In reply to@willpower3309:matrix.org
Hey all! Interesting question here - how many private keys would need to be known to be able to determine what the other keys that a secret is encrypted with are? Lets say I had a secret encrypted to 3 different hosts' private keys, with the public keys of those hosts known. If someone figured out one of my host's private keys, could they then determine my other hosts' private keys given the knowledge of the secret and the public keys of those hosts?

Hi, I hope somebody here might be able to help me even though it might be slightly off-topic:
I just configured agenix-rekey for my secret management together with my yubikey. Everythings works, but I don't know whether my identity file is correct like this:

#       Serial: XXXXXXXX, Slot: 1
#         Name: age identity XXXXXXXX
#      Created: Fri, 08 Nov 2024 18:38:59 +0000
#   PIN policy: Never  (A PIN is NOT required to decrypt)
# Touch policy: Cached (A physical touch is required for decryption, and is cached for 15 seconds)
#    Recipient: age1yubikeyXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
AGE-PLUGIN-YUBIKEY-XXXXXXXXXXXXXXXXXXXXXX

As far as I understood this only contains public key information and is save to be committed (in theory publicly). If not how do I split the public and private part?

Hi, i can't get agenix to working. Does somebody have an idea why my tailscale.age isn't get placed onto the host?

❯ nix run github:zhaofengli/colmena -- apply --experimental-flake-eval --on host-1 --show-trace
warning: ignoring untrusted substituter 'https://colmena.cachix.org', you are not a trusted user.
Run `man nix.conf` for more information on the `substituters` configuration option.
warning: ignoring the client-specified setting 'trusted-public-keys', because it is a restricted setting and you are not a trusted user
warning: Git tree '/Users/user/Workspace/project/infrastructure-as-code' is dirty
[INFO ] Using flake: git+file:///Users/user/Workspace/project/infrastructure-as-code?dir=nixos
warning: Git tree '/Users/user/Workspace/project/infrastructure-as-code' is dirty
warning: will not write lock file of flake 'path:/private/tmp/colmena-assets-r8xdrZ' because it has an unlocked input ('git+file:///Users/user/Workspace/project/infrastructure-as-code?dir=nixos')
[WARN ] Using direct flake evaluation (experimental)
[INFO ] Enumerating nodes...
warning: Git tree '/Users/user/Workspace/project/infrastructure-as-code' is dirty
warning: Git tree '/Users/user/Workspace/project/infrastructure-as-code' is dirty
warning: Git tree '/Users/user/Workspace/project/infrastructure-as-code' is dirty
[INFO ] Selected 1 out of 3 hosts.
             ❌ 3s Failed: Child process exited with error code: 1
host-1       ❌ 3s Evaluation failed: Child process exited with error code: 1                                                                                                     
[ERROR] Failed to evaluate host-1 - Last 20 lines of logs:
[ERROR]   stderr)           621|                   [{ inherit (module) file; inherit value; }]
[ERROR]   stderr)              |                                                     ^
[ERROR]   stderr)           622|                 )
[ERROR]   stderr) 
[ERROR]   stderr)        … while calling the 'concatStringsSep' builtin
[ERROR]   stderr)          at /nix/store/glsqq1xn5al7d528hvlbm4hl3ladxmka-source/modules/age.nix:114:20:
[ERROR]   stderr)           113|
[ERROR]   stderr)           114|   installSecrets = builtins.concatStringsSep "\n" (
[ERROR]   stderr)              |                    ^
[ERROR]   stderr)           115|     ["echo '[agenix] decrypting secrets...'"]
[ERROR]   stderr) 
[ERROR]   stderr)        … while calling 'installSecret'
[ERROR]   stderr)          at /nix/store/glsqq1xn5al7d528hvlbm4hl3ladxmka-source/modules/age.nix:64:19:
[ERROR]   stderr)            63|
[ERROR]   stderr)            64|   installSecret = secretType: ''
[ERROR]   stderr)              |                   ^
[ERROR]   stderr)            65|     ${setTruePath secretType}
[ERROR]   stderr) 
[ERROR]   stderr)        error: path '/nix/store/lrfilxp20f920zgvm3bn71h6wsnp037y-source/nixos/secrets/tailscale.age' does not exist
[ERROR]  failure) Child process exited with error code: 1
[ERROR] Failed to complete requested operation - Last 1 lines of logs:
[ERROR]  failure) Child process exited with error code: 1
[ERROR] -----
[ERROR] Operation failed with error: Child process exited with error code: 1
Hint: Backtrace available - Use `RUST_BACKTRACE=1` environment variable to display a backtrace