带有git子模块的Google容器构建器DockerFile [英] Google container builder DockerFile with git submodules

问题描述

我们的容器构建器无法构建包含gitFile私有命令作为DockerFile一部分的映像.

Our container-builder fail to build an image we have that has a private git submodule command as part of the DockerFile.

我将控制台帐户与bitbucket帐户相关联(可以访问所有存储库)，但是构建仍然失败，并且对子模块存储库的访问被拒绝.

I linked the console account with the bitbucket account, (which has access to all repos) but still the build fail with "access denied" to the submodule repo.

在Quay.IO Builder中，我通过将ssh-key添加到子模块存储库中解决了此问题，但是由于Container-Builder与我的帐户链接，因此我无法使用该解决方案.

in Quay.IO builder i solved this by adding the ssh-key to the submodule repository, but since Container-Builder link with my account i can't use that solution.

推荐答案

处理对私有子模块的访问是Cloud Source Repository的一个已知缺陷.我们已经向他们添加了功能请求，以添加此支持.

Handling access to private submodules is a known deficiency of Cloud Source Repositories. We've added a feature request to them to add this support.

同时，Cloud Builder为密钥/机密的管道添加了更好的支持，并将发布如何完成此操作的示例.这可能会对此用例有用.

In the meantime, Cloud Builder is adding better support for the piping of keys / secrets, and will publish an example of how this can be done. This will likely be helpful for this use case.

该功能可能会在第三季度发布.同时，请看一下:

The feature is likely to land in Q3. In the meantime, take a look at:

https://cloud.google.com/container-builder/docs/tutorials/using-encrypted-files

看看是否能解决眼前的问题.

to see if that solves the immediate issue.

这篇关于带有git子模块的Google容器构建器DockerFile的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！