oci-build-task
oci-build-task copied to clipboard
a Concourse task for building OCI images
When building images locally using ``` docker build . ``` We can do a few `docker login ` beforehand which allows us to be authenticated as a specific user with...
This pull requests has a few things: - Adds support for registry-based caching (continuing what has been attempted in https://github.com/concourse/oci-build-task/pull/17) - Adds support for insecure registries (can be useful if...
I have a task definition like ``` platform: linux image_resource: type: registry-image source: repository: concourse/oci-build-task inputs: - name: repo outputs: - name: my-image run: path: build params: CONTEXT: repo ```...
## Use case Pulling base images for a build from dockerhub is leading frequently to toomanyrequests. The suggested workaround is to push packages to a project specific registry, and use...
[v0.10.0](https://github.com/concourse/oci-build-task/releases/tag/v0.10.0) points to https://github.com/concourse/oci-build-task/commit/a46d096a62aa21ed783a76e5fc62f448c62b9333, thus [misses](https://github.com/concourse/oci-build-task/compare/v0.10.0...master) the corresponding `BUILDKIT_SECRETTEXT_` param. Subsequently, the corresponding docker hub image doesn't support `BUILDKIT_SECRETTEXT_` either. Similarly to https://github.com/concourse/oci-build-task/issues/71, it took a while to figure this...
Kaniko supports building images without requiring privileged mode. https://github.com/GoogleContainerTools/kaniko
Hey! We use the `oci-build-task` quite heavily, but have noticed that over time the `cache` folder grows as our Dockerfiles are changed, and older layers are not removed when they...
I am able to successfully build linux/arm or linux/amd64 images. When attempting to pass in multiple params to IMAGE_PLATFORM like so `IMAGE_PLATFORM: linux/amd64,linux/arm64`. The result is as follows: ``` #23...
Lets folks on NixOS (or other Linux distros with Nix installed on top) run `./scripts/test` by first running `nix-shell` or `nix-develop` to enter an environment with a Go compiler, buildkit,...
A lot of users probably store these secrets in a credential manager. The only way I've found to use credential managers with this task is to run another task first...