Build matrix from bake file

Build/push multiple targets from one HCL file; parallel, DRY group definitions

docker buildx bake -f docker-bake.hcl --push
tool
docker46 commands
tags
dockerbuildkitciperformance

More docker commands

  • Inspect multi-arch manifest
    docker buildx imagetools inspect <reg>/<name>:tag --format '{{json .Manifest}}'

    Show platforms in a manifest list without pulling layers; verify arm64+amd64

  • Container driver builder
    docker buildx create --name multi --use --driver docker-container --driver-opt network=host

    Create a BuildKit builder supporting multi-arch and cache export; default driver cannot

  • Pass build secret from file
    docker buildx build --secret id=token,src=token.txt -t <name> .

    Feed a secret to BuildKit; only RUN --mount=type=secret,id=token sees it, not history

  • Remote daemon over SSH
    docker context create remote --docker host=ssh://<host> && docker context use remote

    Run docker against a remote daemon over SSH; no exposed TCP socket needed

  • Hardened read-only container
    docker run --read-only --tmpfs /tmp --security-opt no-new-privileges --cap-drop ALL <name>

    Immutable rootfs, writable /tmp only, block privilege escalation; container hardening

all 46 docker commands