Conversation

Okay, what is the modern way to request a password or secret from the user in this day and age?

Pinentry and ssh-askpass is no go and I can't quite grok the dbus secret service from the polkit auth?

4
0
0
@Foxboron I use https://www.passwordstore.org/ for all my password/token/serial/etc needs and purposes.
1
0
0
@Foxboron Uh oh sorry misread the question. For service requesting credentials I'd get PolicyKit is the defacto.
1
0
0

@Foxboron Can you elaborate why PinEntry is a no go?

I only learned its existence recently and if it is bad, I would love to know more about it.

1
0
0

@x_cli

It's tied up with the gnupg ecosystem and requires reading the `gpg-agent.conf` file to even figure out what binary the user wants.

Not great if you appliction has nothing to do with gnupg to begin with.

1
0
0

@jarkko

I'm leaning towards checking out how a polkit solution would look like.

1
0
1

@Foxboron Thanks for sharing! I share your concerns.

0
0
0

@Foxboron i mean sometimes systemd-ask-password is usefull, otherwise i just call pinentry :)

1
0
0

@fossdd

Hmm, I don't *really* feel like shelling out to an executable for this. But I could check the implementation.

1
0
0
@Foxboron Yeah, I'd target on that, not because it is great, but because of dictatorship of majority ;-) E.g. newer versions of systemd have run0 (aka sudo), which is also polkit based.

I.e. if you make your shit work on with it, it is most likely that people can deploy it too in various environments.
0
0
0

@Foxboron @fossdd the binary implements a protocol, it's also used by plymouth

0
0
0

@roxedus

I found the answer and it made me sufficiently unhappy that I decided to read a Dune novel instead.

0
0
0