From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id D0DCC1FF187 for ; Fri, 2 Jan 2026 17:07:16 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 476A9EA24; Fri, 2 Jan 2026 17:08:21 +0100 (CET) From: Samuel Rufinatscha To: pbs-devel@lists.proxmox.com Date: Fri, 2 Jan 2026 17:07:48 +0100 Message-ID: <20260102160750.285157-10-s.rufinatscha@proxmox.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260102160750.285157-1-s.rufinatscha@proxmox.com> References: <20260102160750.285157-1-s.rufinatscha@proxmox.com> MIME-Version: 1.0 X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1767370060958 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.185 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_SBL_A 0.1 Contains URL's A record listed in the Spamhaus SBL blocklist [188.114.96.3] Subject: [pbs-devel] [PATCH proxmox-datacenter-manager v3 1/2] pdm-config: implement token.shadow generation X-BeenThere: pbs-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Backup Server development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox Backup Server development discussion Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pbs-devel-bounces@lists.proxmox.com Sender: "pbs-devel" UERNIGRlcGVuZHMgb24gdGhlIHNoYXJlZCBwcm94bW94L3Byb3htb3gtYWNjZXNzLWNvbnRyb2wg Y3JhdGUgZm9yCnRva2VuLnNoYWRvdyBoYW5kbGluZywgd2hpY2ggZXhwZWN0cyB0aGUgcHJvZHVj dCB0byBwcm92aWRlIGEKY3Jvc3MtcHJvY2VzcyBpbnZhbGlkYXRpb24gc2lnbmFsIHNvIGl0IGNh biBzYWZlbHkgY2FjaGUgdmVyaWZpZWQgQVBJCnRva2VuIHNlY3JldHMgYW5kIGludmFsaWRhdGUg dGhlbSB3aGVuIHRva2VuLnNoYWRvdyBpcyBjaGFuZ2VkLgoKVGhpcyBwYXRjaAoKKiBhZGRzIGEg dG9rZW5fc2hhZG93X2dlbmVyYXRpb24gdG8gUERN4oCZcyBzaGFyZWQtbWVtb3J5CkNvbmZpZ1Zl cnNpb25DYWNoZQoqIGltcGxlbWVudHMgcHJveG1veF9hY2Nlc3NfY29udHJvbDo6aW5pdDo6QWNj ZXNzQ29udHJvbENvbmZpZwpmb3IgcGRtX2NvbmZpZzo6QWNjZXNzQ29udHJvbENvbmZpZywgd2hp Y2gKICAgLSBkZWxlZ2F0ZXMgcm9sZXMvcHJpdnMvcGF0aCBjaGVja3MgdG8gdGhlIGV4aXN0aW5n CnBkbV9hcGlfdHlwZXM6OkFjY2Vzc0NvbnRyb2xDb25maWcgaW1wbGVtZW50YXRpb24KICAgLSBp bXBsZW1lbnRzIHRoZSBzaGFkb3cgY2FjaGUgZ2VuZXJhdGlvbiB0cmFpdCBmdW5jdGlvbnMKKiBz d2l0Y2hlcyB0aGUgQWNjZXNzQ29udHJvbENvbmZpZyBpbml0IHBhdGhzIChzZXJ2ZXIgKyBDTEkp IHRvIHVzZQpwZG1fY29uZmlnOjpBY2Nlc3NDb250cm9sQ29uZmlnIGluc3RlYWQgb2YKcGRtX2Fw aV90eXBlczo6QWNjZXNzQ29udHJvbENvbmZpZwoKVGhpcyBwYXRjaCBpcyBwYXJ0IG9mIHRoZSBz ZXJpZXMgd2hpY2ggZml4ZXMgYnVnICM3MDE3IFsxXS4KClsxXSBodHRwczovL2J1Z3ppbGxhLnBy b3htb3guY29tL3Nob3dfYnVnLmNnaT9pZD03MDE3CgpTaWduZWQtb2ZmLWJ5OiBTYW11ZWwgUnVm aW5hdHNjaGEgPHMucnVmaW5hdHNjaGFAcHJveG1veC5jb20+Ci0tLQogY2xpL2FkbWluL3NyYy9t YWluLnJzICAgICAgICAgICAgICAgICAgICAgICB8ICAyICstCiBsaWIvcGRtLWNvbmZpZy9DYXJn by50b21sICAgICAgICAgICAgICAgICAgIHwgIDEgKwogbGliL3BkbS1jb25maWcvc3JjL2FjY2Vz c19jb250cm9sX2NvbmZpZy5ycyB8IDczICsrKysrKysrKysrKysrKysrKysrKwogbGliL3BkbS1j b25maWcvc3JjL2NvbmZpZ192ZXJzaW9uX2NhY2hlLnJzICB8IDE4ICsrKysrCiBsaWIvcGRtLWNv bmZpZy9zcmMvbGliLnJzICAgICAgICAgICAgICAgICAgIHwgIDIgKwogc2VydmVyL3NyYy9hY2wu cnMgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAzICstCiA2IGZpbGVzIGNoYW5nZWQsIDk2 IGluc2VydGlvbnMoKyksIDMgZGVsZXRpb25zKC0pCiBjcmVhdGUgbW9kZSAxMDA2NDQgbGliL3Bk bS1jb25maWcvc3JjL2FjY2Vzc19jb250cm9sX2NvbmZpZy5ycwoKZGlmZiAtLWdpdCBhL2NsaS9h ZG1pbi9zcmMvbWFpbi5ycyBiL2NsaS9hZG1pbi9zcmMvbWFpbi5ycwppbmRleCBmNjk4ZmEyLi45 MTZjNjMzIDEwMDY0NAotLS0gYS9jbGkvYWRtaW4vc3JjL21haW4ucnMKKysrIGIvY2xpL2FkbWlu L3NyYy9tYWluLnJzCkBAIC0xOSw3ICsxOSw3IEBAIGZuIG1haW4oKSB7CiAgICAgcHJveG1veF9w cm9kdWN0X2NvbmZpZzo6aW5pdChhcGlfdXNlciwgcHJpdl91c2VyKTsKIAogICAgIHByb3htb3hf YWNjZXNzX2NvbnRyb2w6OmluaXQ6OmluaXQoCi0gICAgICAgICZwZG1fYXBpX3R5cGVzOjpBY2Nl c3NDb250cm9sQ29uZmlnLAorICAgICAgICAmcGRtX2NvbmZpZzo6QWNjZXNzQ29udHJvbENvbmZp ZywKICAgICAgICAgcGRtX2J1aWxkY2ZnOjpjb25maWdkaXIhKCIvYWNjZXNzIiksCiAgICAgKQog ICAgIC5leHBlY3QoImZhaWxlZCB0byBzZXR1cCBhY2Nlc3MgY29udHJvbCBjb25maWciKTsKZGlm ZiAtLWdpdCBhL2xpYi9wZG0tY29uZmlnL0NhcmdvLnRvbWwgYi9saWIvcGRtLWNvbmZpZy9DYXJn by50b21sCmluZGV4IGQzOWMyYWQuLjE5NzgxZDIgMTAwNjQ0Ci0tLSBhL2xpYi9wZG0tY29uZmln L0NhcmdvLnRvbWwKKysrIGIvbGliL3BkbS1jb25maWcvQ2FyZ28udG9tbApAQCAtMTMsNiArMTMs NyBAQCBvbmNlX2NlbGwud29ya3NwYWNlID0gdHJ1ZQogb3BlbnNzbC53b3Jrc3BhY2UgPSB0cnVl CiBzZXJkZS53b3Jrc3BhY2UgPSB0cnVlCiAKK3Byb3htb3gtYWNjZXNzLWNvbnRyb2wud29ya3Nw YWNlID0gdHJ1ZQogcHJveG1veC1jb25maWctZGlnZXN0ID0geyB3b3Jrc3BhY2UgPSB0cnVlLCBm ZWF0dXJlcyA9IFsgIm9wZW5zc2wiIF0gfQogcHJveG1veC1odHRwID0geyB3b3Jrc3BhY2UgPSB0 cnVlLCBmZWF0dXJlcyA9IFsgImh0dHAtaGVscGVycyIgXSB9CiBwcm94bW94LWxkYXAgPSB7IHdv cmtzcGFjZSA9IHRydWUsIGZlYXR1cmVzID0gWyAidHlwZXMiIF19CmRpZmYgLS1naXQgYS9saWIv cGRtLWNvbmZpZy9zcmMvYWNjZXNzX2NvbnRyb2xfY29uZmlnLnJzIGIvbGliL3BkbS1jb25maWcv c3JjL2FjY2Vzc19jb250cm9sX2NvbmZpZy5ycwpuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAw MDAwMDAwLi42ZjJlNmIzCi0tLSAvZGV2L251bGwKKysrIGIvbGliL3BkbS1jb25maWcvc3JjL2Fj Y2Vzc19jb250cm9sX2NvbmZpZy5ycwpAQCAtMCwwICsxLDczIEBACisvLyBlLmcuIGluIHNyYy9t YWluLnJzIG9yIHNlcnZlcjo6Y29udGV4dCBtb2QsIHdoZXJldmVyIGNvbnZlbmllbnQKKwordXNl IGFueWhvdzo6RXJyb3I7Cit1c2UgcGRtX2FwaV90eXBlczo6e0F1dGhpZCwgVXNlcmlkfTsKK3Vz ZSBwcm94bW94X3NlY3Rpb25fY29uZmlnOjpTZWN0aW9uQ29uZmlnRGF0YTsKK3VzZSBzdGQ6OmNv bGxlY3Rpb25zOjpIYXNoTWFwOworCitwdWIgc3RydWN0IEFjY2Vzc0NvbnRyb2xDb25maWc7CisK K2ltcGwgcHJveG1veF9hY2Nlc3NfY29udHJvbDo6aW5pdDo6QWNjZXNzQ29udHJvbENvbmZpZyBm b3IgQWNjZXNzQ29udHJvbENvbmZpZyB7CisgICAgZm4gcHJpdmlsZWdlcygmc2VsZikgLT4gJkhh c2hNYXA8JnN0ciwgdTY0PiB7CisgICAgICAgIHBkbV9hcGlfdHlwZXM6OkFjY2Vzc0NvbnRyb2xD b25maWcucHJpdmlsZWdlcygpCisgICAgfQorCisgICAgZm4gcm9sZXMoJnNlbGYpIC0+ICZIYXNo TWFwPCZzdHIsICh1NjQsICZzdHIpPiB7CisgICAgICAgIHBkbV9hcGlfdHlwZXM6OkFjY2Vzc0Nv bnRyb2xDb25maWcucm9sZXMoKQorICAgIH0KKworICAgIGZuIGlzX3N1cGVydXNlcigmc2VsZiwg YXV0aF9pZDogJkF1dGhpZCkgLT4gYm9vbCB7CisgICAgICAgIHBkbV9hcGlfdHlwZXM6OkFjY2Vz c0NvbnRyb2xDb25maWcuaXNfc3VwZXJ1c2VyKGF1dGhfaWQpCisgICAgfQorCisgICAgZm4gaXNf Z3JvdXBfbWVtYmVyKCZzZWxmLCB1c2VyX2lkOiAmVXNlcmlkLCBncm91cDogJnN0cikgLT4gYm9v bCB7CisgICAgICAgIHBkbV9hcGlfdHlwZXM6OkFjY2Vzc0NvbnRyb2xDb25maWcuaXNfZ3JvdXBf bWVtYmVyKHVzZXJfaWQsIGdyb3VwKQorICAgIH0KKworICAgIGZuIHJvbGVfYWRtaW4oJnNlbGYp IC0+IE9wdGlvbjwmc3RyPiB7CisgICAgICAgIHBkbV9hcGlfdHlwZXM6OkFjY2Vzc0NvbnRyb2xD b25maWcucm9sZV9hZG1pbigpCisgICAgfQorCisgICAgZm4gcm9sZV9ub19hY2Nlc3MoJnNlbGYp IC0+IE9wdGlvbjwmc3RyPiB7CisgICAgICAgIHBkbV9hcGlfdHlwZXM6OkFjY2Vzc0NvbnRyb2xD b25maWcucm9sZV9ub19hY2Nlc3MoKQorICAgIH0KKworICAgIGZuIGluaXRfdXNlcl9jb25maWco JnNlbGYsIGNvbmZpZzogJm11dCBTZWN0aW9uQ29uZmlnRGF0YSkgLT4gUmVzdWx0PCgpLCBFcnJv cj4geworICAgICAgICBwZG1fYXBpX3R5cGVzOjpBY2Nlc3NDb250cm9sQ29uZmlnLmluaXRfdXNl cl9jb25maWcoY29uZmlnKQorICAgIH0KKworICAgIGZuIGFjbF9hdWRpdF9wcml2aWxlZ2VzKCZz ZWxmKSAtPiB1NjQgeworICAgICAgICBwZG1fYXBpX3R5cGVzOjpBY2Nlc3NDb250cm9sQ29uZmln LmFjbF9hdWRpdF9wcml2aWxlZ2VzKCkKKyAgICB9CisKKyAgICBmbiBhY2xfbW9kaWZ5X3ByaXZp bGVnZXMoJnNlbGYpIC0+IHU2NCB7CisgICAgICAgIHBkbV9hcGlfdHlwZXM6OkFjY2Vzc0NvbnRy b2xDb25maWcuYWNsX21vZGlmeV9wcml2aWxlZ2VzKCkKKyAgICB9CisKKyAgICBmbiBjaGVja19h Y2xfcGF0aCgmc2VsZiwgcGF0aDogJnN0cikgLT4gUmVzdWx0PCgpLCBFcnJvcj4geworICAgICAg ICBwZG1fYXBpX3R5cGVzOjpBY2Nlc3NDb250cm9sQ29uZmlnLmNoZWNrX2FjbF9wYXRoKHBhdGgp CisgICAgfQorCisgICAgZm4gYWxsb3dfcGFydGlhbF9wZXJtaXNzaW9uX21hdGNoKCZzZWxmKSAt PiBib29sIHsKKyAgICAgICAgcGRtX2FwaV90eXBlczo6QWNjZXNzQ29udHJvbENvbmZpZy5hbGxv d19wYXJ0aWFsX3Blcm1pc3Npb25fbWF0Y2goKQorICAgIH0KKworICAgIGZuIGNhY2hlX2dlbmVy YXRpb24oJnNlbGYpIC0+IE9wdGlvbjx1c2l6ZT4geworICAgICAgICBwZG1fYXBpX3R5cGVzOjpB Y2Nlc3NDb250cm9sQ29uZmlnLmNhY2hlX2dlbmVyYXRpb24oKQorICAgIH0KKworICAgIGZuIGlu Y3JlbWVudF9jYWNoZV9nZW5lcmF0aW9uKCZzZWxmKSAtPiBSZXN1bHQ8KCksIEVycm9yPiB7Cisg ICAgICAgIHBkbV9hcGlfdHlwZXM6OkFjY2Vzc0NvbnRyb2xDb25maWcuaW5jcmVtZW50X2NhY2hl X2dlbmVyYXRpb24oKQorICAgIH0KKworICAgIGZuIHRva2VuX3NoYWRvd19jYWNoZV9nZW5lcmF0 aW9uKCZzZWxmKSAtPiBPcHRpb248dXNpemU+IHsKKyAgICAgICAgY3JhdGU6OkNvbmZpZ1ZlcnNp b25DYWNoZTo6bmV3KCkKKyAgICAgICAgICAgIC5vaygpCisgICAgICAgICAgICAubWFwKHxjfCBj LnRva2VuX3NoYWRvd19nZW5lcmF0aW9uKCkpCisgICAgfQorCisgICAgZm4gaW5jcmVtZW50X3Rv a2VuX3NoYWRvd19jYWNoZV9nZW5lcmF0aW9uKCZzZWxmKSAtPiBSZXN1bHQ8dXNpemUsIEVycm9y PiB7CisgICAgICAgIGxldCBjID0gY3JhdGU6OkNvbmZpZ1ZlcnNpb25DYWNoZTo6bmV3KCk/Owor ICAgICAgICBPayhjLmluY3JlYXNlX3Rva2VuX3NoYWRvd19nZW5lcmF0aW9uKCkpCisgICAgfQor fQpkaWZmIC0tZ2l0IGEvbGliL3BkbS1jb25maWcvc3JjL2NvbmZpZ192ZXJzaW9uX2NhY2hlLnJz IGIvbGliL3BkbS1jb25maWcvc3JjL2NvbmZpZ192ZXJzaW9uX2NhY2hlLnJzCmluZGV4IDM2YTZh NzcuLjkzMzE0MGMgMTAwNjQ0Ci0tLSBhL2xpYi9wZG0tY29uZmlnL3NyYy9jb25maWdfdmVyc2lv bl9jYWNoZS5ycworKysgYi9saWIvcGRtLWNvbmZpZy9zcmMvY29uZmlnX3ZlcnNpb25fY2FjaGUu cnMKQEAgLTI3LDYgKzI3LDggQEAgc3RydWN0IENvbmZpZ1ZlcnNpb25DYWNoZURhdGFJbm5lciB7 CiAgICAgdHJhZmZpY19jb250cm9sX2dlbmVyYXRpb246IEF0b21pY1VzaXplLAogICAgIC8vIFRy YWNrcyB1cGRhdGVzIHRvIHRoZSByZW1vdGUvaG9zdG5hbWUvbm9kZW5hbWUgbWFwcGluZyBjYWNo ZS4KICAgICByZW1vdGVfbWFwcGluZ19jYWNoZTogQXRvbWljVXNpemUsCisgICAgLy8gVG9rZW4g c2hhZG93ICh0b2tlbi5zaGFkb3cpIGdlbmVyYXRpb24vdmVyc2lvbi4KKyAgICB0b2tlbl9zaGFk b3dfZ2VuZXJhdGlvbjogQXRvbWljVXNpemUsCiAgICAgLy8gQWRkIGZ1cnRoZXIgYXRvbWljcyBo ZXJlCiB9CiAKQEAgLTE3Miw0ICsxNzQsMjAgQEAgaW1wbCBDb25maWdWZXJzaW9uQ2FjaGUgewog ICAgICAgICAgICAgLmZldGNoX2FkZCgxLCBPcmRlcmluZzo6UmVsYXhlZCkKICAgICAgICAgICAg ICsgMQogICAgIH0KKworICAgIC8vLyBSZXR1cm5zIHRoZSB0b2tlbiBzaGFkb3cgZ2VuZXJhdGlv biBudW1iZXIuCisgICAgcHViIGZuIHRva2VuX3NoYWRvd19nZW5lcmF0aW9uKCZzZWxmKSAtPiB1 c2l6ZSB7CisgICAgICAgIHNlbGYuc2htZW0KKyAgICAgICAgICAgIC5kYXRhKCkKKyAgICAgICAg ICAgIC50b2tlbl9zaGFkb3dfZ2VuZXJhdGlvbgorICAgICAgICAgICAgLmxvYWQoT3JkZXJpbmc6 OkFjcXVpcmUpCisgICAgfQorCisgICAgLy8vIEluY3JlYXNlIHRoZSB0b2tlbiBzaGFkb3cgZ2Vu ZXJhdGlvbiBudW1iZXIuCisgICAgcHViIGZuIGluY3JlYXNlX3Rva2VuX3NoYWRvd19nZW5lcmF0 aW9uKCZzZWxmKSAtPiB1c2l6ZSB7CisgICAgICAgIHNlbGYuc2htZW0KKyAgICAgICAgICAgIC5k YXRhKCkKKyAgICAgICAgICAgIC50b2tlbl9zaGFkb3dfZ2VuZXJhdGlvbgorICAgICAgICAgICAg LmZldGNoX2FkZCgxLCBPcmRlcmluZzo6QWNxUmVsKQorICAgIH0KIH0KZGlmZiAtLWdpdCBhL2xp Yi9wZG0tY29uZmlnL3NyYy9saWIucnMgYi9saWIvcGRtLWNvbmZpZy9zcmMvbGliLnJzCmluZGV4 IDRjNDkwNTQuLmExNWEwMDYgMTAwNjQ0Ci0tLSBhL2xpYi9wZG0tY29uZmlnL3NyYy9saWIucnMK KysrIGIvbGliL3BkbS1jb25maWcvc3JjL2xpYi5ycwpAQCAtOSw2ICs5LDggQEAgcHViIG1vZCBy ZW1vdGVzOwogcHViIG1vZCBzZXR1cDsKIHB1YiBtb2Qgdmlld3M7CiAKK21vZCBhY2Nlc3NfY29u dHJvbF9jb25maWc7CitwdWIgdXNlIGFjY2Vzc19jb250cm9sX2NvbmZpZzo6QWNjZXNzQ29udHJv bENvbmZpZzsKIG1vZCBjb25maWdfdmVyc2lvbl9jYWNoZTsKIHB1YiB1c2UgY29uZmlnX3ZlcnNp b25fY2FjaGU6OkNvbmZpZ1ZlcnNpb25DYWNoZTsKIApkaWZmIC0tZ2l0IGEvc2VydmVyL3NyYy9h Y2wucnMgYi9zZXJ2ZXIvc3JjL2FjbC5ycwppbmRleCBmNDIxODE0Li5lNmUwMDdiIDEwMDY0NAot LS0gYS9zZXJ2ZXIvc3JjL2FjbC5ycworKysgYi9zZXJ2ZXIvc3JjL2FjbC5ycwpAQCAtMSw2ICsx LDUgQEAKIHB1YihjcmF0ZSkgZm4gaW5pdCgpIHsKLSAgICBzdGF0aWMgQUNDRVNTX0NPTlRST0xf Q09ORklHOiBwZG1fYXBpX3R5cGVzOjpBY2Nlc3NDb250cm9sQ29uZmlnID0KLSAgICAgICAgcGRt X2FwaV90eXBlczo6QWNjZXNzQ29udHJvbENvbmZpZzsKKyAgICBzdGF0aWMgQUNDRVNTX0NPTlRS T0xfQ09ORklHOiBwZG1fY29uZmlnOjpBY2Nlc3NDb250cm9sQ29uZmlnID0gcGRtX2NvbmZpZzo6 QWNjZXNzQ29udHJvbENvbmZpZzsKIAogICAgIHByb3htb3hfYWNjZXNzX2NvbnRyb2w6OmluaXQ6 OmluaXQoJkFDQ0VTU19DT05UUk9MX0NPTkZJRywgcGRtX2J1aWxkY2ZnOjpjb25maWdkaXIhKCIv YWNjZXNzIikpCiAgICAgICAgIC5leHBlY3QoImZhaWxlZCB0byBzZXR1cCBhY2Nlc3MgY29udHJv bCBjb25maWciKTsKLS0gCjIuNDcuMwoKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXwpwYnMtZGV2ZWwgbWFpbGluZyBsaXN0CnBicy1kZXZlbEBsaXN0cy5w cm94bW94LmNvbQpodHRwczovL2xpc3RzLnByb3htb3guY29tL2NnaS1iaW4vbWFpbG1hbi9saXN0 aW5mby9wYnMtZGV2ZWwK