| 24 Aug 2025 |
| crop joined the room. | 15:55:21 |
crop | i want to use agenix on a nixos system without channels (and flakes) i use npins to manage the inputs. i followed the tutorial in the readme. but when i try to use the agenix-cli i get the following error
agenix -e secret1.nix
Error:
0: Failed to find config root
how can i solve this problem? | 16:07:18 |
K900 | Sounds like it can't find your secrets.nix? | 16:12:21 |
crop | the secrets file is in the same folder where i am when i run the command | 16:27:15 |
K900 | Not sure then | 16:28:02 |
K900 | I can't even find that error message in the sources of agenix | 16:29:48 |
crop | a forgot a line from the error message:
Location:
src/cli.rs:216
| 16:31:50 |
K900 | Uhh | 16:32:14 |
K900 | Are you using ragenix or something? | 16:32:18 |
K900 | I don't know what ragenix is doing but you should probably report that to ragenix | 16:32:36 |
crop | ohhh not that i planned to | 16:32:56 |
crop | i use agenix-cli from nixpkgs | 16:34:04 |
K900 | No idea what that is or how it's different | 16:34:47 |
K900 | The original agenix tool is a shell script | 16:34:54 |
K900 | That's in the agenix repo | 16:34:57 |
crop | yes now i use that (not from nixpkgs) and it works ... why is there a agenix-cli in nixpkgs that doesn't work? 😠| 16:43:32 |
K900 | I don't know | 16:44:20 |
| 26 Aug 2025 |
| @dawnofmidnight:catgirl.cloud joined the room. | 02:34:10 |
| 27 Aug 2025 |
| kylie joined the room. | 00:25:24 |
| 28 Aug 2025 |
| sbc64 changed their profile picture. | 14:23:19 |
| @redbeardy_mcgee:matrix.org left the room. | 16:36:00 |
| 30 Aug 2025 |
| @522_:catgirl.cloud changed their display name from 522 [it/its][ΘΔ] to 522 it/its ⛯ΘΔ. | 14:10:21 |
| 1 Sep 2025 |
| mike joined the room. | 17:43:07 |
| 3 Sep 2025 |
| ed209 joined the room. | 19:18:26 |
ed209 | I'm looking for ways to store build-time secrets using agenix, but it seems to be a bit tricky to do. is there an easy way to (potentially imperitively) decrypted a subset of secrets so they're available on the system before deploying/building images? | 19:21:04 |
K900 | Build-time secrets are basically always bad | 19:22:46 |
K900 | Why do you want that? | 19:22:52 |
ed209 | i should say deploy time... like how else do you give luks the key to use when provisioning a system? | 19:23:26 |
K900 | Can you explain what you're actually trying to do? | 19:23:46 |
ed209 | the main use case is using nixos-anywhere to provision a system with luks | 19:25:38 |