bazel-contrib / bazel-contrib/rules_python

Support native binary-based stage1 bootstrap

オープン
#2,500 コメント 14 件 リアクション 1 件 担当者 0 名 GitHub で見る
主要言語
Starlark
スター
688
フォーク
721
平均マージ
15時間 7分
マージ済み PR(30日)
76

説明

# 🚀 feature request

### Relevant Rules

`py_binary`

### Description

With a similar motivation as #691, we would like to package a `py_binary` (including runfiles) into an `oci_image` and run it within a minimum base image like [distroless_base](https://github.com/GoogleContainerTools/distroless/tree/main/base) in order to minimize the attack surface. This does not come with a shell and other tools which are required by #1929 so this unfortunately doesn't help us.

### Describe the solution you'd like

Use a statically linked executable as loader.

### Describe alternatives you've considered

Add more stuff to the base image. This is suboptimal as this does not only increase the size but also the attack surface.

コントリビューションガイド

コントリビューションガイドを開く

調査の方向性

Start by reviewing the existing py_binary and oci_image integration, then read the related discussions in #691 and #1929. No source files or tests are named in the issue. Done means a py_binary, including its runfiles, can run from a minimal distroless_base image using a statically linked executable as its loader.

索引モデルが issue の本文から書いたものです。

評価

技術スタック
python
領域
build-system
issue の種類
機能追加
難易度
5/5
見積もり時間
1週間以上
活発さ
停滞
明瞭さ
おおむね明確
初心者へのやさしさ
30/100

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。