Google Cloud Platform Blog: Introducing kaniko: Build container images in Kubernetes and Google Container Builder without privileges
First posted by vonc april 2018.
The kaniko executor then fetches and extracts the base-image file system to root (the base image is the image in the FROM line of the Dockerfile). It executes each command in order, and takes a snapshot of the file system after each command. via Pocket
Building images from a standard Dockerfile typically relies upon interactive access to a Docker daemon, which requires root access on your machine to run. This…