NAME: buildkitd - build daemon USAGE: buildkitd [global options] VERSION: 0.34.2 GLOBAL OPTIONS: --rootless set all the default options to be compatible with rootless containers (default: true) --config string path to config file (default: "/tmp/.config/buildkit/buildkitd.toml") [$BUILDKITD_CONFIG] --debug enable debug output in logs --root string path to state directory (default: "/tmp/.local/share/buildkit") --addr string [ --addr string ] listening address (socket or tcp) (default: "unix:///run/buildkit/buildkitd.sock") --log-format string log formatter: json or text (default: "text") --log-level string set the log level (default: "info") [$BUILDKITD_LOG_LEVEL] --group string group (name or gid) which will own all Unix socket listening addresses --debugaddr string debugging address (eg. 0.0.0.0:6060) [$BUILDKITD_DEBUGADDR] --tlscert string certificate file to use --tlskey string key file to use --tlscacert string ca certificate to verify clients --allow-insecure-entitlement string [ --allow-insecure-entitlement string ] allows insecure entitlements e.g. network.host, security.insecure, device --proxy-network enable proxy network enforcement for all builds --otel-socket-path string OTEL collector trace socket path --cdi-disabled disables support of the Container Device Interface (CDI) --cdi-spec-dir string [ --cdi-spec-dir string ] list of directories to scan for CDI spec files --save-cache-debug enable saving cache debug info --containerd-worker string enable containerd workers (true/false/auto) (default: "auto") --containerd-worker-addr string containerd socket (default: "/run/containerd/containerd.sock") --containerd-worker-labels string [ --containerd-worker-labels string ] user-specific annotation labels (com.example.foo=bar) --containerd-worker-net string worker network type (auto, bridge, cni or host) (default: "auto") --containerd-cni-config-path string path of cni config file (default: "/tmp/.config/buildkit/cni.json") --containerd-cni-binary-dir string path of cni binary files (default: "/opt/cni/bin") --containerd-cni-pool-size int size of cni network namespace pool (default: 0) --containerd-worker-snapshotter string snapshotter name to use (default: "overlayfs") --containerd-worker-apparmor-profile string set the name of the apparmor profile applied to containers --containerd-worker-selinux apply SELinux labels --containerd-worker-hyperv-isolation use Hyper-V isolation for Windows containers --containerd-max-parallelism int limit the number of parallel build steps that can run at the same time (default: 0) --containerd-worker-rootless enable rootless mode --containerd-worker-gc Enable automatic garbage collection on worker --containerd-worker-gc-keepstorage string Amount of storage GC keep locally, format "Reserved[,Free[,Maximum]]" (MB) (default: "2000,2000,2000") --oci-worker string enable oci workers (true/false/auto) (default: "auto") --oci-worker-labels string [ --oci-worker-labels string ] user-specific annotation labels (com.example.foo=bar) --oci-worker-snapshotter string name of snapshotter (overlayfs, native, etc.) (default: "auto") --oci-worker-proxy-snapshotter-path string address of proxy snapshotter socket (do not include 'unix://' prefix) --oci-worker-platform string [ --oci-worker-platform string ] override supported platforms for worker --oci-worker-net string worker network type (auto, bridge, cni or host) (default: "auto") --oci-cni-config-path string path of cni config file (default: "/tmp/.config/buildkit/cni.json") --oci-cni-binary-dir string path of cni binary files (default: "/opt/cni/bin") --oci-cni-pool-size int size of cni network namespace pool (default: 0) --oci-worker-binary string name of specified oci worker binary --oci-worker-apparmor-profile string set the name of the apparmor profile applied to containers --oci-worker-selinux apply SELinux labels --oci-max-parallelism int limit the number of parallel build steps that can run at the same time (default: 0) --oci-worker-rootless enable rootless mode --oci-worker-no-process-sandbox use the host PID namespace and procfs (WARNING: allows build containers to kill (and potentially ptrace) an arbitrary process in the host namespace) --oci-worker-gc Enable automatic garbage collection on worker --oci-worker-gc-keepstorage string Amount of storage GC keep locally, format "Reserved[,Free[,Maximum]]" (MB) (default: "2000,2000,2000") --help, -h show help --version, -v print the version
Options (52)
| Option | Description | Source |
|---|---|---|
--rootless | set all the default options to be compatible with rootless containers (default: true) | help |
--config string | path to config file (default: "/tmp/.config/buildkit/buildkitd.toml") [$BUILDKITD_CONFIG] | help |
--debug | enable debug output in logs | help |
--root string | path to state directory (default: "/tmp/.local/share/buildkit") | help |
--addr string | listening address (socket or tcp) (default: "unix:///run/buildkit/buildkitd.sock") | help |
--log-format string | log formatter: json or text (default: "text") | help |
--log-level string | set the log level (default: "info") [$BUILDKITD_LOG_LEVEL] | help |
--group string | group (name or gid) which will own all Unix socket listening addresses | help |
--debugaddr string | debugging address (eg. | help |
--tlscert string | certificate file to use | help |
--tlskey string | key file to use | help |
--tlscacert string | ca certificate to verify clients | help |
--allow-insecure-entitlement string | allows insecure entitlements e.g. network.host, security.insecure, device | help |
--proxy-network | enable proxy network enforcement for all builds | help |
--otel-socket-path string | OTEL collector trace socket path | help |
--cdi-disabled | disables support of the Container Device Interface (CDI) | help |
--cdi-spec-dir string | list of directories to scan for CDI spec files | help |
--save-cache-debug | enable saving cache debug info | help |
--containerd-worker string | enable containerd workers (true/false/auto) (default: "auto") | help |
--containerd-worker-addr string | containerd socket (default: "/run/containerd/containerd.sock") | help |
--containerd-worker-labels string | user-specific annotation labels (com.example.foo=bar) | help |
--containerd-worker-net string | worker network type (auto, bridge, cni or host) (default: "auto") | help |
--containerd-cni-config-path string | path of cni config file (default: "/tmp/.config/buildkit/cni.json") | help |
--containerd-cni-binary-dir string | path of cni binary files (default: "/opt/cni/bin") | help |
--containerd-cni-pool-size int | size of cni network namespace pool (default: 0) | help |
--containerd-worker-snapshotter string | snapshotter name to use (default: "overlayfs") | help |
--containerd-worker-apparmor-profile string | set the name of the apparmor profile applied to containers | help |
--containerd-worker-selinux | apply SELinux labels | help |
--containerd-worker-hyperv-isolation | use Hyper-V isolation for Windows containers | help |
--containerd-max-parallelism int | limit the number of parallel build steps that can run at the same time (default: 0) | help |
--containerd-worker-rootless | enable rootless mode | help |
--containerd-worker-gc | Enable automatic garbage collection on worker | help |
--containerd-worker-gc-keepstorage string | Amount of storage GC keep locally, format "Reserved[,Free[,Maximum]]" (MB) (default: "2000,2000,2000") | help |
--oci-worker string | enable oci workers (true/false/auto) (default: "auto") | help |
--oci-worker-labels string | user-specific annotation labels (com.example.foo=bar) | help |
--oci-worker-snapshotter string | name of snapshotter (overlayfs, native, etc.) (default: "auto") | help |
--oci-worker-proxy-snapshotter-path string | address of proxy snapshotter socket (do not include 'unix://' prefix) | help |
--oci-worker-platform string | override supported platforms for worker | help |
--oci-worker-net string | worker network type (auto, bridge, cni or host) (default: "auto") | help |
--oci-cni-config-path string | path of cni config file (default: "/tmp/.config/buildkit/cni.json") | help |
--oci-cni-binary-dir string | path of cni binary files (default: "/opt/cni/bin") | help |
--oci-cni-pool-size int | size of cni network namespace pool (default: 0) | help |
--oci-worker-binary string | name of specified oci worker binary | help |
--oci-worker-apparmor-profile string | set the name of the apparmor profile applied to containers | help |
--oci-worker-selinux | apply SELinux labels | help |
--oci-max-parallelism int | limit the number of parallel build steps that can run at the same time (default: 0) | help |
--oci-worker-rootless | enable rootless mode | help |
--oci-worker-no-process-sandbox | use the host PID namespace and procfs (WARNING: allows build containers to kill (and potentially ptrace) an arbitrary process in the host namespace) | help |
--oci-worker-gc | Enable automatic garbage collection on worker | help |
--oci-worker-gc-keepstorage string | Amount of storage GC keep locally, format "Reserved[,Free[,Maximum]]" (MB) (default: "2000,2000,2000") | help |
--help, -h | show help | help |
--version, -v | print the version | help |