Switch to building golang outselves

Author: dims

images/build/go-runner/Dockerfile

@@ -18,7 +18,46 @@ ARG BUILDER_IMAGE
 FROM ${BUILDER_IMAGE} as builder
 WORKDIR /workspace
 
+# Install dependencies for building Go from source
+RUN apt-get update && apt-get install -y \
+    build-essential \
+    curl \
+    git \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+# Download and build Go from source
+ARG GO_VERSION
+
+ARG TARGETARCH
+RUN echo "Determining bootstrap Go version for ${GO_VERSION}" && \
+    BOOTSTRAP_GO_VERSION=$(curl -fsSL "https://raw.githubusercontent.com/golang/go/go${GO_VERSION}/src/make.bash" | grep "^bootgo=" | cut -d= -f2) && \
+    echo "Installing bootstrap Go version: ${BOOTSTRAP_GO_VERSION} (${TARGETARCH})" && \
+    GO_ARCH="${TARGETARCH}"; \
+    if [ "${TARGETARCH}" = "arm" ]; then GO_ARCH="armv6l"; fi && \
+    curl -fsSL "https://go.dev/dl/go${BOOTSTRAP_GO_VERSION}.linux-${GO_ARCH}.tar.gz" -o /tmp/go-bootstrap.tar.gz && \
+    tar -xzf /tmp/go-bootstrap.tar.gz -C /usr/local && \
+    mv /usr/local/go /usr/local/go-bootstrap && \
+    rm /tmp/go-bootstrap.tar.gz
+
+# Download Go source
+RUN echo "Downloading Go source version: ${GO_VERSION}" && \
+    curl -fsSL "https://go.dev/dl/go${GO_VERSION}.src.tar.gz" -o /tmp/go.src.tar.gz && \
+    tar -xzf /tmp/go.src.tar.gz -C /usr/local && \
+    rm /tmp/go.src.tar.gz
+
+# Build Go from source with bootstrap
+WORKDIR /usr/local/go/src
+ENV GOROOT_BOOTSTRAP=/usr/local/go-bootstrap
+RUN ./make.bash
+
+# Set up Go environment
+ENV PATH=/usr/local/go/bin:$PATH
+ENV GOROOT=/usr/local/go
+ENV GOPATH=/workspace/gopath
+
 # Copy the sources
+WORKDIR /workspace
 COPY ./go-runner.go ./
 COPY ./go.* ./
 
@@ -38,11 +77,8 @@ ENV GOPROXY="https://proxy.golang.org|direct"
 
 # Build
 ARG package=.
-ARG ARCH
 
 ENV CGO_ENABLED=0
-ENV GOOS=linux
-ENV GOARCH=${ARCH}
 
 RUN go env
 
@@ -54,5 +90,6 @@ FROM ${DISTROLESS_IMAGE}
 LABEL maintainers="Kubernetes Authors"
 LABEL description="go based runner for distroless scenarios"
 WORKDIR /
+COPY --from=builder /usr/local/go /usr/local/go
 COPY --from=builder /workspace/go-runner .
 ENTRYPOINT ["/go-runner"]

images/build/go-runner/Makefile

@@ -20,12 +20,12 @@ APP_VERSION = $(shell cat VERSION)
 GO_MAJOR_VERSION ?= 1.24
 REVISION ?= 0
 GO_VERSION ?= 1.24.6
-OS_CODENAME ?= bookworm
+OS_CODENAME ?= bookworm-slim
 
 # Build args
 DISTROLESS_REGISTRY ?= gcr.io/distroless
 DISTROLESS_IMAGE ?= static-debian12
-BUILDER_IMAGE ?= golang:$(GO_VERSION)-$(OS_CODENAME)
+BUILDER_IMAGE ?= debian:$(OS_CODENAME)
 
 # Configuration
 CONFIG = go$(GO_MAJOR_VERSION)-$(OS_CODENAME)
@@ -53,4 +53,5 @@ clean:
 	rm go-runner
 
 BUILD_ARGS = --build-arg=BUILDER_IMAGE=$(BUILDER_IMAGE) \
-             --build-arg=DISTROLESS_IMAGE=$(DISTROLESS_REGISTRY)/$(DISTROLESS_IMAGE)
+             --build-arg=DISTROLESS_IMAGE=$(DISTROLESS_REGISTRY)/$(DISTROLESS_IMAGE) \
+             --build-arg=GO_VERSION=$(GO_VERSION)

images/build/go-runner/cloudbuild.yaml

@@ -1,13 +1,13 @@
 # See https://github.com/kubernetes/test-infra/blob/master/config/jobs/image-pushing/README.md for more details on image pushing process
 
 # this must be specified in seconds. If omitted, defaults to 600s (10 mins)
-timeout: 3600s
+timeout: 28800s
 
 # this prevents errors if you don't use both _GIT_TAG and _PULL_BASE_REF,
 # or any new substitutions added in the future.
 options:
   substitutionOption: ALLOW_LOOSE
-  machineType: 'N1_HIGHCPU_8'
+  machineType: E2_HIGHCPU_32
 
 steps:
   - name: 'ghcr.io/sigstore/cosign/cosign:v2.5.3-dev@sha256:fe84ab87222b60d2d87f5efcb8ef3cfd895897c088fbeb973280689c81aedff1'