Page MenuHomePhabricator

Use pwstore (a shared gpg-encrypted password store) for Release Engineering related passwords
Closed, ResolvedPublic

Description

About pwstore

Passwords to store:

  • Selenium user passwords
  • Github + Gerrit role accounts for replication management
  • mediawiki-announce admin password
  • ...

Event Timeline

greg renamed this task from Investigate using a shared gpg-encryped password store for Release Engineering to Use pwstore (a shared gpg-encryped password store) for Release Engineering related passwords.Jun 30 2016, 6:31 PM
greg updated the task description. (Show Details)

For the Selenium related passwords we went with officewiki. It is not ideal but the credentials have low value and it is was way easier than to have them handled via gpg.

If we go to gpg / pwstore. I would definitely need some kind of training as to how to setup a gpg key, keep it secure and make sure it has a backup. The last one I had years ago ended up lost when both my computers had full disk :-(

Aklapper renamed this task from Use pwstore (a shared gpg-encryped password store) for Release Engineering related passwords to Use pwstore (a shared gpg-encrypted password store) for Release Engineering related passwords.Jul 3 2016, 9:49 PM

We now have rRELSECRETS as our pwstore behind #acl*releng .

4 people are in the .users file, we'll close this task when the whole team is in there and verified working.

greg assigned this task to thcipriani.