Container Development Client for Reproducible Artifacts
Talkat ContainerCon @ Open Source Summit Europe 2024 · on Wednesday, 2024-09-18· at 11:55· Room 0.14 (Level 0)·
summary
Project BuildSafe combines Nix + Nix-snapshotter with containerd caching and a custom Lima VM template to produce reproducible OCI images and local Linux builds on macOS. It replaces monolithic Dockerfile layers (128-layer overlay limit) by treating OS packages as independent artifacts, builds distinct dev and runtime images, and caches content‑addressable packages so subsequent builds are fast (first builds from source remain slow). Result: declarative package updates, automatic patching, lower CI bandwidth and storage, and a portable VM that boots and builds successfully.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:45Need for Docker Desktop alternative
- 5:57OCI image format limits
- 9:50Ideal container workflow
- 12:21Build Safe project
- 13:49VM management with Lima
- 15:15Demo: BSF dependencies
- 18:48Demo: OCI image builds
- 20:54Future plans
- 22:23Q&A
related talks
25mContainer Development Client for Reproducible Artifacts
40mBut It Builds on My Machine!: Building Deterministic OCI Images With Nix
40mBuilding Better Containers: A Survey of Container Build Tools [I]
30mRootless, Reproducible, and Hermetic: Secure Container Build Showdown
24mIntroducing OSBuild
05mLightning Talk: Buildpacks: Conventional Vs. Convenient for Creating Containers
41mCloud Native Nix!
23mA Deep Dive into Development Environment Configuration Standards