v2.0.0

BREAKING CHANGES

• Uncompressed archives in the tars attribute is no longer compressed when creating the image, this might make images bigger compared to 1.x. Use pkg_tar#extension or tar#compress attribute to compress the layers beforehand.

# For pkg_tar
pkg_tar(
  extension = "tar.gz"
)

# For tar
tar(
   compress = "gzip"
)

• Digests of images created 1.x rules_oci will not match 2.x rules_oci, as we are no longer using crane to create the images. However, images should stay the same semantically. You can use diffoci to make sure they are the same semantically!
• Default output of oci_tarball is no longer a tarball, use a filegroup target to get the tarball. See #548
• oci_tarball is renamed to oci_load to better reflect it's purpose.
• Bazel 5 is no longer supported, and tested by the CI, we will not be accepting fixes for it.
• Delimiter for cmd and entrypoint changed from , to \n. See: #663

SIGNIFICANT CHANGES

• OCIImage action no longer spins an ephemeral registry instance to mutate images locally, making it slightly faster. See design document
• oci_image now supports zstd compression
• Now oci_pull fetches blobs in parallel on Bazel >= 7.1

API Removals

• oci_pull no longer has a config_path attribute, use config attribute instead. It was deprecated in 1.x.

Using bzlmod with Bazel 6 or later:

1. Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "d007e6c96eb62c88397b68f329e4ca56e0cfe31204a2c54b0cb17819f89f83c8",
    strip_prefix = "rules_oci-2.0.0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0/rules_oci-v2.0.0.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

• docs: simplify use of expand_template by @alexeagle in #534
• chore: upgrade rules_go and gazelle by @thesayyn in #541
• ci: only test with bazel 6, 7 by @thesayyn in #533
• Add a minimal c++ example in doc by @rygx in #516
• [docs] Add missing name to push examples by @ptxmac in #513
• feat: add nvcr.io to _WWW_AUTH by @nobu-k in #511
• fix: Add quay back to authn config by @ankit-agarwal1999 in #543
• docs: recommend rules_distroless by @thesayyn in #546
• refactor: remove yq dependency by @thesayyn in #386
• refactor: use hermetic tar by @alexeagle in #385
• Add toolchain param to the affected actions by @kotlaja in #341
• Pass headers to Bazel downloader where available by @mortenmj in #528
• feat: don't produce big tar file as default output of oci_tarball by @alexeagle in #548
• refactor: remove registry references by @thesayyn in #551
• chore: update deps and bazel by @thesayyn in #553
• refactor: registryless oci_image by @thesayyn in #550
• feat: implement out-of-band descriptor calculation by @thesayyn in #558
• feat: implement tars symlinks by @thesayyn in #559
• feat: support symlinking blobs from base by @thesayyn in #560
• fix: make oci_image fully hermetic by @thesayyn in #569
• fix: canonicalize missing components by @thesayyn in #567
• fix: duplicate tar copying by @thesayyn in #576
• Add jq as dependency required for oci_push by @mering in #589
• example: add dockerfile build by @thesayyn in #570
• refactor: remove curl fallback by @thesayyn in #568
• Use non-blocking download to get image blobs, on Bazel >=7.1.0 by @mortenmj in #601
• fix: add tars into action inputs by @thesayyn in #599
• chore: disable dockerfile example by @thesayyn in #605
• fix: return correct extension metadata by @thesayyn in #611
• chore: add --check_direct_dependencies to .bazelrc by @gregmagolan in #615
• fix: make oci_tarball work with disjoint output root by @thesayyn in #614
• Copy files using coreutils cp by @plobsing in #595
• Fix jq: error (at <stdin>:16): Cannot use null (null) as object key error on empty line in labels file by @bozaro in #606
• fix: env vars containing = by @thesayyn in #616
• test: add pinning test by @thesayyn in #618
• chore: cleanup repo and remove some dev deps by @thesayyn in #620
• fix: make oci_tarball work with genrule by @thesayyn in #621
• fix: Ignore empty annotations in the jq query by @DolceTriade in #625
• test: add oci_tarball test for sh_test by @thesayyn in #624
• feat: add support for settings volumes by @gzm0 in #632
• refactor: rename oci_tarball to oci_load by @alexeagle in #636
• fix: accumulate image manifests in oci_image_index by @seh in #633
• tarball uses hermetic coreutils by @rickvanprim in #635
• fix: propagate transitive inputs by @thesayyn in #646
• fix: support external oci_image targets by @thesayyn in #622
• fix: reset cmd when entrypoint is set by @thesayyn in #656
• fix: set created property for scratch base by @thesayyn in #655
• Mention ociupdate in the README by @mark-thm in #660
• fix: add history entries for tars attribute by @thesayyn in #654
• fix typo in load.sh.tpl by @kopp in #657
• test: add test for setting entrypoint to [] by @thesayyn in #662
• fix: comma in entrypoint and cmd by @thesayyn in #663
• fix: ensures confugure_buildx rule runs when bazel server restarts by @kvet in #670
• chore: remove deprecated config_path attribute by @thesayyn in #666
• Fix for gnu xargs and send --verbose to other commands by @vinnybod in #672
• fix: include examples by @thesayyn in #682
• chore(docs): mention rules_multirun by @alexeagle in #681
• refactor: mention url rewriter in oci_pull errors by @thesayyn in #675
• Allow bazel_tags in bzlmod extensi...

v2.0.0-rc0

Using bzlmod with Bazel 6 or later:

1. Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-rc0")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "79e7f80df2840d14d7bc79099b5ed4553398cce8cff1f0df97289a07f7fd213c",
    strip_prefix = "rules_oci-2.0.0-rc0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-rc0/rules_oci-v2.0.0-rc0.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

• chore: remove deprecated config_path attribute by @thesayyn in #666
• Fix for gnu xargs and send --verbose to other commands by @vinnybod in #672
• fix: include examples by @thesayyn in #682
• chore(docs): mention rules_multirun by @alexeagle in #681
• refactor: mention url rewriter in oci_pull errors by @thesayyn in #675

New Contributors

• @vinnybod made their first contribution in #672

BREAKING CHANGES

• Uncompressed archives in the tars attribute is no longer compressed when creating the image, this might make images bigger compared to 1.x. Use pkg_tar#extension or tar#compress attribute to compress the layers beforehand.

# For pkg_tar
pkg_tar(
  extension = "tar.gz"
)

# For tar
tar(
   compress = "gzip"
)

• Digests of images created 1.x rules_oci will not match 2.x rules_oci, as we are no longer using crane to create the images. However, images should stay the same semantically. You can use diffoci to make sure they are the same semantically!
• Default output of oci_tarball is no longer a tarball, use a filegroup target to get the tarball. See #548
• oci_tarball is renamed to oci_load to better reflect it's purpose.
• Bazel 5 is no longer supported, and tested by the CI, we will not be accepting fixes for it.

SIGNIFICANT CHANGES

• OCIImage action no longer spins an ephemeral registry instance to mutate images locally, making it slightly faster.
• oci_image now supports zstd compression
• Now oci_pull fetches blobs in parallel on Bazel >= 7.1

API Removals

• oci_pull no longer has a config_path attribute, use config attribute instead. It was deprecated in 1.x.

Full Changelog: v2.0.0-beta2...v2.0.0-rc0

v2.0.0-beta2

Using bzlmod with Bazel 6 or later:

1. Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-beta2")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "311e78803a4161688cc79679c0fb95c56445a893868320a3caf174ff6e2c383b",
    strip_prefix = "rules_oci-2.0.0-beta2",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-beta2/rules_oci-v2.0.0-beta2.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

• fix: support external oci_image targets by @thesayyn in #622
• fix: reset cmd when entrypoint is set by @thesayyn in #656
• fix: set created property for scratch base by @thesayyn in #655
• Mention ociupdate in the README by @mark-thm in #660
• fix: add history entries for tars attribute by @thesayyn in #654
• fix typo in load.sh.tpl by @kopp in #657
• test: add test for setting entrypoint to [] by @thesayyn in #662
• fix: comma in entrypoint and cmd by @thesayyn in #663
• fix: ensures confugure_buildx rule runs when bazel server restarts by @kvet in #670

New Contributors

• @kopp made their first contribution in #657
• @kvet made their first contribution in #670

Full Changelog: v2.0.0-beta1...v2.0.0-beta2

v1.8.0

Using bzlmod with Bazel 6 or later:

1. Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "1.8.0")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "46ce9edcff4d3d7b3a550774b82396c0fa619cc9ce9da00c1b09a08b45ea5a14",
    strip_prefix = "rules_oci-1.8.0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v1.8.0/rules_oci-v1.8.0.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "LATEST_CRANE_VERSION", "oci_register_toolchains")

oci_register_toolchains(
    name = "oci",
    crane_version = LATEST_CRANE_VERSION,
    # Uncommenting the zot toolchain will cause it to be used instead of crane for some tasks.
    # Note that it does not support docker-format images.
    # zot_version = LATEST_ZOT_VERSION,
)

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

• --unwrapScalar for yq cmd by @kczulko in #594
• Use a transition to resolve the correct versions of crane and yq by @EdSchouten in #590
• Add import_tags attribute to oci_pull by @steve-261370 in #573
• fix: Support global credsStore in docker config by @msiebuhr in #602
• Document how to use rules_oci with scala by @lukaszwawrzyk in #630
• feat(oci_pull): expose the digest as a file by @aignas in #542
• feat: provide affordance for OCIImage actions to reserve more resources by @alexeagle in #650

New Contributors

• @EdSchouten made their first contribution in #590
• @steve-261370 made their first contribution in #573
• @msiebuhr made their first contribution in #602
• @lukaszwawrzyk made their first contribution in #630
• @aignas made their first contribution in #542

Full Changelog: v1.7.6...v1.8.0

v2.0.0-beta1

Using bzlmod with Bazel 6 or later:

1. Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-beta1")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "f70f07f9d0d6c275d7ec7d3c7f236d9b552ba3205e8f37df9c1125031cf967cc",
    strip_prefix = "rules_oci-2.0.0-beta1",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-beta1/rules_oci-v2.0.0-beta1.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

BREAKING CHANGES

• Uncompressed archives in the tars attribute is no longer compressed when creating the image, this might make images bigger compared to 1.x. Use pkg_tar#compression or tar#compress attribute to compress the layers beforehand.
• Digests of images created 1.x rules_oci will not match 2.x rules_oci, as we are no longer using crane to create the images. However, images should stay the same semantically. You can use diffoci to make sure they are the same semantically!
• Default output of oci_tarball is no longer a tarball, use a filegroup target to get the tarball. See #548
• Bazel 5 is no longer supported.
• oci_tarball is renamed to oci_load to better reflect it's purpose.

SIGNIFICANT CHANGES

• OCIImage action no longer spins an ephemeral registry instance to mutate images locally, making it slightly faster.
• oci_image now supports zstd compression
• Now oci_pull fetches blobs in parallel on Bazel >= 7.1

What's Changed

• fix: propagate transitive inputs by @thesayyn in #646

Full Changelog: v2.0.0-beta0...v2.0.0-beta1

v2.0.0-beta0

Using bzlmod with Bazel 6 or later:

1. Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-beta0")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "20024d18956c5b2feaf99701659e9711f3b97c468411a2e2d2e709dd24f31d90",
    strip_prefix = "rules_oci-2.0.0-beta0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-beta0/rules_oci-v2.0.0-beta0.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

BREAKING CHANGES

• Uncompressed archives in the tars attribute is no longer compressed when creating the image, this might make images bigger compared to 1.x. Use pkg_tar#compression or tar#compress attribute to compress the layers beforehand.
• Digests of images created 1.x rules_oci will not match 2.x rules_oci, as we are no longer using crane to create the images. However, images should stay the same semantically.
• Default output of oci_tarball is no longer a tarball, use a filegroup target to get the tarball. See #548
• Bazel 5 is no longer supported.
• oci_tarball is renamed to oci_load to better reflect it's purpose.

SIGNIFICANT CHANGES

• OCIImage action no longer spins an ephemeral registry instance to mutate images locally, making it slightly faster.
• oci_image now supports zstd compression
• Now oci_pull fetches blobs in parallel on Bazel >= 7.1

What's Changed

• feat: add support for settings volumes by @gzm0 in #632
• refactor: rename oci_tarball to oci_load by @alexeagle in #636
• fix: accumulate image manifests in oci_image_index by @seh in #633
• tarball uses hermetic coreutils by @rickvanprim in #635

New Contributors

• @seh made their first contribution in #633
• @rickvanprim made their first contribution in #635

Full Changelog: v2.0.0-alpha5...v2.0.0-beta0

v2.0.0-alpha5

Using bzlmod with Bazel 6 or later:

1. Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-alpha5")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "768cd23d5fea0235858eecfc8bfaae77a11fe9db9ebb1ac03d31c4b19eb9bc11",
    strip_prefix = "rules_oci-2.0.0-alpha5",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-alpha5/rules_oci-v2.0.0-alpha5.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

• fix: Ignore empty annotations in the jq query by @DolceTriade in #625
• test: add oci_tarball test for sh_test by @thesayyn in #624

New Contributors

• @DolceTriade made their first contribution in #625

Full Changelog: v2.0.0-alpha4...v2.0.0-alpha5

v2.0.0-alpha4

Using bzlmod with Bazel 6 or later:

1. Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-alpha4")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "02df4efc5c7431904a927c1947fc7b6e2eda838b038b15bdf9a15918e7d6c04b",
    strip_prefix = "rules_oci-2.0.0-alpha4",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-alpha4/rules_oci-v2.0.0-alpha4.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

• test: add pinning test by @thesayyn in #618
• chore: cleanup repo and remove some dev deps by @thesayyn in #620
• fix: make oci_tarball work with genrule by @thesayyn in #621

Full Changelog: v2.0.0-alpha3...v2.0.0-alpha4

v2.0.0-alpha3

Using bzlmod with Bazel 6 or later:

1. Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-alpha3")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "63eec71bfc258f6303709159e66a4cbec1fbdd9738a973ebac4813ab20de1561",
    strip_prefix = "rules_oci-2.0.0-alpha3",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-alpha3/rules_oci-v2.0.0-alpha3.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

• fix: return correct extension metadata by @thesayyn in #611
• chore: add --check_direct_dependencies to .bazelrc by @gregmagolan in #615
• fix: make oci_tarball work with disjoint output root by @thesayyn in #614
• Copy files using coreutils cp by @plobsing in #595
• Fix jq: error (at <stdin>:16): Cannot use null (null) as object key error on empty line in labels file by @bozaro in #606
• fix: env vars containing = by @thesayyn in #616

New Contributors

• @plobsing made their first contribution in #595
• @bozaro made their first contribution in #606

Full Changelog: v2.0.0-alpha2...v2.0.0-alpha3

v2.0.0-alpha2

Using bzlmod with Bazel 6 or later:

1. Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.0.0-alpha2")
# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "e96d70faa4bace3e09fdb1d7d1441b838920f491588889ff9a7e2615afca5799",
    strip_prefix = "rules_oci-2.0.0-alpha2",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0-alpha2/rules_oci-v2.0.0-alpha2.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

• example: add dockerfile build by @thesayyn in #570
• refactor: remove curl fallback by @thesayyn in #568
• Use non-blocking download to get image blobs, on Bazel >=7.1.0 by @mortenmj in #601
• fix: add tars into action inputs by @thesayyn in #599
• chore: disable dockerfile example by @thesayyn in #605

Full Changelog: v2.0.0-alpha1...v2.0.0-alpha2