Multiarch docker containers

[prestonvanloon]

What type of PR is this?

Feature

What does this PR do? Why is it needed?

This uses OCI manifest format (previously docker v2).

Features:

• Images are now available in OCI format
• Images include /bin/bash
• /bin/bash works on the images
• Images are available for amd64 and arm64 as a multiarch index.
• All previous image uploads are supported (Will be completed in follow up PR)

Which issues(s) does this PR fix?

Fixes #4900

Other notes for review

Depends on #12135, review and merge that first for clean diff.

A follow up PR will provide the following changes:

• Remove obsolete rules_docker targets
• Remove support for debug images
• Remove support for alpine images (These have been broken for a long time Docker Alpine image do not launch #9320).

[prestonvanloon]

Still blocked by bazel-contrib/rules_oci#292

[prestonvanloon]

With e948da3, I think we can say we are unblocked and merge.

If build times increase significantly then we may have to revert this PR. The flag removed only matters when fetching dependencies where it would hit an internal endpoint before reaching the external network. In theory, it shouldn't be much different but possibly an issue.

I propose that we review this PR and merge targeting gcr.io/prylabs-dev/prysm for one release cycle, test further, then remove the old rules_docker and use the canonical gcr.io image URLs / names.

[james-prysm]

Thanks for the explanations