home.social

#kaniko — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #kaniko, aggregated by home.social.

fetched live
  1. Kaniko has been archived by Google last year. Chainguard forked the repository, but does not publish images (for free).

    github.com/GoogleContainerTool
    github.com/chainguard-forks/ka

    What is everyone using for their image builds inside containers (as a drop-in replacement, I know about apko and other tools)?

    #DevOps #Kuberneters #Docker #Containers #Kaniko #AdminLife #Pipelines #CICD #HomeLab

  2. Kaniko has been archived by Google last year. Chainguard forked the repository, but does not publish images (for free).

    github.com/GoogleContainerTool
    github.com/chainguard-forks/ka

    What is everyone using for their image builds inside containers (as a drop-in replacement, I know about apko and other tools)?

    #DevOps #Kuberneters #Docker #Containers #Kaniko #AdminLife #Pipelines #CICD #HomeLab

  3. @moehrenfeld Hey did you consider using Podman? I was just discovering #Kaniko when that project was declared abandoned.

    #Podman is the #Docker I always wanted and I have just set up a CI pipeline building images with Podman with #GitLab's default runners without special privileges.

    See here for current MR with relevant changes:
    floss.social/@coocook/11528675

  4. So I've migrated a container build pipeline from (deprecated) #Kaniko to (shiny new) #BuildKit after reading documentation from #Gitlab on how to integrate image building in Gitlab CI/CD. Turns out the whole thing doesn't work without enabling privileged mode on the Gitlab runner. Judging from the discussion around the issue there is no tool except Kaniko that works without some sort of extended privileges.

    gitlab.com/gitlab-org/gitlab-r

  5. So I've migrated a container build pipeline from (deprecated) #Kaniko to (shiny new) #BuildKit after reading documentation from #Gitlab on how to integrate image building in Gitlab CI/CD. Turns out the whole thing doesn't work without enabling privileged mode on the Gitlab runner. Judging from the discussion around the issue there is no tool except Kaniko that works without some sort of extended privileges.

    gitlab.com/gitlab-org/gitlab-r

  6. Interesting, #kaniko has been archived.
    Need to change all my gitlab-ci pipelines to something else now 😓 #gitlab #hubernetes

  7. Interesting, #kaniko has been archived.
    Need to change all my gitlab-ci pipelines to something else now 😓 #gitlab #hubernetes

  8. Google's discontinuation of #Kaniko will hopefully pave the way for better container image build tools. These have been around for quite a while, but integration into common platforms only worked flawlessly 99% of the way.

    I explained the reasons in my #ContainerDays talk last year:

    speakerdeck.com/f30/unprivileg
    youtu.be/62p6v_A4KTM

    Chainguard already announced its fork of Kaniko:
    github.com/chainguard-dev/kani

    I hope we'll see longstanding issues resolved as well as hurdles for other tools removed.

  9. Shout-out to ThetaDev for his #Gitea action (also works on #Forgejo) that allows you to run #Kaniko inside an action, completely unprivileged and without Docker! 🚀
    code.thetadev.de/actions/kanik
    #DevOps

  10. Shout-out to ThetaDev for his #Gitea action (also works on #Forgejo) that allows you to run #Kaniko inside an action, completely unprivileged and without Docker! 🚀
    code.thetadev.de/actions/kanik
    #DevOps

  11. Из 2024 в 2025: вспоминаем лучшие практики CI/CD

    Развитие методологий CI и CD не стоит на месте. Тем не менее, проверенные практики, вероятно, останутся актуальными и в 2025 году. В этой статье покажем некоторые из таких в действии. Вспомнить лучшие практики CI/CD

    habr.com/ru/companies/nixys/ar

    #gitlabci #argocd #flux #vault #cicd #kaniko #kubernetes #инфраструктура #доставка_кода

  12. So… #Kaniko seems unmaintained. What is state of the art tooling to build #docker images in docker?

  13. So… #Kaniko seems unmaintained. What is state of the art tooling to build #docker images in docker?

  14. Looks like #kaniko is unmaintained. Bad to see as it was my first stop github.com/GoogleContainerTool
    probably taking a look at #buildah or #Nix to do the job in the future

  15. Looks like #kaniko is unmaintained. Bad to see as it was my first stop github.com/GoogleContainerTool
    probably taking a look at #buildah or #Nix to do the job in the future

  16. Awesome 🎉 #rust #rocket #digitalocean #kubernetes 👇star my code
    github.com/giuliohome/rust-roc

    Btw podman is yet another fake #opensource #foss repository

    I stop suggesting @Podman_io
    I wasted my time with those stupid idiots.

    github.com/containers/podman/i

    I admit that @docker is the way to go to #build a #Dockerfile

    Or #containerd ctr + #kaniko !
    + #chatgpt for support 💪 instead of github useless maintainers

    All tested on #WSL #Ubuntu

  17. Awesome 🎉 #rust #rocket #digitalocean #kubernetes 👇star my code
    github.com/giuliohome/rust-roc

    Btw podman is yet another fake #opensource #foss repository

    I stop suggesting @Podman_io
    I wasted my time with those stupid idiots.

    github.com/containers/podman/i

    I admit that @docker is the way to go to #build a #Dockerfile

    Or #containerd ctr + #kaniko !
    + #chatgpt for support 💪 instead of github useless maintainers

    All tested on #WSL #Ubuntu

  18. @boo_ @federico3 yeah, I recently had problems running a base image #Container in #PodMan on an older VM because it had a single #Docker layer that was not #OCI compliant even though it was built on #Kaniko 😡

    Newer versions of podman have no problem with the non compliant image, but I'm constrained to use the older one. Unfortunately, while #Nix is great for consistent Dev shells, and building container images, it's not great at installing container runners like podman and Docker 🤷‍♂️

  19. @boo_ @federico3 yeah, I recently had problems running a base image #Container in #PodMan on an older VM because it had a single #Docker layer that was not #OCI compliant even though it was built on #Kaniko 😡

    Newer versions of podman have no problem with the non compliant image, but I'm constrained to use the older one. Unfortunately, while #Nix is great for consistent Dev shells, and building container images, it's not great at installing container runners like podman and Docker 🤷‍♂️

  20. @deliverance If #Kaniko is not your speed, You can still do better than #DinD by using #PinD or even #PinP

    How to use Podman inside of a container
    redhat.com/sysadmin/podman-ins

    This way you don't need a daemon, and you can run rootless.

  21. @deliverance If #Kaniko is not your speed, You can still do better than #DinD by using #PinD or even #PinP

    How to use Podman inside of a container
    redhat.com/sysadmin/podman-ins

    This way you don't need a daemon, and you can run rootless.

  22. @deliverance You might want to consider #kaniko.

    Building Docker images without Docker using Kaniko + Gitlab CI and AWS | by Raphael Moraes | Webera
    webera.blog/building-docker-im

  23. @deliverance You might want to consider #kaniko.

    Building Docker images without Docker using Kaniko + Gitlab CI and AWS | by Raphael Moraes | Webera
    webera.blog/building-docker-im

  24. Ooof, late night debugging stuff and it looks like #kaniko totally ignores heredocs. And here I thought it was some kind of black magic that was _removing_ my files and it was happily skipping those layers entirely. github.com/GoogleContainerTool

  25. Ooof, late night debugging stuff and it looks like #kaniko totally ignores heredocs. And here I thought it was some kind of black magic that was _removing_ my files and it was happily skipping those layers entirely. github.com/GoogleContainerTool

  26. #Kaniko seems to be injecting a non OCI compliant layer into image builds, which breaks my ability to use those images with #podman

    Some of the big picture links I've looked at while trying to understand this problem:

    * Learning #Docker in Docker with Docker - Toying with DinD For Fun and Profit iximiuz.com/en/posts/container

    * Learning Containers From The Bottom Up iximiuz.com/en/posts/container

    * kaniko - Build Images In Kubernetes github.com/GoogleContainerTool

    #kubernetes #OpenContainerInitiative

  27. #Kaniko seems to be injecting a non OCI compliant layer into image builds, which breaks my ability to use those images with #podman

    Some of the big picture links I've looked at while trying to understand this problem:

    * Learning #Docker in Docker with Docker - Toying with DinD For Fun and Profit iximiuz.com/en/posts/container

    * Learning Containers From The Bottom Up iximiuz.com/en/posts/container

    * kaniko - Build Images In Kubernetes github.com/GoogleContainerTool

    #kubernetes #OpenContainerInitiative

  28. so sabia que #portainer puede aplicar #gitops para #container dentro de un #docker compose interesante y mas aun con la habilitación del #webhook ya despues montare un post de como hacer esta integracion con pipelines en #gitlab y #kaniko + #jfrog

  29. @dragnucs Difficult and embarassing topic.
    I wrote prototypes for Terraform Providers for #podman, #buildah and #kaniko IIRC.
    ALL of them are horrible at caching layers - let alone remote exec.
    The only descend approach which supports caching seems to be #buildx + #buildkit. And yes, I have a prototype implementation for that as well.
    We are still not testing this though, since hosting a Buildkit Remote Builder on GKE is a nightmare.
    Let alone error handling in both buildx and buildkit is BAD.