Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.

The 'docker-credential-gcr' binary in Container-Optimized OS should be portable

Hi,

Couldn't find another place to ask about this, apologies if this isn't the right spot.

Is it possible to have a statically-linked 'docker-credential-gcr' binary Container-Optimized OS images? The ones build on GitHub are, but the ones included in COS images are dynamically-linked, hence not portable.

Use-case:

We are doing 'Docker-in-Docker' on Container-Optimized OS. The images that need to be pulled from inside our container are on Artifact Registry, hence we are using ‘docker-credential-gcr’, which we volume mount to our container to pull Artifact Registry credentials from the metadata server without having to store them. Sadly the ‘docker-credential-gcr’ binary on the COS image is dynamically linked so it most likely won't work in another environment/container because it won’t necessarily have the right libraries (glibc etc).

We could install it ourselves, but we would rather depend solely on the COS image that is regularly updated and patched.

Thanks!

0 3 682