How can I dynamically set environment variables?

[fdw]

I'm using AWS SSO, which isn't natively supported by restic. Therefore, I need to set some AWS_ env variables manually, before the actual restic command is executed.

I've tried to do that in a run-before, but then the variables only seem to be set in a subshell and vanish again when that is done.

Is there some other way to run a script which sets environment variables for the restic command?

[creativeprojects]

Hi,

Have you tried using the AWS_PROFILE environment variable? This is supported by restic.

Basically, you need to create a profile in ~/.aws/config like:

[profile sandbox]
sso_start_url = https://aaaaaaaaa.awsapps.com/start
sso_region = us-west-2
sso_account_id = 000000000001
sso_role_name = Admin
region = us-west-2

This profile makes use of SSO but you just need to configure it with your authentication mechanism.

From there you can login to AWS from the terminal:

aws --profile=sandbox sso login

You need to set your AWS_PROFILE environment variable to the profile name, either directly in your shell environment:

export AWS_PROFILE=sandbox

... or in the resticprofile configuration:

profile_to_aws:
  env:
    AWS_PROFILE: sandbox

The temporary credentials will be stored in an sso cache file which will be picked up by restic.

If you don't use SSO I think you can still store your temporary credentials in the ~/.aws/credentials file as well.

---

Now, about your original question:
this is something that has been asked a few times and we'll look into this 👍🏻

[creativeprojects]

Yeah you're right. restic is not using the AWS sdk. The sso cache is not supported by the minio sdk used in restic 😢

Back to the drawing board... 🤔

[creativeprojects]

#316: That would solve your problem, wouldn't it?

[fdw]

#316 would help, yes. Another option would be to define a command for an environment variable.

Also, for my specific problem I've opened restic/restic#4688 :) But I still think a dynamic way to send environment variables could be helpful.

[jkellerer]

@fdw , I've updated #316 with the intent to support declaring env variables from run-before. The syntax will be something like:

default:
  run-before: 'echo "VAR_NAME=VALUE" >> {{ env }}'

... where {{ env }} is a temporary file in ".env" format that is created and removed by resticprofile with perms 0600

[fdw]

Interesting concept, and would probably work for me :)