Download this file
| 1 | //go:build !(darwin && cgo) |
| 2 | |
| 3 | package main |
| 4 | |
| 5 | import "fmt" |
| 6 | |
| 7 | // 🤖 vaultKEK is the biometric end of `eleven vault` on builds without the |
| 8 | // macOS keychain (non-darwin, or CGO_ENABLED=0): every vault KEK operation |
| 9 | // refuses loudly rather than degrading to an unguarded key on disk — a vault |
| 10 | // KEK that doesn't cost a biometric isn't the feature (docs/locked-vaults.md). |
| 11 | // The darwin+cgo implementation lives in vaultkek_darwin.go. |
| 12 | func vaultKEK(account string, create bool) ([]byte, error) { |
| 13 | return nil, fmt.Errorf("vault unlock needs the macOS keychain (Touch ID) — this build has no biometric store (build with cgo on macOS)") |
| 14 | } |
| 15 | |
amadan