Let Lima install nerdctl instead of bundling it in the ISO

[jandubois]

That's how it works for all other distros, and it allows updating of nerdctl without making a new alpine-lima release.

At the very least Lima should be able to update nerdctl to a newer version, even if the ISO already includes an older version.

[AkihiroSuda]

The following binaries are dynamically linked with glibc (as of nerdctl-full v0.22.0)

• buildg Request: make binary artifacts to be statically linked ktock/buildg#55
• containerd nerdctl-full: compile containerd and runc as static binaries containerd/nerdctl#266
• containerd-stargz-grpc
• ctr nerdctl-full: compile containerd and runc as static binaries containerd/nerdctl#266
• ctr-remote
• ipfs

[jandubois]

The following binaries are dynamically linked with glibc (as of nerdctl-full v0.22.0)

That's ok; the only binaries from the nerdctl tarball we install right now are buildctl, buildkitd, and nerdctl:

alpine-lima/genapkovl-lima.sh

Lines 241 to 244 in 034d474

	for bin in buildctl buildkitd nerdctl; do
	cp "${tmp}/nerdctl/bin/${bin}" "${tmp}/usr/local/bin/${bin}"
	chmod u+s "${tmp}/usr/local/bin/${bin}"
	done

So just being able to upgrade these 3 via lima would already be an advantage.

[afbjorklund]

All 3 binaries are now available in Alpine 3.17, from buildctl and buildkit <sic> and nerdctl apks.

Will make a separate PR to make the setuid chmod optional, to require using sudo with nerdctl...

[afbjorklund]

(1/6) Installing libseccomp (2.5.4-r0)
(2/6) Installing runc (1.1.4-r4)
(3/6) Installing containerd (1.6.12-r1)
(4/6) Installing containerd-openrc (1.6.12-r1)
(5/6) Installing cni-plugins (1.1.1-r9)
(6/6) Installing nerdctl (1.0.0-r2)

(1/1) Installing buildctl (0.10.6-r1)
(1/2) Installing buildkit (0.10.6-r1)
(2/2) Installing buildkit-openrc (0.10.6-r1)

lima-std:~$ sudo /etc/init.d/containerd start
 * /var/log/containerd.log: creating file
 * Starting Container Daemon ...                            [ ok ]
lima-std:~$ sudo /etc/init.d/buildkitd start
 * Caching service dependencies ... 
 * /var/lib/buildkit: creating directory
 * /var/log/buildkitd.log: creating file
 * Starting buildkitd ...                                   [ ok ]

lima-std:~$ nerdctl version
WARN[0000] environment variable XDG_RUNTIME_DIR is not set, see https://rootlesscontaine.rs/getting-started/common/login/ 
WARN[0000] environment variable XDG_RUNTIME_DIR is not set, see https://rootlesscontaine.rs/getting-started/common/login/ 
WARN[0000] environment variable XDG_RUNTIME_DIR is not set, see https://rootlesscontaine.rs/getting-started/common/login/ 
FATA[0000] rootless containerd not running? (hint: use `containerd-rootless-setuptool.sh install` to start rootless containerd): environment variable XDG_RUNTIME_DIR is not set, see https://rootlesscontaine.rs/getting-started/common/login/ 
lima-std:~$ sudo nerdctl version
Client:
 Version:	1.0.0
 OS/Arch:	linux/amd64
 Git commit:	<unknown>
 buildctl:
  Version:	0.10.6
  GitCommit:	alpine

Server:
 containerd:
  Version:	v1.6.12
  GitCommit:	a05d175400b1145e5e6a735a6710579d181e7fb0
 runc:
  Version:	1.1.4
  GitCommit:	5fd4c4d144137e991c4acebb2146ab1483a97925

[terev]

Hello 😄 . Is this possible yet? Noticed that buildkitd is out of date and it's currently bundled with nerctl. Was hoping to use the new attestation features.

[afbjorklund]

I don't think that the nerdctl distribution ("nerdctl-full") comes in a musl flavor yet, it only supports glibc as far as I know