Document build driver and image store compatibility for attestations

[hnnynh]

Is this a docs issue?

• My issue is about the documentation content or website

Type of issue

I can't find what I'm looking for

Description

The build attestation documentation does not clearly specify which build drivers, exporters, and image stores support attestations.

When using the docker driver with the classic image store, the build fails with:

# docker v29
ERROR: failed to build: Attestation is not supported for the docker driver.
Switch to a different driver, or turn on the containerd image store, and try again.
Learn more at https://docs.docker.com/go/attestations/

The linked documentation explains that 'All BuildKit exporters support attestations', but docker is a build driver rather than an exporter. It does not provide enough information to determine which driver and image-store combinations are supported.

Could the documentation include a compatibility table covering:

• Build drivers: docker, docker-container, kubernetes, and remote
• Relevant exporters, such as image, registry, and docker
• Classic and containerd image stores
• Whether attestations can be generated, preserved, loaded locally, or pushed to a registry

At minimum, the page should explain that the docker driver cannot build images with attestations when using the classic image store, and that users must enable the containerd image store, select another driver, or disable attestations.

Location

https://docs.docker.com/build/metadata/attestations/

Suggestion

No response