dockerfy icon indicating copy to clipboard operation
dockerfy copied to clipboard

Error copying secrets file

Open sschimmel opened this issue 9 years ago • 1 comments

When starting a container with dockerify in it I get the following error: dockerfy: 2017/03/31 10:54:56 Could not copy secrets files%!(EXTRA *os.PathError=mkdir /root/.secrets/: file exists)

I've tried an rm -rf on that folder as it's empty but that doesn't work.

The CMD in the Dockerfile is: ENTRYPOINT ["dockerfy", "--secrets-files", "/secrets/empty.env", "--start", "/bin/filebeat/filebeat -e -c /etc/filebeat/filebeat.yml", "--", "pm2-docker", "--json", "/opt/app/index.js"]. The /secrets/empty.env exists. I tried doing that to solve the error above but it didn't help.

The base image is node:6-alpine. Is it possible to have it not create the folder when it exists?

sschimmel avatar Mar 31 '17 10:03 sschimmel

The /root/.secrets directory should not already exist in a alpine image, unless you are creating it or mounting it. The best way to inject secrets into your image is via mount points, but mount them like this -v $HOME/.secrets:/secrets:ro

Dockerfy will read the secrets from the /secrets mount point within the container.

Do not copy secrets into the image with ADD or COPY. secrets should never be included in the image

markriggins avatar Jun 03 '17 21:06 markriggins