Rook provides a secret service a-la secret-tool, keyring, or pass/gopass, except backed by a Keepass kdbx file.

The problem Rook solves is mainly in script automation, where you have aerc, offlineimap, isync, vdirsyncer, msmtp, restic, or any other cron jobs that need passwords and which are often configured to fetch these passwords from a secret service with a CLI tool. Unlike existing solutions, Rook is headless, and does not have a bespoke secrets database full of passwords that must be manually synchronized with Keepass; instead, it uses a Keepass db directly.

Rook is in the AUR and in Alpine testing; binaries are available from the project page.

From the changelog, since the last Lemmy release announcement v0.1.3 on May 20:

[v0.2.0] Fri Oct 11 09:01:03 2024 -0500

Added

• support for password + key file credentials
• show --no-eol option, to strip CRs after, eg, passwords

Changed

• show matches search: it’s now case insensitive

Fixed

• successful OPEN with password wasn’t clearing the one-time pin, so the DB was staying locked.