OS Manuals

/usr/bin/buildkitd

concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

From buildkitd 0.30.0-r4 (os), captured 2026-11-05 by running buildkitd --help (exit 0). permalink

Also provided by 2 other package versions
NAME:
   buildkitd - build daemon

USAGE:
   buildkitd [global options] command [command options] [arguments...]

VERSION:
   0.30.0

COMMANDS:
   help, h  Shows a list of commands or help for one command

GLOBAL OPTIONS:
   --rootless                                  set all the default options to be compatible with rootless containers (default: true)
   --config value                              path to config file (default: "/tmp/.config/buildkit/buildkitd.toml")
   --debug                                     enable debug output in logs
   --root value                                path to state directory (default: "/tmp/.local/share/buildkit")
   --addr value                                listening address (socket or tcp) (default: "unix:///run/buildkit/buildkitd.sock")
   --log-format value                          log formatter: json or text (default: "text")
   --log-level value                           set the log level (default: "info") [$BUILDKITD_LOG_LEVEL]
   --group value                               group (name or gid) which will own all Unix socket listening addresses
   --debugaddr value                           debugging address (eg. 0.0.0.0:6060) [$BUILDKITD_DEBUGADDR]
   --tlscert value                             certificate file to use
   --tlskey value                              key file to use
   --tlscacert value                           ca certificate to verify clients
   --allow-insecure-entitlement value          allows insecure entitlements e.g. network.host, security.insecure, device
   --otel-socket-path value                    OTEL collector trace socket path
   --cdi-disabled                              disables support of the Container Device Interface (CDI)
   --cdi-spec-dir value                        list of directories to scan for CDI spec files
   --save-cache-debug                          enable saving cache debug info
   --containerd-worker value                   enable containerd workers (true/false/auto) (default: "auto")
   --containerd-worker-addr value              containerd socket (default: "/run/containerd/containerd.sock")
   --containerd-worker-labels value            user-specific annotation labels (com.example.foo=bar)
   --containerd-worker-net value               worker network type (auto, bridge, cni or host) (default: "auto")
   --containerd-cni-config-path value          path of cni config file (default: "/tmp/.config/buildkit/cni.json")
   --containerd-cni-binary-dir value           path of cni binary files (default: "/opt/cni/bin")
   --containerd-cni-pool-size value            size of cni network namespace pool (default: 0)
   --containerd-worker-snapshotter value       snapshotter name to use (default: "overlayfs")
   --containerd-worker-apparmor-profile value  set the name of the apparmor profile applied to containers
   --containerd-worker-selinux                 apply SELinux labels
   --containerd-max-parallelism value          limit the number of parallel build steps that can run at the same time (default: 0)
   --containerd-worker-rootless                enable rootless mode
   --containerd-worker-gc                      Enable automatic garbage collection on worker
   --containerd-worker-gc-keepstorage value    Amount of storage GC keep locally, format "Reserved[,Free[,Maximum]]" (MB) (default: "2000,2000,2000")
   --oci-worker value                          enable oci workers (true/false/auto) (default: "auto")
   --oci-worker-labels value                   user-specific annotation labels (com.example.foo=bar)
   --oci-worker-snapshotter value              name of snapshotter (overlayfs, native, etc.) (default: "auto")
   --oci-worker-proxy-snapshotter-path value   address of proxy snapshotter socket (do not include 'unix://' prefix)
   --oci-worker-platform value                 override supported platforms for worker
   --oci-worker-net value                      worker network type (auto, bridge, cni or host) (default: "auto")
   --oci-cni-config-path value                 path of cni config file (default: "/tmp/.config/buildkit/cni.json")
   --oci-cni-binary-dir value                  path of cni binary files (default: "/opt/cni/bin")
   --oci-cni-pool-size value                   size of cni network namespace pool (default: 0)
   --oci-worker-binary value                   name of specified oci worker binary
   --oci-worker-apparmor-profile value         set the name of the apparmor profile applied to containers
   --oci-worker-selinux                        apply SELinux labels
   --oci-max-parallelism value                 limit the number of parallel build steps that can run at the same time (default: 0)
   --oci-worker-rootless                       enable rootless mode
   --oci-worker-no-process-sandbox             use the host PID namespace and procfs (WARNING: allows build containers to kill (and potentially ptrace) an arbitrary process in the host namespace)
   --oci-worker-gc                             Enable automatic garbage collection on worker
   --oci-worker-gc-keepstorage value           Amount of storage GC keep locally, format "Reserved[,Free[,Maximum]]" (MB) (default: "2000,2000,2000")
   --help, -h                                  show help
   --version, -v                               print the version
Options (50)
OptionDescriptionSource
--rootlessset all the default options to be compatible with rootless containers (default: true)help
--config valuepath to config file (default: "/tmp/.config/buildkit/buildkitd.toml")help
--debugenable debug output in logshelp
--root valuepath to state directory (default: "/tmp/.local/share/buildkit")help
--addr valuelistening address (socket or tcp) (default: "unix:///run/buildkit/buildkitd.sock")help
--log-format valuelog formatter: json or text (default: "text")help
--log-level valueset the log level (default: "info") [$BUILDKITD_LOG_LEVEL]help
--group valuegroup (name or gid) which will own all Unix socket listening addresseshelp
--debugaddr valuedebugging address (eg.help
--tlscert valuecertificate file to usehelp
--tlskey valuekey file to usehelp
--tlscacert valueca certificate to verify clientshelp
--allow-insecure-entitlement valueallows insecure entitlements e.g. network.host, security.insecure, devicehelp
--otel-socket-path valueOTEL collector trace socket pathhelp
--cdi-disableddisables support of the Container Device Interface (CDI)help
--cdi-spec-dir valuelist of directories to scan for CDI spec fileshelp
--save-cache-debugenable saving cache debug infohelp
--containerd-worker valueenable containerd workers (true/false/auto) (default: "auto")help
--containerd-worker-addr valuecontainerd socket (default: "/run/containerd/containerd.sock")help
--containerd-worker-labels valueuser-specific annotation labels (com.example.foo=bar)help
--containerd-worker-net valueworker network type (auto, bridge, cni or host) (default: "auto")help
--containerd-cni-config-path valuepath of cni config file (default: "/tmp/.config/buildkit/cni.json")help
--containerd-cni-binary-dir valuepath of cni binary files (default: "/opt/cni/bin")help
--containerd-cni-pool-size valuesize of cni network namespace pool (default: 0)help
--containerd-worker-snapshotter valuesnapshotter name to use (default: "overlayfs")help
--containerd-worker-apparmor-profile valueset the name of the apparmor profile applied to containershelp
--containerd-worker-selinuxapply SELinux labelshelp
--containerd-max-parallelism valuelimit the number of parallel build steps that can run at the same time (default: 0)help
--containerd-worker-rootlessenable rootless modehelp
--containerd-worker-gcEnable automatic garbage collection on workerhelp
--containerd-worker-gc-keepstorage valueAmount of storage GC keep locally, format "Reserved[,Free[,Maximum]]" (MB) (default: "2000,2000,2000")help
--oci-worker valueenable oci workers (true/false/auto) (default: "auto")help
--oci-worker-labels valueuser-specific annotation labels (com.example.foo=bar)help
--oci-worker-snapshotter valuename of snapshotter (overlayfs, native, etc.) (default: "auto")help
--oci-worker-proxy-snapshotter-path valueaddress of proxy snapshotter socket (do not include 'unix://' prefix)help
--oci-worker-platform valueoverride supported platforms for workerhelp
--oci-worker-net valueworker network type (auto, bridge, cni or host) (default: "auto")help
--oci-cni-config-path valuepath of cni config file (default: "/tmp/.config/buildkit/cni.json")help
--oci-cni-binary-dir valuepath of cni binary files (default: "/opt/cni/bin")help
--oci-cni-pool-size valuesize of cni network namespace pool (default: 0)help
--oci-worker-binary valuename of specified oci worker binaryhelp
--oci-worker-apparmor-profile valueset the name of the apparmor profile applied to containershelp
--oci-worker-selinuxapply SELinux labelshelp
--oci-max-parallelism valuelimit the number of parallel build steps that can run at the same time (default: 0)help
--oci-worker-rootlessenable rootless modehelp
--oci-worker-no-process-sandboxuse the host PID namespace and procfs (WARNING: allows build containers to kill (and potentially ptrace) an arbitrary process in the host namespace)help
--oci-worker-gcEnable automatic garbage collection on workerhelp
--oci-worker-gc-keepstorage valueAmount of storage GC keep locally, format "Reserved[,Free[,Maximum]]" (MB) (default: "2000,2000,2000")help
--help, -hshow helphelp
--version, -vprint the versionhelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.