Buildpacks: Pragmatic Solutions To Quick and Secure Image Builds
Talkat KubeCon + CloudNativeCon Europe 2025 · on Wednesday, 2025-04-02· at 17:45· Level 3 | ICC Capital Suite 14-16·
summary
Demos show pack/kpack builders (Paketo, Heroku) producing OCI images from source without Dockerfiles: a monorepo image running both Go backend and Node front end via two entry points, a Spring Boot petclinic image, and an AI-generated Python app, all working live. Images use well‑separated layers that enable rebase, small targeted rebuilds and fast cache hits; manifests include SBOM and signing, kpack supports SLSA level 3, and builders accept dependency mirrors, multi‑arch bases and insecure local registries.
AI-written summary · about
chapters (18)
- 0:00Cloud Native Buildpacks intro
- 1:52Source to images with Buildpacks
- 3:38Why Buildpacks replace Dockerfiles
- 4:21Demo: Multi-language monorepo
- 7:32Demo: Spring Boot Java
- 8:58Demo: Python with AI code
- 10:27Buildpacks personas
- 11:30Buildpacks end user updates
- 14:56Paketo and Heroku updates
- 17:46Buildpacks authors: new features
- 18:51Platform ops control benefits
- 22:20Custom base images and tools
- 24:28Language family control
- 25:31Securing dependency mirrors
- 26:54Fast rebuilds and secure layers
- 28:42SBOMs and vulnerability fixes
- 29:23Project health and roadmap
- 30:29Q&A
related talks
05mSupple Supply Chain Security With kpack!
22mUsing Buildpacks To Reduce Container Bloat and Attack Surface
07mContainer Hardening with Paketo and Wolfi
30mRootless, Reproducible, and Hermetic: Secure Container Build Showdown
30mNo Joker in the Pack: SBoMs for Container Images
33mOCI in CF: For Buildpacks, Security and Interoperability
54mHowto: Options Galore to Get from Source Code to Container
41mBuilding Apps in Kubernetes: The Unforgiving Sea of...