fix

Author: marcoieni

src/ci/docker/run.sh

@@ -106,14 +106,20 @@ if [ -f "$docker_dir/$image/Dockerfile" ]; then
     CACHE_IMAGE_TAG=${REGISTRY}/${REGISTRY_USERNAME}/rust-ci-cache:${cksum}
 
     # Docker build arguments.
-    build_args="build --rm -t rust-ci -f $dockerfile $context"
+    build_args=(
+        "build"
+        "--rm"
+        "-t" "rust-ci"
+        "-f" "$dockerfile"
+        "$context"
+    )
 
     # If the environment variable SCRIPT is defined,
     # set the build argument SCRIPT_ARG to SCRIPT.
     # In this way, we run the SCRIPT defined in CI,
     # instead of the one defined in the Dockerfile.
     if [ -n "${SCRIPT+x}" ]; then
-      build_args="${build_args} --build-arg \"SCRIPT_ARG=${SCRIPT}\""
+      build_args+=("--build-arg" "SCRIPT_ARG=\"${SCRIPT}\"")
     fi
 
     # On non-CI jobs, we try to download a pre-built image from the rust-lang-ci
@@ -126,7 +132,7 @@ if [ -f "$docker_dir/$image/Dockerfile" ]; then
             docker tag "${IMAGE_TAG}" rust-ci
         else
             echo "Building local Docker image"
-            retry docker ${build_args}
+            retry docker "${build_args[@]}"
         fi
     # On PR CI jobs, we don't have permissions to write to the registry cache,
     # but we can still read from it.
@@ -138,7 +144,7 @@ if [ -f "$docker_dir/$image/Dockerfile" ]; then
         # Build the image using registry caching backend
         retry docker \
           buildx \
-          ${build_args} \
+          "${build_args[@]}" \
           --cache-from type=registry,ref=${CACHE_IMAGE_TAG} \
           --output=type=docker
     # On auto/try builds, we can also write to the cache.
@@ -154,7 +160,7 @@ if [ -f "$docker_dir/$image/Dockerfile" ]; then
         # Build the image using registry caching backend
         retry docker \
           buildx \
-          ${build_args} \
+          "${build_args[@]}" \
           --cache-from type=registry,ref=${CACHE_IMAGE_TAG} \
           --cache-to type=registry,ref=${CACHE_IMAGE_TAG},compression=zstd \
           --output=type=docker