Bazel: support tar driver for `oci_image`

[blackliner]

Not sure if this is a bug or FR, but the documentation is at least a tiny bit contradicting. From the docu, I would expect that the only limitation I get when using the tar driver is the missing support for commandTests. See this section:

tar: a tar driver, which extracts an image filesystem to wherever tests are running, and runs file/metadata tests against it. Does not support command tests.

The example in that same section shows how it works providing a image:tag (not a *.tar file!)

container-structure-test test --driver tar --image gcr.io/registry/image:latest --config config.yaml

When using the tar driver in bazel

oci_image(
    name = "job_list_image",
    base = "@python_base",
    cmd = ["/job_list"],
    tars = [":job_list_tar"],
    workdir = "/job_list.runfiles/_main",  # workaround for https://github.com/bazelbuild/rules_pkg/issues/813
)

container_structure_test(
    name = "job_list_image_test",
    size = "small",
    configs = ["job_list_image_test.yaml"],
    driver = "tar",
    image = ":job_list_image",
)

it fails with Error in fail: when the 'driver' attribute is not 'docker', then the image must be a .tar file SOURCE

So is this a real limitation? The tool itself apparently is happy to consume image:tag combos 🤔

If so, what is the canonical way to use the tar driver with rules_oci?

[blackliner]

Workaround: use oci_tarball. I thought this rule is only used as a bazel run target to load the tarball into your docker daemon, but it turns out to also provide a tarball 🎉

oci_image(
    name = "job_list_image",
    base = "@python_base",
    cmd = ["/job_list"],
    tars = [":job_list_tar"],
    workdir = "/job_list.runfiles/_main",  # workaround for https://github.com/bazelbuild/rules_pkg/issues/813
)

oci_tarball(
    name = "job_list_image_tar",
    image = ":job_list_image",
    repo_tags = ["job_list:local-dev"],
)

container_structure_test(
    name = "job_list_image_test",
    size = "small",
    configs = ["job_list_image_test.yaml"],
    driver = "tar",
    image = ":job_list_image",
)

[blackliner]

I think it boils down to OCI layouts not being supported 🤔

related feature request: #305

[loeffel-io]

+1

[loeffel-io]

@blackliner

this works pretty good (https://github.com/bazel-contrib/rules_oci/blob/main/docs/load.md#build-outputs)

oci_load(
    name = "earth_auth_service_image_linux_amd64_tarball",
    image = ":earth_auth_service_image_linux_amd64",
    repo_tags = ["latest"],
)

filegroup(
    name = "earth_auth_service_image_linux_amd64_tarball_tar",
    srcs = [":earth_auth_service_image_linux_amd64_tarball"],
    output_group = "tarball",
)

container_structure_test(
    name = "earth_auth_service_image_linux_amd64_test",
    configs = [":container_structure_test.yaml"],
    image = ":earth_auth_service_image_linux_amd64_tarball_tar",
    driver = "tar",
)

[icetan]

@loeffel-io I tried out your solution but all file-exists tests fail. Looking in the temp directory that should contain the extracted files it is empty (using --save flag to keep it around after execution.)