rules_docker

Plans and prices

Every plan, in full

On the record

Container operations

Basic rules include container_image, container_bundle, container_import, container_load, container_pull, and container_push.github.com · read 4 Oct 2026

Docker dependency

The basic image pull, build, and push rules do not require or use Docker.github.com · read 4 Oct 2026

Language rules

The project provides image rules for Python, Node.js, Java, Scala, Groovy, C++, Go, Rust, and D.github.com · read 4 Oct 2026

License

The repository is licensed under Apache License 2.0.github.com · read 4 Oct 2026

Maintenance

The repository says rules_docker is maintained on an as-needed basis and points users to rules_oci as an alternative.github.com · read 4 Oct 2026

Notable limitation

The README says language image rules do not expose Docker-related attributes, so adding a custom environment variable or symlink requires using a container_image target.github.com · read 4 Oct 2026

Package and run rules

Additional rules can install apt-get packages and run commands inside containers, but they require a properly configured Docker binary.github.com · read 4 Oct 2026

Platform support

The README says the rules can be used on OSX without boot2docker or docker-machine, while Windows use is not supported.github.com · read 4 Oct 2026

Purpose

rules_docker is a set of Bazel rules for pulling base images, adding build artifacts and assets, and publishing container images.github.com · read 4 Oct 2026

Registry integration

container_pull and container_push use google/go-containerregistry for registry interactions, and the README describes standard Docker authentication for private images.github.com · read 4 Oct 2026

Reproducibility

The repository says images produced by container_image are deterministic and reproducible.github.com · read 4 Oct 2026

Runtime base

Higher-level language image rules use distroless language runtimes by default, with a configurable base attribute.github.com · read 4 Oct 2026

Security reporting

The security policy directs vulnerability reports to Google's g.co/vulnz intake and says the Google Security Team processes reports within a day and responds within a week, depending on severity.github.com · read 4 Oct 2026

Workstation access

The README says these rules do not require root access on the workstation.github.com · read 4 Oct 2026

Alternatives to rules_docker

AE Amazon EC2AndroidiPhone & iPad+5 G GardenWebWindows+4 AC AWS CodeBuildWebWindows+3 D DaggerWebWindows+3 ST Source-to-ImageWindowsMac+2 B BuildKitWindowsMac+3 K koWindowsMac+1 T TiltWindowsMac+1

Every alternative, ranked