【运维】解决容器中supervisord无法获取宿主机环境变量的问题

dockerfile构建镜像
docker-compose运行容器
supervisor进程管理

部署过程中，想通过在宿主机上设置环境变量，容器获取宿主机的环境变量，服务使用环境变量启动

首先想到的是通过docker-compose.yml文件中的environment标签，将宿主机的环境变量传入容器中

# docker-compose.yml
version: "3.8"
services: 
  service:
  	...
    environment:
      - requestSecret=$requestSecret
      - username=$username
      - password=$password

结果也确实传入容器中了，但supervisor启动的服务并没有获取到环境变量
这是因为

Subprocesses will inherit the environment of the shell used to start the supervisord program. Several environment variables will be set by supervisord itself in the child’s environment also, including SUPERVISOR_ENABLED (a flag indicating the process is under supervisor control), SUPERVISOR_PROCESS_NAME (the config-file-specified process name for this process) and SUPERVISOR_GROUP_NAME (the config-file-specified process group name for the child process).
These environment variables may be overridden within the [supervisord] section config option named environment (applies to all subprocesses) or within the per- [program:x] section environment config option (applies only to the subprocess specified within the [program:x] section). These “environment” settings are additive. In other words, each subprocess’ environment will consist of:
The environment variables set within the shell used to start supervisord…
… added-to/overridden-by …
… the environment variables set within the “environment” global
config option …
… added-to/overridden-by …
… supervisor-specific environment variables
(SUPERVISOR_ENABLED, SUPERVISOR_PROCESS_NAME, SUPERVISOR_GROUP_NAME) …
… added-to/overridden-by …
… the environment variables set within the per-process
“environment” config option.

参考：https://supervisord.readthedocs.io/en/latest/subprocess.html#subprocess-environment

简单来说就是supervisor的子进程继承了启动supervisord进程的shell的环境变量。而我启动supervisord的命令是在dockerfile文件中

RUN ...
...
ENTRYPOINT ["supervisord", "-n", "-c", "/app/supervisord.conf"]

所以思路就是在执行’supervisord -n -c /app/supervisord.conf’这条命令的同时，执行

export requestSecret='xxxxxx'
export username='xxxxxx'
export password='xxxxxx' 

如果在dockerfile文件中添加上面的命令，思路就是在docker-compose.yml中将环境变量传入dockerfile

# docker-compose.yml
version: "3.8"
services: 
  service:
    build: 
      context: .
      args:
        requestSecret: $requestSecret
        username: $username
        password: $password

# dockerfile
ARG requestSecret
ARG username
ARG password

再通过某些方式在CMD或ENTRYPOINT中同时执行多条命令
经过我的摸索，上面的方式没有成功，如果你知道方法，望不吝赐教🙏

另一种思路是在docker-compose.yml中做文章

# docker-compose.yml
version: "3.8"
services: 
  service:
    build: .
    command: >
      bash -c "export requestSecret=${requestSecret}
      && export username=${username}
      && export password=${password}
      && supervisord -n -c /app/supervisord.conf"

再将dockerfile文件中原有的ENTRYPOINT剔除
如此就解决之前的问题了
最终docker-compose.yml如下所示：

# docker-compose.yml
version: "3.8"
services: 
  service:
    build: .
    command: >
      bash -c "export requestSecret=${requestSecret}
      && export username=${username}
      && export password=${password}
      && supervisord -n -c /app/supervisord.conf"
    environment:
      - requestSecret=$requestSecret
      - username=$username
      - password=$password
   	...

不仅运行后环境变量传入容器中，supervisor也能获取到环境变量

注意docker-compose.yml想要在引号中使用环境变量，需要如下写法

"${环境变量}"

参考：https://stackoverflow.com/a/33186458