Skip to content

kas-container only supported the "store credential helper" for HTTPS-…#147

Open
jsolla wants to merge 1 commit into
siemens:nextfrom
jsolla:next
Open

kas-container only supported the "store credential helper" for HTTPS-…#147
jsolla wants to merge 1 commit into
siemens:nextfrom
jsolla:next

Conversation

@jsolla
Copy link
Copy Markdown

@jsolla jsolla commented Mar 27, 2025

…based repositories, which required storing credentials in plain

text file. This commit adds support for the "cache credential helper", allowing credentials to be securely stored and reused without needing repeated input.

Usage:

Enable credential caching on the host:
git config --global credential.helper 'cache --timeout=86400'

From the host, perform a git pull (or any other operation requiring credentials) in your password-protected repository. After entering credentials once, Git will store them and make them available through a background daemon that exposes a socket.

In the host, you should see a running process similar to:
/usr/lib/git-core/git credential-cache--daemon $HOME/.cache/git/credential/socket

Launch the Kas container with the Git credential socket option:
kas-container --git-credential-socket $HOME/.cache/git/credential/socket

…based repositories, which required storing credentials in plain

text file. This  commit adds support for the "cache credential helper", allowing credentials  to be securely stored and reused without
needing repeated input.

Usage:

Enable credential caching on the host:
  git config --global credential.helper 'cache --timeout=86400'

From the host, perform a git pull (or any other operation requiring credentials) in your password-protected repository.
After entering credentials once, Git will store them and make them available through a background daemon that exposes a socket.

In the host, you should see a running process similar to:
  /usr/lib/git-core/git credential-cache--daemon $HOME/.cache/git/credential/socket

Launch the Kas container with the Git credential socket option:
    kas-container --git-credential-socket $HOME/.cache/git/credential/socket <other options...>


Signed-off-by: Jorge Solla Rubiales <jorgesolla@qtactica.com>
@jan-kiszka
Copy link
Copy Markdown
Collaborator

Sorry, never followed up on this. Please see https://github.com/siemens/kas/blob/master/CONTRIBUTING.md for our normal process.

Your patch still seems to apply, and if you are interested in driving it further, I can mirror it our mailing list (unless you can yourself). One style remark upfront: Please use a short subject line (first paragraph in the commit message is the subject).

@jsolla
Copy link
Copy Markdown
Author

jsolla commented Apr 17, 2026

Hi,

Yes I would like to drive it further.
What would be the process? submitting it to the mailing list and discuss it there? or shall I fix something in this PR?

@jan-kiszka
Copy link
Copy Markdown
Collaborator

Submission as patch to kas-devel@googlegroups.com would be preferred, yes. If you should run into troubles, PR would be the fallback.

@jan-kiszka
Copy link
Copy Markdown
Collaborator

I think this never went to the list, did it?

@jsolla
Copy link
Copy Markdown
Author

jsolla commented May 29, 2026

Yes i posted it to the list, and you responded. Last update is posted there:
https://groups.google.com/g/kas-devel/c/YleNUb73iOU

@jan-kiszka
Copy link
Copy Markdown
Collaborator

Ouch, indeed. Due to the CVE-driven sudden release of 5.3, I was not calling out for missed patches. Let's resume the thread then.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants