5 ms·
I'd really like systemd to implement a keyring/keychain like service that could be used for all secrets (gpg, ssh, passwords, etc.) even when you do not have a
by laktak 5y ago
I'd really like systemd to implement a keyring/keychain like service that could be used for all secrets (gpg, ssh, passwords, etc.) even when you do not have a UI.
- arccy 5y agosystemd-creds gets you part of the way there
- Nextgrid 5y agoIdeally something that could use the TPM or whatever other secure element is in the machine.
- zaik 5y agoCheckout the LoadCredentialEncrypted= option.
- tga 5y agoI'm genuinely curious, why would you like this to be a part of systemd instead of an independent system service?
- throwaway984393 5y agoKnow how companies love to create "microservices" that all share the same database? I think the same reason for that is why people like shoving more stuff into systemd. It might be a bad design but it's convenient. It's sad that more and more applications are unusable without systemd.
- yoyohello13 5y agoAs much as people hate on systemd. It’s pretty easy to use and having a bunch of system services designed to interop nicely is great. I use systemd-boot, systemd-networkd, systemd-timers (instead of cron), logind and I’m interested in checking out systemd-homed at some point. Having a systemd component to manage creds would be nice.
- jackosdev 5y agoI'm the same, I love having all the core stuff I need in there, and I find it all really easy to understand. Hardcore Linux people just hate it because it abandons their main tenant of "do one thing and do it well"