当我尝试使用 Dockerfile 登录 AWS CLI 时出现问题

Question

I'm trying to sync a file between a Docker container to an AWS Bucket, but I´m having issues when I´m trying to log in or run the first parameters. I´m constantly getting this message:

usage: aws [options] [...] [parameters] To see help text, you can run:

aws help aws help aws help

aws: error: argument command: Invalid choice, valid choices are:

I don´t know what I´m doing wrong in my file. This is my Dockerfile :

FROM openjdk:11-jre-slim-buster
COPY ./target/AWS-Writer-Test-0.0.1-SNAPSHOT.jar AWS-Writer-Test-0.0.1-SNAPSHOT.jar
EXPOSE 8080
ENTRYPOINT ["java","-jar","AWS-Writer-Test-0.0.1-SNAPSHOT.jar"]

FROM amazon/aws-cli
ARG AWS_ACCESS_KEY_ID
ARG AWS_SECRET_ACCESS_KEY
ARG AWS_REGION

RUN aws ecr get-login-password --no-include-email | bash
RUN aws s3 cp s3://AWS-Writer-Test/logs/log.txt /log.txt --recursive

#ENTRYPOINT [ "aws", "ecr get-login-password --no-include-email | bash" ]

Any idea what could be my mistake? Thanks for your support.

PS:

• The final goal is to sync the log files from the Docker Container to the S3 Bucket .
• This is not a public image . The info is going to be stored in a private repo, inaccessible from the Internet, only accessible through the Intranet. However, I´m planning to use some secrets in AWS later, but first I have to make it work.

Answer 1

It is important to understand the difference between the two syntax versions which are described in the documentation https://docs.docker.com/engine/reference/builder/#entrypoint .

You have actually a mixture of both of them.

ENTRYPOINT has two forms:

The exec form, which is the preferred form:

ENTRYPOINT ["executable", "param1", "param2"] The shell form:

ENTRYPOINT command param1 param2

Your ENTRYPOINT is [ "aws", "ecr get-login-password --no-include-email | bash" ] so it runs directly (probably with something like execve() aws command without any shell (that is important) and it tries to feed aws with just one parameter and that is everything together ecr get-login-password --no-include-email | bash .

The correct syntax would be ["aws","ecr","get-login-password","--no-include-email"] . The rest of it:

| bash | bash , particularly the '|' pipe symbol has no meaning, because it is a shell expression. And you decided to run no shell (by choosing the first version of the ENTRYPOINT syntax), so you cannot use any shell commands/expressions like if for example.

If you need to use the shell, then you need to run the shell version of the ENTRYPOINT, so your syntax would be:

ENTRYPOINT aws ecr get-login-password --no-include-email | bash

I would suggest to you to try all three versions and see the difference among the error messages (or the lack of them).