Kaniko is an open-source tool developed by Google that enables building container images from a Dockerfile inside a Kubernetes cluster without requiring a Docker daemon. Kaniko executes each command in the Dockerfile in the user space using an executor image, which runs inside a container, such as a Kubernetes pod. This allows building container images in environments where the user doesn’t have root access, like a Kubernetes cluster.

1. Introduction to
Kaniko
Presented By :
PRINCE SHARMA
Senior Software Consultant

2. Lack of etiquette and manners is a huge turn off.
KnolX Etiquettes
 Punctuality
Join the session 5 minutes prior to the session start time. We start on
time and conclude on time!
 Feedback
Make sure to submit a constructive feedback for all sessions as it is very
helpful for the presenter.
 Silent Mode
Keep your mobile devices in silent mode, feel free to move out of session
in case you need to attend an urgent call.
 Avoid Disturbance
Avoid unwanted chit chat during the session.

3. 1. Introduction to Kaniko
2. Benefits of Kaniko
3. How Kaniko works?
4. Demo- Build Container Images with Kaniko &
push it to ECR.

5. What is Kaniko?
Kaniko is an open-source tool developed by Google that enables building container images from a
Dockerfile inside a Kubernetes cluster without requiring a Docker daemon.
Kaniko executes each command in the Dockerfile in the user space using an executor image, which
runs inside a container, such as a Kubernetes pod. This allows building container images in
environments where the user doesn’t have root access, like a Kubernetes cluster.

6. 02

7. How kaniko works ?
 Kaniko builds container images by parsing the Dockerfile and executing each command within a
container isolated from the host environment. Instead of using a Docker daemon, Kaniko
simulates the Docker builder by providing its own implementations of Docker commands like
ADD, COPY, RUN, etc.
 Each command gets executed in its own scratch container based on the base image. This allows
Kaniko to capture changes made by each command and construct the final image layer by layer.
 Kaniko also intelligently caches image layers to optimize rebuild time. The hashing of commands and
layers allows for avoiding redundant build steps.

8. 02

9. Benefits of Kaniko
Kaniko offers several benefits for building images in Kubernetes:
 No Docker daemon required: Kaniko eliminates the need for a Docker daemon in a
Kubernetes cluster, reducing security risks and overhead.
 Improved security: By building images in userspace without privileges, Kaniko reduces the
attack surface compared to using Docker.
 Kubernetes integration: Kaniko is specifically designed to build images within a Kubernetes
pod, seamlessly integrating into Kubernetes workflows.
 Caching: During builds, Kaniko caches image layers, enabling faster image rebuilding.
 Debugging: Kaniko provides robust debugging tools for troubleshooting builds, enhancing the
development process.