<div dir="auto">FWIW Kubernetes also supports mounting files containing secrets, which I've personally found to be easier to work with than environment variables. <div data-smartmail="gmail_signature">-- Ryan (ライアン) Yoko Shimomura, ryo (supercell/EGOIST), Hiroyuki Sawano >> everyone else <a href="https://refi64.com/">https://refi64.com/</a></div></div> <div class="gmail_quote"><div dir="ltr">On Tue, Nov 13, 2018, 11:20 PM Tomasz Torcz <<a href="mailto:tomek@pipebreaker.pl">tomek@pipebreaker.pl</a> wrote: </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Wed, Nov 14, 2018 at 02:17:02AM +0100, Marek Howard wrote: > Marek Howard píše v St 14. 11. 2018 v 01:35 +0100: > > Lennart Poettering píše v Út 13. 11. 2018 v 15:17 +0100: > > > On Di, 13.11.18 07:49, David Parsley (<a href="mailto:parsley@linuxjedi.org" target="_blank" rel="noreferrer">parsley@linuxjedi.org</a>) wrote: > > > Well, you are of course welcome to ignore whatever I say, but again, > > > environment blocks are leaky, they propagate down the process tree, > > > and are *not* generally understood as being secret. > > > > It is not *that* common to pass secrets via environment variable but > > it's nothing unusual, and many programs offer this interface. OpenVPN > > comes to bind. Where such interface is offered, propagating down the > > process tree is usually not a concern, because such programs usually > > don't fork "untrusted" programs. > > > > It's quite handy way to pass secrets and as I said above, there's > > really no risk if it's done in cases where it makes sense. Of course > > systemd leaking it to everyone makes it not usable with systemd, but > > that's not really a problem with environment variables. > > If you want some examples: > > borgbackup - BORG_PASSPHRASE > restic - RESTIC_PASSWORD > openssl - env:var > rsync - RSYNC_PASSWORD > hub - GITHUB_PASSWORD, GITHUB_TOKEN > rclone - RCLONE_CONFIG_PASS > smbclient - PASSWD > > Again, it's not so common, but it's not unusual and it's not insecure > if you know what you're doing (which you usually are when you have > powers to create system services). Generally, storing secret data in environment is common in web microservices world, popularised by <a href="https://12factor.net/config" rel="noreferrer noreferrer" target="_blank">https://12factor.net/config</a> But those apps are supposed to be run by Kubernetes or other container runtime - with dedicated clusters, PID namespaces and so on. Running them as plain unix (systemd) services is the wrong way to run them ;) -- Tomasz Torcz There exists no separation between gods and men: xmpp: <a href="mailto:zdzichubg@chrome.pl" target="_blank" rel="noreferrer">zdzichubg@chrome.pl</a> one blends softly casual into the other. _______________________________________________ systemd-devel mailing list <a href="mailto:systemd-devel@lists.freedesktop.org" target="_blank" rel="noreferrer">systemd-devel@lists.freedesktop.org</a> <a href="https://lists.freedesktop.org/mailman/listinfo/systemd-devel" rel="noreferrer noreferrer" target="_blank">https://lists.freedesktop.org/mailman/listinfo/systemd-devel</a> </blockquote></div>