feat(moby/buildkit): support buildkitd

[takumin]

moby/buildkit: concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

$ aqua g -i moby/buildkit

Check List

• Read CONTRIBUTING.md
  • Read OSS Contribution Guide
• All commits are signed
  • This repository enables Require signed commits, so all commits must be signed
• Avoid force push
• Do only one thing in one Pull Request
• Execute cmdx s to scaffold code
• Install and execute the package and confirm if the package works well

How to confirm if this package works well

Reviewers aren't necessarily familiar with this package, so please describe how to confirm if this package works well.
Please confirm if this package works well yourself as much as possible.

Command and output

$ cmdx con linux amd64
+ bash scripts/connect.sh
[INFO] Connecting to the container aqua-registry (linux/amd64)
root@a6484b52730e:/workspace# buildkitd --help
NAME:
   buildkitd - build daemon

USAGE:
   buildkitd [global options] command [command options] [arguments...]

VERSION:
   v0.21.1

COMMANDS:
   help, h  Shows a list of commands or help for one command

GLOBAL OPTIONS:
   --rootless                                  set all the default options to be compatible with rootless containers
   --config value                              path to config file (default: "/etc/buildkit/buildkitd.toml")
   --debug                                     enable debug output in logs
   --trace                                     enable trace output in logs (highly verbose, could affect performance)
   --root value                                path to state directory (default: "/var/lib/buildkit")
   --addr value                                listening address (socket or tcp) (default: "unix:///run/buildkit/buildkitd.sock")
   --log-format value                          log formatter: json or text (default: "text")
   --group value                               group (name or gid) which will own all Unix socket listening addresses
   --debugaddr value                           debugging address (eg. 0.0.0.0:6060) [$BUILDKITD_DEBUGADDR]
   --tlscert value                             certificate file to use
   --tlskey value                              key file to use
   --tlscacert value                           ca certificate to verify clients
   --allow-insecure-entitlement value          allows insecure entitlements e.g. network.host, security.insecure
   --otel-socket-path value                    OTEL collector trace socket path
   --cdi-disabled                              disables support of the Container Device Interface (CDI)
   --cdi-spec-dir value                        list of directories to scan for CDI spec files
   --containerd-worker value                   enable containerd workers (true/false/auto) (default: "auto")
   --containerd-worker-addr value              containerd socket (default: "/run/containerd/containerd.sock")
   --containerd-worker-labels value            user-specific annotation labels (com.example.foo=bar)
   --containerd-worker-net value               worker network type (auto, bridge, cni or host) (default: "auto")
   --containerd-cni-config-path value          path of cni config file (default: "/etc/buildkit/cni.json")
   --containerd-cni-binary-dir value           path of cni binary files (default: "/opt/cni/bin")
   --containerd-cni-pool-size value            size of cni network namespace pool (default: 0)
   --containerd-worker-snapshotter value       snapshotter name to use (default: "overlayfs")
   --containerd-worker-apparmor-profile value  set the name of the apparmor profile applied to containers
   --containerd-worker-selinux                 apply SELinux labels
   --containerd-worker-rootless                enable rootless mode
   --containerd-worker-gc                      Enable automatic garbage collection on worker
   --containerd-worker-gc-keepstorage value    Amount of storage GC keep locally, format "Reserved[,Free[,Maximum]]" (MB) (default: "2000,2000,2000")
   --oci-worker value                          enable oci workers (true/false/auto) (default: "auto")
   --oci-worker-labels value                   user-specific annotation labels (com.example.foo=bar)
   --oci-worker-snapshotter value              name of snapshotter (overlayfs, native, etc.) (default: "auto")
   --oci-worker-proxy-snapshotter-path value   address of proxy snapshotter socket (do not include 'unix://' prefix)
   --oci-worker-platform value                 override supported platforms for worker
   --oci-worker-net value                      worker network type (auto, bridge, cni or host) (default: "auto")
   --oci-cni-config-path value                 path of cni config file (default: "/etc/buildkit/cni.json")
   --oci-cni-binary-dir value                  path of cni binary files (default: "/opt/cni/bin")
   --oci-cni-pool-size value                   size of cni network namespace pool (default: 0)
   --oci-worker-binary value                   name of specified oci worker binary
   --oci-worker-apparmor-profile value         set the name of the apparmor profile applied to containers
   --oci-worker-selinux                        apply SELinux labels
   --oci-worker-rootless                       enable rootless mode
   --oci-worker-no-process-sandbox             use the host PID namespace and procfs (WARNING: allows build containers to kill (and potentially ptrace) an arbitrary process in the host namespace)
   --oci-worker-gc                             Enable automatic garbage collection on worker
   --oci-worker-gc-keepstorage value           Amount of storage GC keep locally, format "Reserved[,Free[,Maximum]]" (MB) (default: "2000,2000,2000")
   --help, -h                                  show help
   --version, -v                               print the version

If files such as configuration file are needed, please share them.

Reference

• https://github.com/moby/buildkit/blob/master/README.md#quick-start
• https://github.com/moby/buildkit/blob/master/docs/rootless.md

[suzuki-shunsuke]

📝

https://github.com/moby/buildkit/blob/master/docs/multi-platform.md

You may face an error like exec user process caused: exec format error, mostly when you are using a third-party package of BuildKit that lacks buildkit-qemu-* binaries.

In such a case, you have to download the official binary release of BuildKit from https://github.com/moby/buildkit/releases , and install the buildkit-qemu-* binaries in the release archive into the $PATH of the host.

[suzuki-shunsuke]

🎉 https://github.com/aquaproj/aqua-registry/releases/tag/v4.358.0