2 ms·

Thanks for sharing. Noticed you talked a bit about kaniko. It has some security issues that have been talked about but last I checked not addressed by the kani

by mfer 8y ago

Thanks for sharing. Noticed you talked a bit about kaniko. It has some security issues that have been talked about but last I checked not addressed by the kaniko team. How are you dealing with those?

joshlambert 8y ago
Thanks for watching mfer! Kaniko certainly doesn't address all of the challenges with building containers securely, but I think it's the best solution available _today_ that supports the common Dockerfile workflow. There are a number of other promising tools like img, but aren't readily usable yet because of a dependency on some upstream PR's. At GitLab, we're trying to think of ways to help developers understand the challenges, as well as provide easy to adopt solutions as these tools become available. Would love your thoughts and feedback: https://gitlab.com/gitlab-org/gitlab-ce/issues/48913 https://gitlab.com/gitlab-org/gitlab-ce/issues/48913