Documentation
¶
Overview ¶
Package envpass forwards host environment variables an external environment provider (a secrets manager, direnv, a shell wrapper) injected into lerd's own process on into the one-shot commands lerd runs in a container.
The contract is an allowlist of names, never values, following the shape systemd's PassEnvironment=, ssh's SendEnv and sudo's env_keep already use: the provider sets LERD_PASSTHROUGH_ENV to the names it injected, glob patterns allowed, and lerd forwards each match as a bare `--env NAME` so podman reads the value out of lerd's environment and nothing lands in argv or on disk.
Index ¶
Constants ¶
const EnvVar = "LERD_PASSTHROUGH_ENV"
EnvVar is the variable an external environment provider sets before it execs lerd, holding the names it injected.
Variables ¶
This section is empty.
Functions ¶
func Args ¶
Args returns the podman exec flags forwarding the variables the project at dir, or the provider that started lerd, asked for. Names that match nothing in environ are skipped silently, as they are in systemd.
func Names ¶
Names expands patterns against environ, returning the variable names to forward, deduplicated and sorted so an exec argv is stable.
Types ¶
This section is empty.
Source Files