Available since 2021 (systemd v250) and I just got to know. Better late than never I guess.

PS: Thank you!

Soon it will also be for Linux

there are so many great tools in the baseline core infrastructure. and there's so much NIH syndrome still.

appreciation and OS aside, systemd-creds relays long-lived creds into long-lived processes, and author's AI slop attempts at short-lived/on-demand injections. Apparently, author's AI slop gets a lot of iterations, but has not much of external scrutiny yet.

Yes, you can even have it tpm-backed.

echo -n "sk-proj-12345..." | systemd-creds encrypt --with-key=tpm2 --name=openai_key - openai.cred

And then at runtime export OPENAI_API_KEY=$(sudo systemd-creds decrypt openai.cred)