This question betrays a lot of ignorance, so please be nice.
Problem: building Node or Python applications in a container where the code depends on modules in private git repositories (on BitBucket, Github, etc) accessed via ssh without adding the ssh keys to the container.
Proposed Solution: using the ssh credentials already on my host, check out the code to the local build context before the build begins and modify package.json/requirements.txt to install from local sources instead of git.
Is there a tool that already does this? I couldn’t figure out a way to get
npm to pull modules locally for me without running the module’s build scripts. I just want the code, no build actions. I haven’t tried with
pip yet, but I suspect I’ll hit the same kind of problems.
So I’m thinking of writing something that just parses
requirements.txt and pulls out the git locations, then
git pulls them to a subdirectory, then updates the dependency file to show the new location. If I need it to get fancy, I can do that recursively, but my current private dependencies are only one layer deep.
What do you think? is there a better way to do this?