mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-08-14 04:39:33 +00:00
7612af4c0e
This commit does the following: - Splits the podman-systemd.unit.5.md into multiple files - one for each quadlet file type. - Adds the podman-quadlet-basic-usage.7.md for quadlet examples. - Majority of the text in the new files is copied from the podman-systemd.unit.5.md - Adds support for very simple condditional in the markdown_preprocess. - Uses new logic in markdown_preprocess in options/*.md to use a single .md file for both podman subcommands man-pages and quadlet man-pages. This deduplicates the Quadlet man-pages a lot. - Adds new `@@option quadlet:source.md`` preprocess command to import such .md files from options directory. Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
27 lines
1.3 KiB
Markdown
27 lines
1.3 KiB
Markdown
####> This option file is used in:
|
|
####> podman build, podman-build.unit.5.md.in, farm build
|
|
####> If file is edited, make sure the changes
|
|
####> are applicable to all of those.
|
|
<< if is_quadlet >>
|
|
### `Secret=id=id[,src=envOrFile][,env=ENV][,type=file | env]`
|
|
<< else >>
|
|
#### **--secret**=**id=id[,src=*envOrFile*][,env=*ENV*][,type=*file* | *env*]**
|
|
<< endif >>
|
|
|
|
Pass secret information to be used in the Containerfile for building images
|
|
in a safe way that will not end up stored in the final image, or be seen in other stages.
|
|
The value of the secret will be read from an environment variable or file named
|
|
by the "id" option, or named by the "src" option if it is specified, or from an
|
|
environment variable specified by the "env" option. See [EXAMPLES](#examples).
|
|
The secret will be mounted in the container at `/run/secrets/id` by default.
|
|
|
|
To later use the secret, use the --mount flag in a `RUN` instruction within a `Containerfile`:
|
|
|
|
`RUN --mount=type=secret,id=mysecret cat /run/secrets/mysecret`
|
|
|
|
The location of the secret in the container can be overridden using the
|
|
"target", "dst", or "destination" option of the `RUN --mount` flag.
|
|
|
|
`RUN --mount=type=secret,id=mysecret,target=/run/secrets/myothersecret cat /run/secrets/myothersecret`
|
|
|
|
Note: changing the contents of secret files will not trigger a rebuild of layers that use said secrets.
|