Skip to content

Mount the secret as jovyan so it can be copied #17

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
choldgraf merged 1 commit into from
Aug 25, 2026
Merged

Mount the secret as jovyan so it can be copied #17

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion appendix
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,9 @@ RUN cp /srv/repo/custom_jupyter_server_config.json ${NB_PYTHON_PREFIX}/etc/jupyt

# Mothership GCP service account key — workshop-scoped, revoked after.
# required=false so PR/test builds (which never receive this secret) don't fail.
RUN --mount=type=secret,id=gcp_key,required=false \
# We use uid=1000 because this step is run as jovyan, and BuildKit mounts
# secrets as owned by root by default, so this lets jovyan read them.
RUN --mount=type=secret,id=gcp_key,required=false,uid=1000 \
if [ -s /run/secrets/gcp_key ]; then \
mkdir -p ${NB_PYTHON_PREFIX}/etc/gcp && \
cp /run/secrets/gcp_key ${NB_PYTHON_PREFIX}/etc/gcp/mothership-key.json && \
Expand Down
Loading