refactor: remove rules_docker dependency (#512)

Author: alexeagle

BUILD.bazel

@@ -1,6 +1,5 @@
 load("@bazel_gazelle//:def.bzl", "gazelle", "gazelle_binary")
 load("@pypi//:requirements.bzl", "all_whl_requirements")
-load("@rules_python//python:defs.bzl", "py_runtime", "py_runtime_pair")
 load("@rules_python//python/pip_install:requirements.bzl", "compile_pip_requirements")
 load("@rules_python_gazelle_plugin//:def.bzl", "GAZELLE_PYTHON_RUNTIME_DEPS")
 load("@rules_python_gazelle_plugin//manifest:defs.bzl", "gazelle_python_manifest")
@@ -43,24 +42,3 @@ modules_mapping(
     name = "modules_map",
     wheels = all_whl_requirements,
 )
-
-py_runtime(
-    name = "container_py3_runtime",
-    interpreter_path = "/usr/bin/python",
-    python_version = "PY3",
-)
-
-py_runtime_pair(
-    name = "container_py_runtime_pair",
-    py2_runtime = None,
-    py3_runtime = ":container_py3_runtime",
-)
-
-toolchain(
-    name = "container_py_toolchain",
-    exec_compatible_with = [
-        "@io_bazel_rules_docker//platforms:run_in_container",
-    ],
-    toolchain = ":container_py_runtime_pair",
-    toolchain_type = "@bazel_tools//tools/python:toolchain_type",
-)

MODULE.bazel

@@ -82,3 +82,20 @@ crate.from_cargo(
     ],
 )
 use_repo(crate, "crate_index")
+
+# For building test images with py_image_layer
+bazel_dep(name = "container_structure_test", version = "1.19.1", dev_dependency = True)
+bazel_dep(name = "rules_oci", version = "2.0.1", dev_dependency = True)
+
+oci = use_extension("@rules_oci//oci:extensions.bzl", "oci", dev_dependency = True)
+oci.pull(
+    name = "ubuntu",
+    digest = "sha256:80dd3c3b9c6cecb9f1667e9290b3bc61b78c2678c02cbdae5f0fea92cc6734ab",
+    image = "ubuntu",
+    platforms = [
+        "linux/arm64/v8",
+        "linux/amd64",
+    ],
+    tag = "latest",
+)
+use_repo(oci, "ubuntu", "ubuntu_linux_amd64", "ubuntu_linux_arm64_v8")

WORKSPACE

@@ -19,9 +19,6 @@ load("//py:toolchains.bzl", "rules_py_toolchains")
 
 rules_py_toolchains()
 
-# Load the Python toolchain for rules_docker
-register_toolchains("//:container_py_toolchain")
-
 load("@rules_python//python:repositories.bzl", "py_repositories", "python_register_toolchains")
 
 python_register_toolchains(
@@ -139,22 +136,6 @@ load("@bazel_skylib_gazelle_plugin//:setup.bzl", "bazel_skylib_gazelle_plugin_se
 
 bazel_skylib_gazelle_plugin_setup(register_go_toolchains = False)
 
-############################################
-# rules_docker dependencies for containers
-load(
-    "@io_bazel_rules_docker//repositories:repositories.bzl",
-    container_repositories = "repositories",
-)
-
-container_repositories()
-
-load(
-    "@io_bazel_rules_docker//python3:image.bzl",
-    _py_image_repos = "repositories",
-)
-
-_py_image_repos()
-
 ############################################
 # rules_rust dependencies for building tools
 load("@rules_rust//rust:repositories.bzl", "rules_rust_dependencies", "rust_register_toolchains", "rust_repository_set")
@@ -306,3 +287,29 @@ crates_repository(
 load("@crate_index//:defs.bzl", "crate_repositories")
 
 crate_repositories()
+
+load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")
+
+rules_oci_dependencies()
+
+load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")
+
+oci_register_toolchains(name = "oci")
+
+# You can pull your base images using oci_pull like this:
+load("@rules_oci//oci:pull.bzl", "oci_pull")
+
+oci_pull(
+    name = "ubuntu",
+    digest = "sha256:80dd3c3b9c6cecb9f1667e9290b3bc61b78c2678c02cbdae5f0fea92cc6734ab",
+    image = "ubuntu",
+    platforms = [
+        "linux/arm64/v8",
+        "linux/amd64",
+    ],
+    tag = "latest",
+)
+
+load("@container_structure_test//:repositories.bzl", "container_structure_test_register_toolchain")
+
+container_structure_test_register_toolchain(name = "cst")

internal_deps.bzl

@@ -78,20 +78,27 @@ def rules_py_internal_deps():
         ],
     )
 
-    http_archive(
-        name = "io_bazel_rules_docker",
-        sha256 = "9d41cbe09688d4de137b19091f162de05be9a629a4355bfc1a993f378231730a",
-        strip_prefix = "rules_docker-3040e1fd74659a52d1cdaff81359f57ee0e2bb41",
-        urls = ["https://github.com/bazelbuild/rules_docker/archive/3040e1fd74659a52d1cdaff81359f57ee0e2bb41.zip"],
-    )
-
     http_archive(
         name = "rules_python_gazelle_plugin",
         sha256 = "c68bdc4fbec25de5b5493b8819cfc877c4ea299c0dcb15c244c5a00208cde311",
         strip_prefix = "rules_python-0.31.0/gazelle",
         url = "https://github.com/bazelbuild/rules_python/releases/download/0.31.0/rules_python-0.31.0.tar.gz",
     )
 
+    http_archive(
+        name = "rules_oci",
+        sha256 = "1bd16e455278d523f01326e0c3964cd64d7840a7e99cdd6e2617e59f698f3504",
+        strip_prefix = "rules_oci-2.2.0",
+        url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.2.0/rules_oci-v2.2.0.tar.gz",
+    )
+
+    http_archive(
+        name = "container_structure_test",
+        integrity = "sha256-TLs4LT1+3JcSn3n4MZbJXmAG2QY9ntuzOiMRupNyrTk=",
+        strip_prefix = "container-structure-test-1.19.3",
+        url = "https://github.com/GoogleContainerTools/container-structure-test/archive/refs/tags/v1.19.3.zip",
+    )
+
     http_archive(
         name = "rules_rust",
         integrity = "sha256-heIBNyerJvsiq9/+SyrAwnotW2KWFnumPY9uExQPUfk=",

py/tests/containers/BUILD.bazel

@@ -10,7 +10,7 @@ py_library(
     # This library contributes to the container test, testing we can pull in and use a library from another
     # package in the repo.
     visibility = [
-        "//py/tests/containers:__pkg__",
         "//py/tests/internal-deps:__pkg__",
+        "//py/tests/py_image_layer:__pkg__",
     ],
 )

py/tests/containers/branding/BUILD.bazel

@@ -1,3 +1,5 @@
+load("@container_structure_test//:defs.bzl", "container_structure_test")
+load("@rules_oci//oci:defs.bzl", "oci_image", "oci_load")
 load("//py:defs.bzl", "py_binary", "py_image_layer")
 load("asserts.bzl", "assert_tar_listing")
 
@@ -9,10 +11,15 @@ platform(
     ],
 )
 
-# Case 1: Basic usage
 py_binary(
     name = "my_app_bin",
-    srcs = ["main.py"],
+    srcs = ["__main__.py"],
+    tags = ["manual"],
+    deps = [
+        "//py/tests/internal-deps/adder",
+        "//py/tests/py_image_layer/branding",
+        "@pypi_colorama//:pkg",
+    ],
 )
 
 py_image_layer(
@@ -26,3 +33,26 @@ assert_tar_listing(
     actual = [":my_app_layers"],
     expected = ":my_app_layers.listing",
 )
+
+oci_image(
+    name = "image",
+    # This is defined by an oci.pull() call in /MODULE.bazel
+    base = "@ubuntu",
+    entrypoint = ["/{}/my_app_bin".format(package_name())],
+    tars = [":my_app_layers"],
+)
+
+# To build the image and load it into it into a local runtime:
+# $ bazel run //py/tests/py_image_layer:image_load
+# $ docker run --rm gcr.io/oci_python_hello_world:latest
+oci_load(
+    name = "image_load",
+    image = ":image",
+    repo_tags = ["gcr.io/oci_python_hello_world:latest"],
+)
+
+container_structure_test(
+    name = "py_image_test",
+    configs = ["py_image_test.yaml"],
+    image = ":image",
+)