!XLCFfvFhUkYwOMLbVx:nixos.org

agenix

330 Members
age-encrypted secrets for NixOS https://github.com/ryantm/agenix/98 Servers

Load older messages


SenderMessageTime
23 Feb 2025
@phuetter:matrix.orgPatrick * elikoga: you are my hero! <3 This worked! So simple! I was search for this bug / problem a few hours, did setup a few machines again and again and couldn't fix this problem. Wow, so simple! 19:29:14
@elikoga:matrix.orgelikoga It's related to the fact that nix flakes in a git repository only copy git tracked files to the store 19:29:34
@phuetter:matrix.orgPatrick elikoga: awesome and very important to know! I started with nix a few days ago, coming from normal linux distributions and ansible provisioning. So this will help me to understand more things within nixos-space :) 19:30:43
25 Feb 2025
@horigome:matrix.org@horigome:matrix.org joined the room.19:26:36
@horigome:matrix.org@horigome:matrix.org I'm so lost... have been using agenix for couple of years no problem. Now none of my secrets are decrypted, e.g., when running darwin-rebuild... 19:31:39
@horigome:matrix.org@horigome:matrix.orgWhen running darwin-rebuild I always noticed the decryption step but now it's gone19:33:32
@horigome:matrix.org@horigome:matrix.orgno error or warning or nothing19:33:38
@horigome:matrix.org@horigome:matrix.orgworks fine on my nixos machines19:34:53
@horigome:matrix.org@horigome:matrix.orghow can i debug this19:35:32
@horigome:matrix.org@horigome:matrix.orgwould it fail if it is unable to decrypt?19:37:57
@horigome:matrix.org@horigome:matrix.orge.g., in the activation stage19:38:11
@horigome:matrix.org@horigome:matrix.org🤦20:05:13
@horigome:matrix.org@horigome:matrix.orgFigured it out.20:05:19
@horigome:matrix.org@horigome:matrix.orgJust some permission bs20:05:28
26 Feb 2025
@danielo515:matrix.orgDaniel Rodríguez Rivero joined the room.19:13:42
@danielo515:matrix.orgDaniel Rodríguez RiveroHello everyone. I want to start managing my dotfile secrets with agenix, but I don't want to be tied to host specific keys. Is there any way I can do an initial bootstrap using a passphrase that sets the required infrastructure and then do the normal agenix flow?19:31:13
1 Mar 2025
@Valodim:stratum0.orgValodim joined the room.16:10:47
3 Mar 2025
@bonus:bonusplay.plBonus joined the room.22:50:52
6 Mar 2025
@alarsyo:alarsyo.netalarsyo joined the room.02:33:24
@frankingfish45:matrix.org@frankingfish45:matrix.org joined the room.04:48:43
@frankingfish45:matrix.org@frankingfish45:matrix.org removed their display name frankingfish45.08:07:56
@frankingfish45:matrix.org@frankingfish45:matrix.org left the room.08:08:38
7 Mar 2025
@qyriad:katesiria.orgQyriad changed their display name from Qyriad to qyriad.16:58:25
8 Mar 2025
@laurent:matrix.fdn.frlaurentHi there, Im new to the nixos ecosystem. I asked a question on the agenix discussion page https://github.com/ryantm/agenix/discussions/312, regarding agenix asking for my passkey passphrase on boot, with no timeout.nixos logo will spin forever unless i press esc at the right time(otherwise if i press too late, boot sequence is basically frozen). Any tip on how to avoid this without having a private key without a passphrase?06:08:59
@k900:0upti.meK900That's not really the intended use cass06:19:48
@k900:0upti.meK900You probably want full disk encryption 06:20:00
@laurent:matrix.fdn.frlaurent
In reply to @k900:0upti.me
That's not really the intended use cass
What do you mean? What is the intended use case? My understanding is just to encrypt password, tokens... with my private ssh key so that i can put my nixos config on github
06:23:43
@k900:0upti.meK900Yes, but it's not really designed to be used interactively06:41:00
@k900:0upti.meK900The way you're trying to use it06:41:04
@k900:0upti.meK900If you want that kind of thing, you should encrypt to a secret like your machine's SSH host key06:41:21

Show newer messages


Back to Room ListRoom Version: 6