kaniko: Build container images in Kubernetes
Daemon-free Docker image builder for Kubernetes clusters.
Learn more about Kaniko
kaniko is a container image builder designed to run within Kubernetes clusters and other containerized environments. It parses Dockerfile instructions and executes them in userspace without depending on a Docker daemon, using the kaniko executor image as its primary distribution method. The tool supports multiple build contexts including Git repositories, Azure Blob Storage, and standard input, with layer caching capabilities and integration with various container registries. Common deployment scenarios include Kubernetes CI/CD pipelines, Google Cloud Build, and other environments where Docker daemon access is unavailable or restricted.
Daemonless Container Builds
Executes Dockerfile instructions entirely in userspace without requiring Docker daemon or privileged access. Enables container image building in restricted environments like standard Kubernetes clusters and serverless CI/CD platforms.
Multiple Build Contexts
Accepts build contexts from Git repositories, Azure Blob Storage, local directories, and standard input. Eliminates dependency on local filesystem access for flexible integration with diverse CI/CD workflows.
Layer and Base Caching
Caches intermediate layers and base images in remote registries for faster subsequent builds. Multi-stage builds benefit from intelligent layer reuse, reducing build times in CI/CD pipelines.
Security fixes for CVE-2025-21613, panic prevention, and dependency updates including gRPC and containerd.
- –Bump google.golang.org/grpc from 1.64.0 to 1.64.1
- –Prevent panic when image name and stage alias are the same
- –Bump golang.org/x/net from 0.26.0 to 0.27.0
- –Bump github.com/minio/highwayhash from 1.0.2 to 1.0.3
- –Bump github.com/containerd/containerd from 1.7.18 to 1.7.19
Dependency updates including Docker, AWS SDK, Google Cloud APIs, and build tooling improvements.
- –Bump github.com/moby/buildkit and github.com/docker/docker
- –Bump docker/build-push-action from 6.1.0 to 6.3.0
- –Bump docker/setup-qemu-action from 3.0.0 to 3.1.0
- –Bump docker/setup-buildx-action from 3.3.0 to 3.4.0
- –Bump google.golang.org/api from 0.185.0 to 0.187.0
Fixes --no-push flag to properly handle intermediate cache layers and improves push behavior documentation.
- –Fix: Enable pushing cache with --no-push
- –Document --no-push-cache flag in README.md
- –Bump google.golang.org/api from 0.181.0 to 0.182.0
- –Bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.17 to 1.16.21
- –Bump google.golang.org/api from 0.180.0 to 0.181.0
Related Repositories
Discover similar tools and frameworks used by developers
AWS CDK
Programming language abstractions that synthesize into CloudFormation templates.
Grafana
Query and visualize metrics from multiple data sources.
Azure CLI
Cross-platform CLI for managing Azure resources through commands and automation scripts.
Podman
Daemonless OCI container management with Docker-compatible CLI and rootless execution support.
Kubespray
Production-grade Kubernetes deployment via Ansible playbooks.
Related Reading
Guides and comparisons from the Greptile content library
Best Security-Focused AI Code Review Tools [2026 Guide]
The six best security-focused AI code review tools, compared on SAST, SCA, DAST, and full-repo context, so you can pick the one that fits your codebase and your cycle times.
Best AI Code Review Tools for GitLab
Enterprise-grade AI code review tools for GitLab teams. In-depth comparison of accuracy, security, and integration features to accelerate your merge request workflows.
The 7 Best AI Coding Tools for Complex Codebases
The best AI coding tools for complex codebases, ranked on accuracy, suggestion quality, and full-codebase context. See which ones you can actually trust.
How to ACTUALLY Think About Code Reviews: The 3-Layer Checklist
A code review checklist and best practices organized around three layers — Mechanical, Structural, and Narrative — that help any team improve code quality without slowing reviews down.