[JIRA] [credentials-binding-plugin] (JENKINS-32943) withCredentials(FileBinding){} ignored when executed in docker.image().inside{...}

[clecl...@cloudbees.com (JIRA)]

Title: Message Title

Cyrille Le Clerc updated an issue   Jenkins / JENKINS-32943 withCredentials(FileBinding){} ignored when executed in docker.image().inside{...} Change By: Cyrille Le Clerc Component/s: credentials-binding-plugin Component/s: ssh-agent-plugin {{ sshagent withCredentials ( 'my-ssh-key' FileBinding )\{...\}}} is ignored in {{docker.image('cloudbees:java-build-tools').inside\{...\}}}. The same  sshagent  withCredentials  step works in 'standard' linux node. See  attached  logs  below. It seems to be because [FileBinding#secretsDir()|https://github.com/jenkinsci/credentials-binding-plugin/blob/689655d67923955358572b37155c26cea4de04be/src/main/java/org/jenkinsci/plugins/credentialsbinding/impl/FileBinding.java#L88] creates a "secretFiles" directory under "node.getRootPath()" that is not 'mounted' in the docker container. {code:title= sshagent withCredentials ( FileBinding )\{...\} ignored in docker.image(...).inside\{...\} } docker.image (' cloudbees/java-build-tools:0.0.7.1 busybox ').inside {     sh 'ls -al ~/.ssh/ || true'     sshagent     withCredentials ([ [$class: ' aws FileBinding', credentialsId: 'secret - cleclerc-ssh-key-ubuntu-cleclerc file ' , variable: 'SECRET_FILE' ] ] ) {        sh ' echo SSH_AUTH_SOCK=$SSH_AUTH_SOCK'        sh ' ls -al $ SSH_AUTH_SOCK || true SECRET_FILE '        sh "ssh -vvv -o StrictHostKeyChecking=no ubu...@docker-agent.beesshop.org uname -a"     } } {code} { code:title=sshagent()\{...\ noformat }  WORKS in Started by user Cyrille Le Clerc [Pipeline] Allocate  node \{...\} }  : Start Running on vagrant in /home/vagrant/jenkins/workspace/test-credentials-binding [Pipeline] node { [Pipeline]     sh  'ls [test  - al ~/ credentials-binding] Running shell script + docker inspect -f . ssh/ || true'  busybox     sshagent( . [ 'aws Pipeline] Run build steps inside a Docker container : Start $ docker run - cleclerc t - ssh d - key u 1000:1000 - ubuntu w /home/vagrant/jenkins/workspace/test - cleclerc' credentials-binding -v /home/vagrant/jenkins/workspace/test-credentials-binding:/home/vagrant/jenkins/workspace/test-credentials-binding:rw -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** busybox cat [Pipeline ] )  withDockerContainer  {        sh 'echo SSH_AUTH_SOCK=$SSH_AUTH_SOCK' [Pipeline] Bind credentials to variables : Start        sh 'ls -al $SSH_AUTH_SOCK || true' [Pipeline] withCredentials { [Pipeline]        sh  "ssh [test  - vvv credentials  - o StrictHostKeyChecking=no ubuntu@docker binding] Running shell script + ls - agent.beesshop.org uname -a" al ****     } ls: ****: No such file or directory } { code noformat } Add Comment   This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.