alternative way of passing loading secrets in container

DessimozLab · Jul 31, 2024 · 43ce3b4 · 43ce3b4
1 parent 6837460
commit 43ce3b4
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/containers/darwin/Dockerfile b/containers/darwin/Dockerfile
@@ -14,7 +14,7 @@ RUN mkdir -m 700 /root/.ssh/ \
 WORKDIR /src
 RUN --mount=type=ssh \
     --mount=type=secret,id=labgit \
-    . /run/secrets/labgit && \
+    LABGIT=$(cat /run/secrets/labgit) && \
     git clone ${LABGIT}/OMA && \
     git clone ${LABGIT}/browser && \
     git clone -b nf-convert ${LABGIT}/pyoma && \

diff --git a/containers/oma/Dockerfile b/containers/oma/Dockerfile
@@ -29,8 +29,8 @@ RUN pip install --upgrade pipenv pip
 COPY Pipfile Pipfile.lock ./
 RUN --mount=type=ssh \
     --mount=type=secret,id=labgit \
-    . /run/secrets/labgit && \
-    pipenv sync
+    LABGIT=$(cat /run/secrets/labgit ) \
+       pipenv sync
 
 FROM basis as runtime
 RUN apt-get update \