buildkit
- moby/buildkit
- 可单独使用
- docker/buildx
- Docker CLI plugin for extended build capabilities with BuildKit
- 使用容器方式运行 buildkitd
- buildkitd
- buildctl
- 可配合 rootlesskit
- 参考
- buildctl-daemonless.sh
- spawns ephemeral buildkitd for executing buildctl
- rootless.md
- buildctl-daemonless.sh
tip
- moby/buildkit#1058 exporter: support resetting timestamp for determinism
- docker/buildx#847 不能 load image 到 buildx builder
apk add docker-cli-buildx # AlpineLinux
docker buildx version
docker buildx use default
docker buildx install # buildx -> build
# 额外的 Builder
docker buildx create --use
docker build -t demo -o type=image .
# Images, Containers, Local Volumes, Build Cache
docker system df -v # 系统空间使用情况
# Test
mkdir -p /tmp/build
cd /tmp/build
cat << EOF > Dockerfile
FROM wener/base
EOF
docker buildx build -t test .
docker buildx build --platform linux/amd64,linux/arm64 --pull --push -t test .
| env | value | notes |
|---|---|---|
| BUILDKIT_PROGRESS | auto | auto,plain,tty,rawjson |
- driver
- docker
- docker-container
- kubernetes
- remote
platform
- amd64, arm32v5, arm32v6, arm32v7, arm64v8, i386, ppc64le, s390x
docker run --privileged --rm tonistiigi/binfmt --install all
output
- type=image,name=REGISTRY/IMAGE,push=true,compression=zstd
- compression-level
- 0-9 - gzip,estargz
- 0-22 - zstd
- force-compression=true
- push=true
- oci-mediatypes=true
- buildinfo=true
- 附加构建信息
{"moby.buildkit.buildinfo.v0": "<base64>"}
- 附加构建信息
cache
- type
- inline
- registry
type=registry,ref=<registry>/<cache-image>[,parameters...]
- local
- gha
- s3
- azblob
--cache-to,--cache-from- 可以指定多个
- mode=min - 默认
- 缓存 export 最终 layer
- mode=max
- 缓存所有 layer
- compression=zstd
- oci-mediatypes=true
- 只针对 cache-to
- /var/lib/buildkit/runc-overlayfs/snapshots/snapshots/1639/fs/
- cache source
RUN mount
- cache - 创建一个目录用于缓存
- /var/lib/buildkit/ - 在 buildkitd 容器里
- bind - bind host 目录
- source 为 host path - 默认 =target
- 不同环境 source 可能不同，使用上不太方便
- secret
- ssh
FROM wener/node
RUN --mount=type=cache,target=/root/.cache/go-build \
go build
RUN --mount=type=cache,target=/root/.m2 \
mvn -o install
RUN --mount=type=cache,target=/root/.npm/_cacache/ \
npm install
# npm & pnpm
RUN --mount=type=cache,target=/root/.npm/_cacache/ \
--mount=type=cache,target=/root/.local/share/pnpm/store npm install -g pnpm \
&& pnpm install
| type=cache | val |
|---|---|
| id | =target |
| target | mount point |
| ro,readonly | |
| sharing | shared - 可选 shared,private,locked |
| from | build stage, 默认为空目录 |
| source | from 的子目录 |
| mode | 0755 |
| uid | 0 |
| gid | 0 |
- sharing
- shared - 多写
- private - 单写
- locked - 顺序写 - 会暂停后续的写
/var/lib/buildkit/runc-overlayfs/snapshots/snapshots/<ID>/<TARGET>- 参考
FAQ
docker build unknown flag: --push
需要启用 buildx
cache export feature is currently not supported for docker driver
multiple platforms feature is currently not supported for docker driver. Please switch to a different driver (eg. "docker buildx create --use")
docker buildx create --use --name buildx