Please sign in to comment.
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat(buildah): native OCI rootless mode; vfs storage driver; bugfixes
Done: * Added native OCI rootless Buildah mode. Provides more isolation and security in comparison to chroot mode. Works only outside of containers. * $WERF_BUILDAH_MODE instead of $WERF_CONTAINER_RUNTIME_BUILDAN for Buidah mode/isolation configuration. * VFS storage driver now available in addition to OverlayFS for both native and docker-with-fuse Buildah modes. Configurable via $WERF_BUILDAH_STORAGE_DRIVER. * Lots of bugfixes. Minor refactoring. Tests. Work in progress: Trying to get rid of a need in external configuration, external dependencies and work environment preparations to run `werf` in Buildah mode, especially when running `werf` in containers. As of now no /etc/containers/* configs needed anymore, lots of configuration built-in, some autodetection/autoconfiguration implemented.
- Loading branch information
Showing with 548 additions and 135 deletions.
- +74 −10 cmd/werf/common/container_runtime.go
- +1 −1 pkg/build/conveyor.go
- +22 −5 pkg/buildah/base.go
- +57 −2 pkg/buildah/buildah.go
- +75 −15 pkg/buildah/docker_with_fuse_buildah.go
- +98 −22 pkg/buildah/native_rootless_buildah_linux.go
- +22 −0 pkg/buildah/types/isolation.go
- +31 −0 pkg/buildah/types/storageoptions.go
- +8 −0 pkg/buildah/types/storageoptions_linux.go
- +16 −0 pkg/util/linux_container.go
- +40 −34 test/e2e/build/build_test.go
- +4 −7 test/pkg/contruntime/base.go
- +11 −0 test/pkg/contruntime/basebuildah.go
- +15 −7 test/pkg/contruntime/docker.go
- +28 −16 test/pkg/contruntime/dockerwithfusebuildah.go
- +14 −7 test/pkg/contruntime/interface.go
- +32 −9 test/pkg/contruntime/nativerootlessbuildah.go
There are no files selected for viewing
Oops, something went wrong.