Function TestBuildSecrets

integration/integration_test.go:1229–1273

(t *testing.T)

}

func TestBuildSecrets(t *testing.T) {
	t.Parallel()

	buildSecretVal := "foo"

	srv := gittest.CreateGitServer(t, gittest.Options{
		Files: map[string]string{
			".devcontainer/devcontainer.json": `{
				"name": "Test",
				"build": {
					"dockerfile": "Dockerfile"
				},
			}`,
			".devcontainer/Dockerfile": "FROM " + testImageAlpine +
				// Test whether build secrets are written to the default location
				"\nRUN --mount=type=secret,id=FOO cat /run/secrets/FOO > /foo_from_file" +
				// Test whether:
				// * build secrets are written to env
				// * build secrets are written to a custom target
				// * build secrets are both written to env and target if both are specified
				"\nRUN --mount=type=secret,id=FOO,env=FOO,target=/etc/foo echo $FOO > /foo_from_env && cat /etc/foo > /foo_from_custom_target" +
				// Test what happens when you specify the same secret twice
				"\nRUN --mount=type=secret,id=FOO,target=/etc/duplicate_foo --mount=type=secret,id=FOO,target=/etc/duplicate_foo cat /etc/duplicate_foo > /duplicate_foo_from_custom_target",
		},
	})

	ctr, err := runEnvbuilder(t, runOpts{env: []string{
		envbuilderEnv("GIT_URL", srv.URL),
		envbuilderEnv("GIT_PASSWORD", "supersecret"),
		envbuilderEnv("BUILD_SECRETS", fmt.Sprintf("FOO=%s", buildSecretVal)),
	}})
	require.NoError(t, err)

	output := execContainer(t, ctr, "cat /foo_from_file")
	assert.Equal(t, buildSecretVal, strings.TrimSpace(output))

	output = execContainer(t, ctr, "cat /foo_from_env")
	assert.Equal(t, buildSecretVal, strings.TrimSpace(output))

	output = execContainer(t, ctr, "cat /foo_from_custom_target")
	assert.Equal(t, buildSecretVal, strings.TrimSpace(output))

	output = execContainer(t, ctr, "cat /duplicate_foo_from_custom_target")
	assert.Equal(t, buildSecretVal, strings.TrimSpace(output))
}

func TestLifecycleScripts(t *testing.T) {
	t.Parallel()