SOPS Secret Management with PGP

Mozilla SOPS (Secrets OPerationS) is a simple and flexible tool for managing secrets. SOPS provides the scaffolding to enable the use of various encryption solutions to encrypt and decrypt select values in files whilst leaving the keys in plain-text. SOPS supports yaml, json, env, ini and binary formats and can integrate with; Amazon Web Services Key Managemnt Service Google Cloud Platforms Key Management Service Azure Key Vault age and Pretty Good Privacy (PGP) When looking at options for secret management I was searching for a solution that would have minimal overhead and enable me to keep my secrets in git along with the code. With SOPS, I can use my existing hardware backed PGP key that I use to sign my git commits as well as a secondary PGP key stored in the git repository, the private half of which only exists in GitLab for CI/CD operations. ...

July 27, 2025

OnlyKey Hardware Password Manager

If you have ever taken an interest in password security and data breaches you have no doubt come across Troy Hunts Have I been Pwned website. Have I been Pwned provides a free resource to quickly assess if you have been put at risk due to an online account having been compromised. As of April 2024 Have I been Pwned has indexed over 13 billion passwords from 770 separate data breaches. ...

April 12, 2024

Performing Actions at Logon in Linux

Performing Actions at Logon in Linux I recently upgraded my Fedora Silverblue installation from 39 to 40 and sought to resolve two longstanding quality of life issues, the; OnlyKey client application autostarts at every logon Bluetooth soundbar requires reconnection at every logon. Solving the first issue paved the pathway to solving the second issue. Preventing the OnlyKey Application from Autostarting at Logon A quick Google search turned up on the Gnome Help page which specifically addressed how to add an auto start application for all users. This was a great start but it did not tell me how to override the autostart function. Drop-in files are used extensively in Linux and are often used to override system wide behaviour so my working theory is that there should be an option to use a drop-in override file to disable the autostart behaviour which raises two further questions; ...

April 12, 2024