mirror of https://github.com/docker/docs.git
				
				
				
			Merge pull request #21350 from dvdksn/vendor-buildkit-354f2d13c905c05b0c4f44ff9c2d1e61430212bc
vendor: github.com/moby/buildkit 354f2d13c905c05b0c4f44ff9c2d1e61430212bc
This commit is contained in:
		
						commit
						ce9fa9cd67
					
				|  | @ -943,7 +943,6 @@ The command is run in the host's network environment (similar to | |||
| > which needs to be enabled when starting the buildkitd daemon with | ||||
| > `--allow-insecure-entitlement network.host` flag or in [buildkitd config](https://github.com/moby/buildkit/blob/master/docs/buildkitd.toml.md), | ||||
| > and for a build request with [`--allow network.host` flag](https://docs.docker.com/engine/reference/commandline/buildx_build/#allow). | ||||
| { .warning } | ||||
| 
 | ||||
| ### RUN --security | ||||
| 
 | ||||
|  | @ -964,7 +963,6 @@ This is equivalent to running `docker run --privileged`. | |||
| > enabled when starting the buildkitd daemon with | ||||
| > `--allow-insecure-entitlement security.insecure` flag or in [buildkitd config](https://github.com/moby/buildkit/blob/master/docs/buildkitd.toml.md), | ||||
| > and for a build request with [`--allow security.insecure` flag](https://docs.docker.com/engine/reference/commandline/buildx_build/#allow). | ||||
| { .warning } | ||||
| 
 | ||||
| Default sandbox mode can be activated via `--security=sandbox`, but that is no-op. | ||||
| 
 | ||||
|  | @ -2261,7 +2259,6 @@ runtime, runs the relevant `ENTRYPOINT` and `CMD` commands. | |||
| > | ||||
| > On Windows, the user must be created first if it's not a built-in account. | ||||
| > This can be done with the `net user` command called as part of a Dockerfile. | ||||
| { .warning } | ||||
| 
 | ||||
| ```dockerfile | ||||
| FROM microsoft/windowsservercore | ||||
|  | @ -2332,7 +2329,6 @@ flag. | |||
| > | ||||
| > Refer to the [`RUN --mount=type=secret`](#run---mounttypesecret) section to | ||||
| > learn about secure ways to use secrets when building images. | ||||
| { .warning } | ||||
| 
 | ||||
| A Dockerfile may include one or more `ARG` instructions. For example, | ||||
| the following is a valid Dockerfile: | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: ConsistentInstructionCasing | ||||
| description: All commands within the Dockerfile should use the same casing (either upper or lower) | ||||
| description: >- | ||||
|   All commands within the Dockerfile should use the same casing (either upper or lower) | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/consistent-instruction-casing/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: CopyIgnoredFile | ||||
| description: Attempting to Copy file that is excluded by .dockerignore | ||||
| description: >- | ||||
|   Attempting to Copy file that is excluded by .dockerignore | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/copy-ignored-file/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: DuplicateStageName | ||||
| description: Stage names should be unique | ||||
| description: >- | ||||
|   Stage names should be unique | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/duplicate-stage-name/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: FromAsCasing | ||||
| description: The 'as' keyword should match the case of the 'from' keyword | ||||
| description: >- | ||||
|   The 'as' keyword should match the case of the 'from' keyword | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/from-as-casing/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: FromPlatformFlagConstDisallowed | ||||
| description: FROM --platform flag should not use a constant value | ||||
| description: >- | ||||
|   FROM --platform flag should not use a constant value | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/from-platform-flag-const-disallowed/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: InvalidDefaultArgInFrom | ||||
| description: Default value for global ARG results in an empty or invalid base image name | ||||
| description: >- | ||||
|   Default value for global ARG results in an empty or invalid base image name | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/invalid-default-arg-in-from/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: InvalidDefinitionDescription | ||||
| description: "Comment for build stage or argument should follow the format: `# <arg/stage name> <description>`. If this is not intended to be a description comment, add an empty line or comment between the instruction and the comment." | ||||
| description: >- | ||||
|   Comment for build stage or argument should follow the format: `# <arg/stage name> <description>`. If this is not intended to be a description comment, add an empty line or comment between the instruction and the comment. | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/invalid-definition-description/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: JSONArgsRecommended | ||||
| description: JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals | ||||
| description: >- | ||||
|   JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/json-args-recommended/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: LegacyKeyValueFormat | ||||
| description: Legacy key/value format with whitespace separator should not be used | ||||
| description: >- | ||||
|   Legacy key/value format with whitespace separator should not be used | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/legacy-key-value-format/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: MaintainerDeprecated | ||||
| description: The MAINTAINER instruction is deprecated, use a label instead to define an image author | ||||
| description: >- | ||||
|   The MAINTAINER instruction is deprecated, use a label instead to define an image author | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/maintainer-deprecated/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: MultipleInstructionsDisallowed | ||||
| description: Multiple instructions of the same type should not be used in the same stage | ||||
| description: >- | ||||
|   Multiple instructions of the same type should not be used in the same stage | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/multiple-instructions-disallowed/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: NoEmptyContinuation | ||||
| description: Empty continuation lines will become errors in a future release | ||||
| description: >- | ||||
|   Empty continuation lines will become errors in a future release | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/no-empty-continuation/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: RedundantTargetPlatform | ||||
| description: Setting platform to predefined $TARGETPLATFORM in FROM is redundant as this is the default behavior | ||||
| description: >- | ||||
|   Setting platform to predefined $TARGETPLATFORM in FROM is redundant as this is the default behavior | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/redundant-target-platform/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: ReservedStageName | ||||
| description: Reserved words should not be used as stage names | ||||
| description: >- | ||||
|   Reserved words should not be used as stage names | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/reserved-stage-name/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: SecretsUsedInArgOrEnv | ||||
| description: Sensitive data should not be used in the ARG or ENV commands | ||||
| description: >- | ||||
|   Sensitive data should not be used in the ARG or ENV commands | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/secrets-used-in-arg-or-env/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: StageNameCasing | ||||
| description: Stage names should be lowercase | ||||
| description: >- | ||||
|   Stage names should be lowercase | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/stage-name-casing/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: UndefinedArgInFrom | ||||
| description: FROM command must use declared ARGs | ||||
| description: >- | ||||
|   FROM command must use declared ARGs | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/undefined-arg-in-from/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: UndefinedVar | ||||
| description: Variables should be defined before their use | ||||
| description: >- | ||||
|   Variables should be defined before their use | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/undefined-var/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,6 +1,7 @@ | |||
| --- | ||||
| title: WorkdirRelativePath | ||||
| description: Relative workdir without an absolute workdir declared within the build can have unexpected results if the base image changes | ||||
| description: >- | ||||
|   Relative workdir without an absolute workdir declared within the build can have unexpected results if the base image changes | ||||
| aliases: | ||||
|   - /go/dockerfile/rule/workdir-relative-path/ | ||||
| --- | ||||
|  |  | |||
|  | @ -1,5 +1,5 @@ | |||
| # github.com/moby/moby v27.3.1+incompatible | ||||
| # github.com/moby/buildkit v0.17.0 | ||||
| # github.com/moby/buildkit v0.17.1-0.20241031124041-354f2d13c905 | ||||
| # github.com/docker/buildx v0.18.0 | ||||
| # github.com/docker/cli v27.3.2-0.20241008150905-cb3048fbebb1+incompatible | ||||
| # github.com/docker/compose/v2 v2.30.1 | ||||
|  |  | |||
							
								
								
									
										4
									
								
								go.mod
								
								
								
								
							
							
						
						
									
										4
									
								
								go.mod
								
								
								
								
							|  | @ -7,7 +7,7 @@ require ( | |||
| 	github.com/docker/cli v27.3.2-0.20241008150905-cb3048fbebb1+incompatible // indirect | ||||
| 	github.com/docker/compose/v2 v2.30.1 // indirect | ||||
| 	github.com/docker/scout-cli v1.15.0 // indirect | ||||
| 	github.com/moby/buildkit v0.17.0 // indirect | ||||
| 	github.com/moby/buildkit v0.17.1-0.20241031124041-354f2d13c905 // indirect | ||||
| 	github.com/moby/moby v27.3.1+incompatible // indirect | ||||
| ) | ||||
| 
 | ||||
|  | @ -16,6 +16,6 @@ replace ( | |||
| 	github.com/docker/cli => github.com/docker/cli v27.3.1+incompatible | ||||
| 	github.com/docker/compose/v2 => github.com/docker/compose/v2 v2.30.1 | ||||
| 	github.com/docker/scout-cli => github.com/docker/scout-cli v1.15.0 | ||||
| 	github.com/moby/buildkit => github.com/moby/buildkit v0.17.0 | ||||
| 	github.com/moby/buildkit => github.com/moby/buildkit v0.17.1-0.20241031124041-354f2d13c905 | ||||
| 	github.com/moby/moby => github.com/moby/moby v27.3.1+incompatible | ||||
| ) | ||||
|  |  | |||
							
								
								
									
										2
									
								
								go.sum
								
								
								
								
							
							
						
						
									
										2
									
								
								go.sum
								
								
								
								
							|  | @ -306,6 +306,8 @@ github.com/moby/buildkit v0.16.0 h1:wOVBj1o5YNVad/txPQNXUXdelm7Hs/i0PUFjzbK0VKE= | |||
| github.com/moby/buildkit v0.16.0/go.mod h1:Xqx/5GlrqE1yIRORk0NSCVDFpQAU1WjlT6KHYZdisIQ= | ||||
| github.com/moby/buildkit v0.17.0 h1:ZA/4AxwBbve1f3ZaNNJQiCBtTV62R6YweWNwq4A+sTc= | ||||
| github.com/moby/buildkit v0.17.0/go.mod h1:ru8NFyDHD8HbuKaLXJIjK9nr3x6FZR+IWjtF07S+wdM= | ||||
| github.com/moby/buildkit v0.17.1-0.20241031124041-354f2d13c905 h1:KMEmQThIQYXKvBurcvM+6zZjxP2CoNSsF/wUpW+RC/E= | ||||
| github.com/moby/buildkit v0.17.1-0.20241031124041-354f2d13c905/go.mod h1:ru8NFyDHD8HbuKaLXJIjK9nr3x6FZR+IWjtF07S+wdM= | ||||
| github.com/moby/locker v1.0.1/go.mod h1:S7SDdo5zpBK84bzzVlKr2V0hz+7x9hWbYC/kq7oQppc= | ||||
| github.com/moby/moby v24.0.2+incompatible h1:yH+5dRHH1x3XRKzl1THA2aGTy6CHYnkt5N924ADMax8= | ||||
| github.com/moby/moby v24.0.2+incompatible/go.mod h1:fDXVQ6+S340veQPv35CzDahGBmHsiclFwfEygB/TWMc= | ||||
|  |  | |||
		Loading…
	
		Reference in New Issue