Lizan Zhou
Lizan Zhou
Yes, I'm proposing a Workgroup for this: https://groups.google.com/forum/#!topic/istio-security/pK0oUikOZuw
Yes this is still on the track. It is currently in a pre-alpha stage along with istio auth policy. Feel free to join security SIG meeting to get development updates.
Related to #90, something we can do is build a image without C++ toolchains (i.e. only bazel and python), for RBE build front end, for RBE jobs all C++ build/linking...
> the other option is to not warm the cache and then mount the caches in the image before running. > > this has the advantage of keeping the image...
@phlax how did you run build docs? In my local box the after the second time the docs build is pretty quick: ``` ci/run_envoy_docker.sh 'ci/do_ci.sh docs' 0.10s user 0.10s system...
@phlax Right, so if you want to make a smaller image, don't warm bazel / pip cache because they are useless when /build is mounted. We don't really care travis...
@gyohuangxin why would you need `docker.io` in the image? We do install docker-ce-cli so if you mount `docker.sock` into container it can talk to it.
@gyohuangxin Seems Salvo is using Bazel as well, according to https://bazel.build/docs/bazel-and-java if you use `remotejdk_11` then you shouldn't need a JDK to be installed locally (in the docker image), that's...
/lgtm api @zuercher for owner review