Here's a few tips on using the Linux Keyring.

Store and retrieve passwords from the keyring.

• sudo apt install libsecret-tools

• --label = Mainly for GUI programs but can be used to retrieve a given secret.
• {attribute} = Used by the secret-tool for retrieving or deleting a given secret.
• {value} = Used by the secret-tool for retrieving or deleting a given secret.

secret-tool store --label='My Label' {attribute} {value} {attribute2} {value2} [...]
Password:

secret-tool lookup {attribute} {value} {attribute2} {value2} [...]
P4s$W0rd

secret-tool search --all {attribute} {value} {attribute2} {value2} [...]
[/org/freedesktop/secrets/collection/TestDB/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx]
label = test2
secret = P4s$W0rd
created = 2020-05-08 17:58:08
modified = 2020-05-08 21:16:04
schema = (null)
attribute.Path = /test2
attribute.Uuid = 04706d96b2404a2f96de02a8a76bf113
attribute.UserName = chuck
attribute.URL = 
attribute.Notes = 
attribute.Title = test2
attribute.Key1 = Value1
attribute.Key2 = Value2

secret-tool clear {attribute} {value} {attribute2} {value2} [...]
# Popup from KeePassXC: 
Do you really want to move entry "test2" to the recycle bin?
                                            <MOVE> <CANCEL>

Can create values and search them:

secret-tool search --all Title name
secret-tool search --all UserName name
secret-tool search --all URL https://www.url.com
secret-tool search --all Notes value
secret-tool search --all {attribute} {value} [...]

• Set an alias in ~/.bash_aliases:

  alias get_password1='secret-tool lookup {attribute} {value} {attribute2} {value2}'

• Use in docker:

  # "The operator can set any environment variable in the container by using one or more -e flags"
  docker run -it --rm \
    -e AWS_ACCESS_KEY_ID=$(aws-key-id) \
    -e AWS_SECRET_ACCESS_KEY=$(aws-key-secret) \
    local/aws-shell

• From here: https://www.marian-dan.ro/blog/storing-secrets-using-secret-tool/

Python-Keyring command-line utility: https://pypi.org/project/keyring/

• sudo apt install python3-keyring

You can set/get entries from a Python script or from the Python terminal

keyring.set_password("system", "username", "password")

# Same as above but ask for the password
keyring.set_password('twitter', 'xkcd', getpass.getpass())

keyring.get_password("system", "username")

You can set/get entries directly from the command line or from bash scripts, etc.

• keyring --help
• keyring set SERVICE USERNAME
• keyring get SERVICE USERNAME
• keyring del SERVICE USERNAME

The commands above will set the following attributes on an entry:

• For example, running:
  • keyring set twitter chuckn246
• Will create an entry with the Title:
  • Password for 'chuckn246' on 'twitter'
• Will set these attributes on the entry:
  • application: Python keyring library
  • service: twitter
  • username: chuckn246

• Note that the attribute username is different than the entry UserName (Note capitalization).

  secret-tool search service twitter
  [/org/freedesktop/secrets/collection/TestDB/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx]
  label = Password for 'chuckn246' on 'twitter'
  secret = twitterpassword
  created = 2020-05-08 22:17:06
  modified = 2020-05-08 22:17:06
  schema = (null)
  attribute.Path = /Password for 'chuckn246' on 'twitter'
  attribute.Uuid = 3174d145b5e74435ab15cf45a5d805cb
  attribute.UserName = chuck
  attribute.service = twitter
  attribute.URL = 
  attribute.Notes = 
  attribute.application = Python keyring library
  attribute.username = chuckn246
  attribute.Title = Password for 'chuckn246' on 'twitter'