Censor root password ? '-'

[laluka]

The needs

Hoy hoy o/
As a streamer, (or let's say frequent screen-sharer), I'd like to have the root password maybe saved in a file or half-show, to prevent an online container being created (vpc public ip) to be easy to steal/compromise while booting live 🙏 😇

Description

"Password is in file ...", + "press X display, N to pursue without showing the password" ?

Alternatives

Not doing this live heh, but I'd be happy to show our AI research by using exegol as our main entry point / sandbox-ish

Additional context

You still single ? Bc you sexy af!

[Dramelac]

Hello !

This is indeed a very specific use-case.

Do you need to hide the root password and/or the URL of the desktop service?

Would having an environment variable "steamer mode" to set/unset be suitable for addressing your issue?

[laluka]

Hmm, I didn't play yet with the desktop service, I think a "by default" url & pass censor is nice, with an extra input or option to display it ?
Yup the use-case is specific, but I assume this would be the same issue in screenshare with customers ? 😇
The env variable could cut it, but I'm not to into this as one can get pwned before knowing this info will be displayed, therefore before enabling the streamer mode :/

[Dramelac]

Even if someone has your VPC's IP address, without the desktop service being enabled AND exposed (which, by default, is only exposed on localhost), the root password won't be of much use. Even in the event of a leak, I don't see how it alone, without desktop mode, could compromise the container.

[laluka]

Agreed on this one, I have it in the cloud as well, but if no auth service is enabled or if ufw shields, let's admit ! :)