Open Source Summit North America 2018

An age old problem, especially in large enterprises, are piqued sysadmins who rightfully do not trust developers and won't give them root. Another age old problem of containers is: how do we build root filesystems to run? A smooth experience for building rootfses is one of the things that Docker made a great experience, but it uses a privileged daemon. And yet, the developers have to build product binaries on systems that are provided by said sysadmins.

Enter stacker, a tool which can build OCI images without privilege, using user namespaces via LXC, without any extra trickery. In this talk Tycho will give a brief introduction to stacker's declarative yaml format for building container images. He will also give a basic overview of the guts of stacker and how it accomplishes its goals.