totem / docker-image-factory Goto Github PK

As a image-factory user , I need to ensure that github post hooks are secured and not public so that user with no valid credentials can not start a build for image factory.

Note: This needs to be done only for github hook as it is public (using github signature). In future , we will add better auth for the apis.

When I rebuild my repository, ADD file command does not seems to be cached.

Image Factory fails to get deployed with CoreOS 591.0 when deployed using systemd (fleet)

ln: failed to create symbolic link '/sys/fs/cgroup/systemd/name=systemd': Operation not permitted
INFO[0000] +job serveapi(unix:///var/run/docker.sock)
INFO[0000] Listening for HTTP on unix (/var/run/docker.sock)
ERRO[0000] There are no more loopback devices available.
FATA[0000] loopback mounting failed

User Story
As a developer , I need the ability to inject a secret to my build process so that I can pull in artifacts from private repository

Options

• Docker Args
  Use docker build args to pass in credentials but credentials can be seen in history
• Fetch Credentials during RUN command
  • Fetch credentials in RUN command using wget
  • As part of same command, invoke the process that needs it
  • Remove the credentials once you have fetched the private artifacts as part of the same RUN

As a totem developer, I need to restrict concurrency for docker builds that executes concurrently by image factory in order to prevent crashes when multiple github hooks fire at once.

sshd reload is getting called even if ssh key was not modified.

Docker does not support cache bust instruction to force clear the cache. However, we can use moby/moby#1996 (comment) to bust the cache.

We need image-factory to inject CACHE_DATE variable with value set to epoch time as part of build-args.

Use Case:

• Java projects need the ability to rebuild projects even when there is no code change (change in snapshot dependencies).