Skip to content

remove convenience dependencies of docker and buildah#10340

Open
mwrock wants to merge 1 commit intomainfrom
no_docker_buildah
Open

remove convenience dependencies of docker and buildah#10340
mwrock wants to merge 1 commit intomainfrom
no_docker_buildah

Conversation

@mwrock
Copy link
Copy Markdown
Contributor

@mwrock mwrock commented Apr 15, 2026

This removes buildah and docker as runtime deps of the container exporter. We bundle those as a convenience but including this has become burdensome due to the CVEs in their GO ecosystem and not having direct control over them. Any user interested in leveraging docker or buildah is likely going to have these already installed anyways. If they are not installed, the user will get an error message stating that the container engine is missing from the PATH.

Signed-off-by: Matt Wrock <matt@mattwrock.com>
@mwrock mwrock requested a review from a team as a code owner April 15, 2026 21:44
Copilot AI review requested due to automatic review settings April 15, 2026 21:44
@netlify
Copy link
Copy Markdown

netlify bot commented Apr 15, 2026

👷 Deploy Preview for chef-habitat processing.

Name Link
🔨 Latest commit 02e412e
🔍 Latest deploy log https://app.netlify.com/projects/chef-habitat/deploys/69e006cc3fc0bc00085cc804

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR removes Docker/Buildah from the runtime dependencies of the hab-pkg-export-container Habitat package so the exporter no longer bundles those container engines and instead expects them to be available on the host PATH.

Changes:

  • Remove core/buildah and core/docker from the Linux plan’s pkg_deps.
  • Remove core/docker from the Windows plan’s pkg_deps.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
components/pkg-export-container/habitat/plan.sh Drops Docker/Buildah as runtime deps by emptying pkg_deps.
components/pkg-export-container/habitat/plan.ps1 Drops Docker as a runtime dep, leaving only the VC++ redistributable.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants