particle-os/particle-os-cli
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: Add ability to mount secrets

Browse source
This commit is contained in:
Gerald Pinder 2025-07-13 11:41:42 -04:00
parent 22ef8392b7
commit 4fabd3e5db
27 changed files with 463 additions and 69 deletions
Download patch file Download diff file Expand all files Collapse all files

12
template/templates/modules/modules.j2
View file

@ -12,6 +12,9 @@ ARG CACHEBUST="{{ build_id }}"
{%- include "modules/copy/copy.j2" %}
{%- else %}
RUN \
{%- for secret_mount in module.secrets.mounts() %}
{{ secret_mount }} \
{%- endfor %}
{%- if self::files_dir_exists() %}
--mount=type=bind,from=stage-files,src=/files,dst=/tmp/files,rw \
{%- else if self::config_dir_exists() %}
@ -33,6 +36,9 @@ RUN \
--mount=type=bind,from={{ build_scripts_image }},src=/scripts/,dst=/tmp/scripts/ \
--mount=type=cache,dst=/var/cache/rpm-ostree,id=rpm-ostree-cache-{{ recipe.name }}-{{ recipe.image_version }},sharing=locked \
--mount=type=cache,dst=/var/cache/libdnf5,id=dnf-cache-{{ recipe.name }}-{{ recipe.image_version }},sharing=locked \
{%- for secret_var in module.secrets.envs() %}
{{ secret_var }} \
{%- endfor %}
{%- for (key, value) in module.get_env() %}
{{ key }}="{{ value | replace('"', "\\\"") }}" \
{%- endfor %}
@ -57,6 +63,9 @@ ARG CACHEBUST="{{ build_id }}"
{%- include "modules/copy/copy.j2" %}
{%- else %}
RUN \
{%- for secret_mount in module.secrets.mounts() %}
{{ secret_mount }} \
{%- endfor %}
{%- if self::files_dir_exists() %}
--mount=type=bind,from=stage-files,src=/files,dst=/tmp/files,rw \
{%- else if self::config_dir_exists() %}
@ -70,6 +79,9 @@ RUN \
--mount=type=bind,from={{ module.get_module_image() }},src=/modules,dst=/tmp/modules,rw \
{%- endif %}
--mount=type=bind,from={{ build_scripts_image }},src=/scripts/,dst=/tmp/scripts/ \
{%- for secret_var in module.secrets.envs() %}
{{ secret_var }} \
{%- endfor %}
{%- for (key, value) in module.get_env() %}
{{ key }}="{{ value | replace('"', "\\\"") }}" \
{%- endfor %}