3 ms·
You can proxy the UNIX socket to a network server if you want to. You can even use SSL encryption at all times too.
by otabdeveloper4 6mo ago
You can proxy the UNIX socket to a network server if you want to. You can even use SSL encryption at all times too.
- lmz 6mo agoOnce it's networked you lose the "whitelist of systemd services" and it's then no different from any networked secret store.
- otabdeveloper4 6mo agoNo, this is a solved problem: https://spiffe.io/ https://spiffe.io/ You can do service attestation securely, even for networked services.
- burnished 5mo agoNice. Really grateful for your participation in this comment tree