[Request] Docker Engine Extension

[ZachThill]

Hello,
Is there anyway that docker could be added as an image extension? This would help many users that run CI/CD pipelines on top of kubernetes that currently use the underlying hosts /var/run/docker.sock to build docker images. I know using the host /var/run/docker.sock is an inherent security issue, but supporting this feature will mitigate users from having to rewrite all their codebases just to use Talos, and retain the functionality of building multi-arch images using buildx.

With this in mind, users could update their repos and pipelines to use more secure build tools like Kaniko, Buildah, or DinD gradually instead of creating an entire paradigm shift the moment they start using Talos.

[smira]

I'm not sure what exactly are you asking about, and why using Talos implies that you lose docker.

You can run dockerd via dind (docker-in-docker) image as a sidecar container in a pod, mounting the docker socket to all containers which need it.

Simply look for running dockerd in Kubernetes, it has nothing specific to Talos.

[smira]

Kubernetes support for running on top of dockerd was removed long time ago, so you can't find any modern Kubernetes vanilla distro which would actually have dockerd used for Kubernetes. Modern Kubernetes uses CRI API, and it can run on top of containerd or some other CRI implementation.

CRI is used to run Kubernetes workloads, and it should not run anything else which is not managed by Kubernetes.

We ourselves run Talos CI by running dockerd as sidercar container when needed.