on Linux use systemd-credentials. It already does that

ekianjo • today at 8:03 AM • 2 replies • view on HN

bukershok • today at 8:52 AM

Soon it will also be for Linux

porridgeraisin • today at 8:26 AM

Yes, you can even have it tpm-backed.

echo -n "sk-proj-12345..." | systemd-creds encrypt --with-key=tpm2 --name=openai_key - openai.cred

And then at runtime export OPENAI_API_KEY=$(sudo systemd-creds decrypt openai.cred)

alt Hacker News