[pbs-devel] [PATCH backup v3 1/2] pbs-client: read credentials from $CREDENTIALS_DIRECTORY
Thomas Lamprecht
t.lamprecht at proxmox.com
Wed Mar 26 12:06:54 CET 2025
Am 26.03.25 um 11:51 schrieb Maximiliano Sandoval:
> Allows to load credentials passed down by systemd. A possible use-case
> is safely storing the server's password in a file encrypted by the
> systems TPM, e.g. via
>
> ```
> systemd-ask-password -n | systemd-creds encrypt --name=proxmox-backup-client.password - my-api-token.cred
> ```
>
> which then can be used via
>
> ```
> systemd-run --pipe --wait --property=LoadCredentialEncrypted=proxmox-backup-client.password:my-api-token.cred \
> proxmox-backup-client ...
> ```
>
> or from inside a service.
I lightly skimmed over the code, looks alright to me (feel free to apply
@Wolfgang), but I'm missing a patch for the documentation so that users
can know about this possibility – can be followed up though.
More information about the pbs-devel
mailing list