3 ms·

Maybe I am stupid, but is there a problem in Docker build design? By default you should get both a Docker image and an artifacts.zip of binaries that it downloa

by crb002 6y ago

Maybe I am stupid, but is there a problem in Docker build design? By default you should get both a Docker image and an artifacts.zip of binaries that it downloaded so you can pin them? The cache isn't just for speed. It allows for reproducible builds.

crb002 6y ago
Also, Docker should have a reproducible flag that creates binary reproducible images. Timestamps and local system info would have to be nerfed to some default or fed in statically with a config file.
- joombaga 6y ago
  You can already make reproducible images of e.g. NixOS. I don't know if there's a good way to tackle the problem at the docker level without sacrificing container OS agnosticism.
  - pknopf 6y ago
    My OS is a docker image, booted bare metal. https://godarch.com/ https://godarch.com/
crb002 6y ago
Perhaps mount an external directory and extract all artifacts to it as a zipfile at the end of the build. https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/sec-working_with_yum_cache https://access.redhat.com/documentation/en-us/red_hat_enterp...