-
Notifications
You must be signed in to change notification settings - Fork 2.9k
Open
Labels
kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.macosMacOS (OSX) relatedMacOS (OSX) relatedremoteProblem is in podman-remoteProblem is in podman-remotetriagedIssue has been triagedIssue has been triaged
Description
Issue Description
I can't get secrets to work. I'm trying to follow the documentation as described here but am unable to reproduce it. I'm not sure if this is a bug, documentation, or a keyboard-chair interface problem.
Steps to reproduce the issue
FROM python:3.10-slim-trixie AS builder
RUN --mount=type=secret,id=mysecret echo $(cat /run/secrets/mysecret)MYSECRET='qwerty' podman build --secret=id=mysecret,env=MYSECRET . --no-cacheDescribe the results you received
STEP 1/2: FROM python:3.10-slim-trixie AS builder
STEP 2/2: RUN --mount=type=secret,id=mysecret echo $(cat /run/secrets/mysecret)
COMMIT
--> 256d6061a45d
256d6061a45d300be4aa0928acda4c74fd155f6293e017c57746b2bc94b6e29eDescribe the results you expected
STEP 1/2: FROM python:3.10-slim-trixie AS builder
STEP 2/2: RUN --mount=type=secret,id=mysecret echo $(cat /run/secrets/mysecret)
qwerty
COMMIT
--> 256d6061a45d
256d6061a45d300be4aa0928acda4c74fd155f6293e017c57746b2bc94b6e29epodman info output
Client:
APIVersion: 5.6.2
BuildOrigin: brew
Built: 1759243846
BuiltTime: Tue Sep 30 16:50:46 2025
GitCommit: ""
GoVersion: go1.25.1
Os: darwin
OsArch: darwin/arm64
Version: 5.6.2
host:
arch: arm64
buildahVersion: 1.40.1
cgroupControllers:
- cpuset
- cpu
- io
- memory
- pids
- rdma
- misc
cgroupManager: systemd
cgroupVersion: v2
conmon:
package: conmon-2.1.12-3.fc41.aarch64
path: /usr/bin/conmon
version: 'conmon version 2.1.12, commit: '
cpuUtilization:
idlePercent: 99.46
systemPercent: 0.26
userPercent: 0.28
cpus: 6
databaseBackend: sqlite
distribution:
distribution: fedora
variant: coreos
version: "41"
eventLogger: journald
freeLocks: 2031
hostname: localhost.localdomain
idMappings:
gidmap: null
uidmap: null
kernel: 6.12.13-200.fc41.aarch64
linkmode: dynamic
logDriver: journald
memFree: 1110319104
memTotal: 3791691776
networkBackend: netavark
networkBackendInfo:
backend: netavark
dns:
package: aardvark-dns-1.14.0-1.fc41.aarch64
path: /usr/libexec/podman/aardvark-dns
version: aardvark-dns 1.14.0
package: netavark-1.14.0-1.fc41.aarch64
path: /usr/libexec/podman/netavark
version: netavark 1.14.0
ociRuntime:
name: crun
package: crun-1.20-2.fc41.aarch64
path: /usr/bin/crun
version: |-
crun version 1.20
commit: 9c9a76ac11994701dd666c4f0b869ceffb599a66
rundir: /run/crun
spec: 1.0.0
+SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +LIBKRUN +WASM:wasmedge +YAJL
os: linux
pasta:
executable: /usr/bin/pasta
package: passt-0^20250121.g4f2c8e7-2.fc41.aarch64
version: |
pasta 0^20250121.g4f2c8e7-2.fc41.aarch64-pasta
Copyright Red Hat
GNU General Public License, version 2 or later
<https://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
remoteSocket:
exists: true
path: unix:///run/podman/podman.sock
rootlessNetworkCmd: pasta
security:
apparmorEnabled: false
capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
rootless: false
seccompEnabled: true
seccompProfilePath: /usr/share/containers/seccomp.json
selinuxEnabled: true
serviceIsRemote: true
slirp4netns:
executable: /usr/bin/slirp4netns
package: slirp4netns-1.3.1-1.fc41.aarch64
version: |-
slirp4netns version 1.3.1
commit: e5e368c4f5db6ae75c2fce786e31eef9da6bf236
libslirp: 4.8.0
SLIRP_CONFIG_VERSION_MAX: 5
libseccomp: 2.5.5
swapFree: 0
swapTotal: 0
uptime: 2h 34m 5.00s (Approximately 0.08 days)
variant: v8
plugins:
authorization: null
log:
- k8s-file
- none
- passthrough
- journald
network:
- bridge
- macvlan
- ipvlan
volume:
- local
registries:
search:
- docker.io
store:
configFile: /usr/share/containers/storage.conf
containerStore:
number: 6
paused: 0
running: 0
stopped: 6
graphDriverName: overlay
graphOptions:
overlay.additionalImageStores:
- /usr/lib/containers/storage
overlay.imagestore: /usr/lib/containers/storage
overlay.mountopt: nodev,metacopy=on
graphRoot: /var/lib/containers/storage
graphRootAllocated: 28032839680
graphRootUsed: 25529393152
graphStatus:
Backing Filesystem: xfs
Native Overlay Diff: "false"
Supports d_type: "true"
Supports shifting: "true"
Supports volatile: "true"
Using metacopy: "true"
imageCopyTmpDir: /var/tmp
imageStore:
number: 142
runRoot: /run/containers/storage
transientStore: false
volumePath: /var/lib/containers/storage/volumes
version:
APIVersion: 5.5.2
BuildOrigin: 'Copr: packit/containers-podman-26503'
Built: 1750723200
BuiltTime: Tue Jun 24 02:00:00 2025
GitCommit: e7d8226745ba07a64b7176a7f128e4ef53225a0e
GoVersion: go1.23.10
Os: linux
OsArch: linux/arm64
Version: 5.5.2Podman in a container
No
Privileged Or Rootless
None
Upstream Latest Release
Yes
Additional environment details
macoOS 26
Additional information
No response
Metadata
Metadata
Assignees
Labels
kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.macosMacOS (OSX) relatedMacOS (OSX) relatedremoteProblem is in podman-remoteProblem is in podman-remotetriagedIssue has been triagedIssue has been triaged