Posts/Tools & deployment/Docker & deployment

-1

Question

Docker environment variable exists during build but disappears at runtime

The image builds successfully and prints the variable in one build step, but the Node process sees undefined after deployment.

ARG API_URL
RUN npm run build
CMD ["node", "server.js"]

I am currently considering copying the value into the image with ENV. Is that safe for a server secret?

posted by Youssef El Amrani · 158 views

1 answer

ARG exists only while the image is being built. Inject server secrets when the container starts through your orchestrator's secret mechanism. Do not bake them into an ENV layer because image metadata and cached layers can expose them.

Public browser configuration is a separate case: those values can be compiled into client assets because they are not secrets.

Community answerposted by Omar Haddad

Docker environment variable exists during build but disappears at runtime

1 answer

Your response

Related Tools & deployment posts