We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
The Dockerfile preprocessing injecting mounts for secrets does not take into account the current user for the RUN step.
RUN
USER shane RUN cat /etc/secrets/MYSECRET
When passing a build secret to build_docker_image(), the preprocessing step will change the Dockerfile to
build_docker_image()
USER shane RUN --mount=type=secret,id=MYSECRET cat /etc/secrets/MYSECRET
But it should actually be
USER shane - RUN --mount=type=secret,id=MYSECRET cat /etc/secrets/MYSECRET + RUN --mount=type=secret,id=MYSECRET,uid=1000 cat /etc/secrets/MYSECRET
However, this has two issues:
USER
1000
The text was updated successfully, but these errors were encountered:
No branches or pull requests
The Dockerfile preprocessing injecting mounts for secrets does not take into account the current user for the
RUN
step.When passing a build secret to
build_docker_image()
, the preprocessing step will change the Dockerfile toBut it should actually be
However, this has two issues:
USER
block uses a name rather than an ID? (It's not guaranteed to be1000
)The text was updated successfully, but these errors were encountered: