Use host SSH keys

[tusal-vaisala]

I feel like I'm missing something obvious since I couldn't find any documentation or existing questions about it, but how do I use the host's SSH keys for accessing private repos? Something like RUN --mount=type=ssh one would do in a normal Dockerfile.

Thanks!

[joerick]

I don't really understand the question! cibuildwheel works with code that's on disk - already checked out from a repo, so you wouldn't need SSH keys.

Taking a step back, what are you trying to build and where is the code?

[tusal-vaisala]

Sorry, I'll try to elaborate. I have a CMake project that has python bindings (pybind11). It has a chain of private (and public) dependencies. As I understand, the manylinux docker container, where the CMake project is being build, needs to have access to the private repositories so it can build the project and the bindings. The RUN --mount=type=ssh in a typical Dockerfile helps me with this, but I'm little confused in the context of cibuildwheel and was wondering if there is any example of a correct way to do this.

[joerick]

Gotcha. Then probably you're looking for container-engine, I think you should be able to pass docker; create_args: --mount=type=ssh

[tusal-vaisala]

I tried that but it results in invalid argument "type=ssh" for "--mount" flag: target is required. I think target should have default value, but when trying to manually put the target, I get Error response from daemon: invalid mount config for type "ssh": mount type unknown. If I understand anything from Docker documentation, something like --ssh=default should be given to the buildx command, but I don't know how to get over that with cibuildwheel.

If this is impossible, I'm interested how other people are doing this, because this seems like it should be pretty common scenario

[joerick]

Ah, it looks like that's a feature of docker build. I suppose you could try to copy the SSH keys yourself? E.g. CIBW_BEFORE_ALL="cp -a /host/home/runner/.ssh ~/.ssh".

Or - just spitballing here - you could try setting GIT_SSH_COMMAND e.g. CIBW_ENVIRONMENT="GIT_SSH_COMMAND='ssh -i /host/home/runner/.ssh/id_rsa'".

Yeh, maybe other users with closed source experience have some ideas?