Transferring secrets to and from providers
When migrating from a secrets provider to another, you will obviously want to transfer the secrets.
I've found a method, but 1) it's perfectible, and 2) where should it be documented?
What I've used is:
lssecretto extract all secrets,
systemctl --user stop gnome-keyring.service,
- Start KeePassXC's Secret Service integration,
- Use an ad-hoc script to parse its output into
...this is problematic because KeePassXC (at least) adds a lot of (perhaps harmless) key/value pairs, and also
lssecret is not able to extract from locked collections. (
secret-tool is, but it doesn't have
ls-like capabilities. Augh!)