build a docker image containing a github packages module

[MeroFuruya]

Select Topic Area

Question

Body

i have an app that uses some private npm packages hosted on github-packages.

they can be accesed via the secrets.GITHUB_TOKEN

now i want to containerize that image using docker and host the image with github-packages

now when i want to build the package in github actions and npm wants to install the dependencies in the image, there is an acces error when trying to fetch the npm package hosted on gh-packages.

i tried giving the npm in the image an npmrc file with secret files:

      - name: create .npmrc
        run: echo -e "//npm.pkg.github.com/:_authToken=${{ secrets.GITHUB_TOKEN }}\n@MeroFuruya:registry=https://npm.pkg.github.com/" > .secret_npmrc
      - name: Build and push Docker image
        uses: docker/build-push-action@v4
        with:
          context: .
          push: true
          secrets: |
            id=npmrc,src=./.secret_npmrc
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}

# ofc i do copy all my source code and package.json/package-lock.json but thats not important atm ig
RUN --mount=type=secret,id=npmrc,target=/root/.npmrc cat /root/.npmrc # <- it says there is no such file or directory
RUN --mount=type=secret,id=npmrc,target=/root/.npmrc npm ci
CMD ["npm", "start"]

i always get this error:

3.637 npm ERR! 401 Unauthorized - GET https://npm.pkg.github.com/download/@MeroFuruya/my-package/2.0.3/<id> - authentication token not provided

[yalegria]

Did you ever figure out this? I'm getting the same error when trying to build my image.

[MeroFuruya]

hey @yalegria, yeah i do remember figuring a way out..
but i dont remember exacly what i did to make it work.

checked the commit log real quick. only difference i see is that i cretaed and mounted the file in another way:

      - name: create .npmrc
        run: 'echo -e "//npm.pkg.github.com/:_authToken=$GITHUB_TOKEN\n@mac-brand-spaces:registry=https://npm.pkg.github.com/" > .secret_npmrc'
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Build and push Docker image
        uses: docker/build-push-action@v4
        with:
          context: .
          push: true
          secret-files: |
            "npmrc=./.secret_npmrc"
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}

RUN --mount=type=secret,id=npmrc,target=/root/.npmrc npm ci

hope this helps ❤️

[JChengLinH]

Is your {{ secrets.GITHUB_TOKEN }} able to access GitHub packages created from other repositories?
We are also trying to install some private npm packages, but the token doesn’t have permissions to access repositories other than the one the workflow is being run.

[MeroFuruya]

@JChengLinH sorry for the late reply
so iirc one thing i had to do was
adding the repo i want to use the package in
to "Manage Actions access" in the packages settings.

the github action itself didnt need any special/non-default permissions

[jricciardi]

Thank you for coming back to this one with an answer @MeroFuruya!

[JChengLinH]

@MeroFuruya Thanks a lot! 😁 Tried with that setting. However, still didn’t manage to authenticate the workflow. We decided to move on to gcp artifact registry instead since we also need a place to store python package 😔

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬