Skip to content

Dockerfile improvements, ARM64 binaries #347

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jul 18, 2020
Merged

Conversation

mrueg
Copy link
Contributor

@mrueg mrueg commented Jul 17, 2020

This change improves dockerfiles and allows to build conftest binaries for other architectures.

Dockerfile Outdated
chmod +x /usr/local/bin/kustomize

RUN go get -u cuelang.org/go/cmd/cue

WORKDIR /examples

## RELEASE ##
FROM alpine:latest
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If you could change this back for now. Happy to discuss in a separate issue but it introduces more maintenance overhead from my point of view.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sure, changed it back. In general latest makes it harder to reproduce a specific image, that's why I would suggest a proper tagged release.

@garethr
Copy link
Contributor

garethr commented Jul 18, 2020

Thanks @mrueg. This looks great. I couple of small things:

mrueg added 2 commits July 18, 2020 18:27
Signed-off-by: Manuel Rüger <manuel@rueg.eu>
Signed-off-by: Manuel Rüger <manuel@rueg.eu>
Signed-off-by: Manuel Rüger <manuel@rueg.eu>
@mrueg
Copy link
Contributor Author

mrueg commented Jul 18, 2020

Thanks for the quick review, I've added a note to the docs and added my DCO signoff.

@garethr
Copy link
Contributor

garethr commented Jul 18, 2020

@mrueg thanks, looks good. We'll ship ARM binaries in the next release.

The tags only marginally help with reproducibility, as those are ephemeral as well. Using a SHA works, but without better tooling to help maintain it's painful. The tradeoff with latest are worth it for a project like Conftest at the moment.

@garethr garethr merged commit 6ddeb35 into open-policy-agent:master Jul 18, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants