Files
docker-docs/data/cli/buildx/docker_buildx_replay.yaml
T
docker-tools-robot 79edc94fd7 vendor: github.com/docker/buildx v0.38.0
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-10-08 01:41:54 +02:00

66 lines
2.2 KiB
YAML
Generated

command: docker buildx replay
short: Replay a build from its provenance
long: |-
`buildx replay` reads the SLSA provenance attestation of an existing build and
reproduces the build with the recorded frontend, options, and source digests.
Replay runs on the selected builder and requires BuildKit v0.27 or later.
Subjects are accepted in three forms:
- `docker-image://<ref>` or a bare `<ref>` — resolve through the registry.
- `oci-layout://<path>[:<tag>]` — read from a local OCI layout.
- A local attestation file: an in-toto statement (`.intoto.jsonl`), an
unsigned DSSE envelope, a Sigstore bundle, or a bare SLSA provenance
predicate.
A build can be replayed when:
- its provenance was recorded with `mode=max`
(`--provenance=mode=max` or `--attest=type=provenance,mode=max`). `mode=min`
provenance omits the build arguments, secrets, and SSH needed for replay;
- its build context was a Git repository or an HTTP(S) URL. Builds that used
local directories, stdin, OCI layouts, or other Bake targets as build
contexts cannot be replayed;
- it did not use `--network=host`, unless a different `--network` is passed
to replay;
- the recorded sources are still available.
Replay rebuilds one platform at a time. For a multi-platform image, select the
platform with `--platform`. By default, the only platform of the image or the
default platform of the builder is used.
usage: docker buildx replay
pname: docker buildx
plink: docker_buildx.yaml
cname:
- docker buildx replay build
clink:
- docker_buildx_replay_build.yaml
inherited_options:
- option: builder
value_type: string
description: Override the configured builder instance
deprecated: false
hidden: false
experimental: false
experimentalcli: false
kubernetes: false
swarm: false
- option: debug
shorthand: D
value_type: bool
default_value: "false"
description: Enable debug logging
deprecated: false
hidden: false
experimental: false
experimentalcli: false
kubernetes: false
swarm: false
deprecated: false
hidden: false
experimental: false
experimentalcli: true
kubernetes: false
swarm: false