docs: run mount secret env dockerfile example #5296
Conversation
dvdksn
commented
Sep 4, 2024
•
dvdksn
commented
- relates to frontend: allow mounting secret environment variables #5215
dvdksn
force-pushed
the
docs-runmount-secret-env
branch
from
9f85120
to
917197d
Compare
| | ------------------------------ | --------------------------------------------------------------------------------------------------------------- | | ||
| | `id` | ID of the secret. Defaults to basename of the target path. | | ||
| | `target`, `dst`, `destination` | Mount the secret to the specified path. Defaults to `/run/secrets/` + `id` if unset and if `env` is also unset. | | ||
| | `env` | Mount the secret to an environment variable instead of a file, or both. (since Dockerfile v1.10.0) | |
There was a problem hiding this comment.
Should we have a column with minimal version similar to #5275 ?
There was a problem hiding this comment.
yeah thought about it. wdyt? Do you know when those other fields were added? :D
There was a problem hiding this comment.
Looking at https://github.com/moby/buildkit/blame/0af7b1b9c693cf3c4be62d80beb3fd5b218a12f9/frontend/dockerfile/docs/experimental.md, other attributes are there since 1.0.
There was a problem hiding this comment.
OK maybe a table will look silly in that case. That's kinda why I didn't do it immediately. I didn't know when any of the other opts were released, and having them all empty or say "1.0" is a bit weird.
There was a problem hiding this comment.
Yes agree let's keep it like this for now
| # syntax=docker/dockerfile:1 | ||
| FROM alpine | ||
| RUN --mount=type=secret,id=API_KEY,env=API_KEY \ | ||
| printenv API_KEY |
There was a problem hiding this comment.
Maybe not print the API_KEY, as it would be saved in the history record logs then 😉
There was a problem hiding this comment.
I couldn't think of an example usage 😆 I can change it to some pseudo command
RUN --mount=type=secret,id=API_KEY,env=API_KEY \
some-command --token-env API_KEY
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
dvdksn
force-pushed
the
docs-runmount-secret-env
branch
from
917197d
to
85b0933
Compare
