lifecycle v0.12.0-rc.1

lifecycle v0.12.0-rc.1

Welcome to v0.12.0-rc.1, a beta pre-release of the Cloud Native Buildpacks Lifecycle.

Prerequisites

The lifecycle runs as a normal user in a series of unprivileged containers. To export images and cache image layers, it requires access to a Docker daemon or Docker registry.

Install

Extract the .tgz file and copy the lifecycle binaries into a build stack base image. The build image can then be orchestrated by a platform implementation such as the pack CLI or tekton.

Lifecycle Image

An OCI image containing the lifecycle binaries is available at buildpacksio/lifecycle:0.12.0-rc.1.

Features

• Support for arm64 (#659 and #680 by @imjasonh)
• When using platform API 0.7 or greater, the analyzer must be run before detector (#582 by @jabrown85)
• When using platform API 0.7 or greater, the analyzer will validate registry access (#646 by @jjbustamante)
• When using platform API 0.7 or greater, the -run-image flag is added to analyzer and removed from exporter (#662 by @natalieparellano)
• When using platform API 0.7 or greater, layer.sha files are not written after layer metadata restoration (#624 by @yaelharel)
• Release artifacts include checksums (#679 by @yaelharel)
• Lifecycle images are signed with cosign (#683 by @natalieparellano)
• Release artifacts include a CycloneDX SBOM; the SBOM is “attached” to the lifecycle image and signed with cosign (#690 and #701 by @natalieparellano)

Bug Fixes

• The launcher, when encountering file errors, will show the underlying error to the end user (#641 by @phil9909)

Chores

• The lifecycle, when compiled for Linux, no longer requires an alpine container (#630 by @imjasonh, #689 by @natalieparellano)
• Acceptance tests are added for the builder (#648 by @haliliceylan)
• Acceptance tests for the analyzer use a custom docker registry to simplify testing image permissions (#685 by @jjbustamante)
• The lifecycle can be developed using Gitpod (#604 by @JanKoehnlein)

Contributors

We'd like to acknowledge that this release wouldn't be as good without the help of the following amazing contributors:

@JanKoehnlein, @aemengo, @dwillist, @ekcasey, @haliliceylan, @imjasonh, @jabrown85, @jjbustamante, @micahyoung, @natalieparellano, @phil9909, @samj1912, @soniasingla, @yaelharel