Installing private Git repositories through npm install in Docker

Mon, 17 Jun 2019 13:30:02 +0200

How do you properly use an SSH key in a Dockerfile? There are many ways to do it, including many ways to do it wrong. What you will want to prevent is that your ssh key ends up in one of your intermediate images or layers. These are the layers that Docker creates with pretty much every command in your Dockerfile. You may think that you properly clean up your secrets later in the Dockerfile, but the secret will then still be available in one of these layers.

Docker on Sander Knape

Installing private Git repositories through npm install in Docker