agenix | 367 Members | |
| age-encrypted secrets for NixOS https://github.com/ryantm/agenix/ | 96 Servers |
| Sender | Message | Time |
|---|---|---|
| 27 Jun 2023 | ||
In reply to @cole-h:matrix.orgyeah that was a residue of me trying around | 20:47:48 | |
(nit, but imports is not colmena specific -- it is part of the NixOS module system, which colmena heavily leverages) | 20:47:52 | |
In reply to @madonius:entropia.deThen if you move the module into your system's imports, does that resolve the issue? | 20:50:04 | |
| yes, it does | 20:54:36 | |
| thanks | 20:54:39 | |
| since I use sops in all other places I was confused as to why this did not work for age | 20:55:19 | |
| and no it did not work for sops either :D | 20:56:17 | |
| I have to say I just switched to nixos 23.05 so this might be an explanation | 20:56:42 | |
| 29 Jun 2023 | ||
| Does somebody have an example of how to use agenix as a home-manager module? I saw that support for that just got merged but I can’t figure out how to use it 😅 I tried just changing the module used to agenix.homeManagerModule.default but that doesn’t work. I get an error „attribute 'home' is missing“ | 08:33:44 | |
| MartiniMoe: https://github.com/search?q=+agenix.homeManagerModules.default&type=code | 12:29:58 | |
| it's homeManagerModules with an s on the end | 12:30:15 | |
| I don't actually use it myself, I was hoping someone would follow on with the documentation, but that seems to have not happened. Maybe I should have gated merging on that? | 12:31:22 | |
| Actually it’s homeManagerModules in my config, you are right. Hmm there must be something else I’m doing wrong 🤔 | 12:58:02 | |
| 13:06:41 | |
| 13:30:26 | ||
| would anyone mind explaining why the pcscd is needed for agenix-yubikey-plugin? i was hoping i could use the ssh-agent which is configured to use the yubikey | 14:22:53 | |
even after enabling the pcscd agenix-yubikey-plugin --list's output is empty 🤔 | 14:23:48 | |
* even after enabling the pcscd agenix-plugin-yubikey --list's output is empty 🤔 | 14:24:01 | |
| I presume you meant age-plugin-yubikey? pcscd is required for that since that plugin communicates with the smartcard in the yubikey directly. If by "using the ssh-agent" you mean a -sk type key, then openssh would do that communication. That would require age to communicate to the ssh-agent which is not supported: man age says
| 14:30:26 | |
In reply to @oddlama:matrix.orgit's an ssh-rsa type key as displayed by ssh-add -L. | 14:36:40 | |
| But it's just a keygrab if you have the private part on your yubikey | 14:37:18 | |
| i've got gpg enabled via home-manager with the following settings
this is what makes my set up work | 14:38:29 | |
SSH_AUTH_SOCK points to /run/user/1000/gnupg/S.gpg-agent.ssh | 14:39:12 | |
| maybe the plugin could talk to the gpg-agent's scdaemon socket somehow? | 14:40:00 | |
| If you want to use both gpg and age-plugin-yubikey at the same time you have to disable scdaemon and force gpg to use pcsc lite too | 14:42:47 | |
| i don't insist on using that plugin btw.. i just would like to use the yubikey instead of managing a private key on the filesystem | 14:42:57 | |
| I don't think there's an alternative to that plugin then | 14:43:12 | |
In reply to @oddlama:matrix.orgdoes the latter refer to options of the plugi, age, or agenix? | 14:44:26 | |
| Agenix has nothing to do with that. It just calls age or rage (implementations of the age spec) which can interface with the plugin https://github.com/str4d/age-plugin-yubikey | 14:46:12 | |
| thanks oddlama. i'll read up on pcsclite | 14:56:06 | |