root df6aca888c homelab: re-exec 'secret' via sudo for non-root users ...

/etc/age/key.txt is 0600 root and /etc/age is 0700 root, so the CLI's
Path.exists() check was returning False under regular users — making the
subcommand look broken when bootstrap had actually written the key fine.
Re-exec via sudo preserves the existing UX (one password prompt, then
plaintext) without loosening the key's perms.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-20 17:48:32 +02:00

..

homelab

homelab: re-exec 'secret' via sudo for non-root users

2026-05-20 17:48:32 +02:00