Live data from Hacker News

Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

novamostra.com

31–40 of 93 posts

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#31

Earlier quoted context omitted.

Why? Sincere question - AFAIK, Raspberry PI OS is a Linux distribution like any other, with dependency/distribution issues like any other. Why would using Docker on it be a sad state of affairs, in contrast to using it on any other distribution?

Because a password manager is a tiny piece of software. Instead, it is now a multi-component black box installation with a general purpose operating system running on a full-scale Linux machine with a containerization platform designed for datacenters. I am not a fan of this kind of redundancy and opaqueness.

When you put it that way, I agree - a password manager should really be implementable as a single statically linked binary.

There seem to be some other Docker features used, like healthcheck [0], and MariaDB seems to be installed, too, so it might be worth considering how much additional OS-dependent complexity would the equivalent functionality without using Docker require. At the very least, you need some kind of service manager to run your program on boot, and restart it on error. At that point, Docker may as well be used as a glorified service manager - just slap your static binary in a `FROM scratch` container, and you're done.

> I am not a fan of this kind of redundancy and opaqueness.

Me neither. But I wouldn't blame Docker itself - it's just a tool. If it wasn't for Docker, some other way of circumventing good engineering would be found :-)

[0] https://github.com/dani-garcia/vaultwarden/blob/main/docker/...

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#32

That's such a tease. I check RPI-locator daily. Buying a Pi anything in the US is hard now.

I ended up getting some ROCK64 boards instead. They’re a great price

One downside is the PoE hats are massive

https://pine64.com/product/rock64-4gb-single-board-computer/

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#34
post #30

Does Bitwarden's setup process still involve entering your master key in the browser? This always felt very sketchy to me, for some reason.

As long as the master key stays local and is hashed/salted before being sent to BW, you have nothing to worry about. You can verify this yourself.

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#35
honestly to me this falls into the category of LARP security. the entire point of encryption is to move sensitive data across adversarial channels. Meaning, if you trust Bitwarden enough to use it at all there's no benefit to not just using their servers (you keep a local copy of your data anyway).

If you want to keep your data secure by keeping them on you, just use a notebook. Cheaper than this and works without a power chord.

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#37

An alternative to this is to expose this to your local network and use tailscale to connect to it so you do not have to carry it around while being secure.

My understanding of tailscale is you give full access to the tailscale company to allow any public key to access any of your machines.

I think I'll stick with running my own wireguard thanks.

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#38
post #37

An alternative to this is to expose this to your local network and use tailscale to connect to it so you do not have to carry it around while being secure.

My understanding of tailscale is you give full access to the tailscale company to allow any public key to access any of your machines. I think I'll stick with running my own wireguard thanks.

Or you can run Headscale: https://github.com/juanfont/headscale
Post reply on HN