Releases · bazel-contrib/rules_oci

26 Jun 22:30

github-actions

v2.0.0-beta0

9a32fc2

v2.0.0-beta0 Latest

Latest

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-beta0")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "20024d18956c5b2feaf99701659e9711f3b97c468411a2e2d2e709dd24f31d90",
    strip_prefix = "rules_oci-2.0.0-beta0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-beta0/rules_oci-v2.0.0-beta0.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

BREAKING CHANGES

Uncompressed archives in the tars attribute is no longer compressed when creating the image, this might make images bigger compared to 1.x. Use pkg_tar#compression or tar#compress attribute to compress the layers beforehand.
Digests of images created 1.x rules_oci will not match 2.x rules_oci, as we are no longer using crane to create the images. However, images should stay the same semantically.
Default output of oci_tarball is no longer a tarball, use a filegroup target to get the tarball. See #548
Bazel 5 is no longer supported.
oci_tarball is renamed to oci_load to better reflect it's purpose.

SIGNIFICANT CHANGES

OCIImage action no longer spins an ephemeral registry instance to mutate images locally, making it slightly faster.
oci_image now supports zstd compression
Now oci_pull fetches blobs in parallel on Bazel >= 7.1

What's Changed

feat: add support for settings volumes by @gzm0 in #632
refactor: rename oci_tarball to oci_load by @alexeagle in #636
fix: accumulate image manifests in oci_image_index by @seh in #633
tarball uses hermetic coreutils by @rickvanprim in #635

New Contributors

@seh made their first contribution in #633
@rickvanprim made their first contribution in #635

Full Changelog: v2.0.0-alpha5...v2.0.0-beta0

Contributors

alexeagle, seh, and 2 other contributors

Assets 3

12 Jun 18:19

github-actions

v2.0.0-alpha5

464858a

v2.0.0-alpha5 Pre-release

Pre-release

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-alpha5")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "768cd23d5fea0235858eecfc8bfaae77a11fe9db9ebb1ac03d31c4b19eb9bc11",
    strip_prefix = "rules_oci-2.0.0-alpha5",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-alpha5/rules_oci-v2.0.0-alpha5.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

fix: Ignore empty annotations in the jq query by @DolceTriade in #625
test: add oci_tarball test for sh_test by @thesayyn in #624

New Contributors

@DolceTriade made their first contribution in #625

Full Changelog: v2.0.0-alpha4...v2.0.0-alpha5

Contributors

DolceTriade and thesayyn

Assets 3

10 Jun 20:59

github-actions

v2.0.0-alpha4

09d5521

v2.0.0-alpha4 Pre-release

Pre-release

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-alpha4")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "02df4efc5c7431904a927c1947fc7b6e2eda838b038b15bdf9a15918e7d6c04b",
    strip_prefix = "rules_oci-2.0.0-alpha4",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-alpha4/rules_oci-v2.0.0-alpha4.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

test: add pinning test by @thesayyn in #618
chore: cleanup repo and remove some dev deps by @thesayyn in #620
fix: make oci_tarball work with genrule by @thesayyn in #621

Full Changelog: v2.0.0-alpha3...v2.0.0-alpha4

Contributors

thesayyn

Assets 3

07 Jun 20:54

github-actions

v2.0.0-alpha3

3be6471

v2.0.0-alpha3 Pre-release

Pre-release

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-alpha3")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "63eec71bfc258f6303709159e66a4cbec1fbdd9738a973ebac4813ab20de1561",
    strip_prefix = "rules_oci-2.0.0-alpha3",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-alpha3/rules_oci-v2.0.0-alpha3.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

fix: return correct extension metadata by @thesayyn in #611
chore: add --check_direct_dependencies to .bazelrc by @gregmagolan in #615
fix: make oci_tarball work with disjoint output root by @thesayyn in #614
Copy files using coreutils cp by @plobsing in #595
Fix jq: error (at <stdin>:16): Cannot use null (null) as object key error on empty line in labels file by @bozaro in #606
fix: env vars containing = by @thesayyn in #616

New Contributors

@plobsing made their first contribution in #595
@bozaro made their first contribution in #606

Full Changelog: v2.0.0-alpha2...v2.0.0-alpha3

Contributors

plobsing, gregmagolan, and 2 other contributors

Assets 3

31 May 18:34

github-actions

v2.0.0-alpha2

32139d8

v2.0.0-alpha2 Pre-release

Pre-release

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-alpha2")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "e96d70faa4bace3e09fdb1d7d1441b838920f491588889ff9a7e2615afca5799",
    strip_prefix = "rules_oci-2.0.0-alpha2",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-alpha2/rules_oci-v2.0.0-alpha2.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

example: add dockerfile build by @thesayyn in #570
refactor: remove curl fallback by @thesayyn in #568
Use non-blocking download to get image blobs, on Bazel >=7.1.0 by @mortenmj in #601
fix: add tars into action inputs by @thesayyn in #599
chore: disable dockerfile example by @thesayyn in #605

Full Changelog: v2.0.0-alpha1...v2.0.0-alpha2

Contributors

mortenmj and thesayyn

Assets 3

29 May 18:33

github-actions

v1.7.6

91ac23b

v1.7.6

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "1.7.6")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "647f4c6fd092dc7a86a7f79892d4b1b7f1de288bdb4829ca38f74fd430fcd2fe",
    strip_prefix = "rules_oci-1.7.6",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v1.7.6/rules_oci-v1.7.6.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "LATEST_CRANE_VERSION", "oci_register_toolchains")

oci_register_toolchains(
    name = "oci",
    crane_version = LATEST_CRANE_VERSION,
    # Uncommenting the zot toolchain will cause it to be used instead of crane for some tasks.
    # Note that it does not support docker-format images.
    # zot_version = LATEST_ZOT_VERSION,
)

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

docs: simplify use of expand_template by @alexeagle in #534
chore: upgrade rules_go and gazelle by @thesayyn in #541
ci: only test with bazel 6, 7 by @thesayyn in #533
Add a minimal c++ example in doc by @rygx in #516
[docs] Add missing name to push examples by @ptxmac in #513
feat: add nvcr.io to _WWW_AUTH by @nobu-k in #511
fix: Add quay back to authn config by @ankit-agarwal1999 in #543
docs: recommend rules_distroless by @thesayyn in #546
Fix #552 and update readme by @chokychou in #554
Reduce GHA caching by @alexeagle in #557
Fix oci_image failing with "%1 is not a valid Win32 application" by @bartoszpop in #556
chore: update aspect url by @gregmagolan in #561
chore: don't cancel concurrent main builds by @gregmagolan in #563
oci_push to support Windows builds by @bartoszpop in #565
Quotes removal from MEDIA_TYPE string. by @kczulko in #577
Return extension_metadata from oci.pull() by @mortenmj in #580
fix: don't include xattr by @alexeagle in #579
feat: Allow setting both tag and digest in oci_pull when reproducible is True by @mark-thm in #587
fix: fix race condition in oci_pull where bazel can write platform manifest contents to the cache entry for image index manifest by @gregmagolan in #596

New Contributors

@rygx made their first contribution in #516
@ptxmac made their first contribution in #513
@nobu-k made their first contribution in #511
@ankit-agarwal1999 made their first contribution in #543
@chokychou made their first contribution in #554
@bartoszpop made their first contribution in #556
@kczulko made their first contribution in #577
@mark-thm made their first contribution in #587

Full Changelog: v1.7.5...v1.7.6

Contributors

alexeagle, ptxmac, and 10 other contributors

Assets 3

24 May 22:37

github-actions

v2.0.0-alpha1

e4c1687

v2.0.0-alpha1 Pre-release

Pre-release

BREAKING CHANGES

Uncompressed archives in the tars attribute is no longer compressed when creating the image, this might make images bigger compared to 1.x. Use pkg_tar#compression or tar#compress attribute to compress the layers beforehand.
Digests of images created 1.x rules_oci will not match 2.x rules_oci, as we are no longer using crane to create the images. However, images should stay the same semantically.
Default output of oci_tarball is no longer a tarball, use a filegroup target to get the tarball. See #548
Bazel 5 is no longer supported.

CHANGES

OCIImage action no longer spins an ephemeral registry instance to mutate images locally, making it slightly faster.
oci_image now supports zstd compression

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-alpha1")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")



# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "0d8c189119f175cc51e69e26e0cf75a493716bce7de9f03c77d67ea8cc8ec5db",
    strip_prefix = "rules_oci-2.0.0-alpha1",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-alpha1/rules_oci-v2.0.0-alpha1.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

docs: simplify use of expand_template by @alexeagle in #534
chore: upgrade rules_go and gazelle by @thesayyn in #541
ci: only test with bazel 6, 7 by @thesayyn in #533
Add a minimal c++ example in doc by @rygx in #516
[docs] Add missing name to push examples by @ptxmac in #513
feat: add nvcr.io to _WWW_AUTH by @nobu-k in #511
fix: Add quay back to authn config by @ankit-agarwal1999 in #543
docs: recommend rules_distroless by @thesayyn in #546
refactor: remove yq dependency by @thesayyn in #386
refactor: use hermetic tar by @alexeagle in #385
Add toolchain param to the affected actions by @kotlaja in #341
Pass headers to Bazel downloader where available by @mortenmj in #528
feat: don't produce big tar file as default output of oci_tarball by @alexeagle in #548
refactor: remove registry references by @thesayyn in #551
chore: update deps and bazel by @thesayyn in #553
refactor: registryless oci_image by @thesayyn in #550
feat: implement out-of-band descriptor calculation by @thesayyn in #558
feat: implement tars symlinks by @thesayyn in #559
feat: support symlinking blobs from base by @thesayyn in #560
fix: make oci_image fully hermetic by @thesayyn in #569
fix: canonicalize missing components by @thesayyn in #567
fix: duplicate tar copying by @thesayyn in #576
Add jq as dependency required for oci_push by @mering in #589

New Contributors

@rygx made their first contribution in #516
@ptxmac made their first contribution in #513
@nobu-k made their first contribution in #511
@ankit-agarwal1999 made their first contribution in #543
@kotlaja made their first contribution in #341
@mering made their first contribution in #589

Full Changelog: v1.7.5...v2.0.0-alpha1

Contributors

alexeagle, ptxmac, and 7 other contributors

Assets 3

27 Mar 21:12

github-actions

v1.7.5

e8aeca3

v1.7.5

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "1.7.5")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "56d5499025d67a6b86b2e6ebae5232c72104ae682b5a21287770bd3bf0661abf",
    strip_prefix = "rules_oci-1.7.5",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v1.7.5/rules_oci-v1.7.5.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "LATEST_CRANE_VERSION", "oci_register_toolchains")

oci_register_toolchains(
    name = "oci",
    crane_version = LATEST_CRANE_VERSION,
    # Uncommenting the zot toolchain will cause it to be used instead of crane for some tasks.
    # Note that it does not support docker-format images.
    # zot_version = LATEST_ZOT_VERSION,
)

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

image: allow .tar.zst extension on layer tar by @alexeagle in #523
chore: remove examples/ from published artifact by @alexeagle in #524
chore: remove dead code due to duplication by @alexeagle in #522
Support inheriting environment variable that's value contains = by @sfc-gh-mhazy in #526
Revert "feat: use link instead of copy for blobs in oci_image_index" by @thesayyn in #525
Revert "image: allow .tar.zst extension on layer tar" by @alexeagle in #532
Add cosign v2.2.3 by @loosebazooka in #536

New Contributors

@sfc-gh-mhazy made their first contribution in #526
@loosebazooka made their first contribution in #536

Full Changelog: v1.7.4...v1.7.5

Contributors

alexeagle, loosebazooka, and 2 other contributors

Assets 3

28 Feb 18:53

github-actions

v1.7.4

f863a2f

v1.7.4

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "1.7.4")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "4a276e9566c03491649eef63f27c2816cc222f41ccdebd97d2c5159e84917c3b",
    strip_prefix = "rules_oci-1.7.4",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v1.7.4/rules_oci-v1.7.4.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "LATEST_CRANE_VERSION", "oci_register_toolchains")

oci_register_toolchains(
    name = "oci",
    crane_version = LATEST_CRANE_VERSION,
    # Uncommenting the zot toolchain will cause it to be used instead of crane for some tasks.
    # Note that it does not support docker-format images.
    # zot_version = LATEST_ZOT_VERSION,
)

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

refactor: unmask errors in oci_image by @thesayyn in #514

Full Changelog: v1.7.3...v1.7.4

Contributors

thesayyn

Assets 3

28 Feb 18:39

github-actions

v1.7.3

81af8fa

v1.7.3

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "1.7.3")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "1026da778d5ecf25052fff289dbe84b1703324f0186eae09aa61a2d73b7440fe",
    strip_prefix = "rules_oci-1.7.3",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v1.7.3/rules_oci-v1.7.3.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "LATEST_CRANE_VERSION", "oci_register_toolchains")

oci_register_toolchains(
    name = "oci",
    crane_version = LATEST_CRANE_VERSION,
    # Uncommenting the zot toolchain will cause it to be used instead of crane for some tasks.
    # Note that it does not support docker-format images.
    # zot_version = LATEST_ZOT_VERSION,
)

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

chore: add bazel matrix by @alexeagle in #500
Update python.md by @alexeagle in #504
example: add a big image example by @thesayyn in #507
Always allow specifying the "platforms" attribute in oci_pull by @sitaktif in #474
fix: remove curl cache by @thesayyn in #515
fix: fix util.sha256 error code handling by @gregmagolan in #518
fix: don't use rctx symlink for manifest.json by @gregmagolan in #517

Full Changelog: v1.7.2...v1.7.3

Contributors

alexeagle, sitaktif, and 2 other contributors

Assets 3

Releases: bazel-contrib/rules_oci

v2.0.0-beta0

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

BREAKING CHANGES

SIGNIFICANT CHANGES

What's Changed

New Contributors

Contributors

v2.0.0-alpha5

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

Contributors

v2.0.0-alpha4

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

Contributors

v2.0.0-alpha3

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

Contributors

v2.0.0-alpha2

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

Contributors

v1.7.6

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

Contributors

v2.0.0-alpha1

BREAKING CHANGES

CHANGES

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

Contributors

v1.7.5

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

Contributors

v1.7.4

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

Contributors

v1.7.3

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

Contributors