revert: "chore: enable SBOM attestation for image builds" (#16868)

matifali · web-flow · commit e817713dc052 · 2025-03-10T19:55:03.000Z
Reverts #16852 The CI failed to create the multi-arch manifest. https://github.com/coder/coder/actions/runs/13773079355/job/38516182819#step:18:341 I personally think we should move to a [multi-arch Dockerfile](https://docs.docker.com/build/building/multi-platform/#cross-compilation) instead of creating the manifest manually.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -361,7 +361,6 @@ jobs:
           file: scripts/Dockerfile.base
           platforms: linux/amd64,linux/arm64,linux/arm/v7
           provenance: true
-          sbom: true
           pull: true
           no-cache: true
           push: true
diff --git a/dogfood/contents/files/etc/docker/daemon.json b/dogfood/contents/files/etc/docker/daemon.json
@@ -1,6 +1,3 @@
 {
-	"registry-mirrors": ["https://mirror.gcr.io"],
-	"features": {
-		"containerd-snapshotter": true
-	}
+	"registry-mirrors": ["https://mirror.gcr.io"]
 }
diff --git a/scripts/build_docker.sh b/scripts/build_docker.sh
@@ -136,12 +136,10 @@ fi
 
 log "--- Building Docker image for $arch ($image_tag)"
 
-docker buildx build \
+docker build \
 	--platform "$arch" \
 	--build-arg "BASE_IMAGE=$base_image" \
 	--build-arg "CODER_VERSION=$version" \
-	--provenance true \
-	--sbom true \
 	--no-cache \
 	--tag "$image_tag" \
 	-f Dockerfile \

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,3 @@`
`1`	`1`	`{`
`2`		`- "registry-mirrors": ["https://mirror.gcr.io"],`
`3`		`- "features": {`
`4`		`- "containerd-snapshotter": true`
`5`		`- }`
	`2`	`+ "registry-mirrors": ["https://mirror.gcr.io"]`
`6`	`3`	`}`