get private envs for dockerimage