Fork me on GitHub
#devops
<
2020-04-30
>
ghadi20:04:49

Anyone in here using unprivileged docker container builders? If so, which?

bja18:01:45

I use rules_docker and bazel to do this

bja18:01:57

It doesn't actually use docker for anything unless you request it to run the container or upload it to the docker instance. When it's composing layers/container images, it does so, logically, as a collection of tarballs

bja18:01:31

it also uses the google distroless containers by default, which are pretty small (smaller than alpine) and allow you to layer in debian packages if you need to

bja18:01:42

I have my whole clojure project using bazel, but if you just wanted the devops portion, you could easily use rules_foreign_jvm to reuse a lein deploy or lein install jar/war and then have rules_docker layer that onto a java image

bja18:01:16

rules_docker will automatically follow the dependencies set up by rules_jvm_external (under the hood, this is coursier, the same as SBT) and add the necessary classpath for you

bja18:01:34

nice if you're already using bazel, but probably a lot to bite off if you don't have any experience with it

ghadi18:01:24

thanks for the answer 🙂 , it's been 2 years

bja18:01:57

oh, I just readded this slack to my new laptop and was looking at updated messages. Sorry, didn't notice the timestamp.

ghadi18:01:40

haha, I appreciate it

bja18:01:53

I left the clojure world and now primarily exist in the bazel and c++ worlds, but I managed to get clojure back into my org for some tooling and decided to rejoin the slack. need to be careful with timestamps given how long it's been.