v0.7.0

Images

https://hub.docker.com/r/moby/buildkit/tags/

• docker.io/moby/buildkit:v0.7.0
  sha256:68f03dba7fe0fa40d43ce62bc292ae42a11efe4f2dee64c196e1ff266a5ea507

• docker.io/moby/buildkit:v0.7.0-rootless
  sha256:6e7687bc3409812f7e6c6cee87166a0df376ca172e7a24e7f1d477ab1b3116b3

Important

• This release breaks compatibility with containerd 1.2 when containerd worker is used. This is to support the lease based resource tracking in containerd 1.3. Note that default configurations of buildkit use the OCI worker and are not affected. If you use containerd worker make sure to upgrade to containerd 1.3 . #1176

• This release migrates the internal state files used for resource tracking to containerd leases on the first start and doesn't support downgrades back to v0.6.0 . #1176

• Solve requests made from frontends or gateway API are now nonblocking and return a promise of a result. The change should be functionally invisible to old frontends but may change the timing of different requests #1356

Notable Changes

• LLB: Previous solve results can now be reused in new requests #1286

• Allow frontends to take LLB states or previous results as inputs #1361

• Support for insecure TLS registries and custom TLS config #1397 #1410

• Support for fallbacks to origin server when mirror doesn't have requested repository #1397

• Resource tracking has been moved to new containerd leases API from previously used root labels, fixing possible races. #1176

• Support for cross-repo pushes for images and remote cache #1147

• SSH sockets do not hold FD open until the end of the build #1150

• Handle missing Etags in http responses #1159

• LLB FileOp now supports wildcards #1233

• Support for choosing compression for layer data #1277

• Rootless mode supports fuse-overlayfs snapshotter #1384

• Updates to supported platforms (eg. enabling binfmt) do not require BuildKit restart anymore #1381

• Insecure security mode now supports access to common devices like fuse and loopback #1351

• Rootless mode is now out of experimental #1400

• Many bugfixes

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• Akihiro Suda
• Edgar Lee
• Tibor Vass
• Andy Caldwell
• Paul "TBBle" Hampson
• Nikhil Pandeti
• Sebastiaan van Stijn
• Sam Whited
• Wei Fu
• Derek McGowan
• Jeffrey Huang
• Robert Estelle
• Tomohiro Kusumoto
• Troels Liebe Bentsen
• Zach Badgett
• Anca Iordache
• ChaosGramer
• Cory Bennett
• Darren Shepherd
• HowJMay
• Michael Crosby
• Oliver Bristow
• Pablo Chico de Guzman
• Pratik Raj
• Lu Jingxiao
• 岁丰

v0.7.0-rc1

Images

https://hub.docker.com/r/moby/buildkit/tags/

• docker.io/moby/buildkit:v0.7.0-rc1
  sha256:12cb8cb0d426df5ceea53c7be7542b38b389edbe07b9fcd29ed152ea5d12c6f9

• docker.io/moby/buildkit:v0.7.0-rc1-rootless
  sha256:7f3ef1607dfccc95fadeebfbb9ed74dd5572eda8d656413ffb1146e6af397acc

Important

• This release breaks compatibility with containerd 1.2 when containerd worker is used. This is to support the lease based resource tracking in containerd 1.3. Note that default configurations of buildkit use the OCI worker and are not affected. If you use containerd worker make sure to upgrade to containerd 1.3 . #1176

• This release migrates the internal state files used for resource tracking to containerd leases on the first start and doesn't support downgrades back to v0.6.0 . #1176

• Solve requests made from frontends or gateway API are now nonblocking and return a promise of a result. The change should be functionally invisible to old frontends but may change the timing of different requests #1356

Notable Changes

• LLB: Previous solve results can now be reused in new requests #1286

• Allow frontends to take LLB states or previous results as inputs #1361

• Support for insecure TLS registries #1397

• Support for fallbacks to origin server when mirror doesn't have requested repository #1397

• Resource tracking has been moved to new containerd leases API from previously used root labels, fixing possible races. #1176

• Support for cross-repo pushes for images and remote cache #1147

• SSH sockets do not hold FD open until the end of the build #1150

• Handle missing Etags in http responses #1159

• LLB FileOp now supports wildcards #1233

• Support for choosing compression for layer data #1277

• Rootless mode supports fuse-overlayfs snapshotter #1384

• Updates to supported platforms (eg. enabling binfmt) do not require BuildKit restart anymore #1381

• Insecure security mode now supports access to common devices like fuse and loopback #1351

• Rootless mode is now out of experimental #1400

• Many bugfixes

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• Akihiro Suda
• Edgar Lee
• Tibor Vass
• Andy Caldwell
• Paul "TBBle" Hampson
• Nikhil Pandeti
• Sebastiaan van Stijn
• Sam Whited
• Wei Fu
• Derek McGowan
• Jeffrey Huang
• Robert Estelle
• Tomohiro Kusumoto
• Troels Liebe Bentsen
• Zach Badgett
• Anca Iordache
• ChaosGramer
• Cory Bennett
• Darren Shepherd
• HowJMay
• Michael Crosby
• Oliver Bristow
• Pablo Chico de Guzman
• Pratik Raj
• Lu Jingxiao
• 岁丰

dockerfile/1.1.6-rc1-experimental

https://hub.docker.com/layers/docker/dockerfile-upstream/1.1.6-rc1-experimental/images/sha256-5ff27715035510f267d4665cf6847e4742866c2c88159f29c430b19a68fffcf9

Notable Changes

• RUN --network=none|default|host allows specifying network mode for a process #1141

dockerfile/1.1.6-rc1

https://hub.docker.com/layers/docker/dockerfile-upstream/1.1.6-rc1/images/sha256-152891737c5df182757065fec0768428b96fcfd1836427c196640460032ce34e

Notable Changes

• Dockerfile frontend now allows inputs to be passed from LLB states/results #1361

• Update LLB client to BuildKit v0.7.0

v0.6.4

Fixes:

• avoid panic on combined cache load #1328
• avoid goroutine leak with containerd worker #1316
• use extended agent for ssh forwarding for modern sign hashes #1270
• support runAsNonRoot in kubernetes #1344
• fix deadlock on releasing shared mounts #1355
• dockerfile: clear onbuild rules after triggering #1324

v0.6.3

Fixes:

• dockerfile: fix copy symlinks on copied dir #1228
• exec: fix mount options on userns remapping #1231
• cache: fix possible concurrent maps write on parent release #1257

v0.6.2

Fixes:

• ssh: Fix file descriptor leak when doing SSH forwarding #1150
• contenthash: Fix bug with symlink in source path of a copy operation #1140
• fsutil: Handle copying unix sockets in local sources #1144
• llbsolver: Fix using multiple remote cache importers #1156
• http: Handle missing but unambiguous ETags in response #1159
• solver: Fix possible inefficient parallelization in solver #1166
• executor: oom_score_adj is no longer set from main process #1139

v0.6.1

Fixes:

• Importing inline cache from manifest lists #1129
• Readwrite mounts handling #1124

Dockerfile:

• Support for git context with keeping the .git directory #1132
• COPY --from with relative source path compatibility with old versions #1125

v0.6.0

Images

https://hub.docker.com/r/moby/buildkit/tags/

• docker.io/moby/buildkit:v0.6.0
  sha256:f1a5fc2c244c2b3b3dda344f6a0c64796b31aa96aa2ab88c951aeeeb66e23318

• docker.io/moby/buildkit:v0.6.0-rootless
  sha256:d70dd5f1fbaa1e729e380b3a31c394a5f79ec0c19c55e6636cf63e97c390a9f0

Notable Changes

• Custom DNS configuration and use systemd resolver if enabled #1033 #1040

• Optional CNI networking support #1073

• Automatic platform runtime support detection for RISC-V, ppc64le and s390x #1038 #1103

• Clear previous cache mounts on no-cache builds #1092

• Fix contention bugs between GC releases and cache import #1007 #1013 #1044

• Updates on how cgroupfs/sysfs are mounted in privileged security mode #1085

• Validate LLB not generated by golang package #1049

• Handle canceled local upload state #1023

• Provide a workaround for invalid registry responses from gcr.io #1024

Contributors

• Tõnis Tiigi
• Tibor Vass
• Akihiro Suda
• Andrey Smirnov
• Stepan Blyshchak
• Dave Chen
• Stefan Schoof
• Christian Höltje
• Colin Chartier
• Nathan Sullivan
• Sebastiaan van Stijn
• Tomohiro Kusumoto
• Lajos Papp
• Mark Gordon

https://travis-ci.org/moby/buildkit/builds/566124940

dockerfile/1.1.2-experimental

This release is currently in staging: docker/dockerfile-upstream:1.1.2-experimental

sha256:702620cd58aea03f8c6c9b65c4eb45899677b9eec97042298a46537da20e145a

• Allow setting security mode for a process with RUN --security=sandbox|insecure #1081

• Allow setting uid/gid for cache mounts #1017

• Avoid requesting internally linked paths to be pulled to build context #1075

• Ensure missing cache IDs default to target paths #1093

• Allow setting namespace for cache mounts with BUILDKIT_CACHE_MOUNT_NS build arg #1094