cloudflare / gokey

A simple vaultless password manager in Go

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

master password on cmd line

damon-atkins opened this issue · comments

These days monitoring the commands, is becoming common. You have another option which does not see the secret password on the command line. Any chance of a python direct interface.

  • the tool currently has "interactive mode" - if you don't specify the -p switch it will ask the password interactively, similar to the way Unix login does
  • if you need to hide the password from the loggers, probably the easiest way would be just store it in an environment variable and make sure you calling gokey with a shell

Regarding direct python interface, nothing specific is planned so far. This code was designed in a way to provide the main functionality as a library - technically cmd/gokey is just one cmdline "frontend", but there may be others. And since one can compile go into native shared libraries I would imagine writing Python module-wrapper would not be very hard. One can build a CPython module directly in Go or use ctypes from Python just to call the native library. Examples:

Can you please support specifying a password file instead of the password, e.g. -P /path/to/file instead of -p very-secure-password?

Yes, I guess. Created #12 for that.

Closing this as #13 is merged, so should address the issue.