Password-less Keyring

Setting up a password-less pocketd

These instructions are intended to streamline usage of pocketd on Debian machines to AVOID providing a password each time.

Only follow these instructions if you know what you're doing.

This whole page can be skipped if the backend in your .pocket/config/client.toml is set to test.

If it is set to os or other, these instructions avoid having to enter your password every time.

Prerequisites

• You have installed the pocketd CLI.

• You have created a pocket user following one of the guides in the docs.

• You are running a Supplier on a Debian machine.

• 😮‍💨 You are annoyed about having to enter your password every time 😮‍💨

• ⚠️ You are not looking for a scalable "production ready" solution ⚠️

Background: os vs test backend

tl;dr: You can skip this page if you use the test backend

pocketd uses the Cosmos SDK keyring. For details on how it works, and understanding what a backend is, see the official docs.

This document will focus on how to use pocketd with the os backend without a password on a Debian machine, and assume you have read the Cosmos documentation.

Instructions

1

Install pass (password store utility)

sudo apt-get install pass

2

Create a GPG Key

Generate a new GPG key pair — you'll be prompted for:

• Kind of key: Choose RSA

• Key size: 3072 bits is recommended

• Key validity: Choose your preferred duration

• Your name and email

gpg --full-generate-key

3

Find Your GPG Key ID

List your secret keys and find your key ID.

gpg --list-secret-keys --keyid-format LONG

The output will look like:

sec rsa3072/B9448E560E033C02 <-- This is your key ID
5F79E46574CF39CDA4FB46BDB9448E560E033C02
uid [ultimate] Your Name <[email protected]>

4

Initialize pass with your GPG key ID

Replace B9448E560E033C02 with your actual key ID from the previous step.

pass init B9448E560E033C02

5

Store Cosmos Keyring Password

Store your password — you will be prompted to enter it.

pass insert cosmos-keyring

6

Verify Password Storage

This will display your stored password:

pass cosmos-keyring

IMPORTANT: RESTART REQUIRED

You must rerun the command above after every restart for the keys to be available.

7

Test Configuration

Test if pocketd can now access the keyring without prompting:

pocketd keys list

8

Security Reminder

Note: Make sure to keep your GPG private key secure, as it's used to decrypt your stored passwords.