ssh

ANSI codes to hide (\x1b[?25l) and show (\x1b[?25h) the cursor are not retained during the serialization. I understand that this concerns more the current state of the terminal, but since the cursor position is preserved, I find it natural to also save the cursor visibility.

If this is a wontfix, is there at least a reliable way to detect the cursor visibility? Other than the undocumente

the borg files cache can be rather large, because it keeps some information about all files that have been processed recently.

lz4 is a very fast compression / decompression algorithm, so we could try to use it to lower the in-memory footprint of the files cache entries.

before implementing this, we should check how big the savings typically are - to determine whether it is worthwhile doing

What would you like to be added

I'd like to have the option to not have the HSM pin stored in a configuration file, but instead be required to be entered manually by an operator each time the CA is started.

Why this is needed

Having HSM pins sitting on the file system weakens the security in cases of hardware being stolen.

In theory if the PIN is not known then stealing a server a