Skip to content

Conversation

@musjj
Copy link
Contributor

@musjj musjj commented Apr 21, 2025

Adds support for the age's native SSH feature from getsops/sops#1692.

Also deprecates sops.age.sshKeyPaths as it should no longer be necessary.

Closes #744

@folliehiyuki
Copy link

sops.age.sshKeyPaths has an advantage of allowing users to specify multiple private SSH key files. This behavior cannot be replicated to sops' native SSH feature.

@srhb
Copy link
Contributor

srhb commented Aug 10, 2025

Anything I can do to help this along?

@Parsifa1
Copy link

any update?

@Parsifa1
Copy link

Parsifa1 commented Sep 18, 2025

as getsops/sops#1692, sops has it's simple key-find procedure: first ~/.ssh/id_ed25519 next ~/.ssh/id_rsa,
maybe for simple usecase, provide a simple option to open it, and a further option to set the custom SEC path.

like :

sops = {
    sshKeyNative = {
        enable = true; #default false
        path = "/foo/bar/id_sra"; # previous `sshKeyPaths`
    };
}

if no sshKeyNative.path set, just using sops's native key-finding procedure , which makes easier for simple use.

that's just my two cents, thanks for you PR :)

@nikhilmaddirala
Copy link

Hi, is there anything any of us can do to help move this along? Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

remove ssh-to-pgp rsa instructions

6 participants