op.yml

description: Builds an open container initiative (OCI) image
name: github.com/opspec-pkgs/opencontainers.image.build
inputs:
  authConfig:
    object:
      default: {}
      description: |
        Auth config for image registries; same format as a docker config.json

        Note that when using docker and a credential helper (e.g. the default with macOS docker desktop) ~/.docker/config.json will not directly contain credentials. If you need to provide auth in this case, you'll need to generate a configuration file with base64 encoded credentials. See https://github.com/docker/for-mac/issues/4100 for more discussion on the format of this file.
      constraints:
        properties:
          auths:
            type: object
            description: |
              Keys are registry hostname/urls and values contain authentication information
            additionalProperties:
              type: object
              properties:
                auth:
                  description: Base64 encoded string of the format `{username}:{password}`
                  type: string
                  format: base64
  cacheDir:
    dir:
      default: /default_cache
      description: directory used to cache images/layers across runs. Must be formatted as an [image-layout](https://github.com/opencontainers/image-spec/blob/v1.0.1/image-layout.md)
  context:
    dir:
      description: context for build
      default: /default_context
  contextIgnore:
    file:
      description: context ignore rules in the format of a .gitignore/.dockerignore
      default: /default_context_ignore
  instructions:
    file:
      description: build instructions in the format of a Containerfile/Dockerfile
  platformsCsv:
    string:
      default: ''
      description: |
        Platforms the image will be built for in the form of comma separated [platform specifiers](https://github.com/containerd/containerd/blob/8686ededfc90076914c5238eb96c883ea093a8ba/platforms/platforms.go#L63)
        
        e.g. 'linux/amd64,linux/arm64'

outputs:
  image:
    dir:
      description: image in form of [v1.0.1 OCI (Open Container Initiative) `image-layout`](https://github.com/opencontainers/image-spec/blob/v1.0.1/image-layout.md)
run:
  serial:
  - op:
      ref: github.com/opspec-pkgs/docker.config.clean#1.1.0
      inputs:
        dockerConfig: $(authConfig)
      outputs:
        dockerConfigCleaned: $(authConfig)
  - container:
      cmd:
        - sh
        - -ce
        - >
          buildctl-daemonless.sh
          build
          --frontend dockerfile.v0
          --local context=/buildContext
          --local dockerfile=/
          --output type=oci,tar=false,dest=/image
          --import-cache type=local,src=/cacheDir
          --export-cache type=local,dest=/cacheDir,mode=max
          --opt platform=$(platformsCsv)
      dirs:
        /buildContext: $(context)
        /cacheDir: $(cacheDir)
        /image: $(image)
      files:
        /root/.docker/config.json: $(authConfig)
        /Dockerfile: $(instructions)
        /Dockerfile.dockerignore: $(contextIgnore)
      image:
        ref: moby/buildkit:master
version: 2.0.0