Comments (3)
In spite of the warning, that is currently allowed and should work fine. I tested with the following config:
[[paths]]
glob = "t/a/*"
identities = [ "user" ]
[[paths]]
glob = "t/b/*"
identities = [ "user2" ]
[[paths]]
glob = "t/*/test"
identities = [ "machine" ]
and was able to decrypt t/a/test
with both user
and machine
, and t/b/test
with both user2
and machine
.
from agenix-cli.
I feel like we shouldn't allow conflicting paths anyways -- so the ideal solution would be some kind of check to verify that none of the paths we're operating on have multiple matching patterns.
from agenix-cli.
@cole-h I just saw the warning, but what is actually done in this case? I was trying to match a file intentionally by multiple globs, is that supported?
E.g. I'd like to have three globs like
[[paths]]
glob = "hosts/host1/*"
identities = [ "host1" ]
[[paths]]
glob = "hosts/host2/*"
identities = [ "host2" ]
[[paths]]
glob = "hosts/*/backup-key"
identities = [ "backup-admin" ]
So that everything under /hosts/host1/*
can be read by that host and additionally one or a subset of these files can be read by another identity.
from agenix-cli.
Related Issues (9)
- nix run can't find "rust_agenix" HOT 1
- --rekey should accept list of files or only change files that need to be updated HOT 2
- Passphrase encrypted rsa or ed25519 default keys complicates the usability HOT 2
- Rust overlay seems busted with how we use it
- Failed to spawn editor HOT 5
- Traverse from specified secret file instead of from cwd
- Build fails under latest unstable-small branch HOT 3
- Support rekeying all paths
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from agenix-cli.