From fcfe4c55b06dc540c89b464a1a16dfe06b23adaa Mon Sep 17 00:00:00 2001 From: j-riebe <52535122+j-riebe@users.noreply.github.com> Date: Wed, 12 Oct 2022 11:47:52 +0200 Subject: [PATCH] Update README.md #78 --- README.md | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/README.md b/README.md index af8c95c..8a891a6 100644 --- a/README.md +++ b/README.md @@ -105,7 +105,28 @@ If you are using this action on container-based workflows, make sure the contain If you are using the `docker/build-push-action`, and would like to pass the SSH key, you can do so by adding the following config to pass the socket file through: +```yml + - name: Build and push + id: docker_build + uses: docker/build-push-action@v2 + with: + ssh: | + default=${{ env.SSH_AUTH_SOCK }} ``` + +### Using the `docker/build-push-action` Action together with multiple Deploy Keys + +If you use the `docker/build-push-action` and want to use multiple GitHub deploy keys, you need to copy the git and ssh configuration to the container during the build. Otherwise, the Docker build process would still not know how to handle multiple deploy keys. Even if the ssh agent was set up correctly on the runner. + +This requires an additional step in the actions workflow and two additional lines in the Dockerfile. + +Workflow: +```yml + - name: Prepare git and ssh config for build context + run: | + mkdir root-config + cp -r ~/.gitconfig ~/.ssh root-config/ + - name: Build and push id: docker_build uses: docker/build-push-action@v2 @@ -114,6 +135,15 @@ If you are using the `docker/build-push-action`, and would like to pass the SSH default=${{ env.SSH_AUTH_SOCK }} ``` +Dockerfile: +```Dockerfile +COPY root-config /root/ +RUN sed 's|/home/runner|/root|g' -i.bak /root/.ssh/config +``` + +Have in mind that the Dockerfile now contains customized git and ssh configurations. If you don't want that in your final image, use multi-stage builds. + + ### Cargo's (Rust) Private Dependencies on Windows If you are using private repositories in your dependencies like this: