Page MenuHomePhabricator

Split ~/.arcrc between secret and public configs
Closed, InvalidPublic

Description

Currently, my ~/.arcrc file holds both the secret token obtained via "arc install-certificate" and user config like aliases.
I would like to keep the custom config (aliases, etc.) in a dotfiles.git repository, storing all my .gitconfig, .zshrc, etc.

Proposition:
1- ~/.arccredentials holds tokens, requires 600 permissions.
2- ~/.arcrc holds user config that is not secret. No specific permissions requirements.

Event Timeline

Arcank raised the priority of this task from to Needs Triage.
Arcank updated the task description. (Show Details)
Arcank changed the edit policy from "All Users" to "Custom Policy".
Arcank added a project: Bug Report.
Arcank added a subscriber: featherless.
Arcank added a subscriber: Arcank.

In would be convenient, but note you could have a more generic problem here: how to store all your credentials. Solutions like Vault could help in this case.

Why don't you create a Makefile to regerate your .arcrc from both sources?

It could also be considered best practice to renew certificates when you change machine, need to regenerate the config and can't simply copy the former one.

Seems convoluted to recreate the ~/.arcrc each time I change the template. Moreover, when the config is modified directly by arc (arc alias for example), it will modify the generated ~/.arcrc. So I'd have to (remember to) copy these additions back to the template.

Thanks for the pointer to Vault, looks interesting!

epriestley claimed this task.
epriestley added a subscriber: epriestley.

This does not describe a bug with Phabricator. For help filing a bug, see Contributing Bug Reports.

I really thought I filed as a Feature request. I will reopen there.