NI Linux RT Secret Store

[Cannon_Controls]

I was trying to setup a method for securely storing secrets on these targets. I was able to install libsecret with "opkg install libsecret". This installed successfully. From there I tried to store a simple secret using "secret-tool store --label='mypassword' password secretpassword". I initially was getting a "Cannot autolaunch D-Bus without X11 $DISPLAY" error back. I ran the command "export $(dbus-launch)" and now when I run that same command I get this message back "The name org.freedesktop.secrets was not provided by any .service files". Is there any advice on getting libsecret working on NI Linux RT? Or is there a different tool out there that people have gotten working for storing secrets? I think if I had to I could use sqlite and encrypt the databse or use GnuPG to encrypt a text file but just curious if there was a more purpose built tool for storing and retriveing secrets securely (ideally over a terminal) that anyone has gotten working.

[James_McN · Accepted solution]

I'm not an expert on these guts but the fact it is asking for a .service file suggests it is expecting a SystemD init system but LinuxRT is still SysV. I don't know if that could be a mistake in the build that is installed with Opkg or a fundamental limitation in libsecret.

I've seen a few things that suggest the secret-tool may depend on gnome-keyring which is what provides the DBus service (such as https://bbs.archlinux.org/viewtopic.php?id=239198 and listed as a runtime dependency in https://www.linuxfromscratch.org/blfs/view/12.1-systemd/gnome/libsecret.html). This is obviously part of the gnome desktop environment so I don't know how easy it would be to get on LinuxRT.

[Cannon_Controls]

Gotcha, that is very helpful. I'll maybe forego this and see if I can find a similar tool out there that will be more compatible. I appreciate you looking into this!