buildkit ssh support

[hpcsc]

Hi, I can see that batect supports buildkit as mentioned here

However, in order to use buildkit features, such as ssh mount type, we need to pass additional flag --ssh to docker build. I'm not very clear how to do that when running batect command. Is it supported?

Thanks

[charleskorn]

Hi @hpcsc, unfortunately this isn't currently supported. I am actively working on replacing the Docker client used by Batect so that I can add support for features like this more easily, but I can't make any promises about when it will be available just yet.

[hpcsc]

ah ok too bad. Thanks for your answer

[mpdude]

I might be missing something, but what about adding

    volumes:
      - local: $SSH_AUTH_SOCK
        container: /tmp/ssh_auth_sock
    environment:
      SSH_AUTH_SOCK: /tmp/ssh_auth_sock

... to your container definition in batect.yml? That should bind-mount your current SSH agent auth socket into the running container so that you can use loaded SSH identities e. g. for git clone.

[charleskorn]

@mpdude volume mounts like that one will only apply at run time. My understanding is that @hpcsc would like to do something similar but during the image build.

[hpcsc]

yes, my specific use case is golang application that uses private dependencies. I want to use buildkit ssh with batect containers because I need to use it for multi-stage docker build for production image anyway. Alternative to that is to mount volume like you mentioned and get Go dependencies at runtime when running batect tasks.

also, another advantage of buildkit ssh is that the ssh forwarding is only applied to the specific RUN command with --mount=type=ssh. Other commands in dockerfile don't have access to ssh

[mpdude]

Totally makes sense.

My mental picture was one where you run containers to get things done, as this is where Batect seems to be most useful to me. For example, have a node container in Batect that you can use to run yarn, gulp etc. tasks.

[charleskorn]

This is now supported in v0.82 🎉 Please give it a go and let me know if you have any feedback.