docker: secrets at build time! (intermediate) anthony explains #544

preview_player
Показать описание
today we tackle another tricky problem with docker: secrets! I show a few ways to get this wrong (where the secret ends up in the image) and then show off a buildkit feature that solves this nicely!

==========

I won't ask for subscriptions / likes / comments in videos but it really helps the channel. If you have any suggestions or things you'd like to see please comment below!
Рекомендации по теме
Комментарии
Автор

Interesting video. I've used the run mount in the past for mounting pip cache but didn't know about secrets.

Just FYI, if you're on the latest version of docker, it uses buildkit now by default. This is true for docker desktop as well as docker engine.

MrMongoosesRawesome
Автор

Thank you a lot! this is exactely a topic I started looking out when i had to write again docker files at my company but i got confused by the syntax and went back to the build arg as our images were private anyway.
I am going to update it as soon as i can now though 😅

daknyx
Автор

Interesting! Thanks for explaining docker secrets!

gcydgmm
Автор

Excellent video! I was following along but the command 'cat /run/secrets/<secret-var>' in dockerfile didn't work for me. Output says that this file doesn't exists. By any chance do you know why? Thanks again for this great explanation

_josearteaga_
Автор

I can't seem to access the secret with a python script inside my container. Does this only work with swarms? I'm new to this docker stuff.

JediRogue
Автор

Interesting.
what the different from --env-file?

GaaGameDev
Автор

Docker!? I 'ardly knew her!

yea, yea, I know it's not funny, but...

Ash-qpyw