Comments (11)
Which version of sops are you using?
from sops.
3.8.1 from nixpkgs unstable, although I’ve checked with nixos-23.11 with the same sops version and nixos-23.05 which is version 3.7.3. Exactly the same results with each.
from sops.
The problem is probably that no config file was found. In that case, conf
is nil
, and accessing conf.KeyGroups
results in the error you're reporting. Can you check whether you have a .sops.yaml
in the same directory as secrets.yaml
, or somewhere further up in the tree? My guess is that you don't have such a file, or that it doesn't have any creation rules.
from sops.
My .sops.yaml is further up the tree, but I haven’t had any trouble until trying to add a new key today. I can also still access secrets.yaml just not update the keys.
from sops.
Does .sops.yaml
contain creation_rules
?
from sops.
Yes, with the ´path_regex’ pointing to ´secrets.yaml$’ and ´key_groups’ containing the age passwords for each corresponding key. I should not that what’s happened is that one of my machines died and I lost the private key so I’ve updated the age value of one of these entries. I don’t think this should be a problem, but just in case.
from sops.
Sorry about formatting, I’m currently on my phone
from sops.
Hmm, I checked all possible code paths, the only way I can produce the crash you have is if creation_rules
is missing from (or misspelled in) .sops.yaml
.
from sops.
Wow, okay... yes there was an accidental
added before keys
when I updated the .sops.yaml
. Sorry that was such a stupid question - the readout was just too cryptic for me to know where to start. I might make a request to check that the config file can be read without failing and if not a readable error returned.
Thanks for your help and your time.
from sops.
No worries! SOPS definitely shouldn't crash in that case. I've created #1506 which should fix that. It will tell you something like
The config file ../.sops.yaml does not contain any creation rule
from sops.
Haha, wow, perfect! Thanks. Just to note, my error wasn't missing creation_rules
it was actually missing keys
because I had keys
instead. But at least with your pull request any future idiots like me will know to look in their config files first 😉
Thanks again. Your help is massively appreciated
from sops.
Related Issues (20)
- SOPS mac_only_encrypted HOT 3
- Does sops edit exist? HOT 2
- Update Documentation for usage with ansible inventory. Parameter: _valid_extensions HOT 1
- Which winget ID can i trust to get sops ? HOT 4
- Management of `Harvest Now, Decrypt Later` ("HNDL") and `Post-Quantum Safety` ("PQS") HOT 1
- How to verify deb packages before installing ? HOT 2
- encrypt & decrypt command format conflict HOT 2
- 3.9.0: RPM package name changed again HOT 2
- Upgrade from v3.8.1 to v3.9.0 causes "could not load AWS config" error HOT 3
- Another "Error decrypting tree: Error walking tree: Could not decrypt value: crypto/aes: invalid key size 0" HOT 2
- Feature request: encryption (or failure) based on entropy
- key_groups should only require 1 group to decrypt minimum HOT 2
- Encrypting file with filename '.env' produces unsupported format HOT 2
- Sops cannot find config file if it's named .sops.yml (instead of .sops.yaml) HOT 2
- Sops not work with GCP, I got timeout.
- CVE-2024-24791 in sops binary v3.9.0
- Add second `kms` list entry when SOPS file created
- Linter and tests fail when using getsops package HOT 2
- Allow encryption to keep unmodified parts
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sops.