Switch to cmd array so we can redact

lib/mrsk/commands/app.rb

@@ -1,37 +1,47 @@
-# FIXME: Use Shellwords.join
 class Mrsk::Commands::App < Mrsk::Commands::Base
   def push
     # TODO: Run 'docker buildx create --use' when needed
     # TODO: Make multiarch an option so Linux users can enjoy speedier builds
-    "docker buildx build --push --platform=linux/amd64,linux/arm64 -t #{config.absolute_image} ."
+    docker :buildx, :build, "--push", "--platform linux/amd64,linux/arm64", "-t", config.absolute_image, "."
   end
 
   def pull
-    "docker pull #{config.absolute_image}"
+    docker :pull, config.absolute_image
   end
 
   def run
-    "docker run -d --restart unless-stopped --name #{config.service_with_version} #{config.envs} #{config.labels} #{config.absolute_image}"
+    docker :run,
+      "-d",
+      "--restart unless-stopped",
+      "--name", config.service_with_version,
+      "-e", redact("RAILS_MASTER_KEY=#{config.master_key}"),
+      config.envs,
+      config.labels,
+      config.absolute_image
   end
 
   def start
-    "docker start #{config.service_with_version}"
+    docker :start, config.service_with_version
   end
 
   def stop
-    "docker ps -q #{service_filter} | xargs docker stop"
+    [ "docker ps -q #{service_filter} | xargs docker stop" ]
   end
 
   def info
-    "docker ps #{service_filter}"
+    docker :ps, service_filter
+  end
+
+  def logs
+    [ "docker ps -q #{service_filter} | xargs docker logs -f" ]
   end
 
   def remove_containers
-    "docker container prune -f #{service_filter}"
+    docker :container, :prune, "-f", service_filter
   end
 
   def remove_images
-    "docker image prune -a -f #{service_filter}"
+    docker :image, :prune, "-a", "-f", service_filter
   end
 
   private

lib/mrsk/commands/registry.rb

@@ -1,9 +1,11 @@
 class Mrsk::Commands::Registry < Mrsk::Commands::Base
+  delegate :registry, to: :config
+
   def login
-    "docker login #{config.registry["server"]} -u #{config.registry["username"]} -p #{config.registry["password"]}"
+    docker :login, registry["server"], "-u", redact(registry["username"]), "-p", redact(registry["password"])
   end
 
   def logout
-    "docker logout #{config.registry["server"]}"
+    docker :logout, registry["server"]
   end
 end

lib/mrsk/commands/traefik.rb

@@ -1,29 +1,35 @@
 class Mrsk::Commands::Traefik < Mrsk::Commands::Base
   def run
-    "docker run --name traefik " + 
-      "-d --restart unless-stopped " +
-      "-p 80:80 " +
-      "-v /var/run/docker.sock:/var/run/docker.sock " +
-      "traefik --providers.docker"
+    docker :run, "--name traefik",
+      "-d",
+      "--restart unless-stopped",
+      "-p 80:80",
+      "-v /var/run/docker.sock:/var/run/docker.sock",
+      "traefik",
+      "--providers.docker"
   end
 
   def start
-    "docker container start traefik"
+    docker :container, :start, "traefik"
   end
 
   def stop
-    "docker container stop traefik"
+    docker :container, :stop, "traefik"
   end
 
   def info
-    "docker ps --filter name=traefik"
+    docker :ps, "--filter name=traefik"
+  end
+
+  def logs
+    docker :logs, "traefik"
   end
 
   def remove_container
-    "docker container prune -f --filter label=org.opencontainers.image.title=Traefik"
+    docker :container, :prune, "-f", "--filter label=org.opencontainers.image.title=Traefik"
   end
 
   def remove_image
-    "docker image prune -a -f --filter label=org.opencontainers.image.title=Traefik"
+    docker :image, :prune, "-a", "-f", "--filter label=org.opencontainers.image.title=Traefik"
   end
 end