How do we build container images inside containers running in a Kubernetes cluster? Docker is a bad option since it cannot run inside containers. Using it requires communication to the Docker engine running in cluster nodes. Even if that security concern is not enough, Dockershim is deprecated in Kubernetes 1.20 and will be (or already is) removed from 1.22. That means that alternative container engines like ContainerD will take its place. In other words, using Docker is not even an option anymore.
Kaniko comes to the rescue. It is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster.
Timecodes ⏱:
00:00 Intro
04:55 Cloning the demo app repo
07:38 Building container images with Docker locally
08:15 Building container images with Docker from a container
12:11 Building container images through Docker socket
16:16 Building container images with Kaniko from a container
➡ Gist with the commands: https://gist.github.com/627fcfbfbc17a683a70210947e02eaa3
🔗 Kaniko: https://github.com/GoogleContainerTools/kaniko
📚 DevOps Catalog, Patterns, And Blueprints: https://www.devopstoolkitseries.com/posts/catalog/
📚 Books and courses: https://www.devopstoolkitseries.com
🎤 Podcast: https://www.devopsparadox.com/
💬 Live streams: https://www.youtube.com/c/DevOpsParadox
➡ Follow me on Twitter: https://twitter.com/vfarcic
➡ Follow me on LinkedIn: https://www.linkedin.com/in/viktorfarcic/