Skip to content

Commit eab416f

Browse files
felixfonteinhaoqixu
andcommitted
update docs about ssh support
apply suggestions from code review Converted from getsops/sops@775335d and getsops/sops@244a9a4 Co-authored-by: haoqixu <hq.xu0o0@gmail.com> Co-authored-by: Felix Fontein <felix@fontein.de> Signed-off-by: haoqixu <hq.xu0o0@gmail.com> Signed-off-by: Felix Fontein <felix@fontein.de>
1 parent f11d858 commit eab416f

1 file changed

Lines changed: 8 additions & 1 deletion

File tree

content/en/docs/_index.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -256,7 +256,14 @@ one per line. Lines beginning with `#` are considered comments and
256256
ignored. Each identity will be tried in sequence until one is able to
257257
decrypt the data.
258258
259-
Encrypting with SSH keys via age is not yet supported by SOPS.
259+
Encrypting with SSH keys via age is also supported by SOPS.
260+
You can use SSH public keys (`ssh-ed25519 AAAA...`, `ssh-rsa AAAA...`)
261+
as age recipients when encrypting a file.
262+
When decrypting a file, SOPS will look for `~/.ssh/id_ed25519` and falls back to
263+
`~/.ssh/id_rsa`. You can specify the location of the private key manually by setting
264+
the environment variableuse **SOPS_AGE_SSH_PRIVATE_KEY_FILE**.
265+
266+
Note that only `ssh-rsa` and `ssh-ed25519` are supported.
260267
261268
A list of age recipients can be added to the `.sops.yaml`:
262269

0 commit comments

Comments
 (0)