k-docker

What it is

k-docker packages a complete embedded C/C++ build environment into a single container image, eliminating “works on my machine” from your project. Every build — local or CI — runs the identical toolchain.

GCC 14 host toolchain, CMake (latest), Ninja, ccache, clang tooling

On-demand ARM cross-toolchains: GNU ARM 14.3 and ARM Compiler for Embedded 21.1

Python 3.13, Ruby, Perl, gcovr, and pre-commit for test and coverage workflows

Every release ships a tool-version manifest and an embedded, read-only SPDX SBOM — audit-ready by default

SPDX SBOM — built in, always current

Every released image carries its own Software Bill of Materials as a read-only file at /opt/k-docker/sbom.spdx.json — a full SPDX-JSON inventory of every OS package and tool inside. No portal, no account, no separate download; if you can run the image, you hold its audit evidence:

docker run --rm git.kodezine.com/kodezine/k-docker:v1.2.3 cat /opt/k-docker/sbom.spdx.json

Because the SBOM is baked into the image layers, it is immutable and always matches the exact toolchain you are running — ideal for supply-chain reviews and certification audits.

The image is published on our public container registry. Pull it and mount your workspace — no account required:

docker pull git.kodezine.com/kodezine/k-docker:v1.2.3
docker run -it --rm -v $(pwd):/home/kdev/workspaces git.kodezine.com/kodezine/k-docker:v1.2.3

Windows & WSL2

For Windows teams, k-docker-launcher.exe manages k-docker as a native WSL2 distribution — no manual rootfs imports, no Docker Desktop required.

Declarative version pinning via k-docker-version.json — your project defines the exact environment

Installs, reconciles, and removes WSL2 distributions from a single self-contained executable

Built-in doctor command verifies WSL2 prerequisites before first use

What it is

SPDX SBOM — built in, always current

How it's deployed

Windows & WSL2

Get the WSL2 launcher