build(rootless): upgrade Docker to v29

[masontikhonov]

What

This upgrades Docker to v29.

containerd image store is disabled as not compatible with Codefresh (more details: https://codefresh-io.atlassian.net/browse/CR-32980).

Warning

Must be delivered together with:

• [email protected] or above;
• [email protected] or above.

Labels

Assign the following labels to the PR:

security - to trigger image scanning in CI build

PR Comments

Add the following comments to the PR:

/e2e - to trigger E2E build

Security Report

Note

Compared security scans:

Current image:
quay.io/codefresh/dev/dind:upgrade-docker-rootless@sha256:fd3a6a57814f9fb1ba5c2f94f7659af0770fd18c1b9ae974f48f9d3e2dc2b148

Baseline:
quay.io/codefresh/dind:rootless@sha256:58a22e81d85e5ddb1c6ab3c2037544f5239103200305623417bac0e5fa674b0d

Important

Current summary is in beta mode.
Please analyze the full scan report for comprehensive details.

Fixed CVEs: 12

🔴 High: 2

• CVE-2025-6297 in [email protected] at unknown path
• CVE-2024-25621 in github.com/containerd/containerd/[email protected] at /usr/local/bin/dockerd

🟠 Medium: 1

• CVE-2025-64329 in github.com/containerd/containerd/[email protected] at /usr/local/bin/dockerd

⚫ Unassigned: 9

• CVE-2025-61723 in encoding/[email protected] at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2025-58188 in crypto/[email protected] at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2025-58187 in crypto/[email protected] at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2025-61724 in net/[email protected] at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2025-58189 in crypto/[email protected] at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2025-58186 in net/[email protected] at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2025-58185 in encoding/[email protected] at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2025-47912 in net/[email protected] at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2025-58183 in archive/[email protected] at /usr/local/libexec/docker/cli-plugins/docker-buildx

[masontikhonov]

/e2e