Как ускорить сборку Docker-образов в GitLab: стратегии кэширования с Docker Buildx

Скорость сборки Docker-образов играет важную роль в CI/CD, особенно для микросервисов, где частые обновления и тестирования требуют быстрой доставки изменений. Одним из решений для оптимизации сборок является Docker Buildx — расширение к стандартной команде `docker build`. Docker Buildx предлагает дополнительные возможности, такие как кэширование слоев образов, что помогает значительно сократить время сборки за счет повторного использования неизменных слоев. В отличие от стандартного процесса сборки, Docker Buildx предоставляет более гибкое управление кэшем, поддерживает мультиархитектурные сборки и работу с несколькими платформами. В этой статье мы сосредоточимся на том, как эффективно настроить и использовать кэширование с Docker Buildx в CI/CD пайплайнах на GitLab. Мы рассмотрим примеры, когда кэширование позволяет ускорить сборку, и ситуации, когда его лучше отключить для гарантии корректности итогового образа.

https://habr.com/ru/companies/bimeister/articles/854064/

#Docker_Buildx #Кэширование_Docker #CI/CD_оптимизация #MultiStage_Builds #DevOps #Buildx #docker #CI

After a many moons, I decided to start using #docker instead of #podman. At least for work. 😅 And wow, have things changed. 🤯 #buildx is kind of amazing. The same with #bake. It kind of feels like things are in a much better place since podman brought competition. 😎

https://docs.docker.com/build/bake/

Upcoming #docker #buildx support on #OpenBSD. Nice work @op and ports@ contributors. :flan_hacker:​

Here you can see the kubernetes driver in action..

So what is everyone using for their #oci image building needs? Having a bit of a fight with #docker #buildx today while trying make building multi arch images, without pushing them to the registry right away. This is so I can load it up later for testing and CVE scanning them before pushing them to the registry. With docker build that is easy, docker buildx build not so much :(.

:blobfoxgooglyconfused: People might still have confusion about using native cross-compilation support for languages like #Go rather than using #QEMU in Dockerfiles while using #Buildx, here is a great resource by Tonis Tiigi🥳
TLDR; add "--platform=$BUILDPLATFORM" to your FROM!
https://github.com/tonistiigi/xx#dockerfile-cross-compilation-primer

J'ai appris un truc aujourd'hui :

🐳 "Multi-platform images" https://docs.docker.com/build/building/multi-platform/

📦 https://github.com/docker/buildx#buildx

(et tout ça grâce à une version de java qui publie des DebianRevisionNumber différents pour chaque architecture, miam).

#docker #devops #buildx #buildkit

🚨 The v1.0 release for #SLSA is on the way since the latest final release before v1.0 is RC2 was announced recently 🥳 Before v1.0, the issue for tracking the projects that currently integrate #SLSA provenance generation such as #buildx, #chains, many more⏰
https://github.com/slsa-framework/slsa/issues/574

Момент, когда понимаешь, что inline #cache у #docker #buildx не поддерживает mode=max

If you want to install @docker #Buildx through @nixos_org and you are on the macOS environment, here are the commands that you should run ☝️
➡️ nix-env -iA nixpkgs.docker-buildx
➡️ln -s ~/.nix-profile/bin/docker-buildx ~/.docker/cli-plugins/docker-buildx
➡️ docker buildx version

Every new #Flux CD release includes a bunch of amazing features. @fluxcd is one of the communities that take software S3C seriously and provide features to mitigate the risks of them such as providing #SBOMS and #SLSA attestations using @docker #Buildx!

https://cncf.io/blog/2023/03/06/flux-february-2023-update/

6⃣ Since I'm one of the
@Docker
Captains, there is no doubt that I should be maintaining the #buildkit and #buildx packages. I added myself to the maintainers of these packages as well!
/cc
@amyg12345

➡️ nix-env -iA nixpkgs.(buildkit|docker-buildx)

@dragnucs Difficult and embarassing topic.
I wrote prototypes for Terraform Providers for #podman, #buildah and #kaniko IIRC.
ALL of them are horrible at caching layers - let alone remote exec.
The only descend approach which supports caching seems to be #buildx + #buildkit. And yes, I have a prototype implementation for that as well.
We are still not testing this though, since hosting a Buildkit Remote Builder on GKE is a nightmare.
Let alone error handling in both buildx and buildkit is BAD.

Greetings from a small #mastodon server running in docker on a #raspberrypi 3 with a whopping 1GB of memory :D

couldn't find a pre-built armv7 image so built it myself with #docker #buildx

Don't think I will be accepting (m)any registrations though ;)

there's even enough room for a #logitechmediaserver so my music collection also runs from here now.

Just learned that `docker buildx bake` and `docker compose build` resolve relative paths for the `context` in a different way.

I've documented a workaround via `--set *.context=.` at https://github.com/docker/buildx/issues/1028#issuecomment-1303125897

#docker #buildx #compose

RT @developerguyba@twitter.com

Let's bake container images with bake 👨‍🍳🍰

I've written a blog post about @Docker@twitter.com #Buildx bake, with my say, a hidden gem inside Buildx 💎

I'd like to thank @crazyws@twitter.com for all his support and for such a great tool 🫶🙋🏻‍♂️

Hope you will enjoy it, thanks in advance for reading 🕺🏻😇 https://twitter.com/SaiyamPathak/status/1566830506330980353

🐦🔗: https://twitter.com/developerguyba/status/1567029396690665476

Kennt ihr gute multiplattform #PHP #Docker Images, die man gut anpassen kann und die nicht zu groß sind? Sie sollten mit #buildx gebaut werden können. #followerPower #pleaseBoost #webdev

RT @crazyws@twitter.com

First RC of #buildx 0.7.0 is out! Give it a try and let us know if you encounter any issues, thanks! https://github.com/docker/buildx/releases/tag/v0.7.0-rc1

🐦🔗: https://twitter.com/crazyws/status/1456520205039964185

RT @crazyws@twitter.com

I'm going to do a quick demo around #buildx bake. If you're interested it's time to join us at the #Docker #Community All-Hands on Mar 11th, 2021: https://dockr.ly/all-hands

🐦🔗: https://twitter.com/crazyws/status/1367847497654222856

Building pynacl for ARM on my computer with #docker #buildx #qemu : 40 mn. Building it on a #RaspberryPi 4 with 4GB : 6 mn.It's time to upgrade my PC...