3 ms·
>I prefer using system secret stores to environment variables What is the recommended way to store secrets in a Linux dev machine? The requirement is random sc
by ducktective 2y ago
>I prefer using system secret stores to environment variables
What is the recommended way to store secrets in a Linux dev machine? The requirement is random scripts and programs should be able to load their secrets like API keys at runtime with minimum hassle. And the secrets shouldn't be stored on disk in plain-text.
I see you recommended keyring [1]. Is this "the GNU/linux way"? I see another possibility being storing them in an encrypted filesystem (whether FUSE-based or not)
[1]: https://github.com/llimllib/gpt-bash-cli/blob/841682affe2d0e33ecb8ab9c5a66765b25b8c134/gpt#L87 https://github.com/llimllib/gpt-bash-cli/blob/841682affe2d0e...
- llimllib 2y agoI did a fair amount of looking to try and support a Linux secret store! My conclusion was that I was too confused and so I punted to keyring which seemed to paper over a few different stores. It seems like a classic story of unfortunate Linux fragmentation