v0.11.0-rc1

Welcome to the v0.11.0-rc1 release of buildx!

This is a pre-release of buildx

Please try out the release binaries and report any issues at /~https://github.com/docker/buildx/issues.

Notable changes

• Commands now display the current builder name in the build progress output #1177

• Bake now supports matrix builds. The new matrix field on target blocks allows easily creating multiple similar sets of targets #1690 docs

• The build command now saves local paths from previous builds to the builder local state #1735

• New experimental --detach flag for the build command to run the build in a detached server, allowing attaching to the build later using debug-shell (requires BUILDX_EXPERIMENTAL=1) #1296 #1620 #1614 #1737 #1755 docs

• New monitor mode commands exec and attach to allow spawning additional processes in a debugging session (requires BUILDX_EXPERIMENTAL=1) #1626 docs

• New experimental debug-shell command to directly start the build debugging monitor without starting a build, allowing connecting to previously --detached builds (requires BUILDX_EXPERIMENTAL=1) #1640 docs

• New experimental --invoke=on-error option for the --invoke command to start the build debugging monitor at the point at which a build fails (requires BUILDX_EXPERIMENTAL=1) #1640 docs

• Bake now supports detecting compose.yml/compose.yaml files in addition to docker-compose.yml/docker-compose.yaml #1752

• Bake now supports new compose build keys dockerfile_inline and additional_contexts #1784

• Bake now supports replace HCL function #1720

• Initial support for CLI command completion, including: builder names, folder names for build commands and bake targets #1727

• Builds support the new EXPERIMENTAL_BUILDKIT_SOURCE_POLICY environment variable to set the path to a source policy docs #1628

• BuildKit versions are correctly displayed in buildx ls and buildx inspect for builders using the Docker driver #1552

• Builders using the remote driver allow using TLS without proving its own key/cert (if BuildKit remote is configured to support it) #1693

• Builders using the kubernetes driver allow automatically generating the node name if not provided #1673

• Builders using the kubernetes driver support a new serviceaccount option, which will set the created pod's serviceAccountName #1597

• Builders using the kubernetes driver support the proxy-url kubeconfig option docs #1780

• Fix possible panic when no builders are available #1732

• Fix docker-container driver hang on container panic #1772

• Fix bake failure when remote bake file is accessed using SSH #1711 #1734

• Fix bake failure when remote bake context is incorrectly resolved #1783

• Fix opaque error messages on invalid edge-case git urls #1710 #1733

• Fix race in printer so that logrus warning messages appear at the end of the build deterministically #1794

• Fix connection leak for feature check on default docker driver #1776

Contributors

• Justin Chadwell
• CrazyMax
• Tõnis Tiigi
• Kohei Tokunaga
• Sebastiaan van Stijn
• David Karlsson
• Akihiro Suda
• Batuhan Apaydın
• Brian Goff
• Nick Sieger
• Batuhan Apaydın
• David Gageot
• Elran Shefer
• Milas Bowman
• Nick Santos
• Robert Lestak

Dependency Changes

• cloud.google.com/go/compute v1.12.1 -> v1.18.0
• cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
• github.com/AdaLogics/go-fuzz-headers 43070de90fa1 new
• github.com/Azure/go-autorest/autorest v0.11.24 -> v0.11.27
• github.com/Azure/go-autorest/autorest/adal v0.9.18 -> v0.9.20
• github.com/Masterminds/semver/v3 v3.2.0 new
• github.com/Microsoft/go-winio v0.5.2 -> v0.6.0
• github.com/cenkalti/backoff/v4 v4.1.2 -> v4.2.0
• github.com/cespare/xxhash/v2 v2.1.2 -> v2.2.0
• github.com/compose-spec/compose-go v1.6.0 -> v1.13.4
• github.com/containerd/containerd 1709cfe273d9 -> v1.7.0
• github.com/containerd/ttrpc v1.1.0 -> v1.2.1
• github.com/containerd/typeurl/v2 v2.1.0 new
• github.com/cyphar/filepath-securejoin v0.2.3 new
• github.com/distribution/distribution/v3 4bf3547399eb -> 36d8c594d7aa
• github.com/docker/cli v23.0.0-rc.1 -> v23.0.6
• github.com/docker/distribution v2.8.1 -> v2.8.2
• github.com/docker/docker v23.0.0-rc.1 -> v23.0.6
• github.com/emicklei/go-restful/v3 v3.10.1 new
• github.com/felixge/httpsnoop v1.0.2 -> v1.0.3
• github.com/go-openapi/jsonpointer v0.19.5 new
• github.com/go-openapi/jsonreference v0.20.0 new
• github.com/go-openapi/swag v0.19.14 new
• github.com/google/certificate-transparency-go v1.0.21 -> v1.1.4
• github.com/google/gnostic v0.5.7-v3refs new
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.11.3 new
• github.com/imdario/mergo v0.3.13 -> v0.3.15
• github.com/josharian/intern v1.0.0 new
• github.com/klauspost/compress v1.15.12 -> v1.16.0
• github.com/mailru/easyjson v0.7.6 new
• github.com/moby/buildkit v0.11.2 -> 333ee9158128
• github.com/munnerz/goautoneg a7dc8b61c822 new
• github.com/opencontainers/image-spec 02efb9a75ee1 -> 3a7f492d3f1b
• github.com/opencontainers/runc v1.1.3 -> v1.1.5
• github.com/sergi/go-diff v1.2.0 new
• github.com/stretchr/testify v1.8.1 -> v1.8.2
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.29.0 -> v0.40.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.29.0 -> v0.40.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.29.0 -> v0.40.0
• go.opentelemetry.io/otel v1.4.1 -> v1.14.0
• go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.4.1 -> v1.14.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.4.1 -> v1.14.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.4.1 -> v1.14.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.4.1 -> v1.14.0
• go.opentelemetry.io/otel/metric v0.27.0 -> v0.37.0
• go.opentelemetry.io/otel/sdk v1.4.1 -> v1.14.0
• go.opentelemetry.io/otel/trace v1.4.1 -> v1.14.0
• go.opentelemetry.io/proto/otlp v0.12.0 -> v0.19.0
• golang.org/x/mod v0.7.0 new
• golang.org/x/net v0.4.0 -> v0.7.0
• golang.org/x/oauth2 6fdb5e3db783 -> v0.4.0
• golang.org/x/sys v0.3.0 -> v0.6.0
• golang.org/x/term ...

v0.10.4

Welcome to the 0.10.4 release of buildx!

Please try out the release binaries and report any issues at
/~https://github.com/docker/buildx/issues.

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using --provenance=false.

Notable changes

• Add BUILDX_NO_DEFAULT_ATTESTATIONS as alternative to --provenance false #1645
• Disable dirty Git checkout detection by default for performance. Can be enabled with BUILDX_GIT_CHECK_DIRTY opt-in #1650
• Strip credentials from VCS hint URL before sending to BuildKit #1664

v0.10.3

Welcome to the 0.10.3 release of buildx!

Please try out the release binaries and report any issues at
/~https://github.com/docker/buildx/issues.

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using --provenance=false.

Notable changes

• Fix reachable commit and warnings on collecting Git provenance info #1592 #1634
• Fix a regression where docker context was not being validated #1596
• Fix function resolution with JSON bake definition #1605
• Fix case where original HCL bake diagnostic is discarded #1607
• Fix labels not correctly set with bake and compose file #1631

v0.10.2

Welcome to the 0.10.2 release of buildx!

Please try out the release binaries and report any issues at
/~https://github.com/docker/buildx/issues.

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using --provenance=false.

Notable changes

• Fix preferred platforms order not taken into account in multi-node builds #1561
• Fix possible panic on handling SOURCE_DATE_EPOCH environment variable #1564
• Fix possible push error on multi-node manifest merge since BuildKit v0.11 on some registries #1566
• Improve warnings on collecting Git provenance info #1568

v0.10.1

Welcome to the 0.10.1 release of buildx!

Please try out the release binaries and report any issues at
/~https://github.com/docker/buildx/issues.

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using --provenance=false.

Notable changes

• Fix sending the correct origin URL as vsc:source metadata #1548
• Fix possible panic from data-race #1504
• Fix regression with rm --all-inactive #1547
• Improve attestation access in imagetools inspect by lazily loading data #1546
• Correctly mark capabilities request as internal #1538
• Detect invalid attestation configuration #1545
• Update containerd patches to fix possible push regression affecting imagetools commands #1559

Dependency Changes

• github.com/containerd/containerd v1.6.14 -> 1709cfe273d9
• github.com/moby/buildkit v0.11.0 -> v0.11.2

Previous release can be found at v0.10.0

v0.10.0

Welcome to the 0.10.0 release of buildx!

Please try out the release binaries and report any issues at
/~https://github.com/docker/buildx/issues.

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using --provenance=false.

Notable changes

• Build command supports new flags --attest and shorthands --sbom and --provenance for adding attestations for your current build. --attest type=sbom or --sbom=true will generate SBOM (Software Bill of Materials) attestation for your build result in SPDX format. --attest type=provenance or --provenance=true will generate SLSA provenance attestation for your build result with information about how the build was performed. When creating OCI images a minimal provenance attestation is included with the image by default. This feature requires BuildKit v0.11.0+. Read more about advanced SBOM options from BuildKit docs. #1412 #1475

• When building with BuildKit that supports provenance attestations Buildx will automatically share the version control information of your build context so it can be shown in provenance for later debugging. Previously this only happened when building from a Git URL directly. To opt-out of this behavior you can set BUILDX_GIT_INFO=0. Optionally you can also automatically define labels with VCS info by setting BUILDX_GIT_LABELS=1. #1462 #1297 #1341 #1468 #1477

• Named contexts with --build-context now support oci-layout:// protocol for initializing the context with a value of a local OCI layout directory. E.g. --build-context stagename=oci-layout://path/to/dir. This feature requires BuildKit v0.11.0+ and Dockerfile 1.5.0+. #1456

• Bake now supports resource interpolation where you can reuse the values from other target definitions. #1434

• Buildx will now automatically forward SOURCE_DATE_EPOCH build-arg if one is defined in your environment. This feature is meant to be used with updated reproducible builds support in BuildKit v0.11.0+ #1482

• Buildx will now remember the last activity for a builder for better organization of builder instances. #1439

• Bake now supports null values for build arguments and label to use the defaults set in Dockerfile #1449

• Imagetools inspect commands now supports showind SBOM and Provenance data #1444 #1498

• Increase performance of buildx ls and inspect flows #1430 #1454 #1455 #1345

• Adding extra hosts with Docker driver now supports Docker specific "host-gateway" special value #1446

• OCI exporter now supports tar=false option for exporting OCI format directly in a directory #1420

• Compose support has been updated to 1.6.0 #1387

• --invoke can now load default launch environment from the image metadata #1324

• Fix container driver behavior in regards to UserNS #1368

• Fix possible panic in Bake when using wrong variable value type #1442

• Fix possible panic in imagetools inspect #1441 #1406

• Fix sending empty --add-host value to BuildKit by default #1457

• Fix handling progress prefixes with progress groups #1305

• Fix recursively resolving groups in Bake #1313

• Fix possible wrong indentation on multi-node builder manifests #1396

• Fix possible panic from missing OpenTelemetry configuration #1383

• Fix --progress=tty behavior when TTY is not available #1371

• Fix connection error conditions in prune and du commands #1307

Contributors

• CrazyMax
• Justin Chadwell
• Tõnis Tiigi
• David Karlsson
• Sebastiaan van Stijn
• Akihiro Suda
• David Gageot
• Felix de Souza
• Christian Dupuis
• Mark Hildreth
• Nick Sieger
• accetto
• zhyon404

Dependency Changes

• cloud.google.com/go/compute v1.12.1 new
• cloud.google.com/go/compute/metadata v0.2.1 new
• github.com/aws/aws-sdk-go-v2 v1.16.3 new
• github.com/aws/aws-sdk-go-v2/config v1.15.5 new
• github.com/aws/aws-sdk-go-v2/credentials v1.12.0 new
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.12.4 new
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.10 new
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.4 new
• github.com/aws/aws-sdk-go-v2/internal/ini v1.3.11 new
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.4 new
• github.com/aws/aws-sdk-go-v2/service/sso v1.11.4 new
• github.com/aws/aws-sdk-go-v2/service/sts v1.16.4 new
• github.com/aws/smithy-go v1.11.2 new
• github.com/compose-spec/compose-go v1.4.0 -> v1.6.0
• github.com/containerd/containerd v1.6.6 -> v1.6.14
• github.com/docker/cli 418ca3b4d46f -> v23.0.0-rc.1
• github.com/docker/cli-docs-tool v0.5.0 -> v0.5.1
• github.com/docker/docker a60b458179aa -> v23.0.0-rc.1
• github.com/docker/docker-credential-helpers v0.6.4 -> v0.7.0
• github.com/docker/go-units v0.4.0 -> v0.5.0
• github.com/go-logr/logr v1.2.2 -> v1.2.3
• github.com/gofrs/flock v0.7.3 -> v0.8.1
• github.com/google/go-cmp v0.5.8 -> v0.5.9
• github.com/inconshreveable/mousetrap v1.0.0 -> v1.0.1
• github.com/klauspost/compress v1.15.7 -> v1.15.12
• github.com/moby/buildkit 55ba9d14360a -> v0.11.0
• github.com/moby/patternmatcher v0.5.0 new
• github.com/moby/sys/mountinfo v0.6.2 new
• github.com/moby/sys/sequential v0.5.0 new
• github.com/moby/term 3f7ff695adc6 -> abb19827d345
• github.com/opencontainers/image-spec c5a74bcca799 -> 02efb9a75ee1
• github.com/pelletier/go-toml v1.9.4 -> v1.9.5
• github.com/prometheus/client_golang v1.12.2 -> v1.14.0
• github.com/prometheus/client_model v0.2.0 -> v0.3.0
• github.com/prometheus/common v0.32.1 -> v0.37.0
• github.com/prometheus/procfs v0.7.3 -> v0.8.0
• github.com/spf13/cobra v1.5.0 -> v1.6.1
• github.com/spf13/viper v1.14.0 new
• github.com/stretchr/testify v1.8.0 -> v1.8.1
• github.com/tonistiigi/fsutil 0dbf3a8a7d58 -> fb433841cbfa
• golang.org/x/crypto 3147a52a75dd -> v0.2.0
• golang.org/x/net cd36cc0744dd -> v0.4.0
• golang.org/x/oauth2 2bc19b11175f -> 6fdb5e3db783
• golang.org/x/sync 886fb9371eb4 -> v0.1.0
• golang.org/x/sys c0bba94af5f8 -> v0.3.0
• golang.org/x/term 03fcf44c2211 -> v0.3.0
• golang.org/x/time 90d013bbcef8 -> v0.1.0
• google.golang.org/genproto 1973136f34c6 -> 1bc688fe9f3e
• google.golang.org/grpc v1.47.0 -> v1.50.1

Previous release can be found at v0.9.1

v0.10.0-rc3

Welcome to the 0.10.0-rc3 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at
/~https://github.com/docker/buildx/issues.

Notable changes

• Add SBOM/Provenance support to imagetools inspect #1444
• OCI-layout now doesn't require digest to be set #1456
• SOURCE_DATE_EPOCH is now automatically forwarded as build-arg if set #1482

Dependency Changes

• github.com/containerd/containerd v1.6.11 -> v1.6.14
• github.com/docker/cli v23.0.0-beta.1 -> v23.0.0-rc.1
• github.com/docker/docker v23.0.0-beta.1 -> v23.0.0-rc.1
• github.com/moby/buildkit 862b22d7e7cf -> v0.11.0-rc4
• github.com/tonistiigi/fsutil 0127568185cf -> fb433841cbfa

Previous release can be found at v0.10.0-rc2

v0.10.0-rc2

Welcome to the 0.10.0-rc2 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at
/~https://github.com/docker/buildx/issues.

Notable changes

• Fix handling BUILDX_GIT_INFO environment variable #1468

• All build options are now forwarded with the main build request as well as the frontend request #1476

• Bake now supports null values for build arguments and label to use the defaults set in Dockerfile #1449

• Duplicate attestations fields now produce an error #1475

• Reading current commit info from version control system has been updated. The performance on WSL2 has been increased #1477

• Release pipeline for Buildx now produces SBOM and Provenance artifacts #1472

v0.10.0-rc1

Welcome to the 0.10.0-rc1 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at
/~https://github.com/docker/buildx/issues.

Notable changes

• Build command supports new flags --attest and shorthands --sbom and --provenance for adding attestations for your current build. --attest type=sbom or --sbom=true will generate SBOM (Software Bill of Materials) attestation for your build result in SPDX format. --attest type=provenance or --provenance=true will generate SLSA provenance attestation for your build result with information about how the build was performed. When creating OCI images a minimal provenance attestation is included with the image by default. This feature requires BuildKit v0.11. Read more about advanced SBOM options from BuildKit docs. #1412

• When building with BuildKit that supports provenance attestations Buildx will automatically share the version control information of your build context so it can be shown in provenance for later debugging. Previously this only happened when building from a Git URL directly. To opt-out of this behavior you can set BUILDX_GIT_INFO=0. Optionally you can also automatically define labels with VCS info by setting BUILDX_GIT_LABELS=1. #1462 #1297 #1341

• Named contexts with --build-context now support oci-layout:// protocol for initializing the context with a value of a local OCI layout directory. E.g. --build-context stagename=oci-layout://path/to/dir@sha256:digest.

• Bake now supports resource interpolation where you can reuse the values from other target definitions. #1434

• Buildx will now remember the last activity for a builder for better organization of builder instances. #1439

• Increase performance of buildx ls and inspect flows #1430 #1454 #1455 #1345

• Adding extra hosts with Docker driver now supports Docker specific "host-gateway" special value #1446

• OCI exporter now supports tar=false option for exporting OCI format directly in a directory #1420

• Compose support has been updated to 1.6.0 #1387

• --invoke can now load default launch environment from the image metadata #1324

• Fix container driver behavior in regards to UserNS #1368

• Fix possible panic in Bake when using wrong variable value type #1442

• Fix possible panic in imagetools inspect #1441 #1406

• Fix sending empty --add-host value to BuildKit by default #1457

• Fix handling progress prefixes with progress groups #1305

• Fix recursively resolving groups in Bake #1313

• Fix possible wrong indentation on multi-node builder manifests #1396

• Fix possible panic from missing OpenTelemetry configuration #1383

• Fix --progress=tty behavior when TTY is not available #1371

• Fix connection error conditions in prune and du commands #1307

Contributors

• CrazyMax
• Justin Chadwell
• Tõnis Tiigi
• David Karlsson
• Sebastiaan van Stijn
• Akihiro Suda
• David Gageot
• Felix de Souza
• Christian Dupuis
• Mark Hildreth
• Nick Sieger
• accetto
• zhyon404

Dependency Changes

• cloud.google.com/go/compute v1.12.1 new
• cloud.google.com/go/compute/metadata v0.2.1 new
• github.com/aws/aws-sdk-go-v2 v1.16.3 new
• github.com/aws/aws-sdk-go-v2/config v1.15.5 new
• github.com/aws/aws-sdk-go-v2/credentials v1.12.0 new
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.12.4 new
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.10 new
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.4 new
• github.com/aws/aws-sdk-go-v2/internal/ini v1.3.11 new
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.4 new
• github.com/aws/aws-sdk-go-v2/service/sso v1.11.4 new
• github.com/aws/aws-sdk-go-v2/service/sts v1.16.4 new
• github.com/aws/smithy-go v1.11.2 new
• github.com/compose-spec/compose-go v1.4.0 -> v1.6.0
• github.com/containerd/containerd v1.6.6 -> v1.6.11
• github.com/docker/cli 418ca3b4d46f -> v23.0.0-beta.1
• github.com/docker/docker a60b458179aa -> v23.0.0-beta.1
• github.com/docker/docker-credential-helpers v0.6.4 -> v0.7.0
• github.com/docker/go-units v0.4.0 -> v0.5.0
• github.com/go-logr/logr v1.2.2 -> v1.2.3
• github.com/gofrs/flock v0.7.3 -> v0.8.1
• github.com/google/go-cmp v0.5.8 -> v0.5.9
• github.com/inconshreveable/mousetrap v1.0.0 -> v1.0.1
• github.com/klauspost/compress v1.15.7 -> v1.15.12
• github.com/moby/buildkit 55ba9d14360a -> 862b22d7e7cf
• github.com/moby/patternmatcher v0.5.0 new
• github.com/moby/sys/sequential v0.5.0 new
• github.com/moby/term 3f7ff695adc6 -> abb19827d345
• github.com/opencontainers/image-spec c5a74bcca799 -> 02efb9a75ee1
• github.com/pelletier/go-toml v1.9.4 -> v1.9.5
• github.com/prometheus/client_golang v1.12.2 -> v1.14.0
• github.com/prometheus/client_model v0.2.0 -> v0.3.0
• github.com/prometheus/common v0.32.1 -> v0.37.0
• github.com/prometheus/procfs v0.7.3 -> v0.8.0
• github.com/spf13/cobra v1.5.0 -> v1.6.1
• github.com/spf13/viper v1.14.0 new
• github.com/stretchr/testify v1.8.0 -> v1.8.1
• github.com/tonistiigi/fsutil 0dbf3a8a7d58 -> 0127568185cf
• golang.org/x/crypto 3147a52a75dd -> v0.2.0
• golang.org/x/net cd36cc0744dd -> v0.4.0
• golang.org/x/oauth2 2bc19b11175f -> 6fdb5e3db783
• golang.org/x/sync 886fb9371eb4 -> v0.1.0
• golang.org/x/sys c0bba94af5f8 -> v0.3.0
• golang.org/x/term 03fcf44c2211 -> v0.3.0
• golang.org/x/time 90d013bbcef8 -> v0.1.0
• google.golang.org/genproto 1973136f34c6 -> 1bc688fe9f3e
• google.golang.org/grpc v1.47.0 -> v1.50.1

Previous release can be found at v0.9.1

v0.9.1

Notable changes

• Fix regression on building compose files that contain services without a build block #1277
• Ensure used buildkit version also shows up in the inspect command #1279