This repository contains a set of builders and buildpacks designed to run on Google Cloud's container platforms: Cloud Run, GKE, Anthos, and Compute Engine running Container-Optimized OS. They are also used as the build system for App Engine and Cloud Functions. They are 100% compatible with Cloud Native Buildpacks.
-
Clone the sample apps:
git clone https://github.com/GoogleCloudPlatform/buildpack-samples.git cd buildpack-samples
-
Pick a sample and build it, for instance with
sample-go
:cd sample-go pack build --builder gcr.io/buildpacks/builder:v1 sample-go
-
Run it with docker, like:
docker run --rm -p 8080:8080 sample-go
-
See it in action
curl localhost:8080 # Output: hello, world
See the Usage section for more details.
To read more, see Buildpack project documentation.
- Builder A container image that contains buildpacks and detection order in which builds are executed.
- Buildpack An executable that "inspects your app source code and formulates a plan to build and run your application".
- Buildpack Group Several buildpacks which together provide support for a specific language or framework.
- Run Image The container image that serves as the base for the built application.
This is a general purpose builder that creates container images designed to run on most platforms (e.g. Kubernetes / Anthos, Knative / Cloud Run, Container OS, etc), and should be used by the majority of users. The builder attempts to autodetect the language of your source code, and can also build functions compatible with the Google Cloud Function Framework by setting the GOOGLE_FUNCTION_TARGET env var.
The general builder is hosted at gcr.io/buildpacks/builder:v1
.
Supported languages include:
Runtime | App Support | Function Support |
---|---|---|
Go 1.10 + | ✓ | ✓ |
Node.js 10 + | ✓ | ✓ |
Python 3.7 + | ✓ | ✓ |
Java 8 + | ✓ | ✓ (11 + only) |
.NET Core 3.1 + | ✓ | ✓ |
Ruby 2.6 + | ✓ | ✓ |
PHP 7.4 + | ✓ |
For Ruby functions, the entrypoint has to be set manually (as seen in the sample apps).
These builders create container images designed to run on Google Cloud's App Engine and Functions services. Most of the buildpacks are identical to those in the general builder.
Compared to the general builder, there are two primary differences. First, there are additional buildpacks which add transformations specific to each service. Second, in order to optimize execution speed, each language has a separate builder.
The Google Cloud Buildpacks project provides builder images suitable for use with pack, kpack, tekton, skaffold, and other tools that support the Buildpacks v3 specification.
The following command invokes pack to
apply the general builder to build the application in the current directory, and then
containerizes the result into a local container image named <app-name>
.
pack build <app-name> --builder gcr.io/buildpacks/builder:v1
The application you built can then be executed locally:
docker run --rm -p 8080:8080 <app-name>
You can set Cloud Buildpacks as your default:
pack set-default-builder gcr.io/buildpacks/builder:v1
And you can publish the built image to the cloud directly with pack:
pack build --publish gcr.io/YOUR_PROJECT_ID/APP_NAME
The same commands as above can be used to build a function image. The following command builds
a function called myFunction
and produces a local image named <fn-name>
.
pack build <fn-name> --builder gcr.io/buildpacks/builder:v1 --env GOOGLE_FUNCTION_TARGET=myFunction
If your application requires additional system packages to be installed and available when it runs, you can accomplish this by customizing the run container image.
cat > run.Dockerfile << EOF
FROM gcr.io/buildpacks/gcp/run:v1
USER root
RUN apt-get update && apt-get install -y --no-install-recommends \
imagemagick && \
apt-get clean && \
rm -rf /var/lib/apt/lists/*
USER cnb
EOF
docker build -t my-run-image -f run.Dockerfile .
To use the custom run image with pack:
pack build my-app --builder gcr.io/buildpacks/builder:v1 --run-image my-run-image
If you require certain packages for building your application, create a custom builder image based on the base builder:
cat > builder.Dockerfile << EOF
FROM gcr.io/buildpacks/builder:v1
USER root
RUN apt-get update && apt-get install -y --no-install-recommends \
subversion && \
apt-get clean && \
rm -rf /var/lib/apt/lists/*
USER cnb
EOF
docker build -t my-builder-image -f builder.Dockerfile .
To use the custom builder with pack:
pack build my-app --builder my-builder-image
Google Cloud Buildpacks support configuration using a set of environment
variables that are set at build time. For example, when using pack
:
pack build my-app --builder gcr.io/buildpacks/builder:v1 --env GOOGLE_ENTRYPOINT="gunicorn -p :8080 main:app"
The following confguration options are supported across runtimes:
GOOGLE_ENTRYPOINT
- Specifies the command which is run when the container is executed; equivalent to entrypoint in a Dockerfile.
- See the default entrypoint behavior section for default behavior.
- Example:
gunicorn -p :8080 main:app
for Python.java -jar target/myjar.jar
for Java.php -S 0.0.0.0:8080 index.php
for PHP.
GOOGLE_RUNTIME
- If specified, forces the runtime to opt-in. If the runtime buildpack appears in multiple groups, the first group will be chosen, consistent with the buildpack specification.
- (Only applicable to buildpacks install language runtime or toolchain.)
- Example:
nodejs
will cause the nodejs/runtime buildpack to opt-in.
GOOGLE_RUNTIME_VERSION
- If specified, overrides the runtime version to install. In .NET, overrides the .NET SDK version to install.
- (Only applicable to buildpacks install language runtime or toolchain.)
- Example:
13.7.0
for Node.js,1.14.1
for Go,8
for Java,3.1.301
for .NET.
GOOGLE_BUILDABLE
- Specifies path to a buildable unit.
- (Only applicable to .NET, Dart and Go languages.)
- Example:
./maindir
for Go will build the package rooted at maindir.
GOOGLE_BUILD_ARGS
- Appends arguments to build command.
- (Currently only applicable to Java Maven and Gradle and .NET)
- Example:
-Pprod
for a Java will runmvn clean package ... -Pprod
.
GOOGLE_DEVMODE
- Enables the development mode buildpacks. This is used by Skaffold to enable live local development where changes to your source code trigger automatic container rebuilds. To use, install Skaffold and run
skaffold dev
. - Example:
true
,True
,1
will enable development mode.
- Enables the development mode buildpacks. This is used by Skaffold to enable live local development where changes to your source code trigger automatic container rebuilds. To use, install Skaffold and run
GOOGLE_CLEAR_SOURCE
- Clears source after the application is built. If the application depends on static files, such as Go templates, setting this variable may cause the application to misbehave.
- (Only applicable to Go apps and Java apps & functions.)
- Example:
true
,True
,1
will clear the source.
Certain buildpacks support other environment variables:
For use with source code built around the Google Cloud Functions Framework. See the contract for more information about the configuration options.
GOOGLE_FUNCTION_TARGET
- Specifies the name of the exported function to be invoked in response to requests.
- Example:
myFunction
will cause the Functions Framework to invoke the function of the same name.
GOOGLE_FUNCTION_SIGNATURE_TYPE
- Specifies the signature used by the function.
- Example:
http
,event
, orcloudevent
.
GOOGLE_FUNCTION_SOURCE
- Specifies the name of the directory or file containing the function source, depending on the language.
- (Only applicable to some languages, please see the language-specific documentation.)
- Example:
function.py
for Python.
GOOGLE_GOGCFLAGS
- Passed to
go build
andgo run
as-gcflags value
with no interpretation. - Example:
all=-N -l
enables race condition analysis and changes how source filepaths are recorded in the binary.
- Passed to
GOOGLE_GOLDFLAGS
- Passed to
go build
andgo run
as-ldflags value
with no interpretation. - Example:
-s -w
is used to strip and reduce binary size.
- Passed to
Buildpacks support language-idiomatic configuration through environment
variables. These environment variables should be specified without a
GOOGLE_
prefix.
- Go
GO<key>
, see documentation.- Example:
GOFLAGS=-flag=value
passes-flag=value
togo
commands.
- Example:
- Java
MAVEN_OPTS
, see documentation.- Example:
MAVEN_OPTS=-Xms256m -Xmx512m
passes these flags to the JVM running Maven. - Example:
MAVEN_OPTS=--add-opens java.base/java.lang=ALL-UNNAMED
to suppress "illegal reflective access" warnings from Maven.
- Example:
GRADLE_OPTS
, see documentation.- Example:
GRADLE_OPTS=-Xms256m -Xmx512m
passes these flags to the JVM running Gradle.
- Example:
- Using the Google Maven Central mirror
- Mirror URLs can be found here.
- For Maven: Using Mirrors for Repositories
-
Create a copy of the settings.xml from the default location of ~/.m2/settings.xml to inside your application source directory and specify
GOOGLE_BUILD_ARGS=--settings <path/to/settings>
. -
Note: <path/to/settings> is relative to the source directory.
-
Example
settings.xml
:<settings> <mirrors> <mirror> <id>google-maven-central</id> <name>GCS Maven Central mirror</name> <url>https://maven-central.storage-download.googleapis.com/maven2/</url> <mirrorOf>central</mirrorOf> </mirror> </mirrors> </settings>
-
- For Gradle: Declaring Repositories
-
Example
build.gradle
entry:repositories { maven { url "https://maven-central.storage-download.googleapis.com/maven2/" } }
-
- The Maven buildpack supports the Polyglot extensions for Maven.
The Polyglot extensions are enabled by placing a suitably-configured
.mvn/extensions.xml
in your application source directory.
- Node.js
NPM_CONFIG_<key>
, see documentation.- Example:
NPM_CONFIG_FLAG=value
passes-flag=value
tonpm
commands.
- Example:
- PHP
COMPOSER_<key>
, see documentation.- Example:
COMPOSER_PROCESS_TIMEOUT=60
sets the timeout forcomposer
commands.
- Example:
- Python
PIP_<key>
, see documentation.- Example:
PIP_DEFAULT_TIMEOUT=60
sets--default-timeout=60
forpip
commands.
- Example:
- Ruby
BUNDLE_<key>
, see documentation.- Example:
BUNDLE_TIMEOUT=60
sets--timeout=60
forbundle
commands.
- Example:
- If
GOOGLE_ENTRYPOINT
is specified, use:/bin/bash -c <entrypoint>
- If
Procfile
exists at the application root and contains aweb
process, use:/bin/bash -c <web process>
- Otherwise, use language-specific behavior below.
- .NET
- Search the output directory for a binary or a library with the same name as the project file (e.g. app.csproj --> app or app.dll).
/bin/bash -c exec <project name>
/bin/bash -c dotnet <project name>.dll
- Parse the project file for an
AssemblyName
field and search for the associated binary or library file in the output directory./bin/bash -c exec <assembly name>
/bin/bash -c dotnet <assembly name>.dll
- Search the output directory for a binary or a library with the same name as the project file (e.g. app.csproj --> app or app.dll).
- Go
- Use
<layer/path>/main
, wheremain
is the compiled binary. - The
main
binary is also available on$PATH
.
- Use
- Java
- Use the first executable .jar file found in the following directories, in order:
<workspace>/target
<workspace>/build
<workspace>/build/libs
<workspace>
- If exactly one executable .jar file is found, use:
java -jar <executable.jar>
- For "exploded jars", e.g. Spring Boot, find the
Main-Class
entry from the manifest and use:java -classpath . <class>
- Use the first executable .jar file found in the following directories, in order:
- Node.js
- Use
npm start
; see the npm documentation. - A custom build step are supported by declaring an npm script called
gcp-build
.
- Use
- PHP
- Starts the Nginx web server configured to execute PHP with PHP-FPM and uses
<workspace>
as root andindex.php
as the index.
- Starts the Nginx web server configured to execute PHP with PHP-FPM and uses
- Python
- No default entrypoint logic.
- Ruby
- No default entrypoint logic.
- General:
- Caching is project-specific, not cross-project. Dependencies, such as the JDK, cannot be shared across projects and need to be redownloaded on first build.
- Built images have their creation time set to 40 years in the past. See reproducible builds.
- Node:
- Existing
node_modules
directory is deleted and dependencies reinstalled using package.json and a lockfile if present.
- Existing
- PHP
- PHP buildpacks doesn't support installing ad-hoc extensions at build time.
- Python
- Private dependencies must be vendored. The build does not have access to private repository credentials and cannot pull dependencies at build time. Please see the App Engine instructions.
- Go
-
Private dependencies must be vendored. The build does not have access to private repository credentials and cannot pull dependencies at build time. Please see the App Engine instructions
-
(general builder only) Applications without a go.mod cannot have sub-packages.
-
Go 1.14 triggers a kernel bug in some versions of the Linux kernel (versions other than 5.3.15+, 5.4.2+, or 5.5+). If using an affected version, please set the following in your
/etc/docker/daemon.json
:"default-ulimits": { "memlock": { "Name": "memlock", "Soft": -1, "Hard": -1 } },
-
The buildpack builder can be invoked as a step of a Google Cloud Build process, for instance by using the pack builder image provided by the Skaffold project:
steps:
- name: 'gcr.io/k8s-skaffold/pack'
entrypoint: 'pack'
args: ['build', '--builder=gcr.io/buildpacks/builder', '--publish', 'gcr.io/$PROJECT_ID/sample-go:$COMMIT_SHA']
There is also support for invoking this builder directly using gcloud
:
gcloud builds submit --pack image=gcr.io/my-project/imageg
This command will send the local source directory to Cloud Build, invoke this buildpack builder on it, and publish the resulting image to Google Container Registry.
Google Cloud Buildpacks are only officially supported when used with Google Cloud products. Customers of Google Cloud can use standard support channels for help using buildpacks with Google Cloud Products.
For information on reporting security vulnerabilities, see SECURITY.md.
We welcome contributions! Here's how you can contribute:
- Browse issues or file an issue
- Contribute:
- Read the contributing guide before starting work on an issue
- Try to fix good first issues
- Help out on issues that need help
- Join in on discussion issues
See LICENSE.