Re: Support for encrypted configuration files

2021-11-11 Thread Vasi Vilvoiu
On 11/11/21 14:16, Oswald Buddenhagen wrote: On Thu, Nov 11, 2021 at 01:47:41PM +0200, Vasi Vilvoiu wrote: On 11/11/21 13:20, Simão Afonso wrote: What's wrong with: #!/bin/sh # mbsync-encrypted decrypt command <~/.config/mbsyncrc.encrypted >"$XDG_RUNTIME_DIR/mbsyncrc" mbsync -c "$XDG_RUNTIM

Re: Support for encrypted configuration files

2021-11-11 Thread Simão Afonso
On 2021-11-11 13:47:41, Vasi Vilvoiu wrote: > AFAIK, tmpfs can reach swap under some circumstances, which is a no-no. I'd > personally still see this ideally implemented in the tool as there would be > less stuff between the encrypted and decrypted data (gpg -> pipe -> memory > versus gpg -> tmpfs

Re: Support for encrypted configuration files

2021-11-11 Thread Simão Afonso
On 2021-11-11 11:56:59, Vasi Vilvoiu wrote: > Hi! > > I store the passwords for each of my 5 IMAP accounts as GPG encrypted files, > and fetch them with PassCmd. Problem is I keep my GPG key on a hardware > device which requires a touch on every operation; as such, `mbsync -a` > requires 5 touches

Re: Support for encrypted configuration files

2021-11-11 Thread Oswald Buddenhagen
On Thu, Nov 11, 2021 at 01:47:41PM +0200, Vasi Vilvoiu wrote: On 11/11/21 13:20, Simão Afonso wrote: What's wrong with: #!/bin/sh # mbsync-encrypted decrypt command <~/.config/mbsyncrc.encrypted >"$XDG_RUNTIME_DIR/mbsyncrc" mbsync -c "$XDG_RUNTIME_DIR/mbsyncrc" "$@" rval=$? rm "$XDG_RUNTIME_DI

Re: Support for encrypted configuration files

2021-11-11 Thread Simão Afonso
On 2021-11-11 14:04:23, Vasi Vilvoiu wrote: > Oh, that's great! Did not know it supported stdin for -c. > > That should be pretty much enough for my use case. Thanks! This was untested when I wrote it, but now I double checked and it seems to work on my complex config that has PassCmd and the lik

Re: Support for encrypted configuration files

2021-11-11 Thread Vasi Vilvoiu
On 11/11/21 13:59, Simão Afonso wrote: On 2021-11-11 13:47:41, Vasi Vilvoiu wrote: AFAIK, tmpfs can reach swap under some circumstances, which is a no-no. I'd personally still see this ideally implemented in the tool as there would be less stuff between the encrypted and decrypted data (gpg -> p

Re: Support for encrypted configuration files

2021-11-11 Thread Vasi Vilvoiu
On 11/11/21 13:20, Simão Afonso wrote: On 2021-11-11 11:56:59, Vasi Vilvoiu wrote: Hi! I store the passwords for each of my 5 IMAP accounts as GPG encrypted files, and fetch them with PassCmd. Problem is I keep my GPG key on a hardware device which requires a touch on every operation; as such,

Support for encrypted configuration files

2021-11-11 Thread Vasi Vilvoiu
Hi! I store the passwords for each of my 5 IMAP accounts as GPG encrypted files, and fetch them with PassCmd. Problem is I keep my GPG key on a hardware device which requires a touch on every operation; as such, `mbsync -a` requires 5 touches that are spread across the sync process. I was th