!XLCFfvFhUkYwOMLbVx:nixos.org

agenix

322 Members
age-encrypted secrets for NixOS https://github.com/ryantm/agenix/94 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
6 Mar 2025
@frankingfish45:matrix.org@frankingfish45:matrix.org joined the room.04:48:43
@frankingfish45:matrix.org@frankingfish45:matrix.org removed their display name frankingfish45.08:07:56
@frankingfish45:matrix.org@frankingfish45:matrix.org left the room.08:08:38
7 Mar 2025
@qyriad:katesiria.orgQyriad changed their display name from Qyriad to qyriad.16:58:25
8 Mar 2025
@laurent:matrix.fdn.frlaurentHi there, Im new to the nixos ecosystem. I asked a question on the agenix discussion page https://github.com/ryantm/agenix/discussions/312, regarding agenix asking for my passkey passphrase on boot, with no timeout.nixos logo will spin forever unless i press esc at the right time(otherwise if i press too late, boot sequence is basically frozen). Any tip on how to avoid this without having a private key without a passphrase?06:08:59
@k900:0upti.meK900That's not really the intended use cass06:19:48
@k900:0upti.meK900You probably want full disk encryption 06:20:00
@laurent:matrix.fdn.frlaurent
In reply to @k900:0upti.me
That's not really the intended use cass
What do you mean? What is the intended use case? My understanding is just to encrypt password, tokens... with my private ssh key so that i can put my nixos config on github
06:23:43
@k900:0upti.meK900Yes, but it's not really designed to be used interactively06:41:00
@k900:0upti.meK900The way you're trying to use it06:41:04
@k900:0upti.meK900If you want that kind of thing, you should encrypt to a secret like your machine's SSH host key06:41:21
@k900:0upti.meK900That is stored on an encrypted disk06:41:29
@horigome:matrix.org@horigome:matrix.org left the room.06:57:30
@laurent:matrix.fdn.frlaurent
In reply to @k900:0upti.me
If you want that kind of thing, you should encrypt to a secret like your machine's SSH host key
Hum I think I wasnt clear sorry. I dont want the boot sequence to be interactive and asking for my ssh host key password. Maybe i didnt set up my ssh key good enough with nix?
07:06:43
@k900:0upti.meK900You don't want any password prompts at all?07:07:03
@k900:0upti.meK900Then you just need to encrypt to your SSH host key07:07:16

Show newer messages


Back to Room ListRoom Version: 6