– we create awesome web applications

There is a new (0.2.7) version of Astrails-Safe.

New features since 0.2.5:

  • default options for gpg now include --no-use-agent
  • support for command option for gpg
  • quote values in mysql password file
  • add lib to $:
  • [EXPERIMENTAL] Rackspace Cloud Files support

H. Wade Minter contributed support for Rackspace cloud files. I have no way of testing this, so please tell me if it works :)

To easy the development process, I added the 'lib' directory of the 'currently running' safe to the library load path"$:". This enables to work on a new version of safe even though you have some version already installed. The files in ./lib will come first in the load path.

IMPORTANT:

I just stumbled upon a problem with the gpg encryption on a freshly installed Ubuntu EC2 instance. The gpg was asking for a password on the console even though it was passed the --passphrase-file option with the file containing the password.

After some investigation I found out that gnupg's default template configuration file now contains 'use-agent' options.

The result of it is that on the first invocation of astrails-safe it will work, but gpg will create a new ~/gnupg/gpg.conf file with 'use-agent' setting, so the next time you run astrails-safe it will fail and ask for the password on the console!

if you are running gpg 1.x series, just pass --no-use-agent to the "options" setting in the astrails-safe config in the 'gpg' section (since this 0.2.7 version this options is set in the default astrails-safe template config).

For gpg2 series, I suppose you'll need to run the gpg-agent (actually I'm not sure, I didn't research it too deeply, so I'll be happy to get feedback on the issue)

I also added 'command' option support for gpg which allows to override the executable astrails-safe is using for the enctyption. For example you can have command "/usr/loca/bin/gpg" in the gpg section.

comments powered by Disqus