build docker container inside dockerized Jenkins

[Jeeva Chelladhurai]

I run by Jenkins inside a docker container. Now I need to build docker images from this Jenkins instance. Would you please suggest me some options.

--

Jeeva K S Chelladhurai

[nicolas de loof]

When you're running Jenkins in a container don't build on master, always connect a slave. This slave can also be a container. Doing this you'll enforce process isolation.

To run docker commands like 'docker build' the commonly used approach is to bind mount /car/run/docker.sock. that's beer red wings if you just throw away security: build can do anything on host until you add another isolation layer, for sample a LXD container.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAK5CbZXmRA8w4to2zRO01KCz0QJcGQuY0azXLZQ5EBG%3DmDfJfw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[Jeeva Chelladhurai]

currently I am using SSH slaves for building docker images. Is it a recommended practice?

How does Docker slave plugin works? Does function like a slave or piggyback on any of the existing slaves?
https://wiki.jenkins-ci.org/display/JENKINS/Docker+Slaves+Plugin

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CANMVJzk5X%2BMsLrptSGpwCSKXgGKpOLdAEjzRBcfPbHrnsO3vwg%40mail.gmail.com.

For more options, visit https://groups.google.com/d/optout.

[nicolas de loof]

docker-slaves don't follow the classic slave approach, it doesn't use any transport (ssh, jnlp) but the plain docker CLI terminal emulation. 

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAK5CbZUEqY-2FXVWYApHVNMjz_7m%2BdmLyHL7f0U%2BTyMe9b8%3D7g%40mail.gmail.com.

[Jeeva Chelladhurai]

> docker-slaves don't follow the classic slave approach, it doesn't use any transport (ssh, jnlp) but the plain docker CLI terminal emulation.

Does that mean I have to bind mount docker socket to the Jenkins container?

-Jeeva

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CANMVJzmegp%3DN%2BRJF_vVTkM5ghUVw3KQJ7KAx7h%2BN4XrG__q5Gw%40mail.gmail.com.

For more options, visit https://groups.google.com/d/optout.

[nicolas de loof]

to use docker-slaves plugin you'll need docker socket or a DOCKER_HOST url set so master can run docker commands

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAK5CbZWfE7w2mVsfQzbUZtkEwNZk0ffdRiCJo-Sh%3D-L8CFHZ3Q%40mail.gmail.com.