如何使用 Github Actions 以 RSA 密钥作为构建参数构建 docker 镜像

Question

I am trying to build a docker image using github actions on ubuntu-latest. The docker image needs to receive an RSA KEY by build arg.

Although building the image in my macos machine works without any problem, I am facing the following error when building in github actions.

The keys are being stored as ENV variables and the command I am using is the following:

docker build --build-arg user_private_rsa=$USER_PRIVATE_RSA . -t auth-service

Using the above command builds the image successfully on mac, but when using this gihub action, I have no luck at all.

on:
  push:
    branches: [ master ]
jobs:
  build-deploy:
    name: Build docker image
    runs-on: ubuntu-latest
  build-push-ecr:
    name: Build docker image and push to ecr
    runs-on: ubuntu-latest
    steps:  
      - name: Checkout
        uses: actions/checkout@v2
      - run: docker build --build-arg user_private_rsa=$USER_PRIVATE_RSA . -t auth-service
      - name: Build image
        env:
          USER_PRIVATE_RSA: ${{ secrets.USER_PRIVATE_RSA }}

bad flag syntax: -----END See 'docker build --help'.

The error occurs because executing docker build in github actions, ends up being a multiline command.

Has anyone faced a similar problem and can help me fix it? Thank you very much!

Answer 1

您应该引用该变量，即--build-arg user_private_rsa="$USER_PRIVATE_RSA"否则--build-arg user_private_rsa="$USER_PRIVATE_RSA"在第一个空格之后选择任何内容作为自己的选项。

Answer 2

如果有人遇到类似的问题，我通过将 rsa 密钥作为 base64 字符串传递来解决它，因为 docker 需要一个单行命令。