Skip to content

v2.0.0 - for the users (and their experience)

Compare
Choose a tag to compare
@Byron Byron released this 31 Jan 19:08

V2.0.0: Better user experience and documentation

Besides the many improvements, you will also find a complete book about
the capabilities so far!

We also sign our binaries from here on, and make them available via homebrew.

Improvements

  • vault list now produces precise URLs.
  • vault remove can remove resources from the vault.
  • vault recipient add now signs and re-exports added fingerprints to make
    recipient verification part of adding them, and help build a Web of Trust.
  • vault recipients remove removes recipients and re-encrypts the vaults content.
  • vault recipient add also adds recipients which are only in your gpg keychain.
    Previously it would always require an exported public key in the right spot.
  • vault recipient add --verified allows to add any recipient by name, but requires
    you to assure you are able to encrypt for that recipient.
  • vault add now creates sub-directories automatically.
  • vault edit now tries to encrypt before launching the editor.
  • vault add :something with a tty as standard input will open an editor automatically.

Breaking Changes

The breaking change requiring a major version increment is changes to the sy-vault.yml file.

  • The at field is now called secrets
  • recipients and gpg-keys paths are no relative to the sy-vault.yml file, not relative to the
    secrets directory.
  • The '--at/-a' flag of sy vault is now --secrets-dir-dir/-s
  • recipients add will now require fingerprints unless --verified is specified.

These improvements make handling paths consistent and less suprising.