Gentoo Archives: gentoo-server

From: Marius Mauch <genone@g.o>
To: gentoo-server@l.g.o
Subject: Re: [gentoo-server] Can portage proxy username/password be encrypted?
Date: Sat, 05 Aug 2006 10:26:20
Message-Id: 20060805122617.2f3cd506@sven.genone.homeip.net
1 On Mon, 31 Jul 2006 15:58:41 -0500
2 "Jesse, Rich" <Rich.Jesse@××.com> wrote:
3
4 > Hey all,
5 >
6 > On my work box, running 2.6.12-gentoo-r9 (x86), I now need to use
7 > username/password authentication for our proxy. And since my box
8 > isn't considered production (although I won't be very productive
9 > without it!), I need to use my own username/password for proxies
10 > listed in /etc/make.conf in order to "emerge --sync" and download
11 > packages. I really don't relish the thought of my authentication
12 > info being backed up Corporately in clear text, and I'm pretty sure
13 > that's against Corporate Policy somehow.
14 >
15 > Is there a way to have the authentication info encrypted? Even light
16 > encryption is preferrable to none and I'm not nearly concerned about
17 > username as I am about password. Right now I'm manually using "zip"
18 > to decrypt the /etc/make.conf as needed, which means my cron'd daily
19 > portage updates won't work.
20
21 For distfiles fetching you can just override FETCHCOMMAND and
22 RESUMECOMMAND to something that handles the decryption of your
23 credentials transparently, don't know how rsync handles proxy data but
24 PORTAGE_RSYNC_EXTRA_OPTS might be of use.
25
26 Marius
27
28 --
29 Public Key at http://www.genone.de/info/gpg-key.pub
30
31 In the beginning, there was nothing. And God said, 'Let there be
32 Light.' And there was still nothing, but you could see a bit better.

Attachments

File name MIME type
signature.asc application/pgp-signature