docker / buildx

Docker CLI plugin for extended build capabilities with BuildKit
Apache License 2.0
3.58k stars 482 forks source link

bake: add filesystem entitlements support #2796

Open tonistiigi opened 1 day ago

tonistiigi commented 1 day ago

Adds support for entitlements when bake definition accesses local files. Accessing files within the current working directory is allowed by default.

part of #179 closes #2697

In this version, privileged path accesses for local bake definitions only warns, unless BUILDX_BAKE_ENTITLEMENTS_FS is set. In next version, the intention is to make this case fail as with other entitlements.