VNC: Password storage

[ksandom]

Tasks

• [ ] VNC Password should not be stored in clear text.

Requirements

The solution must

• be portable between Linux, Windows, and MacOS.
• have no/minimal external requirments. External requirements:
  • must be open source.
  • easy to install.
  • easy to use/low-friction on a day to day basis. Eg using multiple keys to unlock vault would be a no-go.
  • have low resource impact on the system.

Background

The VNC password is currently stored in clear text in output.yml. This is a security concern.

• The VNC implementation.
• handWavey's VNC documentation.