Kaniko project is archived. How do we build images in un-privileged mode?
this fiscal quarter
E
Electronic Emu
The kaniko project is no longer maintained, it is archived. See https://github.com/GoogleContainerTools/kaniko/issues/3348 Kaniko worked well for us since it does not require privileged mode. The other alternative supported by Harness - Buildx requires privileged mode.
Are you planning to build Kaniko executor based on the Chainguard fork?
Log In
s
shivkumar.loka
this fiscal quarter
s
shivkumar.loka
Hey Suresh
Thanks for reaching out! We’re aware that the original Kaniko project is no longer maintained. Our team is actively testing the Chainguard-maintained fork to evaluate long-term viability. We’ll share updates as soon as our testing is complete.
In the meantime, you have the following options in Harness:
Use the native Build and Push step with Buildx (requires privileged access) as you rightly mentioned, or
Use the Buildah plugin step, which also supports rootless builds in many scenarios.
Thank you
Regards
Shivkumar Loka
Product Team