Buildah version 1.33.0 Release Announcement

We’re pleased to announce the release of Buildah version 1.33.0, which is now available from GitHub for any Linux distro. We are shipping this release on Fedora 38 and Fedora 39. Buildah will also be shipped on CentOS, OpenSUSE, and Ubuntu soon. In addition, container images will be available at https://quay.io/repository/buildah/stable and https://quay.io/repository/containers/buildah.

The Buildah project has continued to grow over the past several weeks, welcoming several new contributors to the mix. This release features notable enhancements:

• Heredoc syntax is now supported for the RUN, COPY and ADD commands in a Containerfile.
• Added support for –unsetlabel in the build and config commands.
• The build command now has a --no-hostname option which prevents the container’s /etc/hostname file from being populated.
• The login and logout commands now support editing Docker-compatible config files, using a --compat-auth-file.
• The ADD command in a Containerfile now supports the –checksum flag for HTTP sources This release comprises changes made for v1.33.0 and will be included in Podman v4.8.

Release Changes

Changes for v1.33.0

• Tag a v1.32.0 release by @nalind in #5046
• The buildah add and buildah copy commands should correctly handle relative path names for sources when the –context-directory` flag is used by @nalind in #5050
• Removing selinux_tag.sh as it is no longer needed after #580356f by @rahilarious in #5054
• When the base is scratch, build an image without layers by @flouthoc in #5031
• Add support for –unsetlabel in the build and config commands by @flouthoc in #5062
• Consider the .ignorefile with –build-context by @danishprakash in #5021
• Previously, when mounting multiple mounts, if any mount had a type specified, it would override the default type for subsequent mounts. This corrects it, by @BenjaminSchubert in #5067
• run: use internal.GetTempDir instead of os.MkdirTemp by @flouthoc in #5084
• Do not remove base-image in a multi-stage build when built without --layers by @flouthoc in #5081
• The build command now has a --no-hostname option which prevents the container’s /etc/hostname file from being populated by @rhatdan in #5094
• When a build that uses multiple –platform flags fails, the error message will indicate which platform experienced the failure by @nalind in #5112
• TEE types used with buildah build --cw and buildah mkcw are no longer required to be specified in lower-case by @nalind in #5159
• The login and logout commands now support editing Docker-compatible config files, using a --compat-auth-file option by @mtrmac in #5143
• The buildah build command using a Containerfile with no instructions, with either --unsetenv or --unsetlabel specified on the command line, now correctly generates a new image by @nalind in #5160
• The ADD command in a Containerfile now supports the –checksum flag for HTTP sources by @jfroy in #5152
• The value put into DefaultNetworkSysctl is no longer hard coded and now pulls the value from the containers.conf file by @rhatdan in #5156
• Heredoc syntax is now supported for the RUN, COPY and ADD commands in a Containerfile by @flouthoc in #5092
• The buildah commit command now accepts optional --change and --config options, which can be used to make last-minute changes to the configuration of an image when it is committed, by @nalind in #5150
• The buildah build command will no longer produce an empty image when the --cw option is used along with the --layers option and the final instruction in the Dockerfile is not an ADD, COPY, or RUN command by @nalind in #5161

Overall Miscellaneous Changes

• Documentation:
  • [CI:DOCS] Protocol can be specified with –port. Ex. –port 514/udp by @ranjithrajaram in #5066
  • [CI:DOCS] Pass secrets from the host down to internal podman containers by @rhatdan in #5154
• Vendored:
  • Vendor in github.com/containerd/containerd v1.7.7
  • Vendor in github.com/containers/common v0.57.0
  • Vendor in github.com/containers/image v5.29.0
  • Vendor in github.com/containers/storage v1.51.0
  • Vendor in github.com/containers/luksy v0.0.0-20231030195837-b5a7f79da98b
  • Vendor in github.com/onsi/gomega to v1.30.0
  • Vendor in github.com/opencontainers/image-spec to v1.1.0-rc5
  • Vendor in github.com/opencontainers/runc to v1.1.10
  • Vendor in github.com/spf13/cobra to v1.8.0
  • Vendor in go.etcd.io/bbolt to v1.3.8
  • Vendor in golang.org/x/crypto to v0.15.0
  • Vendor in golang.org/x/net to v0.18.0
  • Vendor in golang.org/x/sync to v0.5.0
  • Vendor in golang.org/x/sys to v0.14.0
  • Vendor in golang.org/x/term to v0.14.0
  • Vendor in sigs.k8s.io/yaml to v1.4.0
• Tests:
  • conformance tests: use go-dockerclient for BuildKit builds by @nalind in #5165
  • conformance tests: archive the context directory as 0:0 by @nalind in #5171
  • conformance: use require.NoErrorf() more by @nalind in #5146
  • blobcacheinfo,test: blobs must be resued when pushing across registry by @flouthoc in #5153
• Changes to the build infrastructure:
  • [CI:BUILD] Packit: tag @packit-build team on copr build failures by @lsm5 in #5060
  • Update cirrus and version of golang by @rhatdan in #5139
  • build: downgrade to go 1.20 by @giuseppe in #5166
  • mkcw: remove entrypoint binaries by @flouthoc in #5076
• Plus several minor fixes.

Try it Out.

If you haven’t yet, install Buildah from one of the Linux repos or GitHub and give it a spin. We’re betting you’ll find it’s an easy and quick way to build containers in your environment without a daemon being involved!

For those of you who contributed to this release, thank you very much for your contributions! If you haven’t joined our community yet, don’t wait any longer! Come join us on GitHub, where Open Source communities live.

Buildah == Simplicity