Docker does not respect the .dockerignore file when building from a tar. Instead by default we'll make a local clone into a tmp directory and build from there. Subsequent builds will reset the clone to match the checkout. Compared to building directly in the repo, we'll have reproducible builds. Compared to using a git archive: 1. .dockerignore is respected 2. We'll have faster builds - docker can be smarter about caching the build context on subsequent builds from a directory To build from the repo directly, set the build context to "." in the config. If there are uncommitted changes, we'll warn about them either being included or ignored depending on whether we build from the clone.
78 lines
1.8 KiB
Ruby
78 lines
1.8 KiB
Ruby
|
|
class Kamal::Commands::Builder::Base < Kamal::Commands::Base
|
|
class BuilderError < StandardError; end
|
|
|
|
delegate :argumentize, to: Kamal::Utils
|
|
delegate :args, :secrets, :dockerfile, :target, :local_arch, :local_host, :remote_arch, :remote_host, :cache_from, :cache_to, :ssh, to: :builder_config
|
|
|
|
def clean
|
|
docker :image, :rm, "--force", config.absolute_image
|
|
end
|
|
|
|
def pull
|
|
docker :pull, config.absolute_image
|
|
end
|
|
|
|
def build_options
|
|
[ *build_tags, *build_cache, *build_labels, *build_args, *build_secrets, *build_dockerfile, *build_target, *build_ssh ]
|
|
end
|
|
|
|
def build_context
|
|
config.builder.context
|
|
end
|
|
|
|
def validate_image
|
|
pipe \
|
|
docker(:inspect, "-f", "'{{ .Config.Labels.service }}'", config.absolute_image),
|
|
any(
|
|
[ :grep, "-x", config.service ],
|
|
"(echo \"Image #{config.absolute_image} is missing the 'service' label\" && exit 1)"
|
|
)
|
|
end
|
|
|
|
|
|
private
|
|
def build_tags
|
|
[ "-t", config.absolute_image, "-t", config.latest_image ]
|
|
end
|
|
|
|
def build_cache
|
|
if cache_to && cache_from
|
|
[ "--cache-to", cache_to,
|
|
"--cache-from", cache_from ]
|
|
end
|
|
end
|
|
|
|
def build_labels
|
|
argumentize "--label", { service: config.service }
|
|
end
|
|
|
|
def build_args
|
|
argumentize "--build-arg", args, sensitive: true
|
|
end
|
|
|
|
def build_secrets
|
|
argumentize "--secret", secrets.collect { |secret| [ "id", secret ] }
|
|
end
|
|
|
|
def build_dockerfile
|
|
if Pathname.new(File.expand_path(dockerfile)).exist?
|
|
argumentize "--file", dockerfile
|
|
else
|
|
raise BuilderError, "Missing #{dockerfile}"
|
|
end
|
|
end
|
|
|
|
def build_target
|
|
argumentize "--target", target if target.present?
|
|
end
|
|
|
|
def build_ssh
|
|
argumentize "--ssh", ssh if ssh.present?
|
|
end
|
|
|
|
def builder_config
|
|
config.builder
|
|
end
|
|
end
|