restic version
restic 0.9.4 compiled with go1.11.5 on linux/amd64
Retrieving keys via gopass
(https://www.gopass.pw/) would be super awesome, because environment variables are insecure.
I like to pipe my repository passwords to restic in a secure manner, without storing them in cleartext password files or environment variables
restic is awesome!
Can't you just read the key from /dev/stdin?
because environment variables are insecure.
Why is that? I think it's a common misconception, I've written a bit about it here: https://forum.restic.net/t/read-password-from-gnome-keyring/1094/6?u=fd0
If you still don't like to use environment variables, you can use the shell to read the password:
$ restic --password-file <(pass restic/password) [...]
thanks this works for me.
Most helpful comment
Why is that? I think it's a common misconception, I've written a bit about it here: https://forum.restic.net/t/read-password-from-gnome-keyring/1094/6?u=fd0
If you still don't like to use environment variables, you can use the shell to read the password: