I wanted to run Google Cloud’s gcloud commandline tool in a Docker container and, modulo security flaws in Docker for Mac, not expose my entire home directory to it. A wrapper script got me most of the way there:

When I originally moved my blog away from Tumblr, I followed the below pages:

• the Hugo folks’ guide to deploying on Firebase
• this helpful blog post by Robert Sahlin
• GCP notes on encrypting deployment tokens with KMS.

In short, this blog is:

• maintained in a Github repository
• deployed with Google Cloud Build
• hosted in Firebase.

This got me almost all of the way there. I encountered the below traps:

• Git submodules
• failing to add public/[a-z]* to .gitignore and .gcloudignore