4 ms·
environment variables are problematic, as they can be read by other processes potentially. Vault or another secrets management tool is a better option. A secret
by justincormack 10y ago
environment variables are problematic, as they can be read by other processes potentially. Vault or another secrets management tool is a better option. A secrets management solution integrated into Docker is planned, as it is difficult to get right without tooling support.
- vkat 10y agoIs there a way to prevent other processes from reading environment variables?
- bogomipz 10y agoon linux kernel >= 3.2 you can mount /proc with the option hidepid=2. However this isn't a very elegant solution in my opinion.
- bogomipz 10y agoDoes Vault actually address the problem of credentials being visible in the process list? I thought vault only solved the secure distribution part.