Re-encrypt secrets with SSH recipients (not age recipients)

Fork: 0

Skyworks / skyworks-Nix-infra

Browse code Re-encrypt secrets with SSH recipients (not age recipients) age encrypts differently for age vs SSH recipients. agenix passes raw SSH host keys as identities, which can only decrypt SSH-recipient stanzas. Previously used ssh-to-age conversion which created age-recipient stanzas, causing "no identity matched" errors. Co-Authored-By: Claude Opus 4.6 <[email protected]> main
1 parent cf894dc commit 01b7580eaf999052f537ac1a3f2751f53b2627b1 Dixiao-L authored on 7 Mar

Browse code

age encrypts differently for age vs SSH recipients. agenix passes
raw SSH host keys as identities, which can only decrypt SSH-recipient
stanzas. Previously used ssh-to-age conversion which created
age-recipient stanzas, causing "no identity matched" errors.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

main

1 parent cf894dc commit 01b7580eaf999052f537ac1a3f2751f53b2627b1

Dixiao-L authored on 7 Mar

Patch

Unified Split

Showing 5 changed files

Ignore Space Show notes View secrets/skydick-wg.age

Ignore Space Show notes View secrets/xlab-wg-skyworks.age

Ignore Space Show notes View secrets/xlab-wg-warp.age

Ignore Space Show notes View secrets/xlab-wg-wgnet-psk.age

Ignore Space Show notes View secrets/xlab-wg-wgnet.age
Not supported

Show line notes below