrEnv
|
||||||
description: Sensitive data should not be used in the ARG or ENV commands
|
description: >-
|
||||||
|
Sensitive data should not be used in the ARG or ENV commands
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/secrets-used-in-arg-or-env/
|
- /go/dockerfile/rule/secrets-used-in-arg-or-env/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: StageNameCasing
|
title: StageNameCasing
|
||||||
description: Stage names should be lowercase
|
description: >-
|
||||||
|
Stage names should be lowercase
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/stage-name-casing/
|
- /go/dockerfile/rule/stage-name-casing/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: UndefinedArgInFrom
|
title: UndefinedArgInFrom
|
||||||
description: FROM command must use declared ARGs
|
description: >-
|
||||||
|
FROM command must use declared ARGs
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/undefined-arg-in-from/
|
- /go/dockerfile/rule/undefined-arg-in-from/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: UndefinedVar
|
title: UndefinedVar
|
||||||
description: Variables should be defined before their use
|
description: >-
|
||||||
|
Variables should be defined before their use
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/undefined-var/
|
- /go/dockerfile/rule/undefined-var/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: WorkdirRelativePath
|
title: WorkdirRelativePath
|
||||||
description: Relative workdir without an absolute workdir declared within the build can have unexpected results if the base image changes
|
description: >-
|
||||||
|
Relative workdir without an absolute workdir declared within the build can have unexpected results if the base image changes
|
||||||
aliases:
|
aliases:
|
||||||
- /go/dockerfile/rule/workdir-relative-path/
|
- /go/dockerfile/rule/workdir-relative-path/
|
||||||
---
|
---
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
# github.com/moby/moby v27.3.1+incompatible
|
# github.com/moby/moby v27.3.1+incompatible
|
||||||
# github.com/moby/buildkit v0.17.0
|
# github.com/moby/buildkit v0.17.1-0.20241031124041-354f2d13c905
|
||||||
# github.com/docker/buildx v0.18.0
|
# github.com/docker/buildx v0.18.0
|
||||||
# github.com/docker/cli v27.3.2-0.20241008150905-cb3048fbebb1+incompatible
|
# github.com/docker/cli v27.3.2-0.20241008150905-cb3048fbebb1+incompatible
|
||||||
# github.com/docker/compose/v2 v2.30.1
|
# github.com/docker/compose/v2 v2.30.1
|
||||||
|
|
4
go.mod
4
go.mod
|
@ -7,7 +7,7 @@ require (
|
||||||
github.com/docker/cli v27.3.2-0.20241008150905-cb3048fbebb1+incompatible // indirect
|
github.com/docker/cli v27.3.2-0.20241008150905-cb3048fbebb1+incompatible // indirect
|
||||||
github.com/docker/compose/v2 v2.30.1 // indirect
|
github.com/docker/compose/v2 v2.30.1 // indirect
|
||||||
github.com/docker/scout-cli v1.15.0 // indirect
|
github.com/docker/scout-cli v1.15.0 // indirect
|
||||||
github.com/moby/buildkit v0.17.0 // indirect
|
github.com/moby/buildkit v0.17.1-0.20241031124041-354f2d13c905 // indirect
|
||||||
github.com/moby/moby v27.3.1+incompatible // indirect
|
github.com/moby/moby v27.3.1+incompatible // indirect
|
||||||
)
|
)
|
||||||
|
|
||||||
|
@ -16,6 +16,6 @@ replace (
|
||||||
github.com/docker/cli => github.com/docker/cli v27.3.1+incompatible
|
github.com/docker/cli => github.com/docker/cli v27.3.1+incompatible
|
||||||
github.com/docker/compose/v2 => github.com/docker/compose/v2 v2.30.1
|
github.com/docker/compose/v2 => github.com/docker/compose/v2 v2.30.1
|
||||||
github.com/docker/scout-cli => github.com/docker/scout-cli v1.15.0
|
github.com/docker/scout-cli => github.com/docker/scout-cli v1.15.0
|
||||||
github.com/moby/buildkit => github.com/moby/buildkit v0.17.0
|
github.com/moby/buildkit => github.com/moby/buildkit v0.17.1-0.20241031124041-354f2d13c905
|
||||||
github.com/moby/moby => github.com/moby/moby v27.3.1+incompatible
|
github.com/moby/moby => github.com/moby/moby v27.3.1+incompatible
|
||||||
)
|
)
|
||||||
|
|
2
go.sum
2
go.sum
|
@ -306,6 +306,8 @@ github.com/moby/buildkit v0.16.0 h1:wOVBj1o5YNVad/txPQNXUXdelm7Hs/i0PUFjzbK0VKE=
|
||||||
github.com/moby/buildkit v0.16.0/go.mod h1:Xqx/5GlrqE1yIRORk0NSCVDFpQAU1WjlT6KHYZdisIQ=
|
github.com/moby/buildkit v0.16.0/go.mod h1:Xqx/5GlrqE1yIRORk0NSCVDFpQAU1WjlT6KHYZdisIQ=
|
||||||
github.com/moby/buildkit v0.17.0 h1:ZA/4AxwBbve1f3ZaNNJQiCBtTV62R6YweWNwq4A+sTc=
|
github.com/moby/buildkit v0.17.0 h1:ZA/4AxwBbve1f3ZaNNJQiCBtTV62R6YweWNwq4A+sTc=
|
||||||
github.com/moby/buildkit v0.17.0/go.mod h1:ru8NFyDHD8HbuKaLXJIjK9nr3x6FZR+IWjtF07S+wdM=
|
github.com/moby/buildkit v0.17.0/go.mod h1:ru8NFyDHD8HbuKaLXJIjK9nr3x6FZR+IWjtF07S+wdM=
|
||||||
|
github.com/moby/buildkit v0.17.1-0.20241031124041-354f2d13c905 h1:KMEmQThIQYXKvBurcvM+6zZjxP2CoNSsF/wUpW+RC/E=
|
||||||
|
github.com/moby/buildkit v0.17.1-0.20241031124041-354f2d13c905/go.mod h1:ru8NFyDHD8HbuKaLXJIjK9nr3x6FZR+IWjtF07S+wdM=
|
||||||
github.com/moby/locker v1.0.1/go.mod h1:S7SDdo5zpBK84bzzVlKr2V0hz+7x9hWbYC/kq7oQppc=
|
github.com/moby/locker v1.0.1/go.mod h1:S7SDdo5zpBK84bzzVlKr2V0hz+7x9hWbYC/kq7oQppc=
|
||||||
github.com/moby/moby v24.0.2+incompatible h1:yH+5dRHH1x3XRKzl1THA2aGTy6CHYnkt5N924ADMax8=
|
github.com/moby/moby v24.0.2+incompatible h1:yH+5dRHH1x3XRKzl1THA2aGTy6CHYnkt5N924ADMax8=
|
||||||
github.com/moby/moby v24.0.2+incompatible/go.mod h1:fDXVQ6+S340veQPv35CzDahGBmHsiclFwfEygB/TWMc=
|
github.com/moby/moby v24.0.2+incompatible/go.mod h1:fDXVQ6+S340veQPv35CzDahGBmHsiclFwfEygB/TWMc=
|
||||||
|
|
Loading…
Reference in New Issue