-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
integration: set mirrors and entitlements with dockerd worker #3482
Conversation
util/testutil/integration/dockerd.go
Outdated
return nil, nil, errors.Wrapf(err, "failed to load buildkit config file %s", cfg.ConfigFile) | ||
} | ||
|
||
var mirrors []string |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
could we set up the entitlements as well
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I see we set:
buildkit/client/client_test.go
Lines 8582 to 8584 in 234dfca
func (*secModeInsecure) UpdateConfigFile(in string) string { | |
return in + "\n\ninsecure-entitlements = [\"security.insecure\"]\n" | |
} |
buildkit/client/client_test.go
Lines 8591 to 8593 in 234dfca
func (*netModeHost) UpdateConfigFile(in string) string { | |
return in + "\n\ninsecure-entitlements = [\"network.host\"]\n" | |
} |
I guess it's just for containerd snapshotter right?:
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No, it should work independently of snapshotter
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I guess it's just for containerd snapshotter right?:
Nevermind
util/testutil/integration/dockerd.go
Outdated
var mirrors []string | ||
if reg, ok := bkcfg.Registries["docker.io"]; ok && len(reg.Mirrors) > 0 { | ||
for _, m := range reg.Mirrors { | ||
mirrors = append(mirrors, "http://"+m) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ideally the http
comes from "localhost" name or "HTTP` property if it is set.
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
related to moby/moby#44546 Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
5fd2a79
to
489c823
Compare
follow-up moby/moby#44772 (comment)
Verified on my fork: https://github.com/crazy-max/buildkit/actions/runs/3877830239/jobs/6613351059#step:8:1744
Also update dockerd workflow following changes on moby: moby/moby#44546