Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support -encrypt CLI flag #245

Closed
armon opened this issue Jul 15, 2014 · 2 comments
Closed

Support -encrypt CLI flag #245

armon opened this issue Jul 15, 2014 · 2 comments
Labels
type/enhancement Proposed improvement or new feature

Comments

@armon
Copy link
Member

armon commented Jul 15, 2014

No description provided.

@jefferai
Copy link
Member

The rationale is that secrets at rest on a filesystem = bad. You can get around this right now by using tmpfs but that has a few drawbacks -- it's not "at rest" on a filesystem but still potentially readable by other processes. Supporting -encrypt allows you to have similar workflows as Serf, where you can pull the current encryption key from a data store and use it in the startup script.

@armon armon closed this as completed in e0a8157 Aug 22, 2014
@jefferai
Copy link
Member

Neato. Thanks!

@armon armon mentioned this issue May 7, 2015
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
type/enhancement Proposed improvement or new feature
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@jefferai @armon