Support for deterministic containers

I'm evaluating buck2 with the specific intent to generate container images that are deterministic

i do know you can do this with bazel and in golang with [ko](https://github.com/ko-build/ko):

- https://blog.bazel.build/2015/07/28/docker_build.html

but the state of the underlying library set is...well:

- https://github.com/bazelbuild/rules_docker#status

i manged to build a simple go app with buck2 but struggling to find an example that would generate a container image.

Is this even possible with buck2 at the moment (any examples would go a long way).