!XLCFfvFhUkYwOMLbVx:nixos.org

agenix

358 Members
age-encrypted secrets for NixOS https://github.com/ryantm/agenix/91 Servers

Load older messages


SenderMessageTime
26 Feb 2023
@michaelsmitth:matrix.orgmichaelsmitth
  • without capital E it works. -e
19:36:20
@michaelsmitth:matrix.orgmichaelsmitth

So it seems like I can edit all the files like this ryantm:

sudo -e nix run github:ryantm/agenix -- -e mainserver-user-password.age -i /etc/ssh/ssh_host_ed25519_key
19:37:47
@ryantm:matrix.orgryantmNice. I'm glad this edge case works somehow.19:38:46
@michaelsmitth:matrix.orgmichaelsmitthI just wonder how I am able to edit the ones from the mainserver19:39:03
@michaelsmitth:matrix.orgmichaelsmitth

because:

let
  mainpc = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL6Tk94ilarqQZZ36ZWEi5U14nQwS/bqHkkTt7BOWxX0 root@mainpc";
  mainserver = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHugugwi3IeKQ74mNbP50YrU9gfspmhgUWF7WDTCrjo3 root@mainserver";
  systems = [ mainpc mainserver ];
in
{
  "mainpc-root-password.age".publicKeys = [ mainpc ];
  "mainpc-user-password.age".publicKeys = [ mainpc ];
  "mainserver-root-password.age".publicKeys = [ mainserver ];
  "mainserver-user-password.age".publicKeys = [ mainserver ];
  "mainserver-postgres-password.age".publicKeys = [ mainserver ];
}

because I did not give permission

19:40:07
@michaelsmitth:matrix.orgmichaelsmitth *

because:

let
  mainpc = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL6Tk94ilarqQZZ36ZWEi5U14nQwS/bqHkkTt7BOWxX0 root@mainpc";
  mainserver = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHugugwi3IeKQ74mNbP50YrU9gfspmhgUWF7WDTCrjo3 root@mainserver";
  systems = [ mainpc mainserver ];
in
{
  "mainpc-root-password.age".publicKeys = [ mainpc ];
  "mainpc-user-password.age".publicKeys = [ mainpc ];
  "mainserver-root-password.age".publicKeys = [ mainserver ];
  "mainserver-user-password.age".publicKeys = [ mainserver ];
  "mainserver-postgres-password.age".publicKeys = [ mainserver ];
}

I did not give mainpc permission to do that

19:40:26
@ryantm:matrix.orgryantmIf you look at the .age file in a text editor you can see what identities can decrypt the file.19:41:43
@michaelsmitth:matrix.orgmichaelsmitthI think there is something wrong with the command above. Because when executing it, all I see is the OpenSSH private key. Not the real contents19:42:45
@michaelsmitth:matrix.orgmichaelsmitth * I think there is something wrong with the command above. Because when executing it, all I see is my OpenSSH private key. Not the real contents19:42:58
@michaelsmitth:matrix.orgmichaelsmitth * I think there is something wrong with the command above. Because when executing it, all I see is my OpenSSH private key. Not the real contents of the .age file 19:43:07
@michaelsmitth:matrix.orgmichaelsmitth
In reply to @cole-h:matrix.org
Try `sudo -E`
Okay, this works.
19:44:14
@michaelsmitth:matrix.orgmichaelsmitthOnly for the permitted ones19:44:25
@michaelsmitth:matrix.orgmichaelsmitth Well now when I add the user again, rekey and enter my passphrase I get the error: No matching keys found 19:54:55
@johndoe1308:matrix.orgjohndoe1308
In reply to @ryantm:matrix.org
I feel you. The docs and set up are built up on an understanding of how SSH keys are distributed and if you don't come with that knowledge it is going to be hard mode! I should try to write a from scratch tutorial.
I think you should definitely do that. I personally also had a really hard time to understand it and get up and running for multiple machines. The docs kind of assume that you have a lot of prior knowledge. That is how i personally felt about it. And it seems like I am not the only one
21:03:54
1 Mar 2023
@fabianhjr:matrix.orgFabián Heredia changed their display name from fabianhjr to Fabián Heredia.06:05:27
@dxmh:matrix.orgDom H joined the room.09:25:26
2 Mar 2023
@robmicha:matrix.tu-bs.deRobert Michael removed their profile picture.13:16:54
4 Mar 2023
@ryantm:matrix.orgryantmI'm considering dropping the github readme in favor of this for the docs https://ryantm.github.io/agenix/#introduction any feedback would be helpful.22:48:42
@kranzes:matrix.orgIlan Joselevich (Kranzes)I don't like the idea of getting rid of the github readme23:34:55
@ryantm:matrix.orgryantmI should probably say my reason for doing it. I feel like the readme file is getting too big and I want to add a new tutorial to it.23:38:51
@kranzes:matrix.orgIlan Joselevich (Kranzes)add hyperlinks to other readme's inside the repo23:45:04
@kranzes:matrix.orgIlan Joselevich (Kranzes) tutorials 23:45:53
@kranzes:matrix.orgIlan Joselevich (Kranzes)for example23:45:55
@kranzes:matrix.orgIlan Joselevich (Kranzes) * [tutorials](https://app.element.io/docs/tutorials.md) 23:46:01
@ryantm:matrix.orgryantmCould you say what you dislike about my doc site?23:47:46
@ryantm:matrix.orgryantmMaybe it's bad because there are too many pages.23:57:01
5 Mar 2023
@kranzes:matrix.orgIlan Joselevich (Kranzes)
In reply to @ryantm:matrix.org
Could you say what you dislike about my doc site?
That's it's on in the same place as the code/repo when i go to github.com/ryantm/agenix
00:01:11
@kranzes:matrix.orgIlan Joselevich (Kranzes)
In reply to @ryantm:matrix.org
Could you say what you dislike about my doc site?
* That it's on in the same place as the code/repo when i go to github.com/ryantm/agenix
00:01:24
@jhillyerd:matrix.orgjhillyerdI think it makes sense to move the tutorial and reference to the docs site. It's good to have at least an overview of features, doc links and community info in the readme. Typically I'd also say how to "build" for developers, but that seems less relevant for agenix.17:39:19
@jhillyerd:matrix.orgjhillyerdREADMEs should not be long enough to require a table of contents in my opinion.17:40:04

Show newer messages


Back to Room ListRoom Version: 6