well also docker's sha hash for each layer is just a random sha and not a sha of the actual content.
also it includes a timestamp.
thus docker is not reporducible.
but google actually has kaniko and jib which correct that problem.
Your second point is absolutely correct - we strip timestamps from everything which tends to confuse folks :)
yeah I missed that one. but basically it was still a pain. But yeah google's tools are actually awesome. I mean I even own a "fork" (or basically a plugin) for sbt which brings jib to sbt: https://github.com/schmitch/sbt-jib It's just so much easier to build java/scala images with jib than it is with plain docker.