Building containers without Docker

Image Building

Chainguard's approach to container image building is both innovative and efficient. Jason Hall explains that they utilize Terraform to manage and configure images, allowing for seamless deployment and testing. This process involves building images with discrete packages, which are then tested before release 1. By focusing on minimalism, they ensure that images contain only the necessary components, reducing size and complexity 2.

We had to sort of like go back to square one and really think like, what are we trying to do here?

--- Jason Hall

This method not only streamlines the build process but also enhances security by minimizing potential vulnerabilities.

   

Terraform Shift

The decision to use Terraform over Dockerfiles marks a significant shift in Chainguard's container architecture. Jason shares that Terraform's declarative nature and ability to manage infrastructure as code made it an ideal choice for their needs 3. They developed a Terraform provider to build images, which integrates seamlessly with their existing infrastructure, allowing for efficient orchestration and deployment 4.

Terraform is really good at declaratively sort of mapping out the change you want to make and then show you that plan.

--- Jason Hall

This approach not only simplifies the release process but also reduces the risk of human error, making it a robust solution for container management.