[pbs-devel] [PATCH backup v3 1/2] pbs-client: read credentials from $CREDENTIALS_DIRECTORY

Thomas Lamprecht t.lamprecht at proxmox.com
Wed Mar 26 12:06:54 CET 2025


Am 26.03.25 um 11:51 schrieb Maximiliano Sandoval:
> Allows to load credentials passed down by systemd. A possible use-case
> is safely storing the server's password in a file encrypted by the
> systems TPM, e.g. via
> 
> ```
> systemd-ask-password -n | systemd-creds encrypt --name=proxmox-backup-client.password - my-api-token.cred
> ```
> 
> which then can be used via
> 
> ```
> systemd-run --pipe --wait --property=LoadCredentialEncrypted=proxmox-backup-client.password:my-api-token.cred \
> proxmox-backup-client ...
> ```
> 
> or from inside a service.


I lightly skimmed over the code, looks alright to me (feel free to apply
@Wolfgang), but I'm missing a patch for the documentation so that users
can know about this possibility – can be followed up though.





More information about the pbs-devel mailing list