Re: [SQL] encrypt psql password in unix script

From: Xavier Stevens <xavier(at)simple(dot)com>
To: Steve Midgley <science(at)misuse(dot)org>
Cc: Suresh Raja <suresh(dot)rajaabc(at)gmail(dot)com>, PostgreSQL mailing lists <pgsql-general(at)postgresql(dot)org>, pgsql-sql(at)postgresql(dot)org
Subject: Re: [SQL] encrypt psql password in unix script
Date: 2015-07-08 19:08:18
Message-ID: CAFu3Q-JZGe+QfbSZXVmVjuebEqixF53=N2TN1UjBvGOXBTyCQw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general pgsql-sql

I use envcrypt for things like this locally. Just encrypt the file with
your own PGP key.

https://github.com/whilp/envcrypt

On Wed, Jul 8, 2015 at 12:01 PM, Steve Midgley <science(at)misuse(dot)org> wrote:

> My suggestion is to put it in an environment variable and set that
> variable from a shell startup script that is secured with permissions. (
> http://www.postgresql.org/docs/9.4/static/libpq-envars.html)
>
> If you can't do that, the only other method I've used is to setup Postgres
> with Ansible, and store the Pg passwords in an ansible vault, which is
> encrypted. Ansible asks for the decrypt key when it runs.
>
> Steve
>
>
> On Wed, Jul 8, 2015 at 11:34 AM, Suresh Raja <suresh(dot)rajaabc(at)gmail(dot)com>
> wrote:
>
>> Hi:
>>
>> I cannot use .pgpass as the password stored here is not encrypted.
>>
>> can i use a encrypted password from unix shell script. has anybody ran
>> into same situation. Wht options do i have.
>>
>> Thanks,
>> -SR
>>
>
>

In response to

Browse pgsql-general by date

  From Date Subject
Next Message John R Pierce 2015-07-08 19:20:37 Re: [SQL] encrypt psql password in unix script
Previous Message Vick Khera 2015-07-08 19:06:51 Re: encrypt psql password in unix script

Browse pgsql-sql by date

  From Date Subject
Next Message John R Pierce 2015-07-08 19:20:37 Re: [SQL] encrypt psql password in unix script
Previous Message Vick Khera 2015-07-08 19:06:51 Re: encrypt psql password in unix script