The presentation discusses the challenges faced by Datadog in migrating their container image builds to Kubernetes without additional privileges, and how they overcame these challenges using buildkit in rootless mode.
- Datadog migrated their container image builds to Kubernetes to overcome limitations with Docker machine and to support arm binaries
- Building container images in rootless mode using buildkit worked for over 90% of their images, but they encountered complex issues for the remaining 10%
- One issue involved SC Linux attributes on files, which could not be modified in a user namespace used by buildkit D
- Another issue involved a timeout error caused by a port being bound by the abdomen
- Datadog used netstat to debug the issues and worked with the community to address them