Railway•15mo ago

Accessing secret env variables during build step

[variables]
GOPRIVATE="github.com/stroomnetwork"
STROOM_REPOS_ACCESS_KEY="ghp_THIS is Secret, so I can't put it here, but it works if I do"

[phases.install]
aptPkgs = ['...', 'unzip', 'wget', 'jq']
paths = ['~/go/bin', '/usr/local/bin']

cmds = [
    # to support private repo imports
    'git config --global url.https://${STROOM_REPOS_ACCESS_KEY}@github.com/.insteadOf https://github.com/',
    '...',
    'make setup'
]

[variables]
GOPRIVATE="github.com/stroomnetwork"
STROOM_REPOS_ACCESS_KEY="ghp_THIS is Secret, so I can't put it here, but it works if I do"

[phases.install]
aptPkgs = ['...', 'unzip', 'wget', 'jq']
paths = ['~/go/bin', '/usr/local/bin']

cmds = [
    # to support private repo imports
    'git config --global url.https://${STROOM_REPOS_ACCESS_KEY}@github.com/.insteadOf https://github.com/',
    '...',
    'make setup'
]

I need to pass STROOM_REPOS_ACCESS_KEY into a build step, but it's not defined unless I put it plaintext into nixpacks.toml. However, I don't want to commit this value either

24 Replies

Percy•15mo ago

Project ID: fdd52bdc-3766-40b0-9727-44e1356a5da3

caffeinumOP•15mo ago

fdd52bdc-3766-40b0-9727-44e1356a5da3

Brody•15mo ago

have you tried putting it in the service variables?

caffeinumOP•15mo ago

do you mean [variables] section in nixpacks?

Brody•15mo ago

I mean the variables section of the railway service

caffeinumOP•15mo ago

what about locally though? i guess you're right, and that's not a railway feedback, more of a nixpacks feedback

Brody•15mo ago

you use railway run locally still isn't feedback, these are purely questions

caffeinumOP•15mo ago

so you're saying it's not possible to pass a variable into nixpacks build without exposing it plaintext in the nixpacks.toml?

Brody•15mo ago

never said that

caffeinumOP•15mo ago

how do i do that?

Brody•15mo ago

you want to put that variable in the service variables use the service variables

caffeinumOP•15mo ago

yeah, you said that

Brody•15mo ago

https://docs.railway.app/develop/variables#defining-variables

caffeinumOP•15mo ago

this works on railway, but not locally

Brody•15mo ago

caffeinumOP•15mo ago

yes, i tried that now

Brody•15mo ago

or you just login with github locally and you'd be authorised

caffeinumOP•15mo ago

what command do you propose to do w/ railway run? i thought you meant railway run nixpacks build .

caffeinumOP•15mo ago

but https://app.warp.dev/block/O0omKvJm6cpRLOmZC4XMR8

A block has been shared!

railway run nixpacks build . ### ╔═════════════════════�...

caffeinumOP•15mo ago

it doesn't work either

Brody•15mo ago

whatever command needs that github token

caffeinumOP•15mo ago

mm this doesn't really make sense

Brody•15mo ago

I'm not sure what's confusing here so let's only focus on getting this working on railway have you placed your github token in the service variables yet

caffeinumOP•15mo ago

yes, it works on railway, but i also want to be able to build the same image for testing locally the original problem is mostly fixed now, so i will close the issue but it's still not clear to me why it's not possible

Gaming

Programming

Accessing secret env variables during build step