Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add pass credential helper #2302

Closed
3 of 7 tasks
crazy-max opened this issue Dec 18, 2020 · 7 comments · Fixed by #2304
Closed
3 of 7 tasks

Add pass credential helper #2302

crazy-max opened this issue Dec 18, 2020 · 7 comments · Fixed by #2304

Comments

@crazy-max
Copy link
Contributor

Tool information

  • Tool name: pass
  • Tool license: GPLv2
  • Add
  • Desired version: Nothing specific. The one from standard apt repo is ok.
  • Approximate size:
  • If this is an add request:
    • Brief description of tool: The standard unix password manager
    • URL for tool's homepage: https://www.passwordstore.org/
    • Provide a basic test case to validate the tool's functionality:

Area for Triage:

Feature:

We need a standard credential store like pass credential helper on Ubuntu GitHub Runners to handle Docker login in a safest way (see docker/login-action#30). Otherwise credentials are stored unencrypted:

🔑 Logging into docker.pkg.github.com...
WARNING! Your password will be stored unencrypted in /home/runner/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Virtual environments affected

  • Ubuntu 16.04
  • Ubuntu 18.04
  • Ubuntu 20.04
  • macOS 10.15
  • macOS 11.0
  • Windows Server 2016 R2
  • Windows Server 2019

Can this tool be installed during the build?

Tool installation time in runtime

Are you willing to submit a PR?

@maxim-lobanov
Copy link
Contributor

Hello @crazy-max , we don't have objections to bake this tool into the image. Do you want to submit PR?

@crazy-max
Copy link
Contributor Author

Hi @maxim-lobanov, sure!

@maxim-lobanov
Copy link
Contributor

@crazy-max , thank you for contribution! I have merged PR.
Unfortunately, these changes will be deployed only in January since we have deployment freeze next 2 weeks

@maxim-lobanov maxim-lobanov reopened this Dec 21, 2020
@maxim-lobanov maxim-lobanov added the awaiting-deployment Code complete; awaiting deployment and/or deployment in progress label Dec 21, 2020
@maxim-lobanov maxim-lobanov self-assigned this Dec 21, 2020
@crazy-max
Copy link
Contributor Author

@maxim-lobanov Great thanks!

@crazy-max
Copy link
Contributor Author

crazy-max commented Dec 21, 2020

@maxim-lobanov

Unfortunately, these changes will be deployed only in January since we have deployment freeze next 2 weeks

As a side note it would be nice to have staging runners (eg. ubuntu-latest-preview or a secret like RUNNER_PREVIEW=true) allowed for specific users (like GitHub Actions developers) to be able to make some tests and give you some feedback before deployment.

@maxim-lobanov
Copy link
Contributor

@crazy-max , if you don't mind, let's keep issue opened until deployment is finished

@miketimofeev
Copy link
Contributor

@crazy-max Ubuntu 20 with pass 1.7.3 on board was deployed https://github.com/actions/virtual-environments/blob/main/images/linux/Ubuntu2004-README.md#tools
I'm going to close the issue but please feel free to contact us if you have any concerns.
Thanks for your contribution!

@miketimofeev miketimofeev removed the awaiting-deployment Code complete; awaiting deployment and/or deployment in progress label Jan 29, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants