From c3af82f4a41a43cb44005f62f33f224ff2e6451d Mon Sep 17 00:00:00 2001 From: CrazyMax <1951866+crazy-max@users.noreply.github.com> Date: Fri, 24 Jan 2025 00:58:03 +0100 Subject: [PATCH 1/2] buildx: update to buildx 0.20.0 release notes Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com> --- content/manuals/build/release-notes.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/content/manuals/build/release-notes.md b/content/manuals/build/release-notes.md index 0c995aaf89bc..0672a3aeda63 100644 --- a/content/manuals/build/release-notes.md +++ b/content/manuals/build/release-notes.md @@ -17,6 +17,16 @@ fixes in [Docker Buildx](https://github.com/docker/buildx). The full release note for this release is available [on GitHub](https://github.com/docker/buildx/releases/tag/v0.20.0). +> [!NOTE] +> This version of buildx enables filesystem entitlement checks for `buildx bake` +> command by default. If your Bake definition needs to read or write files +> outside your current working directory, you need to allow access to these +> paths with `--allow fs=`. On the terminal, you can also interactively +> approve these paths with the provided prompt. Optionally, you can disable +> these checks by setting `BUILDX_BAKE_ENTITLEMENTS_FS=0`. This validation +> produced a warning in Buildx v0.19.0+, but starting from current release it +> produces an error. [docs](/reference/cli/docker/buildx/bake.md#allow) + ### New - New `buildx history` command has been added that allows working with build records of completed and running builds. You can use these commands to list, inspect, remove your builds, replay the logs of already completed builds, and quickly open your builds in Docker Desktop Build UI for further debugging. This is an early version of this command and we expect to add more features in the future releases. [#2891](https://github.com/docker/buildx/pull/2891), [#2925](https://github.com/docker/buildx/pull/2925) From dc1e624b7c550406b243231fd806c0a850963faf Mon Sep 17 00:00:00 2001 From: Allie Sadler <102604716+aevesdocker@users.noreply.github.com> Date: Fri, 24 Jan 2025 14:27:08 +0000 Subject: [PATCH 2/2] Apply suggestions from code review --- content/manuals/build/release-notes.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/content/manuals/build/release-notes.md b/content/manuals/build/release-notes.md index 0672a3aeda63..3de7e563f344 100644 --- a/content/manuals/build/release-notes.md +++ b/content/manuals/build/release-notes.md @@ -18,6 +18,7 @@ The full release note for this release is available [on GitHub](https://github.com/docker/buildx/releases/tag/v0.20.0). > [!NOTE] +> > This version of buildx enables filesystem entitlement checks for `buildx bake` > command by default. If your Bake definition needs to read or write files > outside your current working directory, you need to allow access to these @@ -25,7 +26,7 @@ The full release note for this release is available > approve these paths with the provided prompt. Optionally, you can disable > these checks by setting `BUILDX_BAKE_ENTITLEMENTS_FS=0`. This validation > produced a warning in Buildx v0.19.0+, but starting from current release it -> produces an error. [docs](/reference/cli/docker/buildx/bake.md#allow) +> produces an error. For more information, see the [reference documentation](/reference/cli/docker/buildx/bake.md#allow). ### New