Releases · bazel-contrib/rules_oci

13 Oct 18:53

github-actions

v2.0.1

859b8ff

v2.0.1 Latest

Latest

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.1")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "acbf8f40e062f707f8754e914dcb0013803c6e5e3679d3e05b571a9f5c7e0b43",
    strip_prefix = "rules_oci-2.0.1",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.1/rules_oci-v2.0.1.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

fix: declare and register regctl toolchains only for compatible platforms by @lbcjbb in #692
doc: mention containerd requirement by @thesayyn in #694
chore: bump to stardoc 0.6.2 by @gregmagolan in #719

Full Changelog: v2.0.0...v2.0.1

Contributors

gregmagolan and thesayyn

Assets 3

05 Sep 22:03

github-actions

v2.0.0

c74c2d3

v2.0.0

BREAKING CHANGES

Uncompressed archives in the tars attribute is no longer compressed when creating the image, this might make images bigger compared to 1.x. Use pkg_tar#extension or tar#compress attribute to compress the layers beforehand.

# For pkg_tar
pkg_tar(
  extension = "tar.gz"
)

# For tar
tar(
   compress = "gzip"
)

Digests of images created 1.x rules_oci will not match 2.x rules_oci, as we are no longer using crane to create the images. However, images should stay the same semantically. You can use diffoci to make sure they are the same semantically!
Default output of oci_tarball is no longer a tarball, use a filegroup target to get the tarball. See #548
oci_tarball is renamed to oci_load to better reflect it's purpose.
Bazel 5 is no longer supported, and tested by the CI, we will not be accepting fixes for it.
Delimiter for cmd and entrypoint changed from , to \n. See: #663

SIGNIFICANT CHANGES

OCIImage action no longer spins an ephemeral registry instance to mutate images locally, making it slightly faster. See design document
oci_image now supports zstd compression
Now oci_pull fetches blobs in parallel on Bazel >= 7.1

API Removals

oci_pull no longer has a config_path attribute, use config attribute instead. It was deprecated in 1.x.

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "d007e6c96eb62c88397b68f329e4ca56e0cfe31204a2c54b0cb17819f89f83c8",
    strip_prefix = "rules_oci-2.0.0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0/rules_oci-v2.0.0.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

docs: simplify use of expand_template by @alexeagle in #534
chore: upgrade rules_go and gazelle by @thesayyn in #541
ci: only test with bazel 6, 7 by @thesayyn in #533
Add a minimal c++ example in doc by @rygx in #516
[docs] Add missing name to push examples by @ptxmac in #513
feat: add nvcr.io to _WWW_AUTH by @nobu-k in #511
fix: Add quay back to authn config by @ankit-agarwal1999 in #543
docs: recommend rules_distroless by @thesayyn in #546
refactor: remove yq dependency by @thesayyn in #386
refactor: use hermetic tar by @alexeagle in #385
Add toolchain param to the affected actions by @kotlaja in #341
Pass headers to Bazel downloader where available by @mortenmj in #528
feat: don't produce big tar file as default output of oci_tarball by @alexeagle in #548
refactor: remove registry references by @thesayyn in #551
chore: update deps and bazel by @thesayyn in #553
refactor: registryless oci_image by @thesayyn in #550
feat: implement out-of-band descriptor calculation by @thesayyn in #558
feat: implement tars symlinks by @thesayyn in #559
feat: support symlinking blobs from base by @thesayyn in #560
fix: make oci_image fully hermetic by @thesayyn in #569
fix: canonicalize missing components by @thesayyn in #567
fix: duplicate tar copying by @thesayyn in #576
Add jq as dependency required for oci_push by @mering in #589
example: add dockerfile build by @thesayyn in #570
refactor: remove curl fallback by @thesayyn in #568
Use non-blocking download to get image blobs, on Bazel >=7.1.0 by @mortenmj in #601
fix: add tars into action inputs by @thesayyn in #599
chore: disable dockerfile example by @thesayyn in #605
fix: return correct extension metadata by @thesayyn in #611
chore: add --check_direct_dependencies to .bazelrc by @gregmagolan in #615
fix: make oci_tarball work with disjoint output root by @thesayyn in #614
Copy files using coreutils cp by @plobsing in #595
Fix jq: error (at <stdin>:16): Cannot use null (null) as object key error on empty line in labels file by @bozaro in #606
fix: env vars containing = by @thesayyn in #616
test: add pinning test by @thesayyn in #618
chore: cleanup repo and remove some dev deps by @thesayyn in #620
fix: make oci_tarball work with genrule by @thesayyn in #621
fix: Ignore empty annotations in the jq query by @DolceTriade in #625
test: add oci_tarball test for sh_test by @thesayyn in #624
feat: add support for settings volumes by @gzm0 in #632
refactor: rename oci_tarball to oci_load by @alexeagle in #636
fix: accumulate image manifests in oci_image_index by @seh in #633
tarball uses hermetic coreutils by @rickvanprim in #635
fix: propagate transitive inputs by @thesayyn in #646
fix: support external oci_image targets by @thesayyn in #622
fix: reset cmd when entrypoint is set by @thesayyn in #656
fix: set created property for scratch base by @thesayyn in #655
Mention ociupdate in the README by @mark-thm in #660
fix: add history entries for tars attribute by @thesayyn in #654
fix typo in load.sh.tpl by @kopp in #657
test: add test for setting entrypoint to [] by @thesayyn in #662
fix: comma in entrypoint and cmd by @thesayyn in #663
fix: ensures confugure_buildx rule runs when bazel server restarts by @kvet in #670
chore: remove deprecated config_path attribute by @thesayyn in #666
Fix for gnu xargs and send --verbose to other commands by @vinnybod in #672
fix: include examples by @thesayyn in #682
chore(docs): mention rules_multirun by @alexeagle in #681
refactor: mention url rewriter in oci_pull errors by @thesayyn in #675
Allow bazel_tags in bzlmod extensi...

Contributors

alexeagle, ptxmac, and 20 other contributors

Assets 3

27 Aug 04:54

github-actions

v2.0.0-rc0

9faf210

v2.0.0-rc0

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-rc0")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "79e7f80df2840d14d7bc79099b5ed4553398cce8cff1f0df97289a07f7fd213c",
    strip_prefix = "rules_oci-2.0.0-rc0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-rc0/rules_oci-v2.0.0-rc0.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

chore: remove deprecated config_path attribute by @thesayyn in #666
Fix for gnu xargs and send --verbose to other commands by @vinnybod in #672
fix: include examples by @thesayyn in #682
chore(docs): mention rules_multirun by @alexeagle in #681
refactor: mention url rewriter in oci_pull errors by @thesayyn in #675

New Contributors

@vinnybod made their first contribution in #672

BREAKING CHANGES

Uncompressed archives in the tars attribute is no longer compressed when creating the image, this might make images bigger compared to 1.x. Use pkg_tar#extension or tar#compress attribute to compress the layers beforehand.

# For pkg_tar
pkg_tar(
  extension = "tar.gz"
)

# For tar
tar(
   compress = "gzip"
)

Digests of images created 1.x rules_oci will not match 2.x rules_oci, as we are no longer using crane to create the images. However, images should stay the same semantically. You can use diffoci to make sure they are the same semantically!
Default output of oci_tarball is no longer a tarball, use a filegroup target to get the tarball. See #548
oci_tarball is renamed to oci_load to better reflect it's purpose.
Bazel 5 is no longer supported, and tested by the CI, we will not be accepting fixes for it.

SIGNIFICANT CHANGES

OCIImage action no longer spins an ephemeral registry instance to mutate images locally, making it slightly faster.
oci_image now supports zstd compression
Now oci_pull fetches blobs in parallel on Bazel >= 7.1

API Removals

oci_pull no longer has a config_path attribute, use config attribute instead. It was deprecated in 1.x.

Full Changelog: v2.0.0-beta2...v2.0.0-rc0

Contributors

alexeagle, vinnybod, and thesayyn

Assets 3

07 Aug 18:16

github-actions

v2.0.0-beta2

0be4040

v2.0.0-beta2

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-beta2")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "311e78803a4161688cc79679c0fb95c56445a893868320a3caf174ff6e2c383b",
    strip_prefix = "rules_oci-2.0.0-beta2",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-beta2/rules_oci-v2.0.0-beta2.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

fix: support external oci_image targets by @thesayyn in #622
fix: reset cmd when entrypoint is set by @thesayyn in #656
fix: set created property for scratch base by @thesayyn in #655
Mention ociupdate in the README by @mark-thm in #660
fix: add history entries for tars attribute by @thesayyn in #654
fix typo in load.sh.tpl by @kopp in #657
test: add test for setting entrypoint to [] by @thesayyn in #662
fix: comma in entrypoint and cmd by @thesayyn in #663
fix: ensures confugure_buildx rule runs when bazel server restarts by @kvet in #670

New Contributors

@kopp made their first contribution in #657
@kvet made their first contribution in #670

Full Changelog: v2.0.0-beta1...v2.0.0-beta2

Contributors

kvet, kopp, and 2 other contributors

Assets 3

12 Jul 16:53

github-actions

v1.8.0

c475294

v1.8.0

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "1.8.0")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "46ce9edcff4d3d7b3a550774b82396c0fa619cc9ce9da00c1b09a08b45ea5a14",
    strip_prefix = "rules_oci-1.8.0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v1.8.0/rules_oci-v1.8.0.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "LATEST_CRANE_VERSION", "oci_register_toolchains")

oci_register_toolchains(
    name = "oci",
    crane_version = LATEST_CRANE_VERSION,
    # Uncommenting the zot toolchain will cause it to be used instead of crane for some tasks.
    # Note that it does not support docker-format images.
    # zot_version = LATEST_ZOT_VERSION,
)

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

--unwrapScalar for yq cmd by @kczulko in #594
Use a transition to resolve the correct versions of crane and yq by @EdSchouten in #590
Add import_tags attribute to oci_pull by @steve-261370 in #573
fix: Support global credsStore in docker config by @msiebuhr in #602
Document how to use rules_oci with scala by @lukaszwawrzyk in #630
feat(oci_pull): expose the digest as a file by @aignas in #542
feat: provide affordance for OCIImage actions to reserve more resources by @alexeagle in #650

New Contributors

@EdSchouten made their first contribution in #590
@steve-261370 made their first contribution in #573
@msiebuhr made their first contribution in #602
@lukaszwawrzyk made their first contribution in #630
@aignas made their first contribution in #542

Full Changelog: v1.7.6...v1.8.0

Contributors

alexeagle, aignas, and 5 other contributors

Assets 3

03 Jul 17:27

github-actions

v2.0.0-beta1

4b843d6

v2.0.0-beta1

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-beta1")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "f70f07f9d0d6c275d7ec7d3c7f236d9b552ba3205e8f37df9c1125031cf967cc",
    strip_prefix = "rules_oci-2.0.0-beta1",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-beta1/rules_oci-v2.0.0-beta1.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

BREAKING CHANGES

Uncompressed archives in the tars attribute is no longer compressed when creating the image, this might make images bigger compared to 1.x. Use pkg_tar#compression or tar#compress attribute to compress the layers beforehand.
Digests of images created 1.x rules_oci will not match 2.x rules_oci, as we are no longer using crane to create the images. However, images should stay the same semantically. You can use diffoci to make sure they are the same semantically!
Default output of oci_tarball is no longer a tarball, use a filegroup target to get the tarball. See #548
Bazel 5 is no longer supported.
oci_tarball is renamed to oci_load to better reflect it's purpose.

SIGNIFICANT CHANGES

OCIImage action no longer spins an ephemeral registry instance to mutate images locally, making it slightly faster.
oci_image now supports zstd compression
Now oci_pull fetches blobs in parallel on Bazel >= 7.1

What's Changed

fix: propagate transitive inputs by @thesayyn in #646

Full Changelog: v2.0.0-beta0...v2.0.0-beta1

Contributors

thesayyn

Assets 3

26 Jun 22:30

github-actions

v2.0.0-beta0

9a32fc2

v2.0.0-beta0

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-beta0")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "20024d18956c5b2feaf99701659e9711f3b97c468411a2e2d2e709dd24f31d90",
    strip_prefix = "rules_oci-2.0.0-beta0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-beta0/rules_oci-v2.0.0-beta0.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

BREAKING CHANGES

Uncompressed archives in the tars attribute is no longer compressed when creating the image, this might make images bigger compared to 1.x. Use pkg_tar#compression or tar#compress attribute to compress the layers beforehand.
Digests of images created 1.x rules_oci will not match 2.x rules_oci, as we are no longer using crane to create the images. However, images should stay the same semantically.
Default output of oci_tarball is no longer a tarball, use a filegroup target to get the tarball. See #548
Bazel 5 is no longer supported.
oci_tarball is renamed to oci_load to better reflect it's purpose.

SIGNIFICANT CHANGES

OCIImage action no longer spins an ephemeral registry instance to mutate images locally, making it slightly faster.
oci_image now supports zstd compression
Now oci_pull fetches blobs in parallel on Bazel >= 7.1

What's Changed

feat: add support for settings volumes by @gzm0 in #632
refactor: rename oci_tarball to oci_load by @alexeagle in #636
fix: accumulate image manifests in oci_image_index by @seh in #633
tarball uses hermetic coreutils by @rickvanprim in #635

New Contributors

@seh made their first contribution in #633
@rickvanprim made their first contribution in #635

Full Changelog: v2.0.0-alpha5...v2.0.0-beta0

Contributors

alexeagle, seh, and 2 other contributors

Assets 3

12 Jun 18:19

github-actions

v2.0.0-alpha5

464858a

v2.0.0-alpha5 Pre-release

Pre-release

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-alpha5")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "768cd23d5fea0235858eecfc8bfaae77a11fe9db9ebb1ac03d31c4b19eb9bc11",
    strip_prefix = "rules_oci-2.0.0-alpha5",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-alpha5/rules_oci-v2.0.0-alpha5.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

fix: Ignore empty annotations in the jq query by @DolceTriade in #625
test: add oci_tarball test for sh_test by @thesayyn in #624

New Contributors

@DolceTriade made their first contribution in #625

Full Changelog: v2.0.0-alpha4...v2.0.0-alpha5

Contributors

DolceTriade and thesayyn

Assets 3

10 Jun 20:59

github-actions

v2.0.0-alpha4

09d5521

v2.0.0-alpha4 Pre-release

Pre-release

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-alpha4")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "02df4efc5c7431904a927c1947fc7b6e2eda838b038b15bdf9a15918e7d6c04b",
    strip_prefix = "rules_oci-2.0.0-alpha4",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-alpha4/rules_oci-v2.0.0-alpha4.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

test: add pinning test by @thesayyn in #618
chore: cleanup repo and remove some dev deps by @thesayyn in #620
fix: make oci_tarball work with genrule by @thesayyn in #621

Full Changelog: v2.0.0-alpha3...v2.0.0-alpha4

Contributors

thesayyn

Assets 3

07 Jun 20:54

github-actions

v2.0.0-alpha3

3be6471

v2.0.0-alpha3 Pre-release

Pre-release

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-alpha3")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "63eec71bfc258f6303709159e66a4cbec1fbdd9738a973ebac4813ab20de1561",
    strip_prefix = "rules_oci-2.0.0-alpha3",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-alpha3/rules_oci-v2.0.0-alpha3.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

fix: return correct extension metadata by @thesayyn in #611
chore: add --check_direct_dependencies to .bazelrc by @gregmagolan in #615
fix: make oci_tarball work with disjoint output root by @thesayyn in #614
Copy files using coreutils cp by @plobsing in #595
Fix jq: error (at <stdin>:16): Cannot use null (null) as object key error on empty line in labels file by @bozaro in #606
fix: env vars containing = by @thesayyn in #616

New Contributors

@plobsing made their first contribution in #595
@bozaro made their first contribution in #606

Full Changelog: v2.0.0-alpha2...v2.0.0-alpha3

Contributors

plobsing, gregmagolan, and 2 other contributors

Assets 3

Releases: bazel-contrib/rules_oci

v2.0.1

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

Contributors

v2.0.0

BREAKING CHANGES

SIGNIFICANT CHANGES

API Removals

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

Contributors

v2.0.0-rc0

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

BREAKING CHANGES

SIGNIFICANT CHANGES

API Removals

Contributors

v2.0.0-beta2

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

Contributors

v1.8.0

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

Contributors

v2.0.0-beta1

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

BREAKING CHANGES

SIGNIFICANT CHANGES

What's Changed

Contributors

v2.0.0-beta0

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

BREAKING CHANGES

SIGNIFICANT CHANGES

What's Changed

New Contributors

Contributors

v2.0.0-alpha5

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

Contributors

v2.0.0-alpha4

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

Contributors

v2.0.0-alpha3

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

Contributors