From: stv0g Date: Mon, 18 Aug 2025 17:07:40 +0000 (+0000) Subject: Added a comment: encryption=credsonly X-Git-Tag: archive/raspbian/10.20251029-1+rpi1~1^2~3^2~207^2~1 X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=5d7a7e25624bf81b451269d15aceea38b2bc89fd;p=git-annex.git Added a comment: encryption=credsonly --- diff --git a/doc/todo/encrypt_only_the_credentials/comment_4_50799c026dfe44aa2d447596e351f61a._comment b/doc/todo/encrypt_only_the_credentials/comment_4_50799c026dfe44aa2d447596e351f61a._comment new file mode 100644 index 0000000000..eff2b678de --- /dev/null +++ b/doc/todo/encrypt_only_the_credentials/comment_4_50799c026dfe44aa2d447596e351f61a._comment @@ -0,0 +1,15 @@ +[[!comment format=mdwn + username="stv0g" + avatar="http://cdn.libravatar.org/avatar/6faa6cc783a165b25fc1c8f3154ba449" + subject="encryption=credsonly" + date="2025-08-18T17:07:40Z" + content=""" +Hi Joey, + +> I agree it would make sense to have some way to embedcreds without encrypting content stored on the remote. +> I suppose one way to express it is as encryption=onlycreds embedcreds=yes with one or more keyids. + +I am also in need of the `encryption=credsonly` option for the LTO tape special remote on which I am currently working. + +LTO tape drives provide hardware-based AES encryption which I would like to use. However, to enable this HW-accellerated encryption, I need to initialize the tape drive with an appropriate key, which I would like to store in the annex using credentials. +"""]]