Is there a way to Set configuration password for the ServiceAccount.json file

Help and Support
1

What is the problem you are having with rclone?

-- Nil --

Run the command 'rclone version' and share the full output of the command.

rclone v1.57.0
- os/version: ubuntu 16.04 (64 bit)
- os/kernel: 4.4.249-1.el7.elrepo.x86_64 (x86_64)
- os/type: linux
- os/arch: amd64
- go/version: go1.17.2
- go/linking: static
- go/tags: none

Which cloud storage system are you using? (eg Google Drive)

Google Drive / Team drive

The command you were trying to run (eg rclone copy /tmp remote:tmp)

rclone copy /files/ gdrive:folder -P --drive-service-account-file .config/encrypted.json

The rclone config contents with secrets removed.

A log from the command with the -vv flag

Paste  log here
2

I m just worried, if my account.json and the rclone.conf were leaked out, how would I protect myself?

3

hi,
--- hardcode the remote credentials inside the rclone.conf
--- encrypt rclone.conf

the remote would look like

[gdrivesa]
type = drive
scope = drive
service_account_credentials = {"type": "service_account", "project_id": "redacted", "private_key_id": "redacted", "private_key": "redacted", "client_email": "redacted", "client_id": "redacted",   "auth_uri": "https://accounts.google.com/o/oauth2/auth",   "token_uri": "https://oauth2.googleapis.com/token",   "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",  "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/redacted.iam.gserviceaccount.com"}

and to use the remote

user01@wsl01:~/rclone/scripts$ rclone lsd gdrivesa:
Enter configuration password:
password:
          -1 2022-03-03 09:33:10        -1 zork

and notice the rclone.conf is crypted

# Encrypted rclone configuration File
RCLONE_ENCRYPT_V0:
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
1 Like
4

the service_account_credentials = { .... } should be one line but does the spaces in between matter?

5

as far as i know, from some quick testing, rclone does not support multi-line parameters.

6

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.