> How to distribute secrets if not by env? (which I agree! Honest question) You'll want to use BuildKit (`docker buildx`), see https://docs.docker.com/develop/

> How to distribute secrets if not by env? (which I agree! Honest question) You'll want to use BuildKit (`docker buildx`), see https://docs.docker.com/develop/develop-images/build_enhancements/#new-docker-build-secret-information https://docs.docker.com/develop/develop-images/build_enhance... [edit] My bad, that works for secrets needed at build time, not at runtime of course.