•  
      request #31542 Stop building a "fat" Docker image to prepare the sources
    Infos
    #31542
    Thomas Gerbet (tgerbet)
    2023-04-28 11:19
    2023-04-03 16:21
    33145
    Details
    Stop building a "fat" Docker image to prepare the sources

    Currently our strategy to get an environment with all the tools we need is to install them into a Docker image and launch the nix-daemon as root when needing to use nix-build in the build process. While this work this as multiple disadvantages:

    • the docker build phase is slow because the layer with all the tools we need is big and so it take time to export
    • running the resulting container can also be slow, starting the container takes about 20 seconds in my env when using --read-only since the content needs to be copied
    • we have to run some things as root (so we do some setuid tricks to do it)
    • it does not allow to share the /nix folder between multiple agent (see also request #30400)
    Dev tools
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2023-04-17
    Attachments
    Empty
    References
    Referencing request #31542

    Follow-ups