Saravanan666/pypi-org huggingface dataset:
Package: vault-bitwarden-client
Ansible Vault Bitwarden ClientUse Bitwarden to unlock Ansible vaults.DescriptionAs described inStoring and accessing vault passwords, Ansible has the
ability to retrieve vault passwords from third-party tools using a client script. This
script implements the client interface for retrieving passwords from Bitwarden.RequirementsAnsiblebwBitwarden CLItoolInstallationpip install --user vault-bitwarden-clientFrom source:pip install --user /path/to/repos/vault-bitwarden-clientYou can also run the script directly, without installing it:python3 /path/to/repos/vault-vitwarden-client/vault_bitwarden_client.py --helpSetupBitwarden entries for your vaults must have names containing "Ansible Vault: $vault_id"
and the vault-id should be saved as the username. Usedefaultas the username when no
vault-id is being used. For example:Name:Ansible Vault: devUsername:devPassword:S3kr1tEntries should have unique names; as only the first matching entry will be used. The
value for the default vault-id and the Bitwarden search string are both configurable in
youransible.cfgfile, as documented below.In order to not be prompted for your Bitwarden password every time, you can update your
environment with your session key. For example:BashexportBW_SESSION=$(bwunlock--raw)Fishset-Ux BW_SESSION(bw unlock --raw)Otherwise, you will be prompted for your password the same as if you were executingbwon the command line.UsageYou can call the script directly:ansible-vault--vault-iddev@$(command-vvault-bitwarden-client)viewsome_encrypted_file

ansible-playbook--vault-password-file$(command-vvault-bitwarden-client)playbook.ymlSet it in your environment:exportANSIBLE_VAULT_PASSWORD_FILE=$(command-vvault-bitwarden-client)ansible-vault--vault-iddevviewsome_encrypted_file

ansible-playbookplaybook.ymlOr configure it in youransible.cfgfile:[defaults]
vault_password_file = ~/.local/bin/vault-bitwarden-client

# Optional:
[vault]
bitwarden_search = Ansible Vault: %(vault_id)s
bitwarden_default_id = defaultIn addition to creating Bitwarden entries manually, you can set passwords using this script:vault-bitwarden-client--set# Sets 'default' passwordvault-bitwarden-client--vault-iddev--set# Sets 'dev passwordYou can set thebitwarden_password_optionsin youransible.cfgfile to override the
default password generator options, which are-ulns --length 20.Changing an existing entriy's password will output the old password and the new password
to facilitate rekeying existing vault files.
Package: vault-cli
vault-cliis a Python 3.6+ tool that offers simple interactions to manipulate
secrets fromHashicorp Vault. Withvault-cli, your secrets can be kept secret,
while following12-factorprinciples.Some featuresConfigure once, use everywhere thanks to cascading (local, user, global) YAML
configuration fileRead, browse, write, move, delete secrets easilyRead multiple secrets at once, as YAMLLaunch processes with your secrets as environment variablesLaunch processes withssh-agentconfigured from your vaultWrite templated files with secrets insidevault-clitries to make accessing secrets both secure and painless.ShowcaseHere are a few things you might do withvault-cli:$# Install:$pipinstallvault-cli$# Write a secret:$vault-clisetmysecretmykey--promptPlease enter a value for key `mykey` of `mysecret`: *******$# Read a secret:$vault-cligetmysecretmykeyohsosecret$# Load a secret into the environment variables:$vault-clienv--envvarmysecret--env|grepMYSECRETMYSECRET_MYKEY=ohsosecret$# Load an ssh key into your ssh-agent:$vault-clissh--keyssh_private_key--ssh-Tgit@github.comHi <username>! You've successfully authenticated, but GitHub does not provide shell access.StateThe package is young but supported and alive. We’re mindful of deprecations through
semantic versionning and accepting bug reports and feature requests.Where to go from hereThe completedocsis probably the best place to learn about the project.If you encounter a bug, or want to get in touch, you’re always welcome to open aticket.
Package: vault-client
# vault-clientКлиент предназанчен для унифицированного доступа к переменным  окружения размещённым в конфигурационном
файле (или переменных окружения) или в хранилище Vault, в зависимости от параметров инициализации.## Установка клиента> pip install vault-client## Интерфейс клиента### Инициализация клиента:> client = VaultClient(environ=”LOCAL”)При таком способе инициализации источником данных является файл*.deploy/.envs/local.env*.При отсутствии параметра*environ*> client = VaultClient()или*environ=None*> client = VaultClient(environ=None)Данные получаются из Vault, параметры сервера Vault должны быть заданы в переменных окружения.Для получения параметров из хранилища Vault в переменных окружения задаются следующие данные;
- адрес хоста и порт Vault (host,port);
- токен доступа к Vault (token);
- точка монтирования (mount_point);
- стадия разработки (PROD, STAGE, DEV и т.д.) (environ)Перечисленные параметры должны быть установлены в переменных окружения:VAULT_TOKENVAULT_PORTVAULT_HOSTVAULT_MOUNT_POINTVAULT_ENVВнимание:при записи параметров в Vault, наименование параметра должно указываться строчными символами.### Пример структуры данных в файле local.env или в VaultSTORAGE_HOST=127.0.0.1
STORAGE_PORT=50001
PARSER_HOST=127.0.0.2
PARSER_PORT=50002Данные определяется таким образом:<Сервис>_<Параметр> - при размещении данных в файле local.env;<Сервис>/STAGE/<Параметр> - при  размещении данных в Vault;#### Пример получения параметра>client = VaultClient(environ=”LOCAL”)
>
>result = client.get(“storage”, “host”)При иницализации клиента с параметром*environ = LOCAL*, значение параметра будет получаться из переменной
окруженияSTORAGE_HOST, в случае отсутствия -*result = None*.Иницализация клиента с параметром*VAULT_ENV*отличном от*LOCAL*(например:*PROD*), значение параметра
будет запрашиваться из Vault по пути:*test_client/STORAGE/PROD/host*(при VAULT_MOUNT_POINT = test_client),
в случае отсутствия -*result = None*.## Unit testUnit тесты и интеграционные тесты не разделяются. Вы можете найти их в /tests. Для проведения интеграционных тестов, требуется развёрнутый vault.## ПоддержкаСоздано при поддержке fless.pro
Package: vault-crio
Installationpip install vault_crioGet startedHow to fetch keys required by a script from the AWS secret manager vault with this lib:from vault_crio import vaultInstantiate a Multiplication objectfetch = vault(boto3.client('secretsmanager'))Call the fetch_and_store methodfetch.fetch_and_store("test100", "prod")
key = json.loads(os.getenv('TEST100_PROD_SHEET_KEY')) # dict
token = os.getenv('TEST100_PROD_TOKEN') # stringPrint and checkprint(key)
print(type(key))
print(token)
print(type(token))
Package: vault-dev
vault-devUse vault server in development mode in tests, from pythonInstallation:Install with pippip3install--uservault_devUsage:importvault_devvault_dev.ensure_installed()# Did not find system vault, installing one for tests# installing vault to '/tmp/tmpkzvlyw5c'withvault_dev.server(verbose=True)asserver:vault=server.client()vault.write("secret/key",value="password")# Starting vault server on port 37355# Waiting for server to become active# .# Connection made# Configuring old-style kv engine at /secret# Stopping vault serverLicensevault-devis distributed under the terms of theMITlicense.
Package: vault-dump-restore
vault-dump-restoreDumps keys from a Hashicorp instance into a file, to be able to restore it later
in any other instance. Remember to encrypt the file!This only supports reading a kv2 engine. Also note that these dumps and
restores are meant to be used very rarely and under emergency situations
since this kind of defeats the purpose of having a vault (storing secrets
inside a vault, sealed with a key, etc) - you're dumping all the secrets
to a external file!The following examples use gpg commands to encrypt/decrypt the files.Example for dump:# make sure you have the vault environment variables:exportVAULT_ADDR=https://<vault-addr>exportVAULT_TOKEN=<vault-token># dumps the entire vault kv secrets in a shell script (vault commands)vault-dump-ovaultvault-o|gpg--symmetric--cipher-algoAES256>vault-backup.sh.enc# dumps a specific path with the default json formatvault-dump-psecrets/specific-app|gpg--symmetric--cipher-algoAES256>vault-backup.json.encExamples for restore:# make sure you have the vault environment variables:exportVAULT_ADDR=https://<vault-addr>exportVAULT_TOKEN=<vault-token># you will also must have the secret engine createdvaultsecretsenable-path=secretskv# restore a full dump using the shell script format.<(gpg-qdvault-backup.sh.enc)# restore a full dump using the JSON formatgpg-qdvault-backup.json.enc|vault-restore-# restore a specific path using the JSON formatgpg-qdvault-backup.json.enc|vault-restore-psecrets/specific-app-Installation and usageInstallation can be done through pip:pipinstallvault-dump-restoreUse the-hparameter to get help from the commands:vault-dump-h
vault-restore-hContentsAPI ReferenceChangeLogSetup and usage for local developmentMake a virtual environment:python3-mvenvvenvsourcevenv/bin/activate
pipinstall-e.Note that this will also install the local dependencies, which might change after
some time. If needed, you can runpip install -e .again to reinstall the
updated dependencies anytime.Documentation buildRun:makedocsHTML documentation will be generated atdocs/_build/html.
Package: vaulter-py
VAULTERPYSAFE YOUR PASSWORDSVAULTERPYis a python program with which you can secure your precious passwords very easily.FeaturesStores your passwords in databaseAll the passwords are encryptedYou can only decrypt your passwords if you have the right keyThe application can run on anyOS-windows, linux, apple, etc.MotivationMy motive of building this applcation
is to help others as well as me
for storing passwords without any tension
And not to use any notebook or papers,
to write my passwords as it can be seen by other easily.😧TechThe overall configuration of my project and libraries which I have used :-Written in -PythonlanguageLibraries -Cryptography- Used for encrypting and decrypting the passwordsSqlite3- Used for working with database and storing the passwordsMade an env - environment for this project, so made a precise requirements.txtrequirements.txtInstallationThe Installation is pretty easy.Using GitMake a directory in your computer to store the files.Go into the directory and clone the git repositorygit clone https://github.com/Shreejan-35/VAULTERPY.gitThen go int thesrcdirectory.Open your favourite terminal, and type this commandspip install requirements.txtThen,python run.pyORpython3 run.pyUsing pipRun the following command -pip install vaulter-pyORpip3 install vaulter-pyThen run,vaulterpyUseful guideBefore inserting or retriving passwords, pressLto load your secret key.OthersSee the test directory in src to see some previous passwords which I stored in the database and also the key which is generated.LicenseMIT LicenseFOLLOW ME ON INSTAGRAM @star_cyber_warrior
Package: vaultinum-ts
Vaultinum Timestamping Python SDKThis module is a simple client for the Vaultinum's Timestamping service.InstallationThis package is available on PyPI :python-mpipinstallvaultinum-tsUsagepython-mvaultinum_ts--help
python-mvaultinum_ts-filenamedata.txt-environmentsandbox-apikeyYOUR_SANDBOX_APIKEY
python-mvaultinum_ts-sha512YOUR_SHA512_HASH-environmentsandbox-apikeyYOUR_SANDBOX_APIKEY>>>fromvaultinum_tsimporttimestamp>>>timestamp("data.txt","sandbox","YOUR_SANDBOX_APIKEY")>>>timestamp_from_hash("YOUR_SHA512_HASH","sandbox","YOUR_SANDBOX_APIKEY")
Package: vault-keepass-import
distutils
Platform: UNKNOWN
Classifier: Development Status :: 4 - Beta
Classifier: Environment :: Console
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: License :: OSI Approved :: GNU General Public License v3 or later (GPLv3+)
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python
Description-Content-Type: text/markdown; charset=UTF-8
Package: vaultkeeper-adaptor
A small library that allows Django applications to consumevaultkeeperoutput as resource secrets.django-vaultkeeper-adaptorsupports theSET_ROLEoperationnecessary to revoke dynamically-generated PostgreSQL credentials.Installing the PackageClone this project and install the package from source with the following commands in the root directory of the repository:$ pip install-e.Install the package for development with the following command:$ pip install-e.[test]PrerequisitesTechnically, you do not need to launch your application withvaultkeeperto use this library, as it is simply an input adaptor. However, using your app withvaultkeeperis strongly recommended.It is assumed that the rest of your Vault workflow is already configured and running. If you are using the PostgreSQL secret backend with Django, it is necessary to usedjango-postgresql-setrolein your application as well.How to UseEnsure thatdjango-vaultkeeper-adaptoris installed in your production environment.Ensure that your Django application knows where the file containing your secrets will be. In yoursettings.py, replace your existing way of populatingDATABASESandBROKER_URLwith the following code:cfg=environ.get('CREDENTIAL_PATH','')ifcfg!='':vk_adaptor=vaultkeeper_adaptor.VKAdaptor(config_path=cfg,DATABASES=DATABASES,BROKER_URL=BROKER_URL,)vk_adaptor.process_all()django-vaultkeeper-adaptorwill read thevaultkeeper-generated file containing application credentials and populate the supplied settings variables with values from the file, if they exist.Note thatCREDENTIAL_PATHin the above example is an environment variable set with the output location ofvaultkeepersecrets. You can supply your application with this value in a different manner if you wish.
Package: vaultlib
#vaultlib#EXPERIMENTAL - USE AT YOUR OWN RISK -Chef style Databag StorageSupports plain text and encrypted databags.A data bag is an object with two properties:* _id* dataThe _\_id_ represent the databag name and _data_ contains the data we want to store in the databag.##Installation./run-testspython setup.py sdistpip install ./dist/vaultlib-0.0.1.tar.gzorpip install vaultlib##Features__Vault__.__Storage__* add_databag()* get_databag()* delete_databag()* list_databags()__Vault__.__Databag__* encrypt()* decrypt()__Vault__.__Key__* from_file()* from_data()##Library Usage### Create encryption keyTo encrypt a databag we need a key:openssl genrsa -out my_key.pem 4096### Initialize the Vaultcouchdb_host = '127.0.0.1'couchdb_port = 6984couchdb_database = 'databags'vault = Vault('http', couchdb_host, couchdb_port, couchdb_database)### Create a databagdatabag_data = {"foo": "bar","and": {"foo": "bar"}}databag_name = "prefix.name.suffix"databag = Databag(databag_name, databag_data)### Encrypt databag (optional)key_file = "mykey.pem"pk = Key(filename=key_file).privatedatabag.encrypt(pk)### Store databag in the Vaultvault.add_databag(databag)### Retrieve data bag from the vaultdatabag_name = "prefix.name.suffix"databag = vault.get_databag(databag_name)data = databag.dataid_ = databag.id### Decrypt databag (optional)key_file = "mykey.pem"pk = Key(filename=key_file).privatedatabag.decrypt(pk)data = databag.dataid_ = databag.id### List all databagsfor databag in vault.list_databags():databag.decrypt("mykey.pem")print databag.dataprint databag.id##Cli UsageRequired environment variables:export VAULT_PROTOCOL=httpexport VAULT_HOST='127.0.0.1'export VAULT_PORT=5984export VAULT_DATABASE='vault'__Help__vault-cli --help---usage: vault-cli [-h] [--databag DATABAG] [--key KEY] [cmd [cmd ...]]Manage databagspositional arguments:cmd                [add, list, show]optional arguments:-h, --help         show this help message and exit--databag DATABAG  specify .json databag--key KEY          specify encryption key__Add databag__vault-cli add --databag databag.jsonvault-cli add --databag databag.json --key /my/path/key.pem__List databag__vault-cli list__Show databag__vault-cli show databag_namevault-cli show databag_name --key /my/path/key.pem__Delete databag__vault-cli delete databag_name## v0.0.1:* super rought prototype (Initial release)
Package: vaultlocker
Utility to store and retrieve dm-crypt keys in Hashicorp Vault.Vault provides a nice way to manage secrets within complex software
deployments.vaultlocker provides a way to store and retrieve dm-crypt encryption
keys in Vault, automatically retrieving keys and opening LUKS dm-crypt
devices on boot.vaultlocker is configured using/etc/vaultlocker/vaultlocker.conf:[vault]
url = https://vault.internal:8200
approle = 4a1b84d2-7bb2-4c07-9804-04d1683ac925
backend = secretvaultlocker defaults to using a backend with the namesecret.A block device can be encrypted and its key stored in vault:sudo vaultlocker encrypt /dev/sdd1This will automatically create a new systemd unit which will
automatically retrieve the key and open the LUKS/dm-crypt device
on boot.Unless a UUID is provided (using the optional –uuid flag)
vaultlocker will generate a UUID to label and identify the block
device during subsequent operations.A block device can also be opened from the command line using its
UUID (hint - the block device or partition will be labelled with the
UUID):sudo vaultlocker decrypt f65b9e66-8f0c-4cae-b6f5-6ec85ea134f2Authentication to Vault is done using an AppRole with a secret_id; its assumed
that a CIDR based ACL is in use to only allow permitted systems within the
Data Center to login and retrieve secrets from Vault.Free software: Apache licenseDocumentation:https://docs.openstack.org/vaultlocker/latestSource:https://git.openstack.org/cgit/openstack/vaultlockerBugs:https://bugs.launchpad.net/vaultlocker
Package: vault-pki-agent
Vault PKI AgentTool for auto-renewal certificates and CRL from Vault PKI.UsageBasic usage:$vault_pki_agent-c[CONFIG_PATH]-l[LOG_LEVEL]Log level can be DEBUG (by default), INFO, WARNING, ERROR, CRITICALConfigurationExample:{"url":"http://111.111.111.111:8200","mount_point":"pki","auth":{"method":"approle","role_id":"990ff41d-0448-f5d5-e405-22c05a23f976","secret_id":"92871b67-0ad6-a4d5-40cc-0d8fb64e2960"},"crl":{"destination":"/etc/openvpn/keys/ca.crl"},"certificates":[{"role":"server","common_name":"server","crt_destination":"/etc/openvpn/keys/server.crt","key_destination":"/etc/openvpn/keys/server.key","hook":"systemctl restart openvpn"}]}AuthenticationNow only two auth methods are implemented:token: You must definetokenproperty (it can contain root token)approle: You must definerole_idandsecret_idproperties. Also you can userole_id_fileandsecret_id_fileproperties if you want to readrole_idandsecret_idfrom files.ReleaseBump version inpyproject.tomland__init__.pyfilesCommit changes and create git tag with new version:$gitcommit-am"Bump version"$gittagv0.2.0Build and publish new library version:$poetrybuild$poetrypublishPush:$gitpush$gitpush--tagsLicenseVault PKI Agent is released under the MIT License. See theLICENSEfile for more details.
Package: vault-printer
vault_printervault_printer is a little program to extract a whole kv_store of aVault Serverto stdout in markdown.
This could be used to print it out and store it in a physical safe somewhere. Or at least that's the purpose for which I wrote it.InstallGet a stable version fromPyPipip install vault_printeror via gitpip install git+https://github.com/DerMolly/vault_printerUsageE.g extract kv_storetestfromvault.example.comand login via ldap:vault_printer --ldap vault.example.com test >> passwords.mdHelpusage: vault_printer [-h] [--version] [-v] [--no-toc] [--no-content]
                     [--ldap | --token] [--username USERNAME]
                     [--password PASSWORD] [--tokenLogin TOKENLOGIN]
                     [url] kv_store

A program to get all secrets from a vault servers kv_store for printing

optional arguments:
  -h, --help            show this help message and exit
  --version             show program's version number and exit
  -v, --verbose         increase verbosity
  --ldap                login via ldap
  --token               login via token

server parameter:
  url                   the url of the vault server
  kv_store              the kv store to export from

output configuration:
  --no-toc              don't print the toc
  --no-content          don't print the content

login parameter:
  --username USERNAME, -u USERNAME
                        the username with which to login, if omitted you'll be
                        asked
  --password PASSWORD, -p PASSWORD
                        the password to login, if omitted you'll be asked
  --tokenLogin TOKENLOGIN, -t TOKENLOGIN
                        the token to login, if omitted you'll be askedLoginCurrently the only supported login methods are:TokenLDAPMaybe I will add some more in the future. If you need another Login Method feel free to open aissueor even a PR.Environment VariablesThis program also uses these environment variables if set$VAULT_ADDR: the url of the vault server$VAULT_TOKEN: the token to authenticate with the--tokenlogin method
Package: vault-psycopg2
vault-psycopg2Helper classes to integrate psycopg2 with VaultUsage:pipinstallvault-psycopg2fromvault_psycopg2importVaultPsycopgvp=VaultPsycopg(database_config={'host':'localhost','dbname':'name_of_database'},vault_config={'server':'http://127.0.0.1:8200','connection_mode':'ec2','nonce':'5daa3d21-4e21-4bd5-8978-fcb81e658d8b','role':'some-instance'})# An instance of psycopg2.Connection that is properly authenticatedvp.connectionOther examples of vault config:vault_config={'server':'http://127.0.0.1:8200','connection_mode':'token','token':'5daa3d21-4e21-4bd5-8978-fcb81e658d8b'}vault_config={'server':'http://127.0.0.1:8200','connection_mode':'userpass','username':'john.doe','password':'xyzzyabc'}
Package: vault-recovery
vault-recoveryThis tool provides utilities for a disaster recovery for the Odoo vault module from
database backups or formerly exported files. The backups need atleast the following
tables for the recovery:res_usersres_users_keyvaultvault_entryvault_fieldvault_filevault_rightInstallation$pip3installvault-recoverySecurityDo not run therecoverordecryptmode on the server. This will compromise the
security design of the vault module.UsageThe tool supports different operation modes for specific purposes.vault info [...]can be used to retrieve information from a postgres database about
available vaults. It can be used to get UUIDs of users and vaults with some additional
information. The UUIDs are used in other modes.$vaultinfo-dodoo
User:admin[6cf47287-d791-44a0-b073-78659959ca3f]Fingerprint:61:a7:70:73:75:06:61:ad:fc:0e:9a:3c:bd:99:a0:17:be:7f:35:5e:31:d0:80:e4:fd:cc:90:ac:be:5b:e8:82Vaults:TestVault[cee24057-4318-46b8-b227-05ec687df64e]vault export [...]can be used to export vaults from a database intoexportedfiles.
These files include everything from the database which is needed to recover the database
including the encrypted master key, private key, and entries.$vaultexport-dodoo--user6cf47287-d791-44a0-b073-78659959ca3f>vaults.jsonvault recover [...]can be used to recover the secrets from a vault. It can recover
from a database or from a previously exportedexportedfile as the following example
shows. The data is put inside of the output directory asraw,plain, andencryptedfiles.$vaultrecover-dodoo-ivaults.json--password--output~/vaultsvault encrypt [...]can be used to protectrawfiles with password or passfiles.$vaultencrypt-iraw.json--password>encrypted.jsonvault decrypt [...]can be used to decryptencryptedfiles.$vaultdecrypt-iencrypted.json--password-o~/vaults>raw.jsonFiles typesThe tool outputs various JSON files for different purposes to store the data and to
allow splitting the process into steps. All files are structured as a dictionary
with atypekey. The following types exists:exported: contains all information needed to recover vaults. They can be used
to recover the data on more secure environments.plain: contains the most information of a recovered vault. These files are
unencrypted.raw: contains unencrypted entries ready to be imported into a running vaultencrypted: contains encrypted entries ready to be imported into a running vault