Buildah version 1.44.0 Release Announcement
We’re pleased to announce the release of Buildah version 1.44.0, which is now available from GitHub for any Linux distro. We are shipping this release on Fedora 43 and Fedora 44. Buildah will also be shipped on CentOS, OpenSUSE, and Ubuntu soon. In addition, container images will be available at https://quay.io/repository/buildah/stable and https://quay.io/repository/podman-container-tools/buildah.
The Buildah project has continued to grow over the past several weeks, welcoming several new contributors to the mix. This release features notable changes:
- The containers.conf configuration file behavior has changed. See containers-config(5) for details.
- Slirp4netns, cgroups v1, and CNI support have been removed.
- The
buildah buildandbuildah commitcommands now accept a--metadata-fileoption. See See buildah-build(1) and buildah-commit(1) for for details. - The
buildnow has--metadata-file,--mount,--save-stages,--source-policy-file, and--stage-labelsoptions. See buildah-build(1) for details. - Added the
--valid-exit-codesoption forbuildah runto accept specific non-zero exit codes as success. See buildah-run(1) for details.
This release comprises changes made for v1.44.0 and will be included in Podman v6.0.
Release Changes
Changes for v1.44.0
- Fix an error in the
buildoption--tag oci-archive:xxx.tarby @aeijdenberg in #6284 - The
buildah buildandbuildah commitcommands now accept a--metadata-fileoption by @nalind in #6442 - Changes “written” to the build context directory during
buildah buildRUN --mount=type=bindinstructions are no longer discarded between instructions, but when the build completes, whether it completes successfully or not by @nalind in #5975 - Remove Cgroups v1 support (podman6) by @lsm5 in #6424
- The error on
buildthe flag –output=type=something now prints to stdout rather than outputting the image to a folder by @iTrooz in #6476 - Add the
--source-policy-fileoption tobuildfor BuildKit-compatible source policies by @tinovyatkin in #6647 - This adds a
--mountoption tobuildwhich has the effect of adding this mount to eachRUNcommand in a Containerfile before executing by @aeijdenberg in #6289 - Fix call to chown to pass the gid instead of the uid by @stilwelb in #6683
- Fixed broken pipe errors when uploading tar archives with trailing null bytes by @Honny1 in #6678
- Add the
FROM --after<stage>option to declare explicit stage dependencies by @jlebon in #654 - Fixed a race condition during cache lookup that made the build fail when a storage layer was removed in parallel by @Luap99 in #6688
- Enable building Windows container images on a Linux Build system by @sebsoto in #6592
- The
--mountoption tobuildah buildno longer fails with an error at RUN instructions if the value for the--mountoption references an image as its “from” value, and the image has not previously been pulled by @aeijdenberg in #6695 - The
--mountoption tobuildah buildno longer fails with an error at RUN instructions if the value for the--mountoption references an image as its “from” value, and the image has not previously been pulled by @nalind in #6698 - Added support for mounting a secret to an environment variable. For example:
RUN --mount=type=secret,id=mysecret,env=FOO sh -c 'echo "Hello $FOO"'by @aeijdenberg in #6285 - Attempting to use the
--networkoption with a value other than “host” when “BUILDAH_ISOLATION” is set to “chroot” in the environment now produces an error, as it would with--isolation=chrootby @nalind in #6697 - Stop creating an empty layer when using
--layers=falseand adding metadata only (e.g.LABEL) by @jlebon in #6699 - When mounting secrets from an environment variable, “file already closed” errors should no longer occur by @nalind in #6702
- CNI support has been removed by @lsm5 in #6453
- Add
--save-stagesand--stage-labelsoptions for preserving and labeling intermediate stage images in multi-stage builds by @ezopezo in #6556 - Fixes
COPY/ADD --from=when the source stage is defined via a stage scopedARG, ensuring correct source resolution by @Honny1 in #6730 - Fix a panic in the
--secretoption parsing when key has no value by @Honny1 in #6746 - Add additional caching diagnostics to stage executor to help determine why a cache miss occured by @celskeggs in #6758
- The order networks are set up in is now deterministic by @mheon in #6722
- Commands are now grouped in categories in the output of
buildah --help. by @nalind in #6773 - The
COPY --excludecommand now uses relative pattern matching appropriately by @Honny1 in #6729 - The Buildah import paths have change from github.com/containers/buildah to go.podman.io/buildah by @baude in #6797
- manifest create: add the
--amendand the--replaceoptions for non-list images has by @c-kruse in #6676 - Fixed some log messages by @BenjaminSchubert in #6808
- Move registries.conf files to v2 format by @Luap99 in #6801
- Slirp4netns support has been removed by @lsm5 in #6443
- Added the
--valid-exit-codesoption forbuildah runto accept specific non-zero exit codes as success by @akca in #6817 - Fixes a bug where stale images could be used when using a previous build stage as a bind mount source by @ekedaigle in #6845
- Local
.containerignoreis no longer applied to ADD from git repositories by @simonbrauner in #6800 buildah push,buildah build --cache-to, andbuildah commitnow honor thecompression_formatandcompression_levelsettings fromcontainers.conf. Previously,--cache-toignored these settings and always usedgzip, causing cache layers to lose the configured compression.buildah buildalso gains the new--cache-compression-format,--cache-compression-level, and--cache-force-compressionoptions for controlling cache layer compression independently of the final image.buildah commitalso gains the new--compression-format,--compression-level, and--force-compressionoption by @Honny1 in #6757- copier: add Mkfile() for creating files with inline content to align better with BuildKit by @akca in #6857
- add/copy: copier: add
RemoveOptions.AllowWildcardto support glob patterns in remove operations by @akca in #6843 - Add RemoveOptions.AllowWildcard to the copier functionality by @akca in #6827
- Correctly report archiveSource if we can’t find it by @mtrmac in #6858
-
Don’t report an error in a possible RPC server start/stop ordering by @mtrmac in #6862
- Documentation:
-
Vendored:
- Vendor github.com/containerd/platforms to v1.0.0-rc.4
- Vendor containers/automation_images to v20260310
- Vendor github.com/containers/luksy digest to ca09631
- Vendor github.com/docker/docker to v28.5.2+incompatible
- Vendor github.com/docker/go-connections to v0.7.0
- Vendor github.com/fsouza/go-dockerclient to v1.13.1
- Vendor github.com/go-jose/go-jose/v4 to v4.1.4
- Vendor github.com/mattn/go-shellwords to v0.0.13
- Vendor github.com/moby/buildkit to v0.30.0
- Vendor github.com/moby/moby/client to v0.4.1
- Vendor github.com/moby/moby/v2 to v2.0.0-beta.8
- Vendor github.com/opencontainers/cgroups to v0.0.6
- Vendor github.com/containers/ocicrypt to v1.3.0
- Vendor github.com/opencontainers/runc to v1.4.2
- Vendor github.com/opencontainers/runtime-tools digest to 8a4db57
- Vendor github.com/opencontainers/selinux to v1.15.0
- Vendor github.com/openshift/imagebuilder to v1.2.21
- Vendor github.com/sigstore/fulcio to v1.8.5
- Vendor github.com/sirupsen/logrus to v1.9.4
- Vendor github.com/spf13/cobra to v1.10.2
- Vendor golangci/golangci-lint to v2.11.1
- Vendor golang.org/x/crypto to v0.52.0
- Vendor golang.org/x/sync to v0.20.0
- Vendor golang.org/x/sys to v0.45.0
- Vendor golang.org/x/term to v0.43.0
- Vendor google.golang.org/grpc to v1.81.1
- Vendor go.podman.io/common to v0.68.0
- Vendor go.podman.io/image/v5 to v5.40.0
- Vendor go.podman.io/storage to v1.63.0
- Vendor tags.cncf.io/container-device-interface to v1.1.0
- Tests:
- rpm/buildah.spec tests: require xz and /usr/bin/selinuxenabled by @nalind in #6849
- Update testing VM images by @nalind in #6715
- tests: Replace cat with bash input redirection by @ricardobranco777 in #6717
- tests: some more storage.conf rewrite prep by @Luap99 in #6714
- tests: remove cgroupsv1 checks and simplify cgroupsv2 conditionals by @lsm5 in #6720
- tests: use jq to validate images –json structure by @ricardobranco777 in #6716
- Update VMs, linter, fix warnings, add a “fmt” target by @nalind in #6502
- tests/from.bats “from cpu-shares test”: update cgroupv2 weights by @nalind in #6674
- tests: Adapt tests to run on architectures other than amd64 by @ricardobranco777 in #6701
- test: do not untar archive into fs when checking file names by @iTrooz in #6548
- Add a test where a default ARG value is a quoted string by @nalind in #6679
- test: Fix the typo in bud test by @ypu in #6685
- tests/helpers.bash: when determining the OCI runtime, use temporary storage by @nalind in #6772
- Fix the copier:get operation to properly gather symlink information by @BenjaminSchubert in #6759
- internal/mkcw: make errors easier to compare, update tests by @nalind in #6664
- chroot.bats(chroot with overlay root): ensure we can overlay by @nalind in #6636
- Use cached images instead of fedoraproject.org by @IrvingMg in #6634
- Changes to the build infrastructure:
- build: add –iidfile-raw CLI option by @lsm5 in #6521
- tmt: archive audit and journal logs after test execution by @lsm5 in #6850
- Packit: Only create dist-git PRs for rawhide by @lsm5 in #6826
- Makefile: add some missing dependencies by @nalind in #6785
- Makefile: preserve entrypoint_amd64 and .gz in clean target by @lsm5 in #6811
- CI: remove dependencies on online apt repositories by @nalind in #6791
- Add /assign command GitHub Action by @timcoding1988 in #6738
- internal/mkcw/embed: cross-compile using Go by @nalind in #6471
- RPM: build with sequoia on F43+ by @lsm5 in #6395
New Contributors
- @cyphar made their first contribution) in #6473
- @iTrooz made their first contribution) in #6548
- @IrvingMg made their first contribution) in #6634
- @tinovyatkin made their first contribution) in #6647
- @stilwelb made their first contribution) in #6683
- @jlebon made their first contribution) in #6654
- @sebsoto made their first contribution) in #6592
- @ezopezo made their first contribution) in #6556
- @timcodiing1988 made their first contribution) in #6738
- @celskeggs made their first contribution) in #6758
- @btwotch made their first contribution) in #6770
- @akca made their first contribution) in #6782
- @c-kruse made their first contribution) in #6676
- @plaes made their first contribution) in #6810
- @quyentonndbs made their first contribution) in #6852
- @ekedaigle made their first contribution) in #6845
- @simonbrauner made their first contribution) in #6800
Try it Out.
If you haven’t yet, install Buildah from one of the Linux repos or GitHub and give it a spin. We’re betting you’ll find it’s an easy and quick way to build containers in your environment without a daemon being involved!
For those of you who contributed to this release, thank you very much for your contributions! If you haven’t joined our community yet, don’t wait any longer! Come join us on GitHub, where Open Source communities live.