Collection of fixes for attestations and platform shenanigans

exporter/containerimage/writer.go

@@ -5,6 +5,7 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
+	"strconv"
 	"strings"
 	"time"
 
@@ -111,10 +112,15 @@ func (ic *ImageWriter) Commit(ctx context.Context, inp *exporter.Source, session
 			ref = inp.Ref
 		} else if len(p.Platforms) > 0 {
 			p := p.Platforms[0]
-			if _, ok := inp.Attestations[p.ID]; ok {
-				return nil, errors.Errorf("cannot export attestations without multi-platform enabled")
-			}
 			ref = inp.Refs[p.ID]
+			if atts, ok := inp.Attestations[p.ID]; ok {
+				atts = attestation.Filter(atts, nil, map[string][]byte{
+					result.AttestationInlineOnlyKey: []byte(strconv.FormatBool(true)),
+				})
+				if len(atts) > 0 {
+					return nil, errors.Errorf("cannot export attestations without multi-platform enabled")
+				}
+			}
 		} else if len(inp.Refs) == 1 {
 			for _, ref = range inp.Refs {
 			}

exporter/oci/export.go

@@ -77,6 +77,14 @@ func (e *imageExporter) Resolve(ctx context.Context, opt map[string]string) (exp
 		return nil, err
 	}
 
+	if e.opt.Variant == VariantDocker {
+		if i.opts.MultiPlatform != nil && *i.opts.MultiPlatform {
+			return nil, errors.Errorf("docker exporter does not currently support exporting manifest lists")
+		}
+		b := false
+		i.opts.MultiPlatform = &b
+	}
+
 	for k, v := range opt {
 		switch k {
 		case keyTar:
@@ -115,10 +123,6 @@ func (e *imageExporterInstance) Config() *exporter.Config {
 }
 
 func (e *imageExporterInstance) Export(ctx context.Context, src *exporter.Source, sessionID string) (map[string]string, error) {
-	if e.opt.Variant == VariantDocker && len(src.Refs) > 0 {
-		return nil, errors.Errorf("docker exporter does not currently support exporting manifest lists")
-	}
-
 	if src.Metadata == nil {
 		src.Metadata = make(map[string][]byte)
 	}

exporter/util/multiplatform/parse.go

@@ -14,10 +14,10 @@ const (
 )
 
 func ParseBuildArgs(opt map[string]string) (string, bool) {
-	if v, ok := opt[frontendMultiPlatform]; ok {
+	if v, ok := opt[frontendMultiPlatformArg]; ok {
 		return v, true
 	}
-	if v, ok := opt[frontendMultiPlatformArg]; ok {
+	if v, ok := opt[frontendMultiPlatform]; ok {
 		return v, true
 	}
 	return "", false

frontend/gateway/grpcclient/client.go

@@ -16,6 +16,7 @@ import (
 	gogotypes "github.com/gogo/protobuf/types"
 	"github.com/golang/protobuf/ptypes/any"
 	"github.com/moby/buildkit/client/llb"
+	"github.com/moby/buildkit/frontend/attestations"
 	"github.com/moby/buildkit/frontend/gateway/client"
 	pb "github.com/moby/buildkit/frontend/gateway/pb"
 	"github.com/moby/buildkit/identity"
@@ -161,7 +162,7 @@ func (c *grpcClient) Run(ctx context.Context, f client.BuildFunc) (retError erro
 					}
 				}
 
-				if res.Attestations != nil && c.caps.Supports(pb.CapAttestations) == nil {
+				if res.Attestations != nil {
 					attestations := map[string]*pb.Attestations{}
 					for k, as := range res.Attestations {
 						for _, a := range as {
@@ -483,8 +484,20 @@ func (c *grpcClient) ResolveImageConfig(ctx context.Context, ref string, opt llb
 }
 
 func (c *grpcClient) BuildOpts() client.BuildOpts {
+	opts := c.opts
+	if c.caps.Supports(pb.CapAttestations) == nil {
+		opts = map[string]string{}
+		attestOpts := attestations.Filter(c.opts)
+		for k, v := range c.opts {
+			if _, ok := attestOpts[k]; ok {
+				continue
+			}
+			opts[k] = v
+		}
+	}
+
 	return client.BuildOpts{
-		Opts:      c.opts,
+		Opts:      opts,
 		SessionID: c.sessionID,
 		Workers:   c.workers,
 		Product:   c.product,