3 ms·
Has anyone built or know of a convenient secrets management/workflow for services deployed by systemd? My wants: - Secrets not visible by inspecting process e
by akshayKMR 2y ago
Has anyone built or know of a convenient secrets management/workflow for services deployed by systemd?
My wants:
- Secrets not visible by inspecting process env vars (/proc/PID/environ).
- No secrets on disk (encrypted is fine).
- MadnessASAP 2y ago*Trigger warning: systemd* systemd does that, SetCredentialEncrypted= https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html https://www.freedesktop.org/software/systemd/man/latest/syst... Provide a TPM encrypted credential (made by systemd-cred) and it will be decrypted and placed in a memory backed file within a private namespace mount.