mirrors/node-feature-discovery
mirrors/node-feature-discovery
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/node-feature-discovery.git synced 2025-03-05 08:17:04 +00:00
Code Activity
node-feature-discovery/Dockerfile

36 lines
956 B
Text
Raw Normal View History

Utilize multi-stage build to reduce docker image size This reduces the size of the Docker image from ca. 1.2GB down to about 750MB. Also, move unit tests from .travis.yml to Dockerfile. Final production image is not able to run unit tests anymore, as sources are missing from there.
2018-05-28 13:47:56 +03:00
# Build node feature discovery
Update builder image to Go 1.13.12 Go versions after 1.13.7 contain fix for CVE-2020-7919
2020-07-10 14:09:41 +03:00
FROM golang:1.13.12 as builder
Fixed vulnerabilities in Docker image. - Updated to debian testing (stretch). - Updated to go v1.7. - Added .dockerignore file.
2016-09-20 10:42:00 -07:00
Dockerfile: store build deps in a separate layer Speeds up local builds considerably as the deps are cached (instead of downloading them all on every build) - as long as go.mod and go.sum are not changed.
2019-09-04 18:17:58 +03:00
# Get (cache) deps in a separate layer
COPY go.mod go.sum /go/node-feature-discovery/
1. Enabled RDT discovery. 2. Updated the ds to a job for node labelling. 3. Added script to run a job in each node. 4. Updated Readme.
2016-07-12 02:30:49 +02:00
Switch to using go modules Update go version in Docker build image to v1.12.
2019-11-20 15:41:48 +02:00
WORKDIR /go/node-feature-discovery
1. Enabled RDT discovery. 2. Updated the ds to a job for node labelling. 3. Added script to run a job in each node. 4. Updated Readme.
2016-07-12 02:30:49 +02:00
Dockerfile: store build deps in a separate layer Speeds up local builds considerably as the deps are cached (instead of downloading them all on every build) - as long as go.mod and go.sum are not changed.
2019-09-04 18:17:58 +03:00
RUN go mod download
# Do actual build
COPY . /go/node-feature-discovery
Fix to report the correct version inside container. - Used build args to pass the correct version.
2016-12-09 11:32:39 -08:00
ARG NFD_VERSION
Make host mount prefix configurable in Makefile and Dockerfile Introduce a new makefile variable and dockerfile build arg named HOSTMOUNT_PREFIX for changing the prefix used for mounting host directories inside the container. Adds a sed rule in Makefile to generate deployment yamls accordingly.
2020-05-20 19:55:54 +03:00
ARG HOSTMOUNT_PREFIX
enable nfd framework on Arm64 platform currently, nfd framework can't be work on Arm64 platform. Fix points: 1, removed rdt on Arm64 platform 2, optimized the code related to multi-arch Change-Id: If605041f6d2243ae2afb3248edbf102083c6dcb4 Signed-off-by: Bin Lu <bin.lu@arm.com> Jira: ENTOS-432
2017-12-20 01:51:56 -05:00
Automatically determine git version for labels. - Added git version to published labels. - Minor formatting fix in job template. - Added .travis.yml and added build status image link to README. - Added .gitignore.
2016-07-14 14:17:27 -07:00
RUN go install \
Make host mount prefix configurable in Makefile and Dockerfile Introduce a new makefile variable and dockerfile build arg named HOSTMOUNT_PREFIX for changing the prefix used for mounting host directories inside the container. Adds a sed rule in Makefile to generate deployment yamls accordingly.
2020-05-20 19:55:54 +03:00
-ldflags "-s -w -X sigs.k8s.io/node-feature-discovery/pkg/version.version=$NFD_VERSION -X sigs.k8s.io/node-feature-discovery/source.pathPrefix=$HOSTMOUNT_PREFIX" \
Split NFD into client and server Refactor NFD into a simple server-client system. Labeling is now done by a separate 'nfd-master' server. It is a simple service with small codebase, designed for easy isolation. The feature discovery part is implemented in a 'nfd-worker' client which sends labeling requests to nfd-server, thus, requiring no access/permissions to the Kubernetes API itself. Client-server communication is implemented by using gRPC. The protocol currently consists of only one request, i.e. the labeling request. The spec templates are converted to the new scheme. The nfd-master server can be deployed using the nfd-master.yaml.template which now also contains the necessary RBAC configuration. NFD workers can be deployed by using the nfd-worker-daemonset.yaml.template or nfd-worker-job.yaml.template (most easily used with the label-nodes.sh script). Only nfd-worker currently support config file or options. The (default) NFD config file is renamed to nfd-worker.conf.
2019-01-11 15:55:28 +02:00
./cmd/*
RUN install -D -m644 nfd-worker.conf.example /etc/kubernetes/node-feature-discovery/nfd-worker.conf
1. Enabled RDT discovery. 2. Updated the ds to a job for node labelling. 3. Added script to run a job in each node. 4. Updated Readme.
2016-07-12 02:30:49 +02:00
Fix unit tests after master-worker split Refactor old tests and add tests for new functions. Add 'test' target in Makefile.
2019-01-23 10:15:47 +02:00
RUN make test
Utilize multi-stage build to reduce docker image size This reduces the size of the Docker image from ca. 1.2GB down to about 750MB. Also, move unit tests from .travis.yml to Dockerfile. Final production image is not able to run unit tests anymore, as sources are missing from there.
2018-05-28 13:47:56 +03:00
# Create production image for running node feature discovery
Use Debian strecth-slim as a base for the producion Docker image To cut the image size further, down to about 75MB. We use Debian strecth-slim as the base for the production image as golang docker images use stretch as their base.
2018-05-28 15:41:32 +03:00
FROM debian:stretch-slim
Utilize multi-stage build to reduce docker image size This reduces the size of the Docker image from ca. 1.2GB down to about 750MB. Also, move unit tests from .travis.yml to Dockerfile. Final production image is not able to run unit tests anymore, as sources are missing from there.
2018-05-28 13:47:56 +03:00
Dockerfile: run as non-root
2020-05-28 15:10:03 +03:00
# Run as unprivileged user
USER 65534:65534
Dockerfile: set verbosity of gRPC Makes solving issues easier when gRPC prints out information e.g. about TLS authentication problems on the server (nfd-master) side, too.
2019-02-05 21:35:51 +02:00
# Use more verbose logging of gRPC
ENV GRPC_GO_LOG_SEVERITY_LEVEL="INFO"
Add config file support Support yaml/json based config file for nfd. This commit does not add any actual consumers for the config file, yet. By default, nfd tries to read /etc/kubernetes/node-feature-discovery/node-feature-discovery.conf. This can be changed by specifying the --config command line flag.
2018-07-06 14:11:07 +03:00
COPY --from=builder /etc/kubernetes/node-feature-discovery /etc/kubernetes/node-feature-discovery
Split NFD into client and server Refactor NFD into a simple server-client system. Labeling is now done by a separate 'nfd-master' server. It is a simple service with small codebase, designed for easy isolation. The feature discovery part is implemented in a 'nfd-worker' client which sends labeling requests to nfd-server, thus, requiring no access/permissions to the Kubernetes API itself. Client-server communication is implemented by using gRPC. The protocol currently consists of only one request, i.e. the labeling request. The spec templates are converted to the new scheme. The nfd-master server can be deployed using the nfd-master.yaml.template which now also contains the necessary RBAC configuration. NFD workers can be deployed by using the nfd-worker-daemonset.yaml.template or nfd-worker-job.yaml.template (most easily used with the label-nodes.sh script). Only nfd-worker currently support config file or options. The (default) NFD config file is renamed to nfd-worker.conf.
2019-01-11 15:55:28 +02:00
COPY --from=builder /go/bin/nfd-* /usr/bin/
Copy permalink