god-containers-advanced

Build multi-architecture container images for ARM64 and x86_64 by configuring BuildKit with cross-platform build strategies. This Skill details the operational prerequisites and workflows needed to design pipelines that produce small, reproducible multi-arch images.

Rootless containers run without root privileges to minimize attack surface through seccomp and AppArmor or SELinux isolation. You need them for security-hardened deployments where strict secure defaults and minimal privilege escalation are required.

Cosign image signing works by attaching cryptographic signatures to OCI images to verify provenance and secure the supply chain. This Skill instructs on applying cosign verification to ensure images maintain verifiable signatures throughout deployment.

Yes, you can use BuildKit cache mounts and SSH mounts in multi-stage builds to optimize CI/CD pipelines. This Skill provides mastery of BuildKit features to cache dependencies and securely inject secrets during reproducible builds.

Reason about OCI image specs and container runtimes by analyzing the kernel and runtime layers across containerd, CRI-O, gVisor, and Kata. This Skill covers distribution APIs and runtime specs to reason about images and bundles effectively.

Yes, this approach supports reproducible builds with verifiable signatures by combining rootless container principles, BuildKit optimization, and cosign verification. It details the workflows and verification steps required for secure, production-ready container pipelines.