Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

novamostra.com

Post reply on HN
Print view View original

1–10 of 93 posts

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#3

Post by bheadmaster »

atemerev wrote: post #2

On one hand, this is incredibly cool, and brings some great security. On the other hand, docker containers on a RPi Zero? What a sad state of affairs we have in 2022.

Why?

Sincere question - AFAIK, Raspberry PI OS is a Linux distribution like any other, with dependency/distribution issues like any other. Why would using Docker on it be a sad state of affairs, in contrast to using it on any other distribution?

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#4

Post by vxNsr »

bheadmaster wrote: post #3
atemerev wrote: post #2

On one hand, this is incredibly cool, and brings some great security. On the other hand, docker containers on a RPi Zero? What a sad state of affairs we have in 2022.

Why? Sincere question - AFAIK, Raspberry PI OS is a Linux distribution like any other, with dependency/distribution issues like any other. Why would using Docker on it be a sad state of affairs, in contrast to using it on any other distribution?

Not the OP but maybe bec this is a single use device… why not just install direct on the OS and back the whole thing up?

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#6

Post by osrec »

vxNsr wrote: post #4
bheadmaster wrote: post #3

Earlier quoted context omitted.

Why? Sincere question - AFAIK, Raspberry PI OS is a Linux distribution like any other, with dependency/distribution issues like any other. Why would using Docker on it be a sad state of affairs, in contrast to using it on any other distribution?

Not the OP but maybe bec this is a single use device… why not just install direct on the OS and back the whole thing up?

In case you ever wish to change the operating conditions/environment/hardware in the future. Having a consistent operating environment is a big win, in my opinion.

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#7

Post by deberon »

vxNsr wrote: post #4
bheadmaster wrote: post #3

Earlier quoted context omitted.

Why? Sincere question - AFAIK, Raspberry PI OS is a Linux distribution like any other, with dependency/distribution issues like any other. Why would using Docker on it be a sad state of affairs, in contrast to using it on any other distribution?

Not the OP but maybe bec this is a single use device… why not just install direct on the OS and back the whole thing up?

Docker has been a godsend for home labs. People don't need to know where on the filesystem their configs have been scattered (distro dependent). They just need to know how to docker pull and configure their container.

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#8

Post by Dayshine »

vxNsr wrote: post #4
bheadmaster wrote: post #3

Earlier quoted context omitted.

Why? Sincere question - AFAIK, Raspberry PI OS is a Linux distribution like any other, with dependency/distribution issues like any other. Why would using Docker on it be a sad state of affairs, in contrast to using it on any other distribution?

Not the OP but maybe bec this is a single use device… why not just install direct on the OS and back the whole thing up?

Is there a generally supported way to back up an entire Linux installation from the device itself while it's running?

Is there a way to do it without backing up all the os packages?

With docker I can stop the service, then snapshot its data volume, then restart it. And restoring is very easy.

I have no idea how to get that workflow at an os level without a vm manager.

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#9

Post by bm3719 »

This is an interesting tech stack, but seems heavy-handed for managing such a small amount of raw data (the l/p list itself).

My solution for the past 14 years has been a simple GPG-encrypted org-mode (text) file. I can get to a password multiple ways from any device. The main way I check one is to open the file in Emacs which prompts for the master password via pinentry. You could also use a keyfile. Usually I just ssh and connect to a tmux session with emacs -nw already running, but I can also decrypt and grep it from the CLI, or clone the private repo its on to do the same locally. I only do anything involving PII or money in a dedicated PureOS VM though, so I generally don't jump through any hoops and it's relatively transparent.

Post reply on HN