[rancid] Alternatives to cleartext password in .cloginrc ?

[heasley]

Wed, May 06, 2015 at 04:31:38PM +0100, Lukasz Sokol:
> On 06/05/15 16:19, Matt Almgren wrote:
> > Ssh keys are still on the table and that is one of the alternatives.
> 
> They are relatively easy to roll out on rancid by itself - I did it after some
> googling, and it wasn't too bad... (key based ident is mentioned in one of the articles
> that pop up when googling for rancid and ssh... adapted a bit to my debian needs and that's
> it, all it really needed.)

the passphrase is still stored somewhere.  although interactive users could
use ssh-agent.