debug 13

Author: AlexeyKuznetsov-DD

Dockerfile

@@ -6,7 +6,6 @@ FROM eclipse-temurin:${LATEST_VERSION}-jdk-noble AS temurin-latest
 # Intermediate image used to prune cruft from JDKs and squash them all.
 FROM ubuntu:latest AS all-jdk
 ARG LATEST_VERSION
-ARG ORACLE_JAVA8_TOKEN
 
 RUN <<-EOT
 	set -eux
@@ -72,10 +71,10 @@ WORKDIR /home/non-root-user
 # Note:
 # 1. Token can be created here: https://cloud.oracle.com/?tenant=ddsbxplayground&domain=datadog&region=us-ashburn-1
 # 2. Once created, token should be added to GitHub protected environment by repository administrator.
-RUN <<-EOT
+RUN --mount=type=secret,id=oracle_java8_token,uid=1001,gid=1001,mode=0400 <<-EOT
 	set -eux
 	sudo mkdir -p /usr/lib/jvm/oracle8
-	echo "token is: $ORACLE_JAVA8_TOKEN"
+	ORACLE_JAVA8_TOKEN="$(cat /run/secrets/oracle_java8_token)"
 	sudo curl -L --fail -H "token:${ORACLE_JAVA8_TOKEN}" https://java.oraclecloud.com/java/8/latest/jdk-8-linux-x64_bin.tar.gz | sudo tar -xvzf - -C /usr/lib/jvm/oracle8 --strip-components 1
 	unset ORACLE_JAVA8_TOKEN
 EOT

build

@@ -72,7 +72,7 @@ function docker_build() {
     shift
     docker build \
         --build-arg LATEST_VERSION=$LATEST_VERSION \
-        --build-arg ORACLE_JAVA8_TOKEN=$ORACLE_JAVA8_TOKEN \
+        --secret id=oracle_java8_token,env=ORACLE_JAVA8_TOKEN \
         --platform linux/amd64 \
         --label org.opencontainers.image.created="$BUILD_DATE" \
         --label org.opencontainers.image.source=https://github.com/DataDog/dd-trace-java-docker-build \