Skip to content
SPECIFICTION
Get listed

rules_img

github.com

macOSLinuxSelf-hosted
Visit github.com
Spec score 7.0 #31 of 34 in Container Build Tools

Spec sheet

Purpose
rules_img provides Bazel rules for building OCI container images with performance optimizations.Read 9 Oct 2026 · github.com
Intended users
The project describes its push strategies as designed for organizations with thousands of builds per day.Read 9 Oct 2026 · github.com
Security
The project is published under the Apache-2.0 license and documents image signing with pluggable signer plugins including Notation and cosign.Read 9 Oct 2026 · github.com
License
The repository identifies its license as Apache-2.0.Read 4 Oct 2026 · github.com
Bazel setups
It supports both Bzlmod and WORKSPACE setups.Read 9 Oct 2026 · github.com
Bazel support
It supports both Bzlmod and WORKSPACE setups.Read 4 Oct 2026 · github.com
Builds
The project describes its builds as hermetic and says they require no Docker daemon.Read 9 Oct 2026 · github.com
Container runtimes
The documentation describes loading images into Docker, containerd, and Podman, among other supported targets.Read 9 Oct 2026 · github.com
Image registries
Its rules can pull base images from and push images to container registries.Read 9 Oct 2026 · github.com
Image signing
Image signing is configurable and disabled by default; the project documents signing plugins and signing workflows.Read 4 Oct 2026 · github.com
Layer efficiency
It can represent layers as compact streams and reconstruct full layer tar files on demand at push or load time.Read 4 Oct 2026 · github.com
Lazy pulling
It supports eStargz and SOCI for lazy pulling container images.Read 9 Oct 2026 · github.com
Multi-platform
It supports multi-platform image builds through Bazel transitions.Read 4 Oct 2026 · github.com
Multi-platform images
It supports multi-platform images through Bazel transitions, with examples for linux/amd64 and linux/arm64.Read 9 Oct 2026 · github.com
OCI compatibility
It builds standard OCI images compatible with container runtimes.Read 9 Oct 2026 · github.com
Push strategy limits
The CAS push strategy requires a special registry and Bazel remote cache, while the BES strategy requires a self-hosted BES server, a special backend, and a Bazel remote cache.Read 9 Oct 2026 · github.com
Registry authentication
It documents credential helpers, Docker and Podman configuration, Google credentials, and Amazon ECR credentials for registry access.Read 9 Oct 2026 · github.com
Registry integrations
It documents integration with Docker Hub, Google Artifact Registry, Amazon ECR, Harbor, and JFrog Artifactory, with feature support varying by registry.Read 4 Oct 2026 · github.com
Remote builds
It integrates with Remote Build Execution and Content Addressable Storage, and can push layers from the remote execution cluster to a registry at build time.Read 4 Oct 2026 · github.com
Remote execution
The project describes integration with Remote Build Execution and Content Addressable Storage.Read 9 Oct 2026 · github.com
Support and contributions
The repository invites external contributions and links to its contributing guide.Read 9 Oct 2026 · github.com

Where Specifiction places it

Alternatives to rules_imgAll alternatives →