说明

1. 国内网络不建议使用kaniko构建（https://blog.51cto.com/zhangxueliang/5073004）

配置文件

build-job:
  stage: build
  image:
    name: changingai/kaniko-executor
    entrypoint: [ "" ]
  before_script:
    - export IMAGE_TAG="registry.cn-beijing.aliyuncs.com/xxx/spider:$CI_COMMIT_SHORT_SHA"
  script:
    - mkdir -p /kaniko/.docker
    - echo "{\"auths\":{\"${CI_REGISTRY}\":{\"auth\":\"$(printf "%s:%s" "${CI_REGISTRY_USER}" "${CI_REGISTRY_PASSWORD}" | base64 | tr -d '\n')\"},\"registry.cn-beijing.aliyuncs.com\":{\"auth\":\"$(printf "%s:%s" username@qq.com password | base64 | tr -d '\n')\"}}}" > /kaniko/.docker/config.json
    - /kaniko/executor --context "${CI_PROJECT_DIR}" --dockerfile "${CI_PROJECT_DIR}/Dockerfile" --destination "${IMAGE_TAG}" --build-arg "CI_JOB_TOKEN=${CI_JOB_TOKEN}"
    - echo "Docker Push Success, IMAGE_TAG :${IMAGE_TAG}"

参考

• https://blog.51cto.com/zhangxueliang/5073004 (opens new window)
• 一文带你玩转Kaniko从此不用docker build (opens new window)
• 使用 kaniko 构建 Docker 镜像 (opens new window)
• Dependency Proxy (opens new window)