Saga of building multi-arch OCI containers for modern apps - Andrii Soldatenko

Описание: Have you ever seen “exec /entrypoint.sh: exec format error” error message on your server while running any container? If so - this talk is for you.
In this Saga, I’ll walk you through the real story of how we succeeded in building a mutli-arch OCI container. We will start by explaining a multi-arch container, why it exists, and which problem we can solve using it. I gladly will share lessons we learned and spent during debugging and reading source code of all available tooling for build containers, including docker, podman, and buildah and sometimes the easy way isn’t so easy.
Also, from this talk, you will learn how to implement a production-ready pipeline using open source tools (podman, buildah) and Github actions. I’ll show a brief overview of existing container images tooling. Also, why does each tool exist, and why can’t we just use a single tool to solve all problems?
We’ll cover fundamental knowledge for terminology, where one of the problems exists, how to improve it.

Outline:
Intro: What is a multi-arch image? 2min
Creating multi-arch images the easy way. 3 min
Sometimes the easy way isn't so easy. 2 min
Building images in parallel or one by one. 4 min
What is image manifest, and what is image index? 2 min
Creating multi-arch images using a single manifest. 4 min
What are image annotations/labels? Why and when must we annotate images and/or image manifests? More importantly, what is the difference ? 2 min
Building the single-architecture images. 3 min
Combining single-arch images into a single multi-arch image 3 min
Conclusion: Image registries, signing images, and security image scanners. 5 min

About the speaker:
My name is Andrii Soldatenko. I am a sr. software engineer originally from Ukraine and I am currently living in Austria. Public speaker (ContainersDays, KCD, FOSDEM, GoDays, PyCons) and OSS contributor (Apache Airflow, Golang, OpenAPI, docker). I am a big fan of debuggers, Neovim, Rust
and I have a blog at http://asoldatenko.org.