Jörg Thalheim
351c716739
allow non-key group users to access /run/secrets
...
This does not significantly decrease security while making it a lot more
convinient. There are also services, where it is not possible to set
the keys group i.e. if a daemon unsets all groups. Processes still
won't be able to list other secrets if they are not in the secret group.
fixes #86
2021-06-05 17:59:22 +02:00
Jörg Thalheim
f540b74ced
remove ssh-to-pgp from sops-nix
2021-02-22 06:49:46 +01:00
Jörg Thalheim
d665aecd88
fix 32-bit build
2021-02-01 13:50:17 +01:00
Bernardo Meurer
dd7dfdcb6a
pkgs: don't reference deprecated stdenv.lib
...
`stdenv.lib` has been deprecated in favor of using `lib` directly.
2021-01-31 18:02:23 -08:00
Jörg Thalheim
4de7358a2b
only mount ramfs once
2021-01-28 22:36:12 +01:00
Jörg Thalheim
47a99b6957
Merge branch 'master' into lists
2021-01-27 06:23:50 +00:00
Jörg Thalheim
80ad73c347
fix sops files that contains lists
...
fixes #68
2021-01-27 07:22:56 +01:00
Eduard Bopp
0be44e088b
Fix impurity in test invocation
...
The system must be specified, as its default is
`builtins.currentSystem`, which is disallowed as an impure function
during flake evaluation.
2021-01-26 15:48:56 +01:00
Jörg Thalheim
378fe484f9
fix sops-install-secrets with nixpkgs unstable
2020-11-18 16:08:59 +01:00
Jörg Thalheim
c7826f534e
parallelize CI
2020-11-13 12:54:33 +01:00
Cole Mickens
24fd158fe6
sops-install-secrets: symlinkSecret: set uid/gid (with Fchownat) ( #32 )
...
Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
2020-08-24 09:24:43 +01:00
Jörg Thalheim
7d2b22a18d
sops-install-secrets: disable tests
2020-08-10 18:22:59 +01:00
Jörg Thalheim
01e4038c9a
don't print full executable path logging key import
2020-07-30 16:19:51 +01:00
Jörg Thalheim
9cd8bb080f
sops-install-secrets: use %w for fmt.Errorf calls
2020-07-30 16:19:14 +01:00
Jörg Thalheim
b8d91d61ac
restrict sops-install-secrets to linux
...
ramfs is not available elswhere.
2020-07-22 23:46:05 +01:00
Jörg Thalheim
4a41039ab3
mark sops-install-secrets as Linux only
2020-07-22 23:12:13 +01:00
Jörg Thalheim
bffb0afb48
fix replace existing files
2020-07-19 23:23:38 +01:00
Jörg Thalheim
59803f7530
fix user manifest validation in sandbox
...
we should not lookup users there
2020-07-19 21:04:58 +01:00
Jörg Thalheim
30c6879b42
add validation mode
2020-07-19 17:09:27 +01:00
Jörg Thalheim
4224ec9ede
add validate flag
2020-07-19 11:32:59 +01:00
Jörg Thalheim
b1131e035d
sops-install-secrets: improve error message
2020-07-14 13:49:54 +01:00
Jörg Thalheim
6508df75b6
sops-install-secrets: include newline in log
2020-07-14 13:48:30 +01:00
Jörg Thalheim
cf34042dc2
sops-install-secrets: log gpg fingerprint
2020-07-14 13:42:32 +01:00
Jörg Thalheim
8cdca9dd6d
secring: open with more secure umask
2020-07-14 13:41:03 +01:00
Jörg Thalheim
4eda6711ba
fix /etc/secrets.d permissions
2020-07-14 13:21:07 +01:00
Jörg Thalheim
7bd84011ef
fix sops nixos module
2020-07-12 17:52:03 +01:00
Jörg Thalheim
1745bb9f95
build nixos tests on CI.
2020-07-12 17:45:31 +01:00
Jörg Thalheim
5ee7f3d73e
add ci
2020-07-12 17:36:14 +01:00
Jörg Thalheim
81f9f69b84
add ssh-to-pgp package
2020-07-12 17:18:12 +01:00
Jörg Thalheim
cbf6c6b93a
add project-wide shell.nix
2020-07-12 17:06:59 +01:00
Jörg Thalheim
38e71e351c
reference nixos tests in sops-install-secrets
2020-07-12 16:59:20 +01:00
Jörg Thalheim
b75e51c423
add tests + ssh key support
2020-07-12 13:50:55 +01:00
Jörg Thalheim
bb21643ce1
sops-install-secrets: get rid of delve import
2020-07-06 09:36:56 +01:00
Jörg Thalheim
8ccd9ba269
first commit
2020-07-06 07:31:57 +01:00