Buildah version 1.44.0 Release Announcement

We’re pleased to announce the release of Buildah version 1.44.0, which is now available from GitHub for any Linux distro. We are shipping this release on Fedora 43 and Fedora 44. Buildah will also be shipped on CentOS, OpenSUSE, and Ubuntu soon. In addition, container images will be available at https://quay.io/repository/buildah/stable and https://quay.io/repository/podman-container-tools/buildah.

The Buildah project has continued to grow over the past several weeks, welcoming several new contributors to the mix. This release features notable changes:

• The containers.conf configuration file behavior has changed. See containers-config(5) for details.
• Slirp4netns, cgroups v1, and CNI support have been removed.
• The buildah build and buildah commit commands now accept a --metadata-file option. See See buildah-build(1) and buildah-commit(1) for for details.
• The build now has --metadata-file, --mount, --save-stages, --source-policy-file, and --stage-labels options. See buildah-build(1) for details.
• Added the --valid-exit-codes option for buildah run to accept specific non-zero exit codes as success. See buildah-run(1) for details.

This release comprises changes made for v1.44.0 and will be included in Podman v6.0.

Release Changes

Changes for v1.44.0

• Fix an error in the build option --tag oci-archive:xxx.tar by @aeijdenberg in #6284
• The buildah build and buildah commit commands now accept a --metadata-file option by @nalind in #6442
• Changes “written” to the build context directory during buildah build RUN --mount=type=bind instructions are no longer discarded between instructions, but when the build completes, whether it completes successfully or not by @nalind in #5975
• Remove Cgroups v1 support (podman6) by @lsm5 in #6424
• The error on build the flag –output=type=something now prints to stdout rather than outputting the image to a folder by @iTrooz in #6476
• Add the --source-policy-file option to build for BuildKit-compatible source policies by @tinovyatkin in #6647
• This adds a --mount option to build which has the effect of adding this mount to each RUN command in a Containerfile before executing by @aeijdenberg in #6289
• Fix call to chown to pass the gid instead of the uid by @stilwelb in #6683
• Fixed broken pipe errors when uploading tar archives with trailing null bytes by @Honny1 in #6678
• Add the FROM --after<stage> option to declare explicit stage dependencies by @jlebon in #654
• Fixed a race condition during cache lookup that made the build fail when a storage layer was removed in parallel by @Luap99 in #6688
• Enable building Windows container images on a Linux Build system by @sebsoto in #6592
• The --mount option to buildah build no longer fails with an error at RUN instructions if the value for the --mount option references an image as its “from” value, and the image has not previously been pulled by @aeijdenberg in #6695
• The --mount option to buildah build no longer fails with an error at RUN instructions if the value for the --mount option references an image as its “from” value, and the image has not previously been pulled by @nalind in #6698
• Added support for mounting a secret to an environment variable. For example: RUN --mount=type=secret,id=mysecret,env=FOO sh -c 'echo "Hello $FOO"' by @aeijdenberg in #6285
• Attempting to use the --network option with a value other than “host” when “BUILDAH_ISOLATION” is set to “chroot” in the environment now produces an error, as it would with --isolation=chroot by @nalind in #6697
• Stop creating an empty layer when using --layers=false and adding metadata only (e.g. LABEL) by @jlebon in #6699
• When mounting secrets from an environment variable, “file already closed” errors should no longer occur by @nalind in #6702
• CNI support has been removed by @lsm5 in #6453
• Add --save-stages and --stage-labels options for preserving and labeling intermediate stage images in multi-stage builds by @ezopezo in #6556
• Fixes COPY/ADD --from= when the source stage is defined via a stage scoped ARG, ensuring correct source resolution by @Honny1 in #6730
• Fix a panic in the --secret option parsing when key has no value by @Honny1 in #6746
• Add additional caching diagnostics to stage executor to help determine why a cache miss occured by @celskeggs in #6758
• The order networks are set up in is now deterministic by @mheon in #6722
• Commands are now grouped in categories in the output of buildah --help. by @nalind in #6773
• The COPY --exclude command now uses relative pattern matching appropriately by @Honny1 in #6729
• The Buildah import paths have change from github.com/containers/buildah to go.podman.io/buildah by @baude in #6797
• manifest create: add the --amend and the --replace options for non-list images has by @c-kruse in #6676
• Fixed some log messages by @BenjaminSchubert in #6808
• Move registries.conf files to v2 format by @Luap99 in #6801
• Slirp4netns support has been removed by @lsm5 in #6443
• Added the --valid-exit-codes option for buildah run to accept specific non-zero exit codes as success by @akca in #6817
• Fixes a bug where stale images could be used when using a previous build stage as a bind mount source by @ekedaigle in #6845
• Local .containerignore is no longer applied to ADD from git repositories by @simonbrauner in #6800
• buildah push, buildah build --cache-to, and buildah commit now honor the compression_format and compression_level settings from containers.conf. Previously, --cache-to ignored these settings and always used gzip, causing cache layers to lose the configured compression. buildah build also gains the new --cache-compression-format, --cache-compression-level, and --cache-force-compression options for controlling cache layer compression independently of the final image. buildah commit also gains the new --compression-format, --compression-level, and --force-compression option by @Honny1 in #6757
• copier: add Mkfile() for creating files with inline content to align better with BuildKit by @akca in #6857
• add/copy: copier: add RemoveOptions.AllowWildcard to support glob patterns in remove operations by @akca in #6843
• Add RemoveOptions.AllowWildcard to the copier functionality by @akca in #6827
• Correctly report archiveSource if we can’t find it by @mtrmac in #6858

• Don’t report an error in a possible RPC server start/stop ordering by @mtrmac in #6862

• Documentation:
  • docs: fix build tool tutorial with correct modules by @btwotch in #6778
  • docs: Add note about the ssh mount options for non-root users by @plaes in #6810
  • Remove OWNERS file by @baude in #6812

• Vendored:

  • Vendor github.com/containerd/platforms to v1.0.0-rc.4
  • Vendor containers/automation_images to v20260310
  • Vendor github.com/containers/luksy digest to ca09631
  • Vendor github.com/docker/docker to v28.5.2+incompatible
  • Vendor github.com/docker/go-connections to v0.7.0
  • Vendor github.com/fsouza/go-dockerclient to v1.13.1
  • Vendor github.com/go-jose/go-jose/v4 to v4.1.4
  • Vendor github.com/mattn/go-shellwords to v0.0.13
  • Vendor github.com/moby/buildkit to v0.30.0
  • Vendor github.com/moby/moby/client to v0.4.1
  • Vendor github.com/moby/moby/v2 to v2.0.0-beta.8
  • Vendor github.com/opencontainers/cgroups to v0.0.6
  • Vendor github.com/containers/ocicrypt to v1.3.0
  • Vendor github.com/opencontainers/runc to v1.4.2
  • Vendor github.com/opencontainers/runtime-tools digest to 8a4db57
  • Vendor github.com/opencontainers/selinux to v1.15.0
  • Vendor github.com/openshift/imagebuilder to v1.2.21
  • Vendor github.com/sigstore/fulcio to v1.8.5
  • Vendor github.com/sirupsen/logrus to v1.9.4
  • Vendor github.com/spf13/cobra to v1.10.2
  • Vendor golangci/golangci-lint to v2.11.1
  • Vendor golang.org/x/crypto to v0.52.0
  • Vendor golang.org/x/sync to v0.20.0
  • Vendor golang.org/x/sys to v0.45.0
  • Vendor golang.org/x/term to v0.43.0
  • Vendor google.golang.org/grpc to v1.81.1
  • Vendor go.podman.io/common to v0.68.0
  • Vendor go.podman.io/image/v5 to v5.40.0
  • Vendor go.podman.io/storage to v1.63.0
  • Vendor tags.cncf.io/container-device-interface to v1.1.0
• Tests:
  • rpm/buildah.spec tests: require xz and /usr/bin/selinuxenabled by @nalind in #6849
  • Update testing VM images by @nalind in #6715
  • tests: Replace cat with bash input redirection by @ricardobranco777 in #6717
  • tests: some more storage.conf rewrite prep by @Luap99 in #6714
  • tests: remove cgroupsv1 checks and simplify cgroupsv2 conditionals by @lsm5 in #6720
  • tests: use jq to validate images –json structure by @ricardobranco777 in #6716
  • Update VMs, linter, fix warnings, add a “fmt” target by @nalind in #6502
  • tests/from.bats “from cpu-shares test”: update cgroupv2 weights by @nalind in #6674
  • tests: Adapt tests to run on architectures other than amd64 by @ricardobranco777 in #6701
  • test: do not untar archive into fs when checking file names by @iTrooz in #6548
  • Add a test where a default ARG value is a quoted string by @nalind in #6679
  • test: Fix the typo in bud test by @ypu in #6685
  • tests/helpers.bash: when determining the OCI runtime, use temporary storage by @nalind in #6772
  • Fix the copier:get operation to properly gather symlink information by @BenjaminSchubert in #6759
  • internal/mkcw: make errors easier to compare, update tests by @nalind in #6664
  • chroot.bats(chroot with overlay root): ensure we can overlay by @nalind in #6636
  • Use cached images instead of fedoraproject.org by @IrvingMg in #6634
• Changes to the build infrastructure:
  • build: add –iidfile-raw CLI option by @lsm5 in #6521
  • tmt: archive audit and journal logs after test execution by @lsm5 in #6850
  • Packit: Only create dist-git PRs for rawhide by @lsm5 in #6826
  • Makefile: add some missing dependencies by @nalind in #6785
  • Makefile: preserve entrypoint_amd64 and .gz in clean target by @lsm5 in #6811
  • CI: remove dependencies on online apt repositories by @nalind in #6791
  • Add /assign command GitHub Action by @timcoding1988 in #6738
  • internal/mkcw/embed: cross-compile using Go by @nalind in #6471
  • RPM: build with sequoia on F43+ by @lsm5 in #6395

New Contributors

• @cyphar made their first contribution) in #6473
• @iTrooz made their first contribution) in #6548
• @IrvingMg made their first contribution) in #6634
• @tinovyatkin made their first contribution) in #6647
• @stilwelb made their first contribution) in #6683
• @jlebon made their first contribution) in #6654
• @sebsoto made their first contribution) in #6592
• @ezopezo made their first contribution) in #6556
• @timcodiing1988 made their first contribution) in #6738
• @celskeggs made their first contribution) in #6758
• @btwotch made their first contribution) in #6770
• @akca made their first contribution) in #6782
• @c-kruse made their first contribution) in #6676
• @plaes made their first contribution) in #6810
• @quyentonndbs made their first contribution) in #6852
• @ekedaigle made their first contribution) in #6845
• @simonbrauner made their first contribution) in #6800

Try it Out.

If you haven’t yet, install Buildah from one of the Linux repos or GitHub and give it a spin. We’re betting you’ll find it’s an easy and quick way to build containers in your environment without a daemon being involved!

For those of you who contributed to this release, thank you very much for your contributions! If you haven’t joined our community yet, don’t wait any longer! Come join us on GitHub, where Open Source communities live.

Buildah == Simplicity