-
|
I sit behind a webproxy with kerberos authentication. Can, and if yes, how do I configure chezmoi to use kerberos or alternatively username and password to authenticate against the webproxy
[ ".local/share/externals/atuin/" ]
type = "archive"
url = "https://github.com/atuinsh/atuin/releases/download/v18.6.1/atuin-x86_64-unknown-linux-musl.tar.gz"
exact = true
stripComponents = 1
refreshPeriod = "168h"
executable = trueHowever |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 11 replies
-
|
See https://www.chezmoi.io/user-guide/tools/http-or-socks5-proxy/. |
Beta Was this translation helpful? Give feedback.
-
|
I have seen that but does not work with kerberos. In curl for instance u need to explicitly use |
Beta Was this translation helpful? Give feedback.
-
|
How do applications that don't speak Kerberos make external HTTP requests on your machine? I don't want to add Kerberos support directly to chezmoi because Kerberos is a large and complex specification with many configuration variables which I don't understand and have no way to test. I would be happy to extend chezmoi to support making HTTP requests through a user-supplied program, so that chezmoi can support web proxies that use Kerberos authentication. However, as the HTTP specification is also large and complex, the established way to do this is with the existing support for the |
Beta Was this translation helpful? Give feedback.
-
Sure I can understand.
At the moment its git and curl and both work with kerberos. For other tools similar issues arise
I thought of something like that. My main issue is currently downloading files using Maybe simplest wpuld just be to have an option which enables curl to handle download instead, with possibility to specify additional params. |
Beta Was this translation helpful? Give feedback.
-
I thought about adding support for using an external command for HTTP downloads, but the HTTP specification is huge and chezmoi has to set various headers for some requests (e.g. authenticated request to the GitHub API). The correct way to intercept HTTP requests is to use an HTTP proxy, and chezmoi already supports that through the An alternative for you would be to use a |
Beta Was this translation helpful? Give feedback.
-
|
That sounds good, did not thought about this... |
Beta Was this translation helpful? Give feedback.
-
|
So while I have the init script This works initially, as soon as I have an entry for that file in and I change e.g. the version to be downloaded, then I get Same happens when I also add |
Beta Was this translation helpful? Give feedback.
-
|
Please run After that, run |
Beta Was this translation helpful? Give feedback.
-
|
Beta Was this translation helpful? Give feedback.
I thought about adding support for using an external command for HTTP downloads, but the HTTP specification is huge and chezmoi has to set various headers for some requests (e.g. authenticated request to the GitHub API). The correct way to intercept HTTP requests is to use an HTTP proxy, and chezmoi already supports that through the
HTTP_PROXYenvironment variable.An alternative for you would be to use a
run_before_script that downloads the archives withcurland then usefile://URLs in.chezmoiexternal.