Use op on headless system with glab?

dmlounsbury
dmlounsbury
Community Member
in CLI

I have a headless Debian bullseye aarch64 system that I use for various automation projects, and I'd like to use op with glab to store personal access tokens (and maybe other CI secrets eventually.)

I believe I have op and glab correctly installed and working, at least to the extent that I can successfully retrieve the personal access token from my 1Password account (see log below). However, glab always gives the error [ERROR] 2023/10/08 11:47:11 Shell Plugins can only be used with the 1Password app integration enabled whenever I issue a command that interacts with the repo.

I am OK with authenticating manually to op when needed. Is there no way to use op and glab without the 1Password GUI app installed locally?

If not, can somebody point me to the instructions for removing the integration between op and glab so I can authenticate to glab manually?

Log:

administrator@homebot  ~/projects/wxtoot  op --version
2.21.0
 administrator@homebot  ~/projects/wxtoot  op update
1Password command-line tool 2.21.0.

You're using the latest stable version.
 administrator@homebot  ~/projects/wxtoot  eval $(op signin)
Enter the password for <my-email> at my.1password.com:
 administrator@homebot  ~/projects/wxtoot  op account list
SHORTHAND    URL                         EMAIL                    USER ID
my           https://my.1password.com    <my-email>    XXXXXXXXXXZDH7OXK227QCX4TGU
  ✘ administrator@homebot  ~/projects/wxtoot  op item get "HomeBot PAT"
ID:          XXXXXXXXXXXXXXXXXXXXX
Title:       HomeBot PAT
Vault:       Dave Personal (XXXXXXXXXXXXXXX)
Created:     1 week ago
Updated:     1 week ago by David Lounsbury
Favorite:    false
Tags:        1Password Shell Plugins
Version:     1
Category:    API_CREDENTIAL
Fields:
  token:    glpat-XXCAR1w24GQK1XXXXXXX
URLs:
:    https://gitlab.com/-/profile/personal_access_tokens (primary)
 ✘ administrator@homebot  ~/projects/wxtoot  op plugin inspect glab

GitLab CLI

Configured Aliases

✔ Alias for "glab" configured
✔ Aliases sourced (/home/administrator/.config/op/plugins.sh)

Configured Credentials

✔ Configured as global default:
CREDENTIAL TYPE                 ITEM           VAULT
GitLab Personal Access Token    HomeBot PAT    Dave Personal

 administrator@homebot  ~/projects/wxtoot  glab repo clone "weather/weather-toot"
[ERROR] 2023/10/08 11:47:11 Shell Plugins can only be used with the 1Password app integration enabled.
To learn more about this feature, check out:
https://developer.1password.com/docs/cli/about-biometric-unlock/

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided

This discussion has been closed.