mirror of
https://github.com/GoogleContainerTools/kaniko
synced 2026-09-30 19:04:02 +02:00
Anthony Davies
ed22afc19b
I needed this for my arm64 k8s cluster. I have zero Go experience but enough experience with other things to fix the rebase (I think!). This patch is working fine on my cluster.
55 lines
2.6 KiB
Plaintext
55 lines
2.6 KiB
Plaintext
# Copyright 2018 Google, Inc. All rights reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# Builds the static Go image to execute in a Kubernetes job
|
|
|
|
# Stage 0: Build the executor binary and get credential helpers
|
|
FROM golang:1.12
|
|
ARG GOARCH=amd64
|
|
WORKDIR /go/src/github.com/GoogleContainerTools/kaniko
|
|
# Get GCR credential helper
|
|
ADD https://github.com/GoogleCloudPlatform/docker-credential-gcr/releases/download/v1.5.0/docker-credential-gcr_linux_amd64-1.5.0.tar.gz /usr/local/bin/
|
|
RUN tar -C /usr/local/bin/ -xvzf /usr/local/bin/docker-credential-gcr_linux_amd64-1.5.0.tar.gz
|
|
RUN docker-credential-gcr configure-docker
|
|
# Get Amazon ECR credential helper
|
|
RUN go get -u github.com/awslabs/amazon-ecr-credential-helper/ecr-login/cli/docker-credential-ecr-login
|
|
RUN make -C /go/src/github.com/awslabs/amazon-ecr-credential-helper linux-amd64
|
|
COPY . .
|
|
RUN make GOARCH=${GOARCH} && make out/warmer
|
|
|
|
# Stage 1: Get the busybox shell
|
|
FROM gcr.io/cloud-builders/bazel:latest
|
|
RUN git clone https://github.com/GoogleContainerTools/distroless.git
|
|
WORKDIR /distroless
|
|
RUN bazel build //experimental/busybox:busybox_tar
|
|
RUN tar -C /distroless/bazel-bin/experimental/busybox/ -xf /distroless/bazel-bin/experimental/busybox/busybox.tar
|
|
|
|
FROM scratch
|
|
COPY --from=0 /go/src/github.com/GoogleContainerTools/kaniko/out/* /kaniko/
|
|
COPY --from=0 /usr/local/bin/docker-credential-gcr /kaniko/docker-credential-gcr
|
|
COPY --from=0 /go/src/github.com/awslabs/amazon-ecr-credential-helper/bin/linux-amd64/docker-credential-ecr-login /kaniko/docker-credential-ecr-login
|
|
COPY --from=1 /distroless/bazel-bin/experimental/busybox/busybox/ /busybox/
|
|
# Declare /busybox as a volume to get it automatically whitelisted
|
|
VOLUME /busybox
|
|
COPY files/ca-certificates.crt /kaniko/ssl/certs/
|
|
COPY --from=0 /root/.docker/config.json /kaniko/.docker/config.json
|
|
ENV HOME /root
|
|
ENV USER /root
|
|
ENV PATH /usr/local/bin:/kaniko:/busybox
|
|
ENV SSL_CERT_DIR=/kaniko/ssl/certs
|
|
ENV DOCKER_CONFIG /kaniko/.docker/
|
|
ENV DOCKER_CREDENTIAL_GCR_CONFIG /kaniko/.config/gcloud/docker_credential_gcr_config.json
|
|
RUN ["docker-credential-gcr", "config", "--token-source=env"]
|
|
ENTRYPOINT ["/kaniko/executor"]
|