Extended build capabilities with BuildKit
npx @buildinternet/releases get docker-buildxBake now supports configuring job execution modes and parallelization limits with the --jobs/-j flag, including defer-error to delay cancellation of failed jobs and defer-output to wait for all jobs before exporting. Added an experimental buildx replay build command that rebuilds historical builds from recorded provenance, and Buildx --set overrides now use singular keys and can clear array values.
Bake --set overrides now support clearing array values with an empty parameter, and Git advice output can be controlled with BUILDKIT_GIT_ADVICE and BUILDX_BAKE_GIT_ADVICE. Updates github.com/moby/buildkit to v0.34.0-rc2 and github.com/docker/cli to v29.8.2.
Bake now supports configuring job execution modes and parallelization limits with the --jobs/-j flag, including defer-error and defer-output modes, and a new experiment command docker buildx replay build rebuilds historical builds from recorded provenance. Also fixes a possible panic from result image loading and progress race, Kubernetes driver connection and AppArmor handling, and stale builder feature detection cached data.
Bake with --progress=rawjson now rejects ungranted entitlements instead of skipping the consent check, requiring explicit --allow grants. Secret files selected by an implicit id fallback and local OCI layout named contexts now require fs.read approval.
Fixed failed multi-node image pushes leaving the requested tag pointing to a partial image, newly started container builders not getting a full readiness timeout before first use, and builder removal cleanup being tied to the status timeout. Also fixed linked Bake targets on the Kubernetes driver losing shared clients before the build completes.
Buildx now supports a cloud driver to run builds with Docker Build Cloud, removing the need for a custom Buildx binary. Newly started container builders wait for BuildKit readiness, and several Windows platform identifier consistency issues are fixed.
Policy evaluation now uses Docker CLI registry auth for image metadata, and newly started container builders wait for BuildKit readiness before first use.
Buildx now supports "cloud" driver builder instances to run builds with Docker Build Cloud, eliminating the need for a custom Buildx binary. Also fixed consistency issues with Windows platform identifiers and a Bake bug that could drop build secrets with linked targets.
BUILDX_NO_DEFAULT_OCI_ARTIFACT environment variable added as an alternative to the oci-artifact=false flag for users who have not set it explicitly. Includes buildkit dependency update from v0.32.0 to v0.32.2.
Default source policy can now validate BuildKit release image authenticity when creating a docker-container builder with docker buildx create, and bake supports resolving files relative to the bake file location with BUILDX_BAKE_FILE_RELATIVE_PATHS=true. Also fixes a Kubernetes driver hang and FD leak with source policies.
Fixed a bug where Kubernetes driver builds would hang indefinitely when the remote exec stream ended.
Default source policy now validates BuildKit release image authenticity when creating a docker-container builder with docker buildx create. The Bake command supports overriding declared secret sources, and a new BUILDX_BAKE_FILE_RELATIVE_PATHS=true resolves files relative to the bake file location instead of the working directory.
Local output now supports a mode=delete attribute that replaces the destination directory with the build result, restricted to subdirectories of the working directory by default. Resource limits for CPU and memory can be set via the --resource flag. Source policies support the BuildKit exec proxy feature for controlling build-step network traffic. Also fixes a possible closed channel panic.
Resource limit output for builds has been improved. The release includes dependency updates for several Go modules.
Local output now supports a mode=delete attribute for build and bake commands, replacing the destination directory with the build result. Source policies now support BuildKit's exec proxy feature for capturing build step network traffic. Resource limits for CPU and memory can now be set using the --resource flag. A possible "closed channel" panic has been fixed.
Fixed a regression in the Bake command when building from Compose files with empty array values, and a possible panic in the Kubernetes driver when using statefulset.
Buildx now supports a default source policy for Docker-provided build images (docker/dockerfile and docker/buildkit-syft-scanner) that are cryptographically verified before use, currently opt-in via the BUILDX_DEFAULT_POLICY environment variable with intent to enable by default in a future release. Kubernetes driver now supports persistent storage options using StatefulSet and persistent volume claims. Multiple fixes address progress policy error handling, dial-stdio connection closure, panic in debug command, Windows path handling in OCI layouts, cache misses from nondeterministic host ordering, and WSL GPU library mounting.
The bake command now accepts a --policy flag to specify global policy evaluation options. Fixed an issue where progress policy errors could be lost in progress output.
buildx 0.34.0-rc1
Welcome to the v0.34.0-rc1 release of buildx!
This is a pre-release of buildx
Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.
Welcome to the v0.33.0 release of buildx!
Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.