Kaniko - Building Container Images In Kubernetes Without Docker

How do we build container images inside containers running in a Kubernetes cluster? Docker is a bad option since it cannot run inside containers. Using it requires communication to the Docker engine running in cluster nodes. Even if that security concern is not enough, Dockershim is deprecated in Kubernetes 1.20 and will be (or already is) removed from 1.22. That means that alternative container engines like ContainerD will take its place. In other words, using Docker is not even an option anymore.

Kaniko comes to the rescue. It is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster.

Timecodes ⏱:
00:00 Intro
04:55 Cloning the demo app repo
07:38 Building container images with Docker locally
08:15 Building container images with Docker from a container
12:11 Building container images through Docker socket
16:16 Building container images with Kaniko from a container

[manidevops]

I was very much excited on seeing this video. i do run all my CI/CD pipelines with docker sock bindings. When the announcement came from k8s community. i was searching for an alternative way to do this, keeping cost optimization also in mind. Thanks for wonderful video. Cheers!!!

[AliAbbas-vpbm]

This is by far one of the best explanations of why/how to use kaniko within k8s a cluster to build docker images

[itsjakepage]

Great video Viktor, Docker deprecation as a runtime on Kubernetes is not the end of the world and this explanation on a possible alternative is super helpful. Cheers!

[hannahgibson]

Best explanation of kaniko I've seen so far.

[okodoko]

I need to learn much more about Gitosps in my new Job, and I just wanna thank you for helping me out a ton :D

[tapindersingh]

I recently came across your channel, and I am already a fan of the way you are explaining. Thank you for sharing the knowledge.

[JaydeepDave]

First ever DevOps channel I subscribed to!! I generally don't like any other channel. You are the best :)

[EduardSchildner]

Great walkthrough, well done! I know kaniko for some time but I wish I came across a video like this one a year ago. Well, at least I will start pointing other people in this direction because kaniko can barely be explained better to beginners👍

[DooMonTouR]

This is everything i needed today, thanks so much
This has the explanation of what's wrong, good demo, bad practices explained and it's so easy to understand.
Very good job thank you so much

[vladf]

Thanks for the video, it is very helpful for me for understanding what kaniko is used for.

[trickytibo]

Great video. I heard of Kaniko but never get the chance to try it. Thanks to you, I will test it right away for building my image !

[RideLikeAChamp]

Superb, the secret GCP used under the hood of cloud build. It also facilitate/liberate developers from building docker file. RIP docker in Kubernetes

[systementorlearning]

My experience is that moving build pipeline into the cluster is not that prioritized...at least not yet - however guess that depends on the companies you mostly tend to work with and consult for.

Typically higher on their priority list is moving the image registry into their cluster. People are pretty ok with building with other providers like Gitlab, AWS, Azure.

So for me the best value of this video was the explaination of what it REALLY means "Kubernetes is deprecating Docker " - how it's not dramatic at all. Docker doesn't build "Docker images" as their is no such thing - but rather OCI-compliant images. Brilliant.

All in all: informative, valuable - and entertaining - as always Viktor, keep it up :)

[patricknelson]

Since nobody has commented on it yet... your shirt is hilarious!

[BrennoLeal]

Thank you for this awesome explanation!

[sep]

Thank you for this great video ! Exactly what I was looking for :) I've been watching some of your other videos also and you have a very good way of explaining thing. Thanks again and keep up the good work :thumbsup:

[opensourceguy]

Software-2-Image, or s2i, is another great option. Podman Desktop is another option for your desktop, too.

[ruslanivanov]

"docker is caput" ha-ha ))) it's made my day )))

[andreykaliazin]

Hi Victor! Sorry about the deleted comment. I was not aware of the youtube's habit to remove comments without a warning. I was only asking to review using buildah as the image building utility, possibly in comparison to kaniko. We do use rhel8 variants on prem and in the cloud, so it would be natural to use buildah in k8s too.

[darthbill-sv]

You can still use docker build. K8 uses a different runtime but you can still use docker to do the build.