Building Images Efficiently and Securely on Kubernetes with BuildKit
summary
BuildKit runs on Kubernetes as a daemonset, StatefulSet or plain pod and demonstrates concrete speedups: multi-stage parallel builds cut a >5‑minute build to ~3 minutes (~2x) and layer caching reduces a 3.6s step to 0.5s (~7x), with repeated builds dropping from 6s to ~2s; remote/cache setups show up to 9x faster overall. The setup uses rootless mode to avoid privileged securityContext, exposes run-mount=type=secret and run-mount=type=ssh to keep credentials out of images, and integrates with Buildx, Buildpacks and Tekton; consistent hashing pins jobs to nodes for local cache hits.
AI-written summary · about
chapters (7)
- 0:00Start
- 11:55BuildKit: next-generation docker build
- 13:33Build it Performance example
- 16:08Dockerfile syntax directive Example: RUN --mount
- 21:16Deployment strategy
- 22:47Remote cache
- 23:35Consistent hashing
related talks
35mBuildKit: A Modern Builder Toolkit on Top of containerd
25mRunning Cache-Efficient Builds at Scale on Kubernetes with BuildKit
29mHow to Improve Your Image Builds Using Advance Docker Build
20mBuildKit CLI for kubectl: A New Way to Build Container Images
43mBuilding Docker Images on Kubernetes: A Long Journey!
39mAbusing Docker builds with BuildKit and friends
35mBuilding Container Images In Kubernetes: It’s Been a Journey!
35mA New Way to Build OCI Images Using Buildkit