abandon to use secret, it has too many consequences

+ use classical env technic, but it might not be safe
This commit is contained in:
hugo gogo
2022-09-08 13:05:11 +02:00
parent 035538c95d
commit 3f7a3e2170
5 changed files with 40 additions and 40 deletions

View File

@@ -1,8 +1,8 @@
# DOMAIN_NAME=wil.42.fr
# # certificates
# CERTS_=./XXXXXXXXXXXX
# # MYSQL SETUP
# MYSQL_ROOT_PASSWORD=XXXXXXXXXXXX
# MYSQL_USER=XXXXXXXXXXXX
# MYSQL_PASSWORD=XXXXXXXXXXXX
# [...]
#DOMAIN_NAME=wil.42.fr
## certificates
#CERTS_=./XXXXXXXXXXXX
## MARIADB SETUP
DB_NAME=db_wp_inception
DB_USER=user_wp_inception
DB_PSWD="if you read this i will have to erase your memory"

View File

@@ -9,12 +9,12 @@ version: "3.8"
services:
# ---------------------------------
test:
build:
context: ./requirements/test
dockerfile: Dockerfile
image: test
container_name: mytest
# test:
# build:
# context: ./requirements/test
# dockerfile: Dockerfile
# image: test
# container_name: mytest
# ---------------------------------
nginx:
#restart: on-failure
@@ -29,16 +29,13 @@ services:
# ---------------------------------
mariadb:
#restart: on-failure
env_file: .env
build:
context: ./requirements/mariadb
dockerfile: Dockerfile
args:
- DB_NAME=${DB_NAME}
- DB_USER=${DB_USER}
- DB_PSWD=${DB_PSWD}
image: mariadb
container_name: mymariadb
#--secret id=mysecret,src=mysecret.txt
secrets:
- my_secret
secrets:
my_secret:
file: ./secret.txt

View File

@@ -1,20 +1,17 @@
FROM debian:buster
ARG DEBIAN_FRONTEND=noninteractive
# docker build --secret tag : https://docs.docker.com/develop/develop-images/build_enhancements/#new-docker-build-secret-information)
# use secret with docker : https://www.rockyourcode.com/using-docker-secrets-with-docker-compose/)
RUN --mount=type=secret,id=my_secret cat /run/secrets/my_secret.txt
#RUN cat /run/secrets/my_secret.txt
ARG DB_NAME
ARG DB_USER
ARG DB_PSWD
RUN apt update && \
apt install -y mariadb-client mariadb-server && \
rm -rf /var/lib/apt/lists/* && \
\
service mysql start && \
mariadb --execute="CREATE DATABASE db_hugo_test;" && \
mariadb --execute="CREATE USER 'u_hugo_test'@'localhost' IDENTIFIED BY 'hello';" && \
mariadb --execute="GRANT ALL PRIVILEGES ON *.* TO 'u_hugo_test'@'localhost' with grant option;"
mariadb --execute="CREATE DATABASE ${DB_NAME};" && \
mariadb --execute="CREATE USER '${DB_USER}'@'localhost' IDENTIFIED BY '${DB_PSWD}';" && \
mariadb --execute="GRANT ALL PRIVILEGES ON *.* TO '${DB_USER}'@'localhost' with grant option;"
CMD [ "mysqld" ]

View File

@@ -0,0 +1 @@
mon_super_mot_de_passe