News for hackers. Stuff that matters.

A comment on BuildKit in depth: Docker's build engine explained. Parent comment

Re:BuildKit in depth: Docker's build engine explained by kylegalbraith on Wednesday February 07, 2024 @12:38AM (#39284915)
Not to shill another blog post of ours in here, but maybe this is helpful.

It's not exactly what you're asking for as it relates to running containers via runc. But this walks through how OCI layers are actually built up behind the scenes. In case it's helpful: https://depot.dev/blog/building-container-layers-from-scratc...

[ Parent | on HN ]
Re:BuildKit in depth: Docker's build engine explained by codethief on Sunday February 11, 2024 @06:10PM (#39339754)
Thanks, I had come across that post already but I find the structure of OCI images to be the easy part to understand. The tougher part is to get runc to run everything without root. :)

Anyway, fortunately I seem to have found a solution for now (running runc with an overlay rootfs without root), see the link in the other sibling/nephew comment I posted.

[ Parent | on HN ]