"passwords via `stdin` are currently unsupported!"

[Henry-Hiles]

Hello, I wanted to use this on my server, but attempting to remotely rebuild results in this error:

thread 'main' panicked at src/main.rs:27:9:
passwords via `stdin` are currently unsupported!
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

I believe run0 itself has STDIN support, so perhaps you could pass it through? Thanks!

[LordGrimmauld]

run0 --pipe does not take the password, it takes the commands to be piped. Which makes this quite a lot harder.

[LordGrimmauld]

Here is a cursed idea... There exist polkit agents like pkttyagent which are executed as the user (no suid) whenever an authentication request is made. They get started and ask for a password to pass back. I could try to "pre-populate" persistent authentication cache by doing the authentication dbus call manually before exec-ing into run0.

This would mean stdin passwords would only work with persistent authentication, and i would have to learn a bunch more about polkit+dbus. But this might be possible. How secure that approach ends up being, i am not sure: this extra authentication code path would be separate from most other polkit/run0, meaning it wouldn't get updated by systemd upstream. I'd be responsible for keeping that code path clean myself.

[Henry-Hiles]

Wow, that's rather complex. It's up to you, I'm just trying to get nixos-rebuild to a remote server working with this :) rn ill use this on my desktop but not on my server. Also persistent auth doesnt work for me, so idk if it would matter