Publish arm64 binaries and container images

[povilasv]

Expected Behavior

It would be great if it was possible to run open-policy-agent on arm64 architecture, via multi arch container images (https://docs.docker.com/engine/reference/commandline/manifest/#create-and-push-a-manifest-list)

Muliarch images show on dockerhub:

Those images seamlessly run on supported architectures

[patrick-east]

This should already be supported by just specifying the GOARCH option and building OPA from source.

Ex:

$ make build GOARCH=arm64 GOOS=linux
make: '_obj/opa.wasm' is up to date.
cp wasm/_obj/opa.wasm internal/compiler/wasm/opa/opa.wasm
GO111MODULE=on GOFLAGS=-mod=vendor go generate
GO111MODULE=on GOFLAGS=-mod=vendor go build -o opa_linux_arm64 -ldflags "-X github.com/open-policy-agent/opa/version.Version=0.19.0-dev -X github.com/open-policy-agent/opa/version.Vcs=88d6ca32 -X github.com/open-policy-agent/opa/version.Timestamp=2020-03-29T02:25:25Z -X github.com/open-policy-agent/opa/version.Hostname=Patricks-MacBook-Pro.local"
$ file opa_linux_arm64
opa_linux_arm64: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, Go BuildID=j_yyDbC8Pu-fQJ7oq9VH/6aqO2bg5NvfQoXMp8jgo/8bT9gva510YbDWZxDm3j/q9AxXn6FTP1ORmwqT4AC, not stripped

To make the container image for this you'd just need to grab the OPA source and use the golang base image (similar to what OPA does https://github.com/open-policy-agent/opa/blob/master/Makefile#L170) then copy the binary into the base image you want to use (see https://github.com/open-policy-agent/opa/blob/master/Dockerfile for reference, it doesn't need to do a whole lot).

[patrick-east]

I think there are a few things we'd want to do to add support:

• Add arm binaries to be part of the "release" Makefile target(s)
• Add support for publishing multi-arch images
• Update travis to build/push the arm binaries with the others

[pieterv-icloud-com]

I tried deploying opa using helm on a Rancher k3s cluster running on a number of Raspberry Pis.

The deployment fails with an "exec format error" message

opa only supports the amd64 architecture, not the arm/v6 architecture.

[anagarjunr]

would love to have this as we use arm64 ec2 instances

[srenatus]

ℹ️ We cannot support wasm on that architecture yet, so if you're reading this try setting WASM_ENABLED=0 in your custom builds.

I've brought this to the attention of the fine folks working on wasmtime-go: bytecodealliance/wasmtime-go#79

[srenatus]

Times have changed, aarch64 and wasmtime-go should work now.

So, what remains to be done for this is building and testing. There's ways to do that on github actions using either docker buildx or some multi-arch qemu thing, with prior art in github.com/bytecodealliance/wasmtime, for example.

[manelpb]

+1

[srenatus]

@manelpb I'm afraid without outside help, this isn't going to happen soon. If anyone is interested in helping out here, happy to help guide you through it.

[stale]

This issue has been automatically marked as inactive because it has not had any activity in the last 30 days.