build distroless image using cekit in ci

.github/build-distroless-images.sh

@@ -0,0 +1,24 @@
+#!/bin/bash
+
+# Create the container image providing the GraalVM specific distroless image
+# Usage: build-distroless-images.sh
+# Example:
+#    build-distroless-images.sh
+
+set -e
+
+PREFIX_NAME=quay.io/quarkus/quarkus-distroless-image
+IMAGE=quarkus-distroless-image.yaml
+BUILD_ENGINE=docker
+VERSION=$1
+OVERRIDES="{'version': '${VERSION}'}"
+
+echo "Building version ${VERSION}"
+
+virtualenv --python=python3 .cekit
+source .cekit/bin/activate
+
+echo "Generating ${PREFIX_NAME}:${VERSION}"
+cekit --descriptor ${IMAGE} build \
+    --overrides "${OVERRIDES}" \
+    ${BUILD_ENGINE} --tag="${PREFIX_NAME}:${VERSION}" --no-squash

.github/distroless-images.yaml

@@ -0,0 +1,9 @@
+image: quarkus-distroless-image.yaml
+imageName: quay.io/quarkus/quarkus-distroless-image
+buildScript: .github/build-distroless-images.sh
+versions:
+  - 20.3.0-java11
+tags:
+  - id: 20.3-java11
+    target: 20.3.0-java11
+versionCheck: false

.github/workflows/build-images.yml

@@ -18,6 +18,7 @@ jobs:
     strategy:
       matrix:
         configuration:
+          - .github/distroless-images.yaml
           - .github/native-images.yaml
           - .github/mandrel-images.yaml
           - .github/s2i-native-images.yaml

.github/workflows/push-images.yml

@@ -11,6 +11,7 @@ jobs:
     strategy:
       matrix:
         configuration:
+          - .github/distroless-images.yaml
           - .github/native-images.yaml
           - .github/mandrel-images.yaml
           - .github/s2i-native-images.yaml

README.md

@@ -136,6 +136,7 @@ For other Systems, please refer to the docs.
 
 The build scripts are located in the `.github` directory:
 
+* `build-distroless-images.sh` - build the distroless images suitable for packaging native applications
 * `build-mandrel-images.sh` - build the mandrel images
 * `build-native-images.sh` - build the images providing the `native-image` executable
 * `build-s2i-binary-images.sh` - build the s2i builder images taking a pre-built native executable

quarkus-distroless-image.yaml

@@ -0,0 +1,17 @@
+- name: debian
+  version: stable-slim
+  from: debian:stable-slim
+
+# need to rename from image into "scratch" to disable /tmp cleanup
+- name: scratch
+  version: latest
+  from: gcr.io/distroless/cc
+
+- name: quay.io/quarkus/quarkus-distroless-image
+  version: latest
+  from: scratch
+  artifacts:
+    - name: libz.so.1
+      image: debian
+      path: /lib/x86_64-linux-gnu/libz.so.1
+      dest: /lib/x86_64-linux-gnu