[question/help] How can one use docker-compose to install packages from a requirements file when one is behind a private repo?

Samuele Mattiuzzo — Wed, 29 Jan 2020 17:24:23 +0000

Hi all, I have never asked a question before on DEV.to, but it's about time. I just joined a new project and while trying to get set up, docker-compose up hangs.

Upon inspection of the code, I realised the problem is simply that the package repo we're trying to clone inside the image is a private one.

Without using personal access tokens or whatnot, how would one go about it? The things I'd love to avoid, if possible, are:

user input neede (eg: "export your ssh key before setting all of this up")
intermediate throwaway image with the ssh details in it

The private repo is on bitbucket, that allows to have a Server SSH key in read-only mode to authorise other apps, but that still means (I think?) I'd have to use and share that key somehow.

The app that is trying to pull that package is private as well, so I suspect that shouldn't be an issue, but does not seem solid enough to me.
Thoughts?

Jobless is better than in the wrong job. Insecurity is better than secure-but-with-caveats

Samuele Mattiuzzo — Mon, 11 Nov 2019 17:41:29 +0000

Friday I took a decision, I did something I have never done before in my life: I put values ahead of money, fear and security. I decided that being jobless was better than being in the wrong job, furthering a really bad cause.

I had accepted a new job in the gambling sector. For a month, that did my head in. It's not something I can endorse, nor I can ignore. It's not a sector I believe should even exist.

After a month of internal struggles, fighting with the always-in-my-head-disappointed-father thought, I have spent a day thinking.

And I did turn around. I'd rather be 2 months jobless than have a pay that comes from that.

What happened after this? I had spent the week bedridden due to illness. It all cleared out within an hour after voiding the contract I had signed. I am now looking forward to December and January without a job. I have never taken more than 5 days off work over a year in my entire life, so this is now scary and exciting!

Be true to yourselves, be yourselves, be a good human.

Also this is my first ever post on DEV.TO!

DEV Community: Samuele Mattiuzzo

[question/help] How can one use docker-compose to install packages from a requirements file when one is behind a private repo?

Jobless is better than in the wrong job. Insecurity is better than secure-but-with-caveats