search

dependabot / dependabot-script

A simple script that demonstrates how to use Dependabot Core
MIT License
557 stars 274 forks source link

Docker in docker #579 #583

Open RomainBrault opened 3 years ago

RomainBrault commented 3 years ago

579 might break existing pipelines (For instance mine and @timbru31).

Moreover in my opinion forcing user to use dind is not the best idea: many users might want to disable the service for security reasons as it requires running docker in privilege mode.

hupling commented 3 years ago

You can use kaniko to build a docker-image without docker-in-docker or socket binding and then push it to a docker registry. I don't understand why there is no official docker image on docker hub.

commodis commented 3 years ago

This also broke my pipeline - the image should be pushed to docker hub if you really want to use docker. This also limits options regarding other OCI implementations like buildah.

matteosantama commented 3 years ago

Broke my pipeline as well. Building the image locally in one stage and trying to use it another is problematic, dind creates a new instance between stages.