treewide: replace rules_docker with rules_oci
rules_docker is not maintained anymore and recommends migration to
rules_oci
Change-Id: I089f3cf44888b3c3c0baa2c84a319b04b1a7dec4
Reviewed-on: https://review.monogon.dev/c/monogon/+/2712
Tested-by: Jenkins CI
Reviewed-by: Lorenz Brun <lorenz@monogon.tech>
diff --git a/WORKSPACE b/WORKSPACE
index 159c580..41087a0 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -318,28 +318,57 @@
register_toolchains("//:host_python")
-# same for gvisor/rules_docker.
+http_archive(
+ name = "aspect_bazel_lib",
+ sha256 = "bda4a69fa50411b5feef473b423719d88992514d259dadba7d8218a1d02c7883",
+ strip_prefix = "bazel-lib-2.3.0",
+ url = "https://github.com/aspect-build/bazel-lib/releases/download/v2.3.0/bazel-lib-v2.3.0.tar.gz",
+)
+
+load("@aspect_bazel_lib//lib:repositories.bzl", "aspect_bazel_lib_dependencies", "aspect_bazel_lib_register_toolchains")
+
+# Required bazel-lib dependencies
+
+aspect_bazel_lib_dependencies()
+
+# Register bazel-lib toolchains
+
+aspect_bazel_lib_register_toolchains()
http_archive(
- name = "io_bazel_rules_docker",
- sha256 = "b1e80761a8a8243d03ebca8845e9cc1ba6c82ce7c5179ce2b295cd36f7e394bf",
- urls = ["https://github.com/bazelbuild/rules_docker/releases/download/v0.25.0/rules_docker-v0.25.0.tar.gz"],
+ name = "rules_oci",
+ sha256 = "58b7a175ee90c12583afeca388523adf6a4e5a0528f330b41c302b91a4d6fc06",
+ strip_prefix = "rules_oci-1.6.0",
+ url = "https://github.com/bazel-contrib/rules_oci/releases/download/v1.6.0/rules_oci-v1.6.0.tar.gz",
)
-load(
- "@io_bazel_rules_docker//repositories:repositories.bzl",
- container_repositories = "repositories",
+load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")
+
+rules_oci_dependencies()
+
+load("@rules_oci//oci:repositories.bzl", "LATEST_CRANE_VERSION", "oci_register_toolchains")
+
+oci_register_toolchains(
+ name = "oci",
+ crane_version = LATEST_CRANE_VERSION,
+ # Uncommenting the zot toolchain will cause it to be used instead of crane for some tasks.
+ # Note that it does not support docker-format images.
+ # zot_version = LATEST_ZOT_VERSION,
)
-container_repositories()
+# You can pull your base images using oci_pull like this:
+load("@rules_oci//oci:pull.bzl", "oci_pull")
-load(
- "@io_bazel_rules_docker//go:image.bzl",
- go_image_repos = "repositories",
+oci_pull(
+ name = "distroless_base",
+ digest = "sha256:6c1e34e2f084fe6df17b8bceb1416f1e11af0fcdb1cef11ee4ac8ae127cb507c",
+ image = "gcr.io/distroless/base",
+ platforms = [
+ "linux/amd64",
+ "linux/arm64",
+ ],
)
-go_image_repos()
-
# Derived from Mozilla NSS, currently needed for containerd to be able to pull images
http_file(
name = "cacerts",