Bakery

The bakery command line interface (CLI) binds together various tools to manage a matrixed build of container images.

Documentation

Full documentation is available at posit-dev.github.io/images-shared.

Tool	Used By	Purpose
docker buildx bake	`bakery build --strategy bake`	Build containers in parallel
docker, podman, or nerdctl	`bakery build --strategy build`	Build containers in series
dgoss	`bakery dgoss run`	Test container images for expected content & behavior
hadolint	`bakery hadolint run`	Lint Dockerfile/Containerfile
openscap	to be implemented	Scan container images for secure configuration and vulnerabilities
trivy	to be implemented	Scan container images for vulnerabilities
wizcli	`bakery wizcli scan`	Scan container images for vulnerabilities

Install bakery from PyPI using uv tool:

uv tool install posit-bakery

To install an unreleased development version directly from GitHub:

uv tool install 'git+https://github.com/posit-dev/images-shared.git@main#subdirectory=posit-bakery&egg=posit-bakery'

See the Bakery Examples repository for step-by-step tutorials on creating and managing container image projects with Bakery.