Build images with buildkit for deterministic hashes

Author: DomAyre

src/confcom/azext_confcom/tests/latest/test_confcom_containers_from_image.py

@@ -4,8 +4,9 @@
 # --------------------------------------------------------------------------------------------
 
 import json
+import os
+import subprocess
 import tempfile
-import docker
 import pytest
 import portalocker
 
@@ -23,18 +24,27 @@
 SAMPLES_ROOT = CONFCOM_DIR / "samples" / "images"
 DOCKER_LOCK = Path(tempfile.gettempdir()) / "confcom-docker.lock"
 
-
 @pytest.fixture(scope="session", autouse=True)
 def build_test_containers():
 
-    docker_client = docker.from_env()
+    env = os.environ.copy()
+    env["DOCKER_BUILDKIT"] = "1"
+
     with portalocker.Lock(DOCKER_LOCK.as_posix(), timeout=20):
         for image_sample in SAMPLES_ROOT.iterdir():
-            docker_client.images.build(
-                path=str(image_sample),
-                tag=f"confcom_test_{image_sample.name}",
-                quiet=True,
-                rm=True,
+            subprocess.run(
+                [
+                    "docker",
+                    "build",
+                    str(image_sample),
+                    "-t",
+                    f"confcom_test_{image_sample.name}",
+                    "--quiet",
+                ],
+                env=env,
+                stdout=subprocess.DEVNULL,
+                stderr=subprocess.DEVNULL,
+                check=True,
             )
 
     yield
@@ -69,4 +79,4 @@ def test_containers_from_image(sample_directory: str, platform: str):
         expected_container_def,
         ignore_order=True,
     )
-    assert diff == {}, diff
+    assert diff == {}, diff

src/confcom/samples/images/working_dir/aci_container.inc.rego

@@ -3,7 +3,7 @@
   "name": "confcom_test_working_dir",
   "layers": [
     "8b4664979ffe3c5188efbbbb30e31716c03bfe880f15f455be0fc3beb4741de9",
-    "eff9550216100f194b7f04d12ae70e5511ffd7360eec6b947197176701397e60"
+    "1c4128b7270b18b052aff3f68a5611873057aa0b9ce3acfbf273494e67c63254"
   ],
   "mounts": [
     {