Cloning private git repo in the docker container -

-

i have project (written in ruby) want run in docker image. project source code stored in private git repo, image created usual dockerfile. project huge , git clone takes relatively long.

the problem that, i'm not sure how (when/where) clone git repo docker image properly. can clone git repository temp directory , copy source code copy command in dockerfile. don't since have maintain second clone in temp dir.

or, can clone repo within docker image. problem ssh-key can't reasonably keep in image. can add "my own" keys git server allow access everything.

so, created script this:

uuid=`uuid`     docker run \     -v $home/.ssh:/home/user/.ssh:ro\     --name=$uuid \     -it $1 /scripts/git-clone-update.sh docker commit $uuid $1 docker rm $uui

git-clone-update.sh clones project if doesn't exist or updates if does. keys mounted .ssh that. works great. can update code in image calling script passing image name argument. problem config.cmd changes /scripts/git-clone-update.sh.

any idea how keep original config.cmd? best practice cloning private ropo in/to docker image?

thx

as you've discovered, keeping private ssh keys in docker image isn't great security. i've seen 2 approaches this:

  1. create new, read-only account , keep keys in docker image. more limitations can put on account better security, you're still packaging secret on top of actual source code.

    also, doesn't solve scripts problem, i've admittedly no clue how solve.

  2. host whole, packaged docker file code copied in. approach mark o'conner mentions in comment. workflow release be:

    • copy code docker container.
    • update docker image.
    • upload new image docker repository (e.g. hub.docker.com or amazon web services elastic beanstalk).
    • update or launch new instances of new container image.

for development i.e. every day use second approach, have launch script copies code docker container , runs or restarts container or server inside container needed. or have separate development docker image configure mount source control directory separate volume.


Comments

Post a Comment

Popular posts from this blog

javascript - Chart.js (Radar Chart) different scaleLineColor for each scaleLine -

-
Image
i try , create radar chart using chart.js has various colours each scaleline, or coloured between scalelines. wondering if possible? from: to: i have working graph, though there doesn't seem method change individual scale lines. kind regards leigh you can extend radar chart type this, so chart.types.radar.extend({ name: "radaralt", initialize: function (data) { chart.types.radar.prototype.initialize.apply(this, arguments); var originalscaledraw = this.scale.draw; var ctx = this.chart.ctx; this.scale.draw = function () { var linewidth = this.linewidth; // bypasses line drawing in originalscaledraw this.linewidth = linewidth; originalscaledraw.apply(this, arguments); ctx.linewidth = this.linewidth; var scale = this; // draw chart.helpers.each(scale.ylabels, function (label, index) { // color of ...
Read more

apache - Error with PHP mail(): Multiple or malformed newlines found in additional_header -

-
suddenly have started receiving above error without changes having been made script. host 1and1 (i know...) the script still works fine on different server, , suspicion there must have been server config change has lead this, although hosts plead ignorance. there's no information on above error @ in google can find - have ideas? server running apache if helps. had similar problem. came out of blue. no php code changed. what changed: php upgraded 5.5.25-1 5.5.26. a security risk in php mail() function has been fixed , newlines in additional_headers allowed no more. because newlines mean: starts email message (and surely don't want inject newlines through headers followed evil message). what have worked fine, e.g. having newlines after headers or passing whole message additional_headers , function no more. solution : sanitize headers. no multiple newlines in additional_headers argument. these count "multiple or malformed newlines":...
Read more

java - Android – MapFragment overlay button shadow, just like MyLocation button -

-
Image
i'm struggling add shadow custom overlay button on google map. goal make custom button google's mylocation button. here's how app looks now: layout.xml <relativelayout xmlns:android="http://schemas.android.com/apk/res/android" xmlns:tools="http://schemas.android.com/tools" xmlns:map="http://schemas.android.com/apk/res-auto" android:layout_height="match_parent" android:layout_width="match_parent" style="@style/apptheme"> <fragment android:layout_width="match_parent" android:layout_height="match_parent" android:id="@+id/map" tools:context=".mapsactivity" android:name="com.google.android.gms.maps.supportmapfragment" android:layout_alignparentend="true" android:layout_alignparentstart="true" android:layout_alignparentbottom="true" ...
Read more