I need to get tar and gzip for an amazon linux 2 based container that will run in an environment without internet access. Using bazel, I create a container from the latest aws-cli image, and I don’t want to install it for all of the instances of this container that I create (in kubernetes), I just want to install them if I need them in specific instances. In order to do this, I need to package the rpms for tar and gzip and include the packages in the containers. I know that I can do it by doing a yum install --downloadonly ... and then upload them to s3 and use bazel to get them from the s3 bucket. However, I’d much rather use bazel to get them directly from the repo rather than have to download and upload to s3 anytime I need a new version. The problem is, when I try the repo base url I get access denied. Any help is greatly appreciated. I’ll post some code below of what I would like to be able to mostly because I know people here really want to see code snipets.

# WORKSPACE file

...

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_file")

http_file(
    name = "tar_rpm",
    downloaded_file_path = "tar.rpm",
    sha256 = "some_sha256_value",
    url = "https://some-repo-url/tar.1.26-35.amzn2.0.4.rpm",
)

...

# BUILD.bazel file

...

load("@rules_pkg//:pkg.bzl", "pkg_tar")
load("@io_bazel_rules_docker//container:container.bzl", "container_image")

container_image(
    name = "latest",
    base = "@aws-cli//image",
    entrypoint = "/usr/bin/entrypoint.sh",
    env = {
        "SRC_DIR": "/src",
        "CONFIG_DIR": "/config",
    },
    experimental_tarball_format = "compressed",
    repository = "my.registry/release",
    tars = [
        ":tar_gzip_tgz",
    ],
    visibility = ["//visibility:public"],
)

pkg_tar(
    name = "tar_gzip_tgz",
    srcs = [
        "@tar//file",
        "@gzip//file",
    ],
    package_dir = "/src/tars",
    strip_prefix = ".",
)

...