If you can alter it, base64
the secret without wrapping lines?
And un-base64 it before reading it back.
Fly’s builders don’t use buildkit, btw. But if you need to, I guess you can build the docker image offline (on a AMD/Intel machine), you can later push it to Fly: Push to Fly.io image registry via Docker API - #2 by ignoramous
In case you didn’t know (and if it fits your needs):
flyctl deploy --local-only
builds a docker image locally (as opposed to on a Fly builder) and deploys it to your app.flyctl deploy --local-only --build-only
builds the image locally and pushes it to Fly’s docker registry, which you can later deploy (docs).