BuildKit: Docker ƒe Kpe xɔasi Ɣla Si Ate Ŋu Atu Nusianu Kloe

BuildKit: Docker ƒe Kpe xɔasi Ɣla Si Ate Ŋu Atu Nusianu Kloe

Dɔwɔla akpa gãtɔ nya Docker be enye nugoe ƒe dɔwɔwɔ ƒe ɣeyiɣi si trɔ alesi woɖoa kɔmpiuta dɔwɔɖoɖowo ɖa. Ame ʋɛ aɖewo koe nya nu tso mɔ̃ si le ɣli dom kpoo le egbegbe Docker xɔ ɖesiaɖe ƒe anyigba te ŋu — BuildKit, dzidzime si gbɔna ƒe xɔtuɖoɖo si le ɖoɖom kple Docker tso eƒe tɔtrɔ 18.09 dzi eye wòva zu megbenya gbãtɔ le Docker 23.0 me. Togbɔ be mɔ̃ɖaŋudɔwɔlawo le nya hem nuwuwu manɔmee le Kubernetes ƒe ɖoɖowo kple microservice ƒe ɖoɖowo ŋu hã la, BuildKit le tɔtrɔm vivivi va zu xɔtuɖoɖo sesẽtɔwo kekeake, siwo te ŋu trɔna bɔbɔe wu le DevOps ƒe lãwo ƒe agbenɔnɔ ƒe ɖoɖoa me la dometɔ ɖeka. Ne èle ewɔm abe docker build si le kabakaba wu ko ene la, ke èle ŋutete gã aɖe gblẽm ɖe kplɔ̃a dzi. Dɔwɔƒe siwo le CI/CD pɔmpi siwo ƒe dɔwɔwɔ deŋgɔ zãm la ɖe xɔtuɣiwo dzi kpɔtɔ 50–70% to nusi BuildKit naa ŋutɔŋutɔ gɔmesese ko me — eye gɔmedzedze koe nye ema.

Nusi Na BuildKit To Vovo Vevietɔ tso Classic Builder gbɔ

Docker xɔtumɔ̃ gbãtɔa wɔ Dockerfile ƒe mɔfiamewo ɖe wo nɔewo yome, ƒuƒoƒo ɖeka le ɣeyiɣi ɖeka me, eye menya dɔ si ateŋu adzɔ dedie le ɣeyiɣi ɖeka me o. BuildKit tsɔa directed acyclic graph (DAG) ɖɔlia linear execution model ma — dependency graph si sea xɔtutu ƒe afɔɖeɖe siwo ɖoa ŋu ɖe wo nɔewo ŋu kple esiwo meɖoa ŋu ɖe wo nɔewo ŋu o gɔme. Afɔɖeɖe siwo le wo ɖokui si wɔa dɔ le ɣeyiɣi ɖeka me, wodzona le afɔɖeɖe siwo womezã o la dzi keŋkeŋ, eye xɔtutu bliboa va zua nusi nèdi ƒe gbeƒãɖeɖe tsɔ wu afɔɖeɖe siwo hiã be nàgblɔ le ɖoɖo nyuitɔ nu.

Xɔtuɖaŋu ƒe tɔtrɔ sia me tsonu ŋutɔŋutɔ siwo yi ŋgɔ wu duƒuƒu. Ne Dockerfile si le afɔɖeɖe geɖe me ƒo Go binary nu ƒu le afɔɖeɖe ɖeka me, eɖe Node.js ƒe nusiwo dzi woanɔ te ɖo le akpa bubu me, eye wòƒo nɔnɔmetata si wowɔ le etɔ̃lia me nu ƒu la, BuildKit ateŋu awɔ afɔɖeɖe eve gbãtɔwo le ɣeyiɣi ɖeka me. Tu si xɔa miniti ene tsã le CI duƒula sesẽ aɖe dzi la wu enu fifia le sɛkɛnd blaasieke teti me. Stripe, Shopify, kple mɔ̃ɖaŋudɔwɔlawo ƒe ƒuƒoƒo deŋgɔ bubu gbogbo aɖewo ŋlɔ viɖe mawo tɔgbe ɖe woƒe dɔwɔnu ememetɔwo ƒe megbenyawo me. DAG ƒe kpɔɖeŋua hã fia be BuildKit ateŋu awɔ xɔtutu ƒe metadata si de pɛpɛpɛ ŋutɔ — gɔmeɖoanyi na nɔnɔmewo abe afisi wotso ɖaseɖiɖiwo kple software bill of materials (SBOM) dzidzi si le vevie ŋutɔ na nuzazãwo ƒe dedienɔnɔ.

Nukpɔsusu ƒe tɔtrɔ hã le alesi cache invalidation wɔa dɔe me. Xɔtula xoxoa ɖe ƒuƒoƒo ɖesiaɖe si le mɔfiame ɖesiaɖe si wotrɔ te la ɖa. BuildKit léa ŋku ɖe emenyawo ƒe hashes ŋu le nyawo tsɔtsɔ yi eme ɖesiaɖe me, eyata nya aɖe tɔtrɔ le Dockerfile me meʋuʋua cache me nya si tsi tre ɖi na miniti blaetɔ̃ ƒe nuƒoƒoƒu o. Ne wò xɔtuɖaka nye vovototo si le miniti atɔ̃ kple aɖabaƒoƒo blaene ƒe nyaŋuɖoɖo ƒe ʋuƒo dome na wò mɔ̃ɖaŋudɔwɔlawo ƒe ƒuƒoƒoa la, nyateƒetoto sia le vevie wu alesi wòadze le gɔmedzedzea me.

Nuƒola Geɖe Tu: Sedede Ðeka, Xɔtuɖaŋu Ðesiaɖe

BuildKit ƒe --platform aflaga kple QEMU ƒe ƒoƒo ɖekae trɔa nusi nye vevesese si nye ɖoɖo geɖe ƒe ɖoɖowɔwɔ ƒe kuxi tsã wòzua sedede ɖeka. docker buildx build --platform linux/amd64,linux/arm64,linux/arm/v7 . ƒe duƒuƒu wɔa nɔnɔmetata etɔ̃ siwo sɔ na ewɔwɔ le ɣeyiɣi ɖeka me tso xɔtutu yɔyɔ ɖeka me. Ŋutete sia va le vevie ŋutɔ esi dɔwɔƒea le tɔtrɔm ɖe ARM ŋu — AWS Graviton3 ƒe kpɔɖeŋuwo naa asixɔxɔ-dɔwɔwɔ nyuie wu 40% ɣesiaɣi le dɔwɔwɔwo abe web subɔsubɔ kple nyatakakawo ƒe dɔwɔwɔ ene dzi, eye Apple Silicon na ARM zu ŋgɔyiyimɔ̃ si woɖo ɖi na mɔ̃ɖaŋudɔwɔla miliɔn geɖe.

Hafi BuildKit ƒe multi-platform support natsi la, xɔtumɔ̃ vovovowo dzi kpɔkpɔ na xɔtuɖaŋu vovovowo nye gazazã ƒe teƒe ŋutɔŋutɔ. Ƒuƒoƒowo léa be na Dockerfile geɖewo, wowɔa CI pɔmpi vovovowo ɖe duƒula siwo ƒe xɔtuɖaŋu to vovo dzi, alo ɖeko woɖoa x86 nɔnɔmetatawo ɖe afisiafi eye woxea dɔwɔwɔ ƒe tohehe ɖe ARM ƒe xɔtuɖoɖowo ŋu. Le BuildKit me la, èɖea wò xɔtutu gɔme zi ɖeka eye nèna ɖoɖoa kpɔa xɔtuɖaŋu tɔxɛ ƒe nuƒoƒoƒu gbɔ le gaglãgbe. Rust dɔwɔwɔ siwo hiã cross-compilation, Go projects kple CGO dependencies, Python packages kple C extensions — BuildKit kpɔa emulation layer gbɔ evɔ mehiã be nàse target platform ɖesiaɖe ƒe nyatakakawo gɔme o.

Asitsatsa ƒe asixɔxɔ ŋutɔŋutɔ si le afisia la nye esi woate ŋu adzidze. Ƒuƒoƒo aɖe si le nugoe 200 zãm le AWS Graviton ƒe kpɔɖeŋuwo dzi le $0.04 le vCPU-gaƒoƒo ɖeka me tsɔ wu x86 ƒe kpɔɖeŋu si sɔ kple esi le $0.056 le vCPU-gaƒoƒo ɖeka me la dzraa ga si ade $11,520 ƒe sia ƒe le vCPU 100 ɖesiaɖe me — tso xɔtuɖaŋu nyuitɔ tiatia me ko. Tiatia ma wɔwɔ be woate ŋu akpɔe agbagbadzedze be woagbugbɔ awɔ mɔ̃ɖaŋudɔwo manɔmee nye xɔtuɖaŋuwo ƒe nyonyome si ƒomevi tututu xea fe na eɖokui enumake.

Adzamenyawo Dzikpɔkpɔ Evɔ Womado Ðe Nɔnɔmetatawo Ƒe Ƒuƒoƒowo Me O

BuildKit ƒe nɔnɔme siwo ŋu womekpɔa ŋudzedze ɖo boo o dometɔ ɖekae nye eƒe nya ɣaɣlawo API. Mɔ dzadzɛ aɖeke menɔ Docker xɔtula xoxoa si si dzi wòato atsɔ ɖaseɖigbalẽwo ayi xɔtu aɖe me evɔ kpeɖodzi mawo mate ŋu awu enu ɖe ​​nɔnɔmetata ƒe ƒuƒoƒo me o. Dɔwɔlawo wɔ dɔ tso esia ŋu kple afɔɖeɖe geɖe ƒe xɔtutu, ARG mɔfiamewo, kple ɖoɖowɔwɔ nyuie — gake afɔku si le API safui alo ame ŋutɔ ƒe SSH safui aɖa le vo me ɖe nɔnɔmetata si woɖo ɖa me la gakpɔtɔ lolo ŋutɔ. Dedienɔnɔdzikpɔmɔ̃wo kpɔa kpeɖodzinya siwo woŋlɔ sesĩe le nugoe me nɔnɔmetata siwo wota ɖe dutoƒo nuŋlɔɖiwo me edziedzi, eye nyatakaka mawo dometɔ geɖe siwo dona tso eme la tsoa adzamenyawo gbɔ kpɔkpɔ le mɔ gbegblẽ nu le xɔtutuwo me gbɔ tẽ.

BuildKit ƒe --secret aflaga tsɔa nyatakaka veviwo ɖoa xɔtutu ƒe nɔnɔme me abe ɣeyiɣi kpui aɖe ƒe faɛlɖoɖo ƒe mɔ si li na RUN mɔfiame tɔxɛ si hiãe ƒe ɣeyiɣi didime ko eye meka asi nɔnɔmetata ƒe ƒuƒoƒo aɖeke ŋu gbeɖe o. Dockerfile mɔfiame abe RUN --mount=type=secret,id=npmrc cat /run/secrets/npmrc > ~/.npmrc && npm install naa xɔtuɖoɖoa kpɔa mɔ na npm ƒe ɖaseɖigbalẽ siwo nye ame ŋutɔ tɔ evɔ kpeɖodzi mawo madze le nɔnɔmetata mamlɛtɔ alo domedome ƒuƒoƒo aɖeke me gbeɖe o. Kpɔɖeŋu ma ke wɔa dɔ na PyPI ƒe ɖaseɖigbalẽwo, Maven ƒe ɖoɖowo, SSH safuiwo na Git ƒe nudzraɖoƒe siwo menye ame ŋutɔ tɔ o, kple nu vevi bubu ɖesiaɖe si wò xɔtutudɔa hiã.

| Mɔ̃wo abe Mewayz, si naa ŋusẽ asitsatsa ƒe dɔwɔnawo na ezãla siwo wu 138,000 le dɔwɔƒewo abe fetu, HR, kple fexexe ƒe ɖoɖowo ene, nɔ te ɖe dedienɔnɔ ƒe nɔnɔme sia tututu si ŋu kpeɖodzi le dzi le woƒe xɔtutu kple dɔwɔwɔ ƒe pɔmpiwo me be woalé kakaɖedzi si asisi mawo ɖo ɖe woƒe ganyawo kple dɔwɔlawo ŋuti nyatakaka veviwo ŋu la me ɖe asi.

Cache Exports: CI Pipelines wɔwɔ kabakaba ŋutɔŋutɔ

CI pipelines nye afisi xɔtutu ƒe dɔwɔwɔ le vevie wu eye afisi Docker xɔtu nuteƒekpɔkpɔ gbãtɔ le ŋutinya me nye vevesese wu. Zi geɖe la, CI duƒula yeyewo dzea egɔme kple cache ƒuƒluwo, si fia be pipeline duƒuƒu ɖesiaɖe gbugbɔ ƒoa nusianu nu ƒu tso gɔmedzedzea me ke. Le Java subɔsubɔdɔ si me Maven ƒe nusiwo dzi woanɔ te ɖo alafa geɖe le, Rust dɔwɔwɔ, alo Python dɔwɔwɔ si me native kekeɖenudɔ kpekpewo le gome la, esia fia be xɔtutu ƒe ɣeyiɣi siwo wodzidze le miniti ewo me tsɔ wu be woadzidzee le sɛkɛnd me. Asitsatsa ƒe gazazã ɖe CI blewu ŋu lolo ŋutɔ — dɔwɔwɔ ƒe ɣeyiɣi dzi ɖeɖe kpɔtɔ, nyaŋuɖoɖo ƒe ʋuƒo didiwo, kple mɔ̃ɖaŋudɔwɔla siwo bɔbɔ nɔ anyi dɔ aɖeke mawɔmawɔ hele lalam be pɔmpiwo nawu enu hafi woateŋu aƒo ƒu eye woayi edzi.

BuildKit ƒe cache export feature kpɔa esia gbɔ kple cache manifests siwo woateŋu aɖo ɖa. Le --cache-to type=registry,ref=myregistry/myapp:cache kple --cache-from type=registry,ref=myregistry/myapp:cache zazã me la, BuildKit ƒoa cache ƒe nɔnɔmetata si me kɔ tsitotsito ɖe registry me le xɔtutu ɖesiaɖe megbe eye wòhenɛ le esi kplɔe ɖo ƒe gɔmedzedze. Cache la nye content-addressed, eyata layers siwo wotrɔ ŋutɔŋutɔ koe wogbugbɔ xɔna. Ƒuƒoƒo siwo zãa kpɔɖeŋu sia le GitHub Actions, GitLab CI, kple CircleCI me la ɖea pɔmpi ƒe ɣeyiɣiwo dzi kpɔtɔna edziedzi tso miniti wuiatɔ̃ va ɖo esi mede etɔ̃ o le duƒuƒu siwo kplɔe ɖo me. GitHub ŋutɔ ƒe nuŋlɔɖiwo le Docker xɔtutu ƒe dɔwɔwɔ ƒe ɖoɖo deŋgɔwo ŋu kafu kpɔɖeŋu sia vevie le susu sia tututu ta.

ƒe nyawo

Tutu si le kabakaba wue nye esi mehiã be nàgaƒu du ake o. BuildKit ƒe cache system si le ƒuƒoƒo me, si me nyawo ƒe adrɛs le la mewɔa xɔtutuwo kabakaba ko o — ena "tu" ƒe susu bliboa dzea aɖaŋu wu, si trɔa nuƒoƒoƒu enuenu wòzua vovototo si le dzidzim ɖe edzi le nusi tututu trɔ me.

ƒe nyawo

Cache exports hã wɔa ɖeka kple alɔdzedɔwɔƒewo ƒe ŋgɔyiyidɔwo wɔwɔ dzadzɛ. Àteŋu aɖo wò CI pɔmpia be wòadze anyi tso alɔdzedɔwɔƒe tɔxɛ ƒe nudzraɖoƒe yi alɔdzedɔwɔƒe gã ƒe nudzraɖoƒe ne alɔdzedɔwɔƒe ƒe nudzraɖoƒe aɖeke meli o, si fia be alɔdze yeyewo kpɔa viɖe enumake tso xɔdzo dzodzoe si wò ŋgɔyiyi ka vevitɔ ƒo ƒu la me. Mɔ̃ɖaŋudɔwɔlawo xɔa nyaŋuɖoɖo kabakaba tso woƒe ɖokuitsɔtsɔna gbãtɔ ŋutɔ le alɔdze yeye aɖe ŋu tsɔ wu be woalala to tohehe si woatsɔ adze dɔ gɔme le vuvɔ me.

BuildKit Frontends: Xɔtutu si yi ŋgɔ wu Dockerfiles

Ðewohĩ BuildKit ƒe ŋutete si womenya tututu o enye be Dockerfiles nye nyawo tsɔtsɔ de eme ƒe ɖoɖo ɖeka si ateŋu adzɔ — menye ɖeka ko o. BuildKit ƒe ŋgɔgbekpa ƒe xɔtuɖoɖo si woate ŋu atsɔ aƒo ka na si ɖe mɔ ɖe xɔtutu gɔmeɖeɖe gbegbɔgblɔ kple nɔnɔme siwo wowɔ ɖe ɖoɖo nu bliboe ŋu. Wotsɔ # syntax= mɔfiame si le wò xɔtutu faɛl ƒe tame la ɖo ŋgɔ, si gblɔna na BuildKit be wòahe ŋgɔgbekpa ƒe nɔnɔmetata tɔxɛ aɖe eye wòazãe atsɔ adzro faɛl susɔea me ahawɔe.

Xɔtuɖaŋu sia na be woate ŋu awɔ dɔ sesẽ geɖewo. Buildpacks ƒe ƒoƒo ɖekae ɖe mɔ na BuildKit be wòatu nugoe ƒe nɔnɔmetatawo tso dɔwɔwɔ ƒe dzɔtsoƒe ƒe kɔpi me Dockerfile aɖeke kura manɔmee — edea dzesi gbea, tiaa gɔmeɖoanyi nɔnɔmetata siwo sɔ, eye wòƒoa nugoe si sɔ na ewɔwɔ nu ƒu le eɖokui si. HPC kple dzɔdzɔmeŋutinunya ƒe kɔmpiuta habɔbɔwo zã ŋgɔgbekpa siwo wowɔ ɖe ɖoɖo nu tsɔ ɖɔ xɔtutuwo le gbegbɔgblɔ siwo ku ɖe domenyinyi tɔxɛwo me siwo ƒoa ƒu vaseɖe BuildKit ƒe ememe LLB (Low-Level Build) teƒenɔnya dzi. docker/dockerfile:labs nyagɔmeɖegbalẽ ƒe ŋgɔgbekpa doa nɔnɔmewo abe heredoc ƒe kpekpeɖeŋu, --network dziɖuɖu ɖe mɔfiame ɖesiaɖe dzi, kple cache ƒe aɖaŋuɖoɖo siwo wodo ɖe ŋgɔ hafi woɖina ɖe Dockerfile nyagɔmeɖegbalẽ si li ke me.

Ŋutete si le asiwò be nàɖe wò ŋutɔ wò ŋgɔgbekpa gɔme hã fia be habɔbɔ siwo si xɔtutu ƒe nudidi siwo mebɔ o le la mehiã be woatia "shoehorn nusianu ɖe Dockerfile nyagɔmeɖegbalẽ me" kple "agblẽ nugoewo ɖi keŋkeŋ" dome o. Ƒuƒoƒo si le FPGA firmware, embedded systems images, alo ML model containers tɔxɛwo tum ate ŋu aɖɔ woƒe xɔtutu le nya siwo gɔmesese le na woƒe domain esime wogakpɔtɔ le standard OCI-compliant container images siwo dea afi sia afi si nugoewo le dɔ wɔm le la wɔm. Kekeɖenudɔ sia nye xɔtuɖaŋu ƒe viɖe vavãtɔ wu xɔtuɖoɖo siwo bua woƒe nyawo tsɔtsɔ de eme ƒe nɔnɔme abe esi woɖo ɖi ene.

Dzɔtsoƒe kple SBOM: Xɔtutu na Ɣe ƒe Yaƒoƒo megbe Xexeame

Kɔmpiutadziɖoɖowo ƒe dedienɔnɔ ƒe dedienɔnɔ tso nukpɔsusu ƒe dzitsitsi dzi yi board-level priority dzi le SolarWinds ƒe sedzidada le ƒe 2020 me kple Log4Shell ƒe afɔku le ƒe 2021. United States dziɖuɖu ƒe Sedede 14028 si ku ɖe kɔmpiuta dzi dedienɔnɔ ŋu, si woɖe ɖe go le May 2021 me, de se be woawɔ kɔmpiutadziɖoɖowo ŋuti se na dukɔa ƒe kontraktɔ. BuildKit ƒe dzɔtsoƒe ƒe ɖaseɖiɖiwo kple SBOM dzidzi ƒe nɔnɔmewo nye ŋuɖoɖo tẽ na ɖoɖowɔwɔ kple dedienɔnɔ ƒe nɔnɔme sia.

Kple --provenance=true kple --sbom=true aflagawo, BuildKit wɔa ɖaseɖiɖi siwo wode asi na nya ɣaɣla siwo ɖɔa nusi tututu yi ɖe nugoe ƒe nɔnɔmetata me — gɔmeɖoanyi nɔnɔmetata kawoe wozã, Dockerfile mɔfiame siwo wowɔ, dzɔtsoƒe faɛl siwo nɔ anyi, kple gotagome nusiwo dzi woanɔ te ɖo siwo woxɔ. Ðaseɖiɖi siawo zɔna ɖe SLSA (Supply-chain Levels for Software Artifacts) ƒe ɖoɖo kple in-toto ɖaseɖiɖi ƒe ɖoɖo dzi, si wɔe be woate ŋu atsɔ mɔ̃ aɖo kpe wo dzi to ɖoɖowɔɖi ƒe mɔ̃wo abe Sigstore ƒe Cosign kple OPA (Open Policy Agent) dzi.

Dɔwɔwɔ ƒe ɖoɖo ŋutɔŋutɔ si esia na be woate ŋu awɔ la le abe esia ene:

ƒe nyawo
1. Dɔwɔla ƒo kɔpi; CI pipeline ʋãa BuildKit xɔtutu kple provenance si wowɔ dɔ.
2. BuildKit wɔa SBOM si wode asi ete si ŋlɔa akpawo katã kple woƒe tɔtrɔwo.
3. Wotaa SBOM la ɖe nugoe ƒe nuŋlɔɖi me kpe ɖe nɔnɔmetata ƒe ɖeɖefia ŋu.
4. Amexɔxɔdzikpɔlawo le Kubernetes ƒuƒoƒoa me ɖoa kpe afisi wòtso dzi hafi ɖea mɔ ɖe dɔwɔwɔ ŋu.
5. Afɔku ƒe skannerwo biaa SBOM be woade dzesi nɔnɔmetata siwo ŋu wògblẽ nu le ne woɖe CVE yeyewo ɖe go.

ƒe nyawo

Akpa siwo wɔa mɔ̃ blibo sia ateŋu awɔ nu ɖe afɔku ƒe nyatakakawo ɖeɖefia ŋu le gaƒoƒo me tsɔ wu ŋkekewo, elabena anyigbatata si sɔ pɛpɛpɛ, si mɔ̃ ate ŋu axlẽ le akpa ɖesiaɖe si le nugoe ɖesiaɖe si le dɔ wɔm me la le wo si. Le asitsahawo abe Mewayz ene siwo wɔa ɖeka kple asisiwo ƒe dɔwɔwɔ ƒe ɖoɖowo vevie — fetu ƒe ɖoɖowo dzi kpɔkpɔ, ʋuwo ƒe nyatakakawo dzi kpɔkpɔ, adzɔxegbalẽviwo dzi kpɔkpɔ — ŋutete si le wo si be woaɖe nuzazãwo ƒe kɔsɔkɔsɔ sesẽ, si woate ŋu adzro la afia la va le nudidi gbãtɔ na dɔwɔƒewo ƒe nudzadzra ƒe dzeɖoɖowo, ke menye nu nyui aɖe ko o.

Gɔmedzedze: Tso Default Builds dzi va ɖo Pipelines Deŋgɔwo dzi

BuildKit le dɔ wɔm xoxo le wò Docker nɔnɔme me ne èle tɔtrɔ yeye aɖe zãm — Docker 23.0 eye emegbe nàwɔe le gɔmedzedzea me. Afɔɖeɖe gbãtɔ si woawɔ na ƒuƒoƒo akpa gãtɔ enye Docker Buildx ƒe kpeɖeŋutɔ ƒe dɔwɔwɔ, si ɖea BuildKit ƒe nɔnɔme bliboa ƒe ɖoɖo ɖe go to docker buildx ƒe sedede suea dzi. docker buildx create --use ƒe dɔwɔwɔ ɖoa ​​BuildKit xɔtula ƒe kpɔɖeŋu si si ŋutete geɖe le wu ʋukula gbãtɔ. Tso afima la, susu le nɔnɔme deŋgɔwo zazã vivivi tsɔ wu be woadze agbagba axɔ nusianu zi ɖeka.

Xɔlɔ̃mɔ si sɔ na ƒuƒoƒo si le gɔmedze docker build yɔyɔwo wɔm fifia le abe cache dɔdɔwo tsɔtsɔ kpe ɖe CI ŋu gbã ene — esia naa duƒuƒu ƒe ŋgɔyiyi enumake, si woate ŋu adzidze kple ɖoɖowɔɖi ƒe tɔtrɔ suetɔ kekeake. Multi-platform builds va zua nusi ŋu asixɔxɔ le ne ƒuƒoƒoa dze taɖodzinu ɖoɖo ɖe ARM ƒe xɔtuɖoɖowo ŋu gɔme. Adzame mounting sɔ be woaxɔ ɣesiaɣi si private package registries alo SSH keys adze le xɔtutu ƒe nɔnɔme me. Susu le provenance ɖaseɖiɖiwo me be woate ŋu awɔ ne sedziwɔwɔ ƒe nudidiwo alo dɔwɔƒe ƒe asisiwo ƒe didiwo na be nuzazãwo ƒe kɔsɔkɔsɔ ŋuti nuŋlɔɖiwo hiã.

Nusɔsrɔ̃ si de to wu le BuildKit me ku ɖe eɖoɖo koŋ tutu ŋu. Eɖanye be èle nugoe aɖe ɖom ɖa na microservice, mɔ̃ si srɔ̃a nu ƒe nutsotso ƒe nuwuƒe, alo mɔnu sesẽ aɖe abe Mewayz ƒe suite of 207 business modules ene o, xɔtutu ƒe ɖoɖoa menye ɖoɖowɔɖi si me nèƒua du to le mɔ dzi yina dɔwɔwɔ me o — enye mɔ̃ɖaŋudɔwɔwɔ si ɖea nusianu si woɖona ɖa tso eme ƒe nyonyome, dedienɔnɔ ƒe nɔnɔme, kple dɔwɔwɔ ƒe tsitsi fiana. BuildKit naa dɔwɔnu siwo ana asinudɔwɔwɔ ma nanyo ŋutɔ la wò. Biabia la koe nye be ɖe nèdi ɣeyiɣi zã wo.

Nyabiase Siwo Wobiana Enuenu

Nukae nye BuildKit eye aleke wòto vovo tso Docker xɔtuɖoɖo xoxoa gbɔ?

BuildKit nye Docker ƒe dzidzime si gbɔna ƒe xɔtumɔ̃, si woto vɛ le Docker 18.09 me eye wòwɔe gbãtɔ le Docker 23.0 me. To vovo na xɔtula xoxoa la, BuildKit doa alɔ parallel layer execution, caching mɔnu deŋgɔwo, nya ɣaɣlawo dada, kple cross-platform builds. Ewɔa nu ɖe xɔtuɖoɖoa ŋu abe mɔfiame acyclic graph (DAG) ene, si wɔnɛ be woate ŋu akpɔ ŋuɖoɖo ɖe nu ŋu ƒe nyametsotso si me nunya le wu kple xɔtutu ƒe ɣeyiɣi siwo le kabakaba ŋutɔ na Dockerfiles siwo sesẽ, siwo le afɔɖeɖe geɖe me.

Ðe wòhiã be maɖo nu bubu aɖe ɖe wò kɔmpiuta dzi hafi adze BuildKit zazã gɔme kple Docker?

Mehiã be woaɖoe bubu aɖeke ne èle Docker 23.0 alo esi do ŋgɔ zãm o — BuildKit le dɔ wɔm tso gɔmedzedzea me. Le tɔtrɔ xoxowo me la, àteŋu awɔe to nɔnɔme tɔtrɔ DOCKER_BUILDKIT=1 ɖoɖo hafi awɔ wò xɔtu sededewo. Le zazã ƒe nɔnɔme deŋgɔwo abe didiƒe tutu ƒe caches alo multi-platform xɔtutuwo gome la, àteŋu aɖo Buildx xɔtu ƒe kpɔɖeŋu tɔxɛ aɖe to docker buildx create.

zazã me

Ðe woateŋu azã BuildKit atsɔ atu asinudɔwɔwɔ siwo gbɔ nugoe ƒe nɔnɔmetata siwo wozãna ɖaa ŋua?

Ẽ, eye esia nye BuildKit ƒe ŋutete siwo ŋu womekpɔa ŋudzedze ɖo o wu la dometɔ ɖeka. Ne wozã ŋgɔgbekpa tɔxɛwo kple --output aflaga la, BuildKit ateŋu awɔ binary xoxowo, tarballs, nyatakakadzraɖoƒe siwo meʋãna o, kple faɛl ƒe asinudɔwɔwɔ bubu siwo wodi — menye OCI nɔnɔmetatawo ɖeɖeko o. Esia na wònye taɖodzinu gbadzaa ƒe xɔtumɔ̃ si sɔ le dzɔdzɔme nu ɖe polyglot monorepos kple complex CI pipelines afisi ƒuƒoƒo vovovowo hiã output format vovovowo tso toolchain ɖeka me.

Aleke BuildKit wɔ ɖeka kple DevOps ƒe mɔnu si keke ta wu kpe ɖe dɔwɔnuwo abe Mewayz ene ŋu?

BuildKit kpɔa xɔtuɖoɖo si le ɖoƒe si le bɔbɔe la gbɔ, gake ehiã be egbegbe ŋgɔyiyihawo hã nakpɔ asitsatsa ƒe dɔwɔwɔ, asisiwo ƒe dɔwɔwɔ, kple dɔwɔwɔ ƒe ɖoɖowo dzi. Mɔ̃wo abe Mewayz — si nye 207-module business OS si dzea egɔme tso $19/mo — kpena ɖe xɔtuɖaŋu dɔwɔnuwo ŋu to dɔwɔwɔ ƒe akpa si le kɔmpiuta dɔwɔɖoɖowo ƒe asitsatsa me la tsyɔtsyɔ me. Ne wotsɔ xɔtumɔ̃ nyui siwo ŋu BuildKit na ŋusẽ ɖo la kpe ɖe nusianu-le-ɖeka me abe Mewayz ene naa ƒuƒoƒowo kpɔa stack blibo tso code artifact dzi va ɖo asisiwo ƒe delivery dzi.