Use a password manager

[thewholelifetolearn]

Is your feature request related to a problem? Please describe.
Whenever we want to backup data or sync snapshots, Plakar requires to enter the repository passphrase via stdin. It is possible to enter the passphrase via a config file but it means that the data is written on the system file somewhere.

Describe the solution you'd like
Have the possibility to use a password manager like 1Password, Keepass, Proton Pass as a parameter of the backup and sync command.
The passphrase should be given for the source repository and for the destination repo.

Describe alternatives you've considered
Use 2 different environment variables instead of parameters of the command line.

Additional context
Password manager are meant to keep secrets safe and manage them. It would be great to use them

[xxxliqu1dxxx]

plakar already supports PLAKAR_PASSPHRASE as env variable.

[thewholelifetolearn]

The PLAKAR_PASSPHRASE environment variable works only for backing up. Not for syncing. In that case, it only works for the source repository.
Or I didn't get it how it works.

[omar-polo]

Hello,

you can set the passphrase_cmd option of a store to a command that, when executed, will print the password to standard output. I use it to plug my password manager into it.

I also have a wip PR to extend this for any field in a configuration.

HTH

[thewholelifetolearn]

I have tried the passphrase_cmd option, and it works.
I don't know exactly how Plakar works, but I find it unsafe to store the passwords for a storage directly in the configuration. That means, that anyone who as access to the Plakar command, has access to the passphrase.
So anyone can delete all the snapshots for example.

[omar-polo]

I don't know exactly how Plakar works, but I find unsafe to store the passports for a storage directly in the configuration.

that's more or less the rationale for my PR #1853 which augments the passphrase_cmd idea to all the fields as well.

[thewholelifetolearn]

I may have understood it incorrectly, but is the passphrase_cmd accessible through cli? I thought it was only possible by setting the option through plakar store set.

The passphrase_cmd in any case not well documented.

[brmzkw]

I thought it was only possible by setting the option through plakar store set.

Thanks for the input, we'll try to improve this documentation to explain better how the passphrase_cmd parameter works.

[tracepanic]

The docs on this has been improved in this pr PlakarKorp/plakar.io#195