mirror of
https://github.com/GoogleContainerTools/kaniko
synced 2026-09-30 20:12:22 +02:00
Warren Seymour
319bfde932
When using Kaniko with certain build systems, such as GitLab CI, it is necessary to use the 'debug' image and override the entrypoint, so that an arbitrary build script can be executed within the container. Unfortunately, the 'warmer' binary is not available in the 'debug' image, making it impossible to perform a base image cache warmup using such build systems. This patch addresses this by ensuring that the 'out/warmer' target is made in the initial stage, and that all 'out' files are copied to '/kaniko' in the final stage.
54 lines
2.6 KiB
Plaintext
54 lines
2.6 KiB
Plaintext
# Copyright 2018 Google, Inc. All rights reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# Builds the static Go image to execute in a Kubernetes job
|
|
|
|
# Stage 0: Build the executor binary and get credential helpers
|
|
FROM golang:1.10
|
|
WORKDIR /go/src/github.com/GoogleContainerTools/kaniko
|
|
# Get GCR credential helper
|
|
ADD https://github.com/GoogleCloudPlatform/docker-credential-gcr/releases/download/v1.5.0/docker-credential-gcr_linux_amd64-1.5.0.tar.gz /usr/local/bin/
|
|
RUN tar -C /usr/local/bin/ -xvzf /usr/local/bin/docker-credential-gcr_linux_amd64-1.5.0.tar.gz
|
|
RUN docker-credential-gcr configure-docker
|
|
# Get Amazon ECR credential helper
|
|
RUN go get -u github.com/awslabs/amazon-ecr-credential-helper/ecr-login/cli/docker-credential-ecr-login
|
|
RUN make -C /go/src/github.com/awslabs/amazon-ecr-credential-helper linux-amd64
|
|
COPY . .
|
|
RUN make && make out/warmer
|
|
|
|
# Stage 1: Get the busybox shell
|
|
FROM gcr.io/cloud-builders/bazel:latest
|
|
RUN git clone https://github.com/GoogleContainerTools/distroless.git
|
|
WORKDIR /distroless
|
|
RUN bazel build //experimental/busybox:busybox_tar
|
|
RUN tar -C /distroless/bazel-genfiles/experimental/busybox/ -xf /distroless/bazel-genfiles/experimental/busybox/busybox.tar
|
|
|
|
FROM scratch
|
|
COPY --from=0 /go/src/github.com/GoogleContainerTools/kaniko/out/* /kaniko/
|
|
COPY --from=0 /usr/local/bin/docker-credential-gcr /kaniko/docker-credential-gcr
|
|
COPY --from=0 /go/src/github.com/awslabs/amazon-ecr-credential-helper/bin/linux-amd64/docker-credential-ecr-login /kaniko/docker-credential-ecr-login
|
|
COPY --from=1 /distroless/bazel-genfiles/experimental/busybox/busybox/ /busybox/
|
|
# Declare /busybox as a volume to get it automatically whitelisted
|
|
VOLUME /busybox
|
|
COPY files/ca-certificates.crt /kaniko/ssl/certs/
|
|
COPY --from=0 /root/.docker/config.json /kaniko/.docker/config.json
|
|
ENV HOME /root
|
|
ENV USER /root
|
|
ENV PATH /usr/local/bin:/kaniko:/busybox
|
|
ENV SSL_CERT_DIR=/kaniko/ssl/certs
|
|
ENV DOCKER_CONFIG /kaniko/.docker/
|
|
ENV DOCKER_CREDENTIAL_GCR_CONFIG /kaniko/.config/gcloud/docker_credential_gcr_config.json
|
|
RUN ["docker-credential-gcr", "config", "--token-source=env"]
|
|
ENTRYPOINT ["/kaniko/executor"]
|