Investigate whether is possible to use buildkit tool to build docker images inside a running container

[vitaliy-guliy]

Is your enhancement related to a problem? Please describe.

We already can build docker images inside a running container using buildah.
Buildit is alternative tool to build the images. We need to try to use use it for building of images.

Need to find a solution to use it in local and hosted Che.

Describe the solution you'd like

• try to build the simplest image with buildkit

• try to run the buildkit on hosted Che

• if it works, create Che plugin bringing a dev container to the workspace with kuildkit.

---

• Buildkit Git repository - https://github.com/moby/buildkit
• Docker images with buildkit - https://hub.docker.com/r/moby/buildkit

[amisevsk]

Adding docs for rootless buildkit[1] + kubernetes example[2]

[1] - https://github.com/moby/buildkit/blob/master/docs/rootless.md
[2] - https://github.com/moby/buildkit/tree/master/examples/kubernetes

[vitaliy-guliy]

Buildkit still does not work on openshift with the following error

/projects/che-sidecar-kubernetes-tooling $ cat /tmp/buildctl-daemonless.LhgNMj/log
[rootlesskit:parent] error: failed to setup UID/GID map: newuidmap 63 [0 1001080000 1 1 1001080000 65536] failed: newuidmap: Could not set caps
: exit status 1

Setting the proper values to /etc/subuid, /etc/subgid and to /etc/passwd does not give any result.

The problem (but I'm not sure) that is the dockedfile with Buildkit has already predefined used with ID 1000. It's strange, but it works on local minikube, where the user ID is 1724, but does not work on openshift with user ID 1001080000.

[che-bot]

Issues go stale after 180 days of inactivity. lifecycle/stale issues rot after an additional 7 days of inactivity and eventually close.

Mark the issue as fresh with /remove-lifecycle stale in a new comment.

If this issue is safe to close now please do so.

Moderators: Add lifecycle/frozen label to avoid stale mode.