Ryan Mulligan
Ryan Mulligan
> The changes to the integration test Maybe a bunch of things just changed because I don't see any changes to the integration tests now? Generally, I'd prefer to keep...
@cole-h as the author of the symlinking PR, maybe you can comment?
Needs https://github.com/str4d/rage/issues/294 to be fixed.
How would it decrypt `id_ed25519.age` though? It would need the private key to do it, but it hasn't been decrypted yet.
Maybe this? 1. do one manual and minimal NixOS install onto the flash drive, using full-disk encryption 2. encrypt the secrets based on the key on that flash drive, 3....
@rtimush Sorry, I'm having trouble understanding how you would use this. Do you have an example config somewhere?
@edrex, this seems good and would also support the #9 use case. It doesn't seem like it needs a new flag, and it should be allowed even if you cannot...
That command just worked for me. What version of Nix are you using? ``` $ nix-info system: "x86_64-linux", multi-user?: yes, version: nix-env (Nix) 2.5pre20211126_55275fc, channels(root): "agenix, nixos-20.09.4407.1c1f5649bb9", channels(ryantm): "master", nixpkgs:...
> reuse of passphrase is not implemented (are SSH agents working? it seems like not) This is also a problem with the existing `agenix` bash script for managing secrets.
@ratsclub :smile:, probably not! I looked into the whole home-manager situation with @kranzes kind of recently and it seems like some home-manager work needs to happen. One problem I remember...