21678: Passes credentials through conf file instead of env vars.
authorLucas Di Pentima <lucas.dipentima@curii.com>
Mon, 13 May 2024 18:00:46 +0000 (15:00 -0300)
committerLucas Di Pentima <lucas.dipentima@curii.com>
Mon, 13 May 2024 18:00:46 +0000 (15:00 -0300)
commitef4f350438ec7465b5fd71aeda834c2a707b80b3
tree2f248c7ee0e6b23e09fe5836cdb548bd9ce06c87
parent218b4d51dd9b31604a37d78bb602151bdc2af4d6
21678: Passes credentials through conf file instead of env vars.

To avoid leaking the token to the remote host process list, and also
minimize the exposure on the local host, instead of passing the credentials
through environment variables, we build a conf file that get piped to ssh
via stdout/stdin.

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>
tools/salt-install/installer.sh