在启动期间将本地文件添加到 docker 容器（不是构建阶段）

Question

We have a project with sensitive information, which cannot be added to docker image during building.

The Dockerfile is:

FROM openjdk:11.0.12-jre-slim
COPY target/security.jar /security.jar
ENTRYPOINT ["java","-jar","/security.jar"]

And in project security we have certs folder with *.cer files.

security/
   src/ -- source files
   certs/ -- .cer files
      test1.cer
      test2.cer
   Dockerfile

We cannot include this files into image because of it is sensitive information. And we tried do it during startup container:

docker run --entrypoint /bin/sh security -c 'cp certs/* certs/ && java -jar /security.jar' security:latest

But got the error:

cp: cannot stat 'certs/*': No such file or directory

Is there any way to fix this?

Answer 1

Maybe need look to Docker volumes? Some like:

docker run <your_args> -v certs:/certs security:latest