Skip to content

Conversation

@chadmed
Copy link
Member

@chadmed chadmed commented Mar 13, 2025

No description provided.

chadmed added 2 commits March 13, 2025 21:10
Signed-off-by: James Calligeros <jcalligeros99@gmail.com>
Signed-off-by: James Calligeros <jcalligeros99@gmail.com>
@mkurz
Copy link
Contributor

mkurz commented Mar 13, 2025

Hi!

It seems you talk about using 1Password.

As an open (source) alternative, have you considered https://github.com/StackExchange/blackbox?
The advantage is that you are independent and not bound to a 3rd party supplier, just making use of common command line tools.

blackbox just a bunch of bash scripts that make use of gnupg. This allows you to store secrets, files,... in a git repo and encrypt/decrypt them with your gpg key. E.g. to view an encrypted file:

blackbox_cat hosting/secrets.txt.gpg

To register a new file:

blackbox_register_new_file foo.txt

Tip

Just take a look at the Getting started guide and the commands it provides.

We for example just have different folders based on topic (e.g. hosting, socialmedia,...) and inside those folders we have text files with entries like:

service name
---------------------------
URL:       https://www.example.com
E-Mail:    someone@asahilinux.org
PW:        abcde
Note:      - Do not log in on full moon, the service will break!
           - Be aware the transfer limit is 5 quadrillion terabyte only

...
next service...

Since this is just gpg encryption/decryption, you can add any files in any structure you like (sometimes you may need to store pdf's, etc.)

You could just use a secret (non public) repo under the https://github.com/AsahiLinux/ organization for that.

We are using it for various Open Source projects and it works great so far.

Tip

If you want to be able to view diffs even of encrypted files (e.g. with git diff or gitk), you need to:
Commit a .gitattributes file to your repo with contents:

*.gpg diff=blackbox

and then add

[diff "blackbox"]
  textconv = gpg --use-agent -q --batch --decrypt

to .git/config of your repo locally.

@svenpeter42
Copy link
Member

We briefly talked about storing passwords inside encrypted git repos but decided against it due to usability reasons.

I'm also going to object to anything that is based on gnupg because the UX is horrible as well.

Signed-off-by: James Calligeros <jcalligeros99@gmail.com>
@davide125 davide125 merged commit f396682 into AsahiLinux:main Mar 15, 2025
2 checks passed
@mkurz
Copy link
Contributor

mkurz commented Mar 15, 2025

I'm also going to object to anything that is based on gnupg because the UX is horrible as well.

IMHO this is what blackbox trying to solve. Anyway.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants