Re: Suggestion : support for environment variable in initdb to set the superuser password

From: Reda Agaoua <reda(dot)agaoua(at)gmail(dot)com>
To: Peter Eisentraut <peter(at)eisentraut(dot)org>, pgsql-hackers(at)lists(dot)postgresql(dot)org
Subject: Re: Suggestion : support for environment variable in initdb to set the superuser password
Date: 2025-05-30 07:21:49
Message-ID: CAN+XrdVrdpJOLFHupu6tO-j0RgBg5rLA5nV7ra+NBv2H0huZZA@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Le mer. 28 mai 2025, 13:26, Peter Eisentraut <peter(at)eisentraut(dot)org> a
écrit :

> On 27.05.25 11:43, Reda Agaoua wrote:
> "Insecure, but it's ok because it's not
> used very often"
>

This isn't what I meant, but I guess it's the same so maybe I didn't think
this through as much as I thought I had !

Still, is the concern relevant for single-user systems ? Like containers
for instance ? Plus, should we really discourage the use of environment
variables altogether just because *some* systems allow unprivileged users
to access others processes environment variables ? I'm really curious about
this.

Thanks for your consideration anyway !
Reda Agaoua

(Sorry for responding twice, forgot the hit "reply all")

>

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Rahila Syed 2025-05-30 08:04:43 Re: Persist injection points across server restarts
Previous Message Michael Paquier 2025-05-30 07:20:51 Re: ZStandard (with dictionaries) compression support for TOAST compression