Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)MA
Posts
11
Comments
427
Joined
2 yr. ago

  • The classic Unix user and permission system provides a solution for this.

    Create a user for the app you are worried about. Make the environment variables available to that user only.

    Other apps can’t read the secrets, and if the app itself gets exploited, it has access to the secrets in any case.

  • You could use a Garmin and disable the normal syncing. You can plug it in as USB device and access the activity files that way.

    You could write your own automation to process the files when the device is detected on the USB hub.

  • I’ve studied and used them both and prefer podman for the reasons podman promotes:

    • easy to manage containers via systemd, along with the other systems services I manage
    • better security: rootless containers.