mirror of
https://github.com/docker/docs.git
synced 2026-11-04 10:01:00 +00:00
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
66 lines
2.2 KiB
YAML
Generated
66 lines
2.2 KiB
YAML
Generated
command: docker buildx replay
|
|
short: Replay a build from its provenance
|
|
long: |-
|
|
`buildx replay` reads the SLSA provenance attestation of an existing build and
|
|
reproduces the build with the recorded frontend, options, and source digests.
|
|
Replay runs on the selected builder and requires BuildKit v0.27 or later.
|
|
|
|
Subjects are accepted in three forms:
|
|
|
|
- `docker-image://<ref>` or a bare `<ref>` — resolve through the registry.
|
|
- `oci-layout://<path>[:<tag>]` — read from a local OCI layout.
|
|
- A local attestation file: an in-toto statement (`.intoto.jsonl`), an
|
|
unsigned DSSE envelope, a Sigstore bundle, or a bare SLSA provenance
|
|
predicate.
|
|
|
|
A build can be replayed when:
|
|
|
|
- its provenance was recorded with `mode=max`
|
|
(`--provenance=mode=max` or `--attest=type=provenance,mode=max`). `mode=min`
|
|
provenance omits the build arguments, secrets, and SSH needed for replay;
|
|
- its build context was a Git repository or an HTTP(S) URL. Builds that used
|
|
local directories, stdin, OCI layouts, or other Bake targets as build
|
|
contexts cannot be replayed;
|
|
- it did not use `--network=host`, unless a different `--network` is passed
|
|
to replay;
|
|
- the recorded sources are still available.
|
|
|
|
Replay rebuilds one platform at a time. For a multi-platform image, select the
|
|
platform with `--platform`. By default, the only platform of the image or the
|
|
default platform of the builder is used.
|
|
usage: docker buildx replay
|
|
pname: docker buildx
|
|
plink: docker_buildx.yaml
|
|
cname:
|
|
- docker buildx replay build
|
|
clink:
|
|
- docker_buildx_replay_build.yaml
|
|
inherited_options:
|
|
- option: builder
|
|
value_type: string
|
|
description: Override the configured builder instance
|
|
deprecated: false
|
|
hidden: false
|
|
experimental: false
|
|
experimentalcli: false
|
|
kubernetes: false
|
|
swarm: false
|
|
- option: debug
|
|
shorthand: D
|
|
value_type: bool
|
|
default_value: "false"
|
|
description: Enable debug logging
|
|
deprecated: false
|
|
hidden: false
|
|
experimental: false
|
|
experimentalcli: false
|
|
kubernetes: false
|
|
swarm: false
|
|
deprecated: false
|
|
hidden: false
|
|
experimental: false
|
|
experimentalcli: true
|
|
kubernetes: false
|
|
swarm: false
|
|
|