@ -68,7 +68,7 @@ Allow extra privileged entitlement. List of entitlements:
- `network.host` - Allows executions with host networking.
- `security.insecure` - Allows executions without sandbox. See
[related Dockerfile extensions ](https:// github.com/moby/buildkit/blob/master/frontend/dockerfile/docs/experimental.md#run---securityinsecure sandbox).
[related Dockerfile extensions ](https:// docs.docker.com/engine/reference/builder/#run---security sandbox).
For entitlements to be enabled, the `buildkitd` daemon also needs to allow them
with `--allow-insecure-entitlement` (see [`create --buildkitd-flags` ](buildx_create.md#buildkitd-flags ))
@ -95,7 +95,9 @@ There are also useful built-in build args like:
$ docker buildx build --build-arg BUILDKIT_MULTI_PLATFORM=1 .
```
More built-in build args can be found in [dockerfile frontend docs ](https://github.com/moby/buildkit/blob/master/frontend/dockerfile/docs/syntax.md#built-in-build-args ).
> **Note**
>
> More built-in build args can be found in [Dockerfile reference docs ](https://docs.docker.com/engine/reference/builder/#buildkit-built-in-build-args ).
### < a name = "build-context" > < / a > Additional build contexts (--build-context)
@ -443,7 +445,7 @@ build result to registry.
```
Exposes secret to the build. The secret can be used by the build using
[`RUN --mount=type=secret` mount ](https:// github.com/moby/buildkit/blob/master/frontend/dockerfile/docs/syntax.md #run---mounttypesecret).
[`RUN --mount=type=secret` mount ](https:// docs.docker.com/engine/reference/builder/ #run---mounttypesecret).
If `type` is unset it will be detected. Supported types are:
@ -501,7 +503,7 @@ This can be useful when some commands in your Dockerfile need specific SSH
authentication (e.g., cloning a private repository).
`--ssh` exposes SSH agent socket or keys to the build and can be used with the
[`RUN --mount=type=ssh` mount ](https:// github.com/moby/buildkit/blob/master/frontend/dockerfile/docs/syntax.md #run---mounttypessh).
[`RUN --mount=type=ssh` mount ](https:// docs.docker.com/engine/reference/builder/ #run---mounttypessh).
Example to access Gitlab using an SSH agent socket: