image-tools v0.0.13

Command line tools to manage Stackable container images available at docker-images

This repository (and the installable package) contain two tools:

• bake : build and publish product images.
• check-container : run RedHat preflight checks on container images.

The bake command provides the following features:

• Build all Stackable product images
• Build individual product images
• Build individual product version images
• Use one or more distributed docker cache servers
• Publish images

Docker Build Cache

Docker's buildx plugin supports different types of build cache back ends. Since Stackable product images are built by distributed GitHub actions, the distributed back ends are relevant.

To use the build cache, you have to configure one or more back ends and enable them by calling bake with the --cache flag.

To configure one or more cache back ends, add the relevant properties to the cache property of the configuration module.

Here an example with the registry backend:

cache = [
    {
        "type": "registry",
        "ref_prefix": "build-repo.stackable.tech:8083/sandbox/cache",
        "mode": "max",
        "compression": "zstd",
        "ignore-error": "true",
    },
]

Here ref_prefix is used to build the unique ref property for each target.

NOTE: it's your responsibility to ensure that bake can read/write to the cache registry by performing a docker login before running bake.

For more information about the cache back ends, see the Docker documentation.

Usage examples

Run either bake or check-container with --help to get an overview of the accepted flags and their functionality. Below are some common usage examples:

# Build images of the hello-world containers
bake --product hello-world

# Build only one version [0.37.2] of OPA
bake --product opa=0.37.2

# Dry run. Do not build anything. Print the the generated Bakefile.
bake --product hello-world --dry

# Build all OPA images and set the organisation to "sandbox"
bake --product opa --organization sandbox

# Build all OPA images and set the image version to a release 24.7.0
bake --product opa --image-version 24.7.0

# Enable distributed docker cache (requires credentials to access the cache registry)
bake --product opa --cache

# Build the HBase images but use Java 21 instead of the values in conf.py
# for the java-base and java-devel images.
# It doesn't matter if you use lower or upper case for the build argument names,
# bake will normalize all of them to upper case.
bake --product hbase --build-arg 'java-base=21' --build-arg 'java-devel=21'

# Build half of all versions defined for OPA
bake --product opa --shard-count 2 --shard-index 0

# Build the other half of all versions defined for OPA
bake --product opa --shard-count 2 --shard-index 1

Installation

We recommend to use pipx:

pipx install image-tools-stackabletech

But you can also use pip:

# from PyPI
pip install image-tools-stackabletech
# from GitHub
pip install git+https://github.com/stackabletech/image-tools.git@main

Or via Nix Shell:

{ lib, pkgs, ... }:
with lib;
let
  image-tools = pkgs.callPackage (pkgs.fetchFromGitHub {
    owner = "stackabletech";
    repo = "image-tools";
    rev = "caa4d993bcbb8b884097c89a54ee246f975e2ec6"; # pragma: allowlist secret
    hash = "sha256-gjTCroHw4iJhXPW+s3mHBzIH8seIKH1tPb82lUb8+a0="; # pragma: allowlist secret ; comment out to find new hashes when upgrading
  } + "/image-tools.nix") {};
in
{
  packages = with pkgs; [
    image-tools
    # ...
  ];

  // ...
}

Shell Autocompletion

Nushell

Run this command for each new version of bake:

bake --completions nushell | save -f ~/.config/nushell/completions-bake.nu

And then include this in your ~/.config/nushell/config.nu file:

source completions-bake.nu

Development

Create a virtual environment where you install the package in "editable" mode:

Using venv and pip:

python -m venv ~/venv-image-tools-devel
source ~/venv-image-tools-devel/bin/activate
pip install --editable .

Using pipx:

pipx install --editable .

With the activated virtual environment, you can now run the tools from the docker-images repository and any local changes are immediately in effect.

We also recommend installing the pre-commit hooks in the activated virtual environment.

pip install pre-commit
pre-commit install

To run the hooks, stage the changes you want to commit and run:

pre-commit run

Release a new version

A new release involves bumping the package version and publishing it to PyPI. The easiest way to publish to PyPI is to allow the release GitHub action to do it for you. This action is also the preferred way, as it will publish a verified package using PyPI attestations.

To release a new version follow the steps below:

1. Create a new Git branch. For example release-1.2.3.
2. Update the version string (1.2.3) in: src/image_tools/version.py andREADME.md.
3. Commit, push and create a PR.
4. After the PR is merged, switch to the main branch and update it by executing git pull.
5. On the main branch, create and push the release tag. For example: git tag 1.2.3 -m 1.2.3 && git push origin 1.2.3.
6. Done!