Results of 1 - 10 of about 11 for trust (0.002 sec.)
- Community Extensions 11451
- Community-contributed extensions can be installed from the Community Extensions repository since summer 2024 . Please visit the “Community Extensions” section of the documentation for more details. Warning Community extensions are contribut
...sion was built by the Community Extension CI, not that its code is safe. Install and load community extensions only if you trust their author and source. See the security considerations for details. Deprecated Starting with DuckDB 2.0, community exten... - https://man.mtool.work/duckdb/2.0/extensions/community_extensions.html
- Extension Distribution 11451
- Platforms Extension binaries are distributed for several platforms (see below). For platforms where packages for certain extensions are not available, users can build them from source and install the resulting binaries manually . Most offic
...f is supported through an extension ( httpfs ). Unsigned Extensions Warning Only load unsigned extensions from sources you trust. Avoid loading unsigned extensions over HTTP. Consult the Securing DuckDB page for guidelines on how to set up DuckDB in a...cause undefined behavior. Creating a Custom Repository You can create a custom DuckDB extension repository. To have DuckDB trust signed extensions from such a repository without enabling allow_unsigned_extensions , register it with its public keys usi... - https://man.mtool.work/duckdb/2.0/extensions/extension_distribution.html
- Securing Quack with a Reverse Proxy 11451
- By default, the Quack server binds to localhost and speaks plain HTTP. See Security for the rationale behind these configurations. For any deployment beyond local-only, the recommended pattern is the same as for any other HTTP-based databas
...ine using Caddy. Caddy issues itself a certificate for localhost from a local CA and installs the CA root into your system trust store, so DuckDB's HTTPS client trusts the cert without any extra config. 1. Run Caddy Save this Caddyfile : localhost:844.../install caddy run --config Caddyfile The first run will prompt for elevation to install Caddy's local CA into your system trust store. After that, certs issued by Caddy for localhost are trusted system-wide. 2. Start Quack and Connect Through the Pro... - https://man.mtool.work/duckdb/2.0/quack/setup/reverse_proxy.html
- Extension Repositories 9602
- New Support for custom extension repositories was introduced in DuckDB 2.0. This feature is currently work-in-progress and the syntax may still change. By default, DuckDB installs extensions from its built-in repositories ( core , core_nigh
...tly , community , …). In addition, you can register your own trusted repositories, so that an organization can host and sign its own extensions and have them install and load just like the...built-in ones. A repository is a name, a URL prefix, and one or more RSA public keys that are trusted to sign the extensions served from it. Enabling Custom Repositories Adding custom repositories is gated by the allow_ext...etting. It has three values: undecided (the default): adding new repositories is blocked, but existing repositories remain trusted. allowed : custom repositories can be added. forbidden : adding new repositories is blocked and existing custom reposito... - https://man.mtool.work/duckdb/2.0/extensions/extension_repositories.html
- UI Extension 8677
- The ui extension adds a user interface for your local DuckDB instance. Usage To start the UI from the command line: duckdb -ui To start the UI from SQL: CALL start_ui(); Running either of these will open the UI in your default browser. The
...he environment variable ui_remote_url can also be used. This setting is available mainly for testing purposes. Be sure you trust any URL you configure, as the application can access the data you load into DuckDB. Because of this risk, the setting is o... - https://man.mtool.work/duckdb/2.0/core_extensions/ui.html
- Full-Text Search 8677
- DuckDB supports full-text search via the fts extension . A full-text index allows for a query to quickly search for all occurrences of individual words within longer text strings. Example: Shakespeare Corpus Here's an example of building a
...FALSTAFF Hang him, mechanical salt-butter rogue! I will 3.0278411214953107 MWW/2.2.284 Merry Wives of Windsor FORD rather trust a Fleming with my butter, Parson Hugh 3.0278411214953107 MWW/3.5.7 Merry Wives of Windsor FALSTAFF Ill have my brains taen... - https://man.mtool.work/duckdb/2.0/guides/sql_features/full_text_search.html
- Securing Extensions 8215
- DuckDB has a powerful extension mechanism, which has the same privileges as the user running DuckDB's (parent) process. This introduces security considerations. Therefore, we recommend reviewing the configuration options listed on this page
...ot change allow_community_extensions setting while database is running Custom Extension Repositories DuckDB 2.0 introduced trusted custom extension repositories , which can serve extensions signed with user-provided keys. Two settings control them: al...low_extension_repositories : whether custom trusted extension repositories are 'allowed' , 'forbidden' (which also distrusts existing repositories) or 'undecided' (the defa...ult: blocks adding new repositories, but keeps trusting existing ones). While the database is running, the setting can only move from 'undecided' to 'allowed' or 'forbidden' ,... - https://man.mtool.work/duckdb/2.0/operations_manual/securing_duckdb/securing_ext...
- Python API 7290
- Installation To use the DuckDB Python client, visit the Python installation page . The latest stable version of the DuckDB Python client is 2.0.0. Installation The DuckDB Python API can be installed using pip : pip install duckdb . Please s
...con = duckdb.connect(config={"allow_unsigned_extensions": "true"}) Warning Only load unsigned extensions from sources you trust. Avoid loading unsigned extensions over HTTP. Consult the Securing DuckDB page for guidelines on how to set up DuckDB in a... - https://man.mtool.work/duckdb/2.0/clients/python/overview.html
- AWS Extension 7290
- The aws extension adds functionality, e.g., authentication, on top of the httpfs extension's S3 capabilities , using the AWS SDK. Installing and Loading The aws extension will be transparently autoloaded on first use from the official exten
...uming a Role (STS) To assume an IAM role, pass its ARN via ASSUME_ROLE_ARN . An EXTERNAL_ID can be supplied for the role's trust policy: CREATE OR REPLACE SECRET secret ( TYPE s3, PROVIDER credential_chain, CHAIN 'sts', ASSUME_ROLE_ARN 'arn:aws:iam::⟨... - https://man.mtool.work/duckdb/2.0/core_extensions/aws.html
- Securing DuckDB 7290
- DuckDB is a powerful analytical database engine. It can read and write files, access the network, load extensions, and use system resources. Like any powerful tool, these capabilities require appropriate configuration when working with sens
...nvironment, and threat model. If you plan to embed DuckDB in your application, also consult the "Embedding DuckDB" page. Untrusted Input Untrusted SQL Input Warning Treat SQL in DuckDB like code in Bash or Python. Do not execute SQL from untrusted sou...of the user running it, much like a shell or scripting interpreter (such as bash or Python). Just as you wouldn't run an untrusted shell script or Python program without sandboxing, apply the same caution to SQL in DuckDB. If your application must exe...cute SQL from untrusted sources, use additional safeguards when running untrusted code such as: Use duckdb-wasm for sandboxing Run DuckDB in an... - https://man.mtool.work/duckdb/2.0/operations_manual/securing_duckdb/overview.htm...
DuckDB 2.0 Documentation / man.mtool.work