Workgroup:Container: Difference between revisions

From NixOS Wiki
imported>Nlewo
No edit summary
imported>Nlewo
No edit summary
Line 4: Line 4:


* [[User:Profpatsch|Profpatsch]]
* [[User:Profpatsch|Profpatsch]]
* [[User:Nlewo|Lewo]]
* [[User:nlewo|Lewo]]


== Tooling ==
== Tooling ==
Line 17: Line 17:
** [https://github.com/projectatomic/skopeo skopeo]: modify and inspect images on registries (nixpkgs: [https://github.com/NixOS/nixpkgs/blob/master/pkgs/development/tools/skopeo/default.nix skopeo])
** [https://github.com/projectatomic/skopeo skopeo]: modify and inspect images on registries (nixpkgs: [https://github.com/NixOS/nixpkgs/blob/master/pkgs/development/tools/skopeo/default.nix skopeo])
** [https://github.com/projectatomic/buildah buildah]: build/generate OCI images (nixpkgs PR [https://github.com/NixOS/nixpkgs/pull/34887 buildah])
** [https://github.com/projectatomic/buildah buildah]: build/generate OCI images (nixpkgs PR [https://github.com/NixOS/nixpkgs/pull/34887 buildah])
== Work In Progress ==
* Add legacy Docker image support in Skopeo
nixpkgs.dockerTools.pullImage boots a VM to pull the image by using the Docker daemon. Skopeo could do this but it produces images that are not compatible with the Docker legacy format. The consequence is some NixOS tests are failing and it breaks some NixOS user scripts [https://github.com/containers/image/pull/370 skopeo PR].
* Use DigestID instead of image tag to pull images (tag is mutable)
Will be implemented when Skopeo is used to pull images


== Projects ==
== Projects ==

Revision as of 13:33, 12 February 2018

We are interested in directly building (minimal) OCI containers from the nixpkgs ecosystem.

People

Tooling

Work In Progress

  • Add legacy Docker image support in Skopeo

nixpkgs.dockerTools.pullImage boots a VM to pull the image by using the Docker daemon. Skopeo could do this but it produces images that are not compatible with the Docker legacy format. The consequence is some NixOS tests are failing and it breaks some NixOS user scripts skopeo PR.

  • Use DigestID instead of image tag to pull images (tag is mutable)

Will be implemented when Skopeo is used to pull images

Projects

Self-Hosted, Minimal Docker/OSI Images

For our platform at Techcultivation we want to generate docker images for all parts of our system. Those images should come in two flavors, development (to quickly spin up local test services, with mock data) and deployment (secure/production-ready). We chose to generate these images purely out of nixpkgs code, so no binary (base) images have to be included.

The current version of the deployment code can be found on our Gitlab.

A basic (pretty messy) postgres image is already done, complete with in-build setup of a mock database. The resulting image is smaller than the “official” one in the docker registry, only uses nixpkgs-native dependencies and only contains the most minimal filetree needed to run the postgres binary.

Still to do: rabbitmq, frontend code, api, refactor, various others.

Profpatsch (talk) 02:47, 10 February 2018 (UTC)