Software1 hOctober 20, 2026, 14:28

Rootless Docker builds silently ignore BuildKit memory limits

In rootless mode, Docker BuildKit silently drops per-step resource limits: a step capped at 256 MB allocated 600 MB and exited 0. The cause is the ToRootless() spec conversion that nils Linux Resources; rootful builds enforce the limit correctly (exit 137).

DEV Community

Open source

Rootless Docker builds silently ignore BuildKit memory limits

A step limited to 256 MB allocated 600 MB and the build exited 0
docker run --memory 256m on the same daemon was killed (137)
Cause: BuildKit's ToRootless() nils Linux Resources and cgroup path
Proposed fixes: buildkit#7288 (warn) and #7289 (apply on cgroup v2)

#Docker#BuildKit

Docker Engine 29.9.1 brings CVE fixes and behavior changes for self-hosters

Software

Apple Podcasts API silently caps episodes at 200 and ignores offset

Security

Deleting a secret from your Docker image doesn't delete it from your build history

Hardware

Rootless Docker builds silently ignore BuildKit memory limits

Docker Engine 29.9.1 brings CVE fixes and behavior changes for self-hosters

Apple Podcasts API silently caps episodes at 200 and ignores offset

Deleting a secret from your Docker image doesn't delete it from your build history

AI chip race shifts to data-center efficiency as memory, interconnect limits bite