如何解决构建docker镜像时JFrog配置读取错误-[错误]打开/根/.jfrog/jfrog-cli.conf:只读文件系统

Question

我正在构建一个docker镜像并得到错误：

 => ERROR [14/36] RUN --mount=type=secret,id=jfrog-cfg,target=/root/.jfrog/jfrog-cli.conf     jfrog rt dl --flat artifact  0.7s
------                                                                                                                       
 > [14/36] RUN --mount=type=secret,id=jfrog-cfg,target=/root/.jfrog/jfrog-cli.conf     jfrog rt dl --flat artifact/artifact.tar.gz;     set -eux;     mkdir -p /usr/local/artifact;     tar xzf artifact.tar.gz -C /usr/local/;     ln -s /usr/local/artifact /usr/local/artifact;:
#22 0.524 [Error] open /root/.jfrog/jfrog-cli.conf: read-only file system
------
failed to solve with frontend dockerfile.v0: failed to solve with frontend gateway.v0: rpc error: code = Unknown desc = failed to build LLB: executor failed running [/bin/bash -eo pipefail -c jfrog rt dl --flat artifact/${ART_TAG}.tar.gz;     set -eux;     mkdir -p /usr/local/${ART_TAG};     tar xzf ${ART_TAG}.tar.gz -C /usr/local/;     ln -s /usr/local/${ART_VERSION} /usr/local/artifact;]: runc did not terminate sucessfully

我用来构建docker镜像的命令是DOCKER_BUILDKIT=1 docker build -t imagename . --secret id=jfrog-cfg,src=${HOME}/.jfrog/jfrog-cli.conf (jfrog config存在于${HOME}/.jfrog/jfrog-cli.conf)

JFrog正在工作，我正在下载的工件存在，因为我可以使用docker手动下载它。

Answer 1

在Linux上，docker是使用root用户运行的，所以${HOME}是/root，而不是/home/your-user-name或您通常的主文件夹。尝试使用显式的完整路径名，而不是env var。