otty / dotfiles

All tools/OCI CLI

OCI CLI

oci

A small-footprint tool that you can use on its own or with the Console to complete Oracle Cloud Infrastructure tasks.

Detected by oci | macOS, Linux, Windows |docs.oracle.com

Sync it oci.toml

Sync rules

What travels, what stays, what never leaves

OCI CLI in your home directory Every rule on this page, by file

…

fingerprint=20:3b:97:13:55:1c:5b:0d:d3:37:d8:50:4e:c5:3a:34

tenancy=ocid1.tenancy.oc1..aaaaaaaaFAKEexampletenancyocid

region=us-ashburn-1

key_file=/Users/octocat/.oci/oci_api_key.pemmachine-local

pass_phrase=FAKEkeypassphrase

[SESSION]

region=eu-frankfurt-1

tenancy=ocid1.tenancy.oc1..aaaaaaaaFAKEexampletenancyocid

security_token_file=/Users/octocat/.oci/sessions/DEFAULT/tokenmachine-local

key_file=/Users/octocat/.oci/sessions/DEFAULT/oci_api_key.pemmachine-local

Each machine keeps its own copy of these.

pass_phrase

Lifted into your secret store; the rest of the file syncs.

· oci_cli_rc Sync

· oci_api_key.pem Never synced

· sessions/ Never synced

Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.

apps/oci.tomlThe file this page is generated from

id = "oci"

name = "OCI CLI"

homepage = "https://docs.oracle.com/en-us/iaas/Content/API/Concepts/cliconcepts.htm"

description = "A small-footprint tool that you can use on its own or with the Console to complete Oracle Cloud Infrastructure tasks."

# Oracle's own square mark, the apple-touch-icon from oracle.com.

icon = "https://www.oracle.com/apple-touch-icon.png"

detect = ["oci"]

# "SDK and CLI Configuration File"

# (docs.oracle.com/en-us/iaas/Content/API/Concepts/sdkconfig.htm): the config

# file is ~/.oci/config, an INI file of named profiles — on Windows the same

# path spelled "$($Env:UserProfile)\.oci\config", which resolves identically.

# "Configuring the CLI"

# (docs.oracle.com/en-us/iaas/Content/API/SDKDocs/cliconfigure.htm): the

# CLI-only rc file is ~/.oci/oci_cli_rc, overridable with OCI_CLI_RC_FILE. It

# holds default values for command options, command and parameter aliases and

# named JMESPath queries.

paths = ["~/.oci/config", "~/.oci/oci_cli_rc"]

exclude = []

# The API signing key `oci setup config` generates (its documented default

# path is ~/.oci/oci_api_key.pem), and the session directory

# `oci session authenticate` writes — ~/.oci/sessions/<profile>/token, with

# the key pair for that session beside it.

secret = ["~/.oci/oci_api_key.pem", "~/.oci/sessions/"]

# key_file and security_token_file are absolute paths into this machine's

# filesystem; the tenancy, user and region beside them are account facts that

# travel.

# Both point at this machine's own credential material, which the user needs

# back to rebuild the box and which means nothing anywhere else.

[[machine_lines]]

file = "~/.oci/config"

match = { prefix = ["key_file", "security_token_file"] }

scope = "backup"

# pass_phrase is the passphrase of the private key. The documentation warns

# against putting it here at all, which is exactly why it has to be lifted out

# when it is there.

[[secret_paths]]

file = "~/.oci/config"

match = { prefix = ["pass_phrase"] }

Use it with your dotfile manager

Same data, in the shape your tool already reads

Opens Otty and adds this tool to what it syncs

Opens otty://sync/add/oci. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.

Every one of these keeps all credential files out. None of them splits key_file and security_token_file for you — that part is Otty’s own sync, or a template you write by hand.