Forum Discussion

dmlounsbury's avatar
dmlounsbury
New Contributor
3 years ago

Use op on headless system with glab?

I have a headless Debian bullseye aarch64 system that I use for various automation projects, and I'd like to use op with glab to store personal access tokens (and maybe other CI secrets eventually.)

I believe I have op and glab correctly installed and working, at least to the extent that I can successfully retrieve the personal access token from my 1Password account (see log below). However, glab always gives the error [ERROR] 2023/10/08 11:47:11 Shell Plugins can only be used with the 1Password app integration enabled whenever I issue a command that interacts with the repo.

I am OK with authenticating manually to op when needed. Is there no way to use op and glab without the 1Password GUI app installed locally?

If not, can somebody point me to the instructions for removing the integration between op and glab so I can authenticate to glab manually?

Log:
````
administrator@homebot  ~/projects/wxtoot  op --version
2.21.0
administrator@homebot  ~/projects/wxtoot  op update
1Password command-line tool 2.21.0.

You're using the latest stable version.
administrator@homebot  ~/projects/wxtoot  eval $(op signin)
Enter the password for at my.1password.com:
administrator@homebot  ~/projects/wxtoot  op account list
SHORTHAND URL EMAIL USER ID
my https://my.1password.com XXXXXXXXXXZDH7OXK227QCX4TGU
✘ administrator@homebot  ~/projects/wxtoot  op item get "HomeBot PAT"
ID: XXXXXXXXXXXXXXXXXXXXX
Title: HomeBot PAT
Vault: Dave Personal (XXXXXXXXXXXXXXX)
Created: 1 week ago
Updated: 1 week ago by David Lounsbury
Favorite: false
Tags: 1Password Shell Plugins
Version: 1
Category: API_CREDENTIAL
Fields:
token: glpat-XXCAR1w24GQK1XXXXXXX
URLs:
: https://gitlab.com/-/profile/personal_access_tokens (primary)
✘ administrator@homebot  ~/projects/wxtoot  op plugin inspect glab

GitLab CLI

Configured Aliases

✔ Alias for "glab" configured
✔ Aliases sourced (/home/administrator/.config/op/plugins.sh)

Configured Credentials

✔ Configured as global default:
CREDENTIAL TYPE ITEM VAULT
GitLab Personal Access Token HomeBot PAT Dave Personal

administrator@homebot  ~/projects/wxtoot  glab repo clone "weather/weather-toot"
[ERROR] 2023/10/08 11:47:11 Shell Plugins can only be used with the 1Password app integration enabled.
To learn more about this feature, check out:
https://developer.1password.com/docs/cli/about-biometric-unlock/
````

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided

CLI

2 Replies

  • 1P_Phil's avatar
    1P_Phil
    Icon for Moderator rankModerator
    2 months ago

    Hi dmlounsbury​ ,

    Following up on this, I'm sorry to say, but CLI Shell Plugins require the desktop application (to support the whole biometric auth functionality).

    This setup will not work.  Here's a link to learn more.

    https://developer.1password.com/docs/cli/reference/management-commands/plugin/#:~:text=Shell%20plugins%20require%20the%201Password%20desktop%20app%20integration.

    Sorry about that.

    Regards,
    Phil

  • 1P_Phil's avatar
    1P_Phil
    Icon for Moderator rankModerator
    2 months ago

    Hi dmlounsbury​ ,

    I'm looking into your question, while I try to get you an answer about headless plugins, here are the uninstall docs:

    • https://developer.1password.com/docs/cli/shell-plugins/uninstall

    Hang tight and let me see what I can do to get you a response regarding headless glab.

    Regards,
    Phil