--- kind: ConfigMap apiVersion: v1 metadata: name: code data: build.sh: | #!/bin/sh set -x export BUILDKITD_FLAGS="--root=/storage" buildctl-daemonless.sh \ build \ --frontend dockerfile.v0 \ --local context=/code \ --local dockerfile=/code Dockerfile: | FROM alpine RUN apk add gcc --- # Based on https://github.com/moby/buildkit/blob/master/examples/kubernetes/job.userns.yaml apiVersion: v1 kind: Pod metadata: name: buildkitd # see buildkit/docs/rootless.md for caveats of rootless mode spec: terminationGracePeriodSeconds: 1 restartPolicy: Never hostUsers: false containers: - name: buildkitd image: registry.cern.ch/docker.io/moby/buildkit:v0.23.1 command: ["/bin/sh", "/code/build.sh"] securityContext: privileged: true volumeMounts: - name: storage mountPath: /storage - name: code mountPath: /code volumes: - name: storage emptyDir: sizeLimit: 10Gi - name: code configMap: name: code