Repository navigation
[BUG] docker compose build cannot grant network.host entitlement when using buildx bake #14345
Description
Description
When a Compose service declares the network.host build entitlement, docker compose build fails because Compose invokes Buildx Bake without passing --allow=network.host
This appears to be a compatibility issue with Buildx's entitlement validation when using --progress rawjson (GHSA-gwr2-q96m-6682).
The Compose-generated Bake configuration correctly includes the requested entitlement, but the actual Bake invocation does not grant it. The docker compose build CLI does not expose an --allow option to resolve this.
Steps To Reproduce
- Create compose.yaml:
services: test: build: dockerfile_inline: "FROM alpine\nRUN --network=host true" entitlements: [network.host] - Run:
docker compose build
Compose Version
Docker Compose version v5.6.0
Docker Environment
Client: Docker Engine - Community
Version: 29.9.0
Context: default
Debug Mode: false
Plugins:
buildx: Docker Buildx (Docker Inc.)
Version: v0.38.0
Path: /usr/libexec/docker/cli-plugins/docker-buildx
compose: Docker Compose (Docker Inc.)
Version: v5.6.0
Path: /usr/libexec/docker/cli-plugins/docker-compose
Server:
Containers: 1
Running: 0
Paused: 0
Stopped: 1
Images: 29
Server Version: 29.9.0
Storage Driver: overlayfs
driver-type: io.containerd.snapshotter.v1
Logging Driver: json-file
Cgroup Driver: systemd
Cgroup Version: 2
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
CDI spec directories:
/etc/cdi
/var/run/cdi
Swarm: inactive
Runtimes: io.containerd.runc.v2 runc
Default Runtime: runc
Init Binary: docker-init
containerd version: b7a25261e029d68978bbf290df0a62fc819b3c51
runc version: v1.5.2-0-g29dd3dc2
init version: de40ad0
Security Options:
apparmor
Profile: default
seccomp
Profile: builtin
cgroupns
Kernel Version: 6.11.0-29-generic
Operating System: Ubuntu 24.04.5 LTS
OSType: linux
Architecture: x86_64
CPUs: 12
Total Memory: 30.97GiB
Name: ubuntu
ID: d4182ace-77a6-4a65-98f3-2e4c558c561f
Docker Root Dir: /var/lib/docker
Debug Mode: false
Experimental: false
Insecure Registries:
127.0.0.0/8
::1/128
Live Restore Enabled: false
Firewall Backend: iptables
EnableUserlandProxy: true
UserlandProxyPath: /usr/bin/docker-proxy
Anything else?
Actual behavior
The build fails with:
$ docker compose build
[+] Building 0.0s (1/1) FINISHED
=> [internal] load local bake definitions 0.0s
=> => reading from stdin 559B 0.0s
additional privileges requested: pass "--allow=network.host" to grant requested privileges
Expected behavior
docker compose build should provide a way to grant the requested build entitlement, or otherwise handle the required permission, so that the build can succeed.
Direct Buildx Bake works
The same build succeeds when invoking Buildx Bake directly and explicitly granting the requested entitlement.
- Create docker-bake.hcl
target "default" { dockerfile-inline = "FROM alpine\nRUN --network=host true" entitlements = ["network.host"] } - Run
docker buildx bake \ --file docker-bake.hcl \ --allow=network.host
Activity
NisargJasani0602 commentedon Oct 14, 2026
This should already be fixed on
main: #14325 (merged on 12 October, fixes #14285) forwards every requested build entitlement to Bake as--allow, includingnetwork.host. Before, onlysecurity.insecurewas mapped to--allow, so any other entitlement ended up in the Bake file without being granted. That's why Bake fails withadditional privileges requested: pass "--allow=network.host"under--progress rawjson, which newer Buildx versions enforce.The new
TestBakeEntitlementGrantscovers exactly this case (entitlements: [network.host]produces--allow network.host).The fix isn't in a release yet:
v5.6.0doesn't contain it, so it should ship with the next one. I checked this by reading the code and tests onmain, not by running the repro with a recent Buildx.