Project

General

Profile

Idea #2763

Updated by Tom Clegg almost 10 years ago

Todo: 

 * (TC) Secrets should be obtained either via environment variable, or by reading a named file / file descriptor, rather than directly on the command line. (Perhaps @--data-manager-key-file {path}@ is easiest -- the calling script can always do something like @su keepuser keepd --data-manager-key-file /dev/fd/3 3<secretfile@ if it doesn't want the secret file to stay readable by the keep process or its children after startup, or if the key is not even stored locally, etc.) 

Back