Skip to content

Commit

Permalink
Disable provenance attestations in buildx
Browse files Browse the repository at this point in the history
Buildx version >=0.10 generates a new OCI format
with support for provenance. As a result the
following error is generated on M1/M2 while inspecting
the manifest

> OCI manifest found, but accept header does not support OCI manifests

The suggested fix is to temporarily disable provenance.

Fixes: #5877

Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>
  • Loading branch information
ashutosh-narkar committed Jun 27, 2023
1 parent d310c43 commit 917bc9c
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -373,13 +373,15 @@ push-manifest-list-%: ensure-executable-bin
--build-arg BASE=cgr.dev/chainguard/glibc-dynamic:latest \
--build-arg BIN_DIR=$(RELEASE_DIR) \
--platform $(DOCKER_PLATFORMS) \
--provenance=false \
--push \
.
$(DOCKER) buildx build \
--tag $(DOCKER_IMAGE):$*-debug \
--build-arg BASE=cgr.dev/chainguard/glibc-dynamic:latest-dev \
--build-arg BIN_DIR=$(RELEASE_DIR) \
--platform $(DOCKER_PLATFORMS) \
--provenance=false \
--push \
.
$(DOCKER) buildx build \
Expand All @@ -388,6 +390,7 @@ push-manifest-list-%: ensure-executable-bin
--build-arg BASE=cgr.dev/chainguard/glibc-dynamic:latest \
--build-arg BIN_DIR=$(RELEASE_DIR) \
--platform $(DOCKER_PLATFORMS) \
--provenance=false \
--push \
.

Expand All @@ -397,6 +400,7 @@ push-manifest-list-%: ensure-executable-bin
--build-arg BIN_DIR=$(RELEASE_DIR) \
--build-arg BIN_SUFFIX=_static \
--platform $(DOCKER_PLATFORMS_STATIC) \
--provenance=false \
--push \
.

Expand All @@ -406,6 +410,7 @@ push-manifest-list-%: ensure-executable-bin
--build-arg BIN_DIR=$(RELEASE_DIR) \
--build-arg BIN_SUFFIX=_static \
--platform $(DOCKER_PLATFORMS_STATIC) \
--provenance=false \
--push \
.

Expand Down

0 comments on commit 917bc9c

Please sign in to comment.