From d10e3f5b74929fb2f1cf6e42d0d19498aef9ee65 Mon Sep 17 00:00:00 2001 From: Vincent Behar Date: Thu, 27 Sep 2018 11:53:45 +0200 Subject: [PATCH] Whitelist /busybox in the debug image In the debug image, declare /busybox as a volume so that it is automatically whitelisted, because we don't want to delete it when building multi-stages images. FYI this is required when using Jenkins, because we need to use the debug kaniko image to be able to start the container "doing nothing" (with /busybox/cat) before building (by executing /kaniko/executor directly inside the container) See https://issues.jenkins-ci.org/browse/JENKINS-52576 --- deploy/Dockerfile_debug | 2 ++ 1 file changed, 2 insertions(+) diff --git a/deploy/Dockerfile_debug b/deploy/Dockerfile_debug index b01896f00..c8233ad37 100644 --- a/deploy/Dockerfile_debug +++ b/deploy/Dockerfile_debug @@ -38,6 +38,8 @@ COPY --from=0 /go/src/github.com/GoogleContainerTools/kaniko/out/executor /kanik COPY --from=0 /usr/local/bin/docker-credential-gcr /kaniko/docker-credential-gcr COPY --from=0 /go/src/github.com/awslabs/amazon-ecr-credential-helper/bin/linux-amd64/docker-credential-ecr-login /kaniko/docker-credential-ecr-login COPY --from=1 /distroless/bazel-genfiles/experimental/busybox/busybox/ /busybox/ +# Declare /busybox as a volume to get it automatically whitelisted +VOLUME /busybox COPY files/ca-certificates.crt /kaniko/ssl/certs/ COPY files/config.json /kaniko/.docker/ ENV HOME /root