Affected by GO-2026-4858 and 2 other vulnerabilities

GO-2026-4858: BuildKit's Malicious frontend can cause file escape outside of storage root in github.com/moby/buildkit

GO-2026-4859: BuildKit Git URL subdir component can cause access to restricted files in github.com/moby/buildkit

GO-2026-6255: BuildKit: Custom frontend could bypass Seccomp/AppArmor in github.com/moby/buildkit

base

package

v0.7.0 Latest Latest Go to latest Published: Mar 25, 2020 License: Apache-2.0 Imports: 51 Imported by: 125

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/moby/buildkit

Links

Open Source Insights

Documentation ¶

Index ¶

func ID(root string) (string, error)
func Labels(executor, snapshotter string) map[string]string
type Worker
- func NewWorker(opt WorkerOpt) (*Worker, error)
type WorkerOpt

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ID ¶

func ID(root string) (string, error)

ID reads the worker id from the `workerid` file. If not exist, it creates a random one,

func Labels ¶

func Labels(executor, snapshotter string) map[string]string

Labels returns default labels utility function. could be moved to the constructor logic?

Types ¶

type Worker ¶

type Worker struct {
	WorkerOpt
	CacheManager  cache.Manager
	SourceManager *source.Manager

	ImageSource source.Source
	// contains filtered or unexported fields
}

Worker is a local worker instance with dedicated snapshotter, cache, and so on. TODO: s/Worker/OpWorker/g ?

func NewWorker ¶

func NewWorker(opt WorkerOpt) (*Worker, error)

NewWorker instantiates a local worker

func (*Worker) ContentStore ¶ added in v0.7.0

func (w *Worker) ContentStore() content.Store

func (*Worker) DiskUsage ¶

func (w *Worker) DiskUsage(ctx context.Context, opt client.DiskUsageInfo) ([]*client.UsageInfo, error)

func (*Worker) Exec ¶

func (w *Worker) Exec(ctx context.Context, meta executor.Meta, rootFS cache.ImmutableRef, stdin io.ReadCloser, stdout, stderr io.WriteCloser) error

func (*Worker) Exporter ¶

func (w *Worker) Exporter(name string, sm *session.Manager) (exporter.Exporter, error)

func (*Worker) FromRemote ¶

func (w *Worker) FromRemote(ctx context.Context, remote *solver.Remote) (ref cache.ImmutableRef, err error)

func (*Worker) GCPolicy ¶

func (w *Worker) GCPolicy() []client.PruneInfo

func (*Worker) GetRemote ¶

func (w *Worker) GetRemote(ctx context.Context, ref cache.ImmutableRef, createIfNeeded bool) (*solver.Remote, error)

func (*Worker) ID ¶

func (w *Worker) ID() string

func (*Worker) Labels ¶

func (w *Worker) Labels() map[string]string

func (*Worker) LoadRef ¶

func (w *Worker) LoadRef(id string, hidden bool) (cache.ImmutableRef, error)

func (*Worker) Platforms ¶

func (w *Worker) Platforms(noCache bool) []specs.Platform

func (*Worker) Prune ¶

func (w *Worker) Prune(ctx context.Context, ch chan client.UsageInfo, opt ...client.PruneInfo) error

func (*Worker) PruneCacheMounts ¶ added in v0.6.0

func (w *Worker) PruneCacheMounts(ctx context.Context, ids []string) error

func (*Worker) ResolveImageConfig ¶

func (w *Worker) ResolveImageConfig(ctx context.Context, ref string, opt llb.ResolveImageConfigOpt, sm *session.Manager) (digest.Digest, []byte, error)

func (*Worker) ResolveOp ¶

func (w *Worker) ResolveOp(v solver.Vertex, s frontend.FrontendLLBBridge, sm *session.Manager) (solver.Op, error)

type WorkerOpt ¶

type WorkerOpt struct {
	ID              string
	Labels          map[string]string
	Platforms       []specs.Platform
	GCPolicy        []client.PruneInfo
	MetadataStore   *metadata.Store
	Executor        executor.Executor
	Snapshotter     snapshot.Snapshotter
	ContentStore    content.Store
	Applier         diff.Applier
	Differ          diff.Comparer
	ImageStore      images.Store // optional
	RegistryHosts   docker.RegistryHosts
	IdentityMapping *idtools.IdentityMapping
	LeaseManager    leases.Manager
	GarbageCollect  func(context.Context) (gc.Stats, error)
}

WorkerOpt is specific to a worker. See also CommonOpt.

Source Files ¶

View all Source files

worker.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL