History backend that can encrypt the xonsh shell commands history.
Project description
History backend that encrypt the xonsh shell commands history file
to prevent leaking sensitive data from the commands history
(keys, passwords, hosts, names).
If you like the idea click ⭐ on the repo and tweet now.
Installation
To install use pip:
xpip install xontrib-history-encrypt
# or: xpip install -U git+https://github.com/anki-code/xontrib-history-encrypt
Usage: supported encryption
Base64 (default)
Base64 is not the real encrypter and implemented as fast way to encode history file and for education reasons. It can save you from the massive scanning the file system for keywords (i.e. password, key) as well as reading the history file by not experienced user. But it can be decoded in five minutes by the professional.
# Add to xonsh RC file
$XONSH_HISTORY_ENCRYPTOR = 'base64'
xontrib load history_encrypt
Fernet
The implementation of Fernet (AES CBC + HMAC) that was strongly recommended on stackoverflow. On first start it generates a key that you should save in secure place. Than you can use this key to decrypt the history.
# Add to xonsh RC file
$XONSH_HISTORY_ENCRYPTOR = 'fernet'
xontrib load history_encrypt
Custom
$XONSH_HISTORY_ENCRYPTOR = {
'key': lambda: input('[xontrib-history-encrypt] Enter any key just for fun: '),
'enc': lambda data, key=None: data[::-1], # just flip the string
'dec': lambda data, key=None: data[::-1] # flip the string back
}
xontrib load history_encrypt
What should I know?
How to check the backend is working
history info
# backend: xontrib-history-encrypt
# sessionid: 374eedc9-fc94-4d27-9ab7-ebd5a5c87d12
# filename: /home/user/.local/share/xonsh/xonsh-history-encrypt.txt
# commands: 1
Some points about the backend
-
At start the backend read and decrypt all commands and this could take time. Basically we assume that you will use the xontrib on your servers and haven't so big history.
-
The commands are stored in the memory and flush to the disk at the exit from the shell. If the shell has crash there is no flushing to the disk and commands will be lost. Use
history flush
command if you plan to run something experimental. -
The backend has minimal history management support in comparing with json or sqlite backends and you can find the lack of features.
If you want to improve something from the list PRs are welcome!
Credits
- This package is the part of ergopack - the pack of ergonomic xontribs.
- This package was created with xontrib cookiecutter template.
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for xontrib-history-encrypt-0.0.7.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | 7ce82e95967facaa6039ec8638935fb69d02db7e13e3431f9a076dac8cfd16f3 |
|
MD5 | 57bed3027ae0bd73ef75351244887fdf |
|
BLAKE2b-256 | 7477cc175e37ef0ac76b4460664c663aef6705277ca42fd7ca1b46653df89bbb |
Hashes for xontrib_history_encrypt-0.0.7-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 6082cce93a7b39de686e890b9cc00138808263af3725519e4e497de59fe6d750 |
|
MD5 | 33b3d9de2553b3178d38e2eceaa1f34d |
|
BLAKE2b-256 | 6ca908b3dece11556e427134bb2607c89262cdae6f6c0fd34e390fb32ad488c1 |