- How can I quickly check for problems with chezmoi on my machine?
- How do I edit my dotfiles with chezmoi?
- Do I have to use
chezmoi edit
to edit my dotfiles? - What are the consequences of "bare" modifications to the target files? If my
.zshrc
is managed by chezmoi and I edit~/.zshrc
without usingchezmoi edit
, what happens? - How can I tell what dotfiles in my home directory aren't managed by chezmoi? Is there an easy way to have chezmoi manage a subset of them?
- How can I tell what dotfiles in my home directory are currently managed by chezmoi?
- If there's a mechanism in place for the above, is there also a way to tell chezmoi to ignore specific files or groups of files (e.g. by directory name or by glob)?
- If the target already exists, but is "behind" the source, can chezmoi be configured to preserve the target version before replacing it with one derived from the source?
- Once I've made a change to the source directory, how do I commit it?
- I've made changes to both the destination state and the source state that I want to keep. How can I keep them both?
- Why does chezmoi convert all my template variables to lowercase?
- chezmoi makes
~/.ssh/config
group writeable. How do I stop this? - Why does
chezmoi cd
spawn a shell instead of just changing directory? - Why doesn't chezmoi use symlinks like GNU Stow?
- What are the limitations of chezmoi's symlink mode?
- Can I change how chezmoi's source state is represented on disk?
- gpg encryption fails. What could be wrong?
- chezmoi reports
chezmoi: user: lookup userid NNNNN: input/output error
- chezmoi reports
chezmoi: timeout
orchezmoi: timeout obtaining persistent state lock
- I'm getting errors trying to build chezmoi from source
- What inspired chezmoi?
- Why not use Ansible/Chef/Puppet/Salt, or similar to manage my dotfiles instead?
- Can I use chezmoi to manage files outside my home directory?
- Where does the name "chezmoi" come from?
- What other questions have been asked about chezmoi?
- Where do I ask a question that isn't answered here?
- I like chezmoi. How do I say thanks?
Run:
$ chezmoi doctor
Anything ok
is fine, anything warning
is only a problem if you want to use
the related feature, and anything error
indicates a definite problem.
There are four popular approaches:
- Use
chezmoi edit $FILE
. This will open the source file for$FILE
in your editor, including . For extra ease, usechezmoi edit --apply $FILE
to apply the changes when you quit your editor. - Use
chezmoi cd
and edit the files in the source directory directly. Runchezmoi diff
to see what changes would be made, andchezmoi apply
to make the changes. - If your editor supports opening directories, run
chezmoi edit
with no arguments to open the source directory. - Edit the file in your home directory, and then either re-add it by running
chezmoi add $FILE
orchezmoi re-add
. Note thatre-add
doesn't work with templates. - Edit the file in your home directory, and then merge your changes with source
state by running
chezmoi merge $FILE
.
No. chezmoi edit
is a convenience command that has a couple of useful
features, but you don't have to use it. You can also run chezmoi cd
and then
just edit the files in the source state directly. After saving an edited file
you can run chezmoi diff
to check what effect the changes would have, and run
chezmoi apply
if you're happy with them.
chezmoi edit
provides the following useful features:
- It opens the correct file in the source state for you with a filename matching the target filename, so your editor's syntax highlighting will work and you don't have to know anything about source state attributes.
- If the dotfile is encrypted in the source state, then
chezmoi edit
will decrypt it to a private directory, open that file in your$EDITOR
, and then re-encrypt the file when you quit your editor. That makes encryption more transparent to the user. With the--diff
and--apply
options you can see what would change and apply those changes without having to runchezmoi diff
orchezmoi apply
. Note also that the arguments tochezmoi edit
are the files in their target location.
What are the consequences of "bare" modifications to the target files? If my .zshrc
is managed by chezmoi and I edit ~/.zshrc
without using chezmoi edit
, what happens?
Until you run chezmoi apply
your modified ~/.zshrc
will remain in place.
When you run chezmoi apply
chezmoi will detect that ~/.zshrc
has changed
since chezmoi last wrote it and prompt you what to do. You can resolve
differences with a merge tool by running chezmoi merge ~/.zshrc
.
How can I tell what dotfiles in my home directory aren't managed by chezmoi? Is there an easy way to have chezmoi manage a subset of them?
chezmoi unmanaged
will list everything not managed by chezmoi. You can add
entire directories with chezmoi add
.
chezmoi managed
will list everything managed by chezmoi.
If there's a mechanism in place for the above, is there also a way to tell chezmoi to ignore specific files or groups of files (e.g. by directory name or by glob)?
By default, chezmoi ignores everything that you haven't explicitly added. If you
have files in your source directory that you don't want added to your
destination directory when you run chezmoi apply
add their names to a file
called .chezmoiignore
in the source state.
Patterns are supported, and you can change what's ignored from machine to machine. The full usage and syntax is described in the reference manual.
If the target already exists, but is "behind" the source, can chezmoi be configured to preserve the target version before replacing it with one derived from the source?
Yes. Run chezmoi add
will update the source state with the target. To see
diffs of what would change, without actually changing anything, use chezmoi diff
.
You have several options:
chezmoi cd
opens a shell in the source directory, where you can run your usual version control commands, likegit add
andgit commit
.chezmoi git
runsgit
in the source directory and pass extra arguments to the command. If you're passing any flags, you'll need to use--
to prevent chezmoi from consuming them, for examplechezmoi git -- commit -m "Update dotfiles"
.- You can configure chezmoi to automatically commit and push changes to your source state, as described in the how-to guide.
I've made changes to both the destination state and the source state that I want to keep. How can I keep them both?
chezmoi merge
will open a merge tool to resolve differences between the source
state, target state, and destination state. Copy the changes you want to keep in
to the source state.
This is due to a feature in
github.com/spf13/viper
, the library that
chezmoi uses to read its configuration file. For more information see this
GitHub issue.
By default, chezmoi uses your system's umask when creating files. On most
systems the default umask is 022
but some systems use 002
, which means
that files and directories are group writeable by default.
You can override this for chezmoi by setting the umask
configuration variable
in your configuration file, for example:
umask = 0o022
Note that this will apply to all files and directories that chezmoi manages and will ensure that none of them are group writeable. It is not currently possible to control group write permissions for individual files or directories. Please open an issue on GitHub if you need this.
chezmoi cd
spawns a shell because it is not possible for a program to change
the working directory of its parent process. You can add a shell function instead:
chezmoi-cd() {
cd $(chezmoi source-path)
}
Typing chezmoi-cd
will then change the directory of your current shell to
chezmoi's source directory.
Symlinks are first class citizens in chezmoi: chezmoi supports creating them, updating them, removing them, and even more advanced features not found elsewhere like having the same symlink point to different targets on different machines by using a template.
With chezmoi, you only use a symlink where you really need a symlink, in contrast to some other dotfile managers (e.g. GNU Stow) which require the use of symlinks as a layer of indirection between a dotfile's location (which can be anywhere in your home directory) and a dotfile's content (which needs to be in a centralized directory that you manage with version control). chezmoi solves this problem in a different way.
Instead of using a symlink to redirect from the dotfile's location to the centralized directory, chezmoi generates the dotfile as a regular file in its final location from the contents of the centralized directory. This approach allows chezmoi to provide features that are not possible when using symlinks, for example having files that are encrypted, executable, private, or templates.
There's nothing special about dotfiles managed by chezmoi, whereas dotfiles managed with GNU Stow are special because they're actually symlinks to somewhere else.
The only advantage to using GNU Stow-style symlinks is that changes that you
make to the dotfile's contents in the centralized directory are immediately
visible, whereas chezmoi currently requires you to run chezmoi apply
or
chezmoi edit --apply
. chezmoi will likely get an alternative solution to this
too, see #752.
If you really want to use symlinks, then chezmoi provides a symlink mode which uses symlinks where possible.
You can configure chezmoi to work like GNU Stow and have it create a set of symlinks back to a central directory, but this currently requires a bit of manual work (as described in #167). chezmoi might get some automation to help (see #886 for example) but it does need some convincing use cases that demonstrate that a symlink from a dotfile's location to its contents in a central directory is better than just having the correct dotfile contents.
In symlink mode chezmoi replaces targets with symlinks to the source directory if the the target is a regular file and is not encrypted, executable, private, or a template.
Symlinks cannot be used for encrypted files because the source state contains the ciphertext, not the plaintext.
Symlinks cannot be used for executable files as the executable bit would need to be set on the file in the source directory and chezmoi uses only regular files and directories in its source state for portability across operating systems. This may change in the future.
Symlinks cannot be used for private files because git does not persist group and world permission bits.
Symlinks cannot be used for templated files because the source state contains the template, not the result of executing the template.
Symlinks cannot be used for entire directories because of chezmoi's use of
attributes in the filename mangles entries in the directory, directories might
have the exact_
attribute and contain empty files, and the directory's entries
might not be usable with symlinks.
In symlink mode, running chezmoi add
does not immediately replace the targets
with a symlink. You must run chezmoi apply
to create the symlinks.
There are a number of criticisms of how chezmoi's source state is represented on disk:
- Not all possible file permissions can be represented.
- The long source file names are weird and verbose.
- Everything is in a single directory, which can end up containing many entries.
chezmoi's source state representation is a deliberate, practical compromise.
The dot_
attribute makes it transparent which dotfiles are managed by chezmoi
and which files are ignored by chezmoi. chezmoi ignores all files and
directories that start with .
so no special whitelists are needed for version
control systems and their control files (e.g. .git
and .gitignore
).
chezmoi needs per-file metadata to know how to interpret the source file's
contents, for example to know when the source file is a template or if the
file's contents are encrypted. By storing this metadata in the filename, the
metadata is unambiguously associated with a single file and adding, updating, or
removing a single file touches only a single file in the source state. Changes
to the metadata (e.g. chezmoi chattr +template *target*
) are simple file
renames and isolated to the affected file.
If chezmoi were to, say, use a common configuration file listing which files were templates and/or encrypted, then changes to any file would require updates to the common configuration file. Automating updates to configuration files requires a round trip (read config file, update config, write config) and it is not always possible preserve comments and formatting.
chezmoi's attributes of executable_
, private_
, and readonly_
allow a the
file permissions 0o644
, 0o755
, 0o600
, 0o700
, 0o444
, 0o555
, 0o400
,
and 0o500
to be represented. Directories can only have permissions 0o755
,
0o700
, or 0o500
. In practice, these cover all permissions typically used for
dotfiles. If this does cause a genuine problem for you, please open an issue on
GitHub.
File permissions and modes like executable_
, private_
, readonly_
, and
symlink_
could also be stored in the filesystem, rather than in the filename.
However, this requires the permissions to be preserved and handled by the
underlying version control system and filesystem. chezmoi provides first-class
support for Windows, where the executable_
and private_
attributes have no
direct equivalents and symbolic links are not always permitted. By using regular
files and directories, chezmoi avoids variations in the operating system,
version control system, and filesystem making it both more robust and more
portable.
chezmoi uses a 1:1 mapping between entries in the source state and entries in the target state. This mapping is bi-directional and unambiguous.
However, this also means that dotfiles that in the same directory in the target state must be in the same directory in the source state. In particular, every entry managed by chezmoi in the root of your home directory has a corresponding entry in the root of your source directory, which can mean that you end up with a lot of entries in the root of your source directory.
If chezmoi were to permit, say, multiple separate source directories (so you
could, say, put dot_bashrc
in a bash/
subdirectory, and dot_vimrc
in a
vim/
subdirectory, but have chezmoi apply
map these to ~/.bashrc
and
~/.vimrc
in the root of your home directory) then the mapping between source
and target states is no longer bidirectional nor unambiguous, which
significantly increases complexity and requires more user interaction. For
example, if both bash/dot_bashrc
and vim/dot_bashrc
exist, what should be
the contents of ~/.bashrc
? If you run chezmoi add ~/.zshrc
, should
dot_zshrc
be stored in the source bash/
directory, the source vim/
directory, or somewhere else? How does the user communicate their preferences?
chezmoi has many users and any changes to the source state representation must be backwards-compatible.
In summary, chezmoi's source state representation is a compromise with both advantages and disadvantages. Changes to the representation will be considered, but must meet the following criteria, in order of importance:
- Be fully backwards-compatible for existing users.
- Fix a genuine problem encountered in practice.
- Be independent of the underlying operating system, version control system, and filesystem.
- Not add significant extra complexity to the user interface or underlying implementation.
By default, chezmoi's diff output includes ANSI color escape sequences (e.g.
ESC[37m
) and is piped into your pager (by default less
). chezmoi assumes
that your pager passes through the ANSI color escape sequences, as configured on
many systems, but not all. If your pager does not pass through ANSI color escape
sequences then you will see monochrome diff output with uninterpreted ANSI color
escape sequences.
This can typically by fixed by setting the environment variable
$ export LESS=-R
which instructs less
to display "raw" control characters via the -R
/
--RAW-CONTROL-CHARS
option.
You can also set the pager
configuration variable in your config file, for
example:
pager = "less -R"
If you have set a different pager (via the pager
configuration variable or
PAGER
environment variable) then you must ensure that it passes through raw
control characters. Alternatively, you can use the --color=false
option to
chezmoi to disable colors or the --no-pager
option to chezmoi to disable the
pager.
The gpg.recipient
key should be ultimately trusted, otherwise encryption will
fail because gpg will prompt for input, which chezmoi does not handle. You can
check the trust level by running:
$ gpg --export-ownertrust
The trust level for the recipient's key should be 6
. If it is not, you can
change the trust level by running:
$ gpg --edit-key $recipient
Enter trust
at the prompt and chose 5 = I trust ultimately
.
This is likely because the chezmoi binary you are using was statically compiled with musl and the machine you are running on uses LDAP or NIS.
The immediate fix is to use a package built for your distribution (e.g a .deb
or .rpm
) which is linked against glibc and includes LDAP/NIS support instead
of the statically-compiled binary.
If the problem still persists, then please open an issue on GitHub.
chezmoi will report this when it is unable to lock its persistent state
(~/.config/chezmoi/chezmoistate.boltdb
), typically because another instance of
chezmoi is currently running and holding the lock.
This can happen, for example, if you have a run_
script that invokes
chezmoi
, or are running chezmoi in another window.
Under the hood, chezmoi uses bbolt which permits multiple simultaneous readers, but only one writer (with no readers).
Commands that take a write lock include add
, apply
, edit
, forget
,
import
, init
, state
, unmanage
, and update
. Commands that take a read
lock include diff
, status
, and verify
.
chezmoi requires Go version 1.16 or later. You can check the version of Go with:
$ go version
If you try to build chezmoi with an earlier version of Go you will get the error:
package github.com/twpayne/chezmoi/v2: build constraints exclude all Go files in /home/twp/src/github.com/twpayne/chezmoi
This is because chezmoi includes the build tag go1.16
in main.go
, which is
only set on Go 1.16 or later.
For more details on building chezmoi, see the Contributing Guide.
chezmoi was inspired by Puppet, but was created because Puppet is an overkill for managing your personal configuration files. The focus of chezmoi will always be personal home directory management. If your needs grow beyond that, switch to a whole system configuration management tool.
Whole system management tools are more than capable of managing your dotfiles, but are large systems that entail several disadvantages. Compared to whole system management tools, chezmoi offers:
- Small, focused feature set designed for dotfiles. There's simply less to learn with chezmoi compared to whole system management tools.
- Easy installation and execution on every platform, without root access. Installing chezmoi requires only copying a single binary file with no external dependencies. Executing chezmoi just involves running the binary. In contrast, installing and running a whole system management tool typically requires installing a scripting language runtime, several packages, and running a system service, all typically requiring root access.
chezmoi's focus and simple installation means that it runs almost everywhere: from tiny ARM-based Linux systems to Windows desktops, from inside lightweight containers to FreeBSD-based virtual machines in the cloud.
In practice, yes, you can, but this is strongly discouraged beyond using your system's package manager to install the packages you need.
chezmoi is designed to operate on your home directory, and is explicitly not a full system configuration management tool. That said, there are some ways to have chezmoi manage a few files outside your home directory.
chezmoi's scripts can execute arbitrary commands, so you can use a run_
script
that is run every time you run chezmoi apply
, to, for example:
- Make the target file outside your home directory a symlink to a file managed by chezmoi in your home directory.
- Copy a file managed by chezmoi inside your home directory to the target file.
- Execute a template with
chezmoi execute-template --output=filename template
wherefilename
is outside the target directory.
chezmoi executes all scripts as the user executing chezmoi, so you may need to
add extra privilege elevation commands like sudo
or PowerShell start -verb runas -wait
to your script.
chezmoi, by default, operates on your home directory but this can be overridden
with the --destination
command line flag or by specifying destDir
in your
config file, and could even be the root directory (/
or C:\
). This allows
you, in theory, to use chezmoi to manage any file in your filesystem, but this
usage is extremely strongly discouraged.
If your needs extend beyond modifying a handful of files outside your target
system, then existing configuration management tools like
Puppet, Chef,
Ansible, and Salt are
much better suited - and of course can be called from a chezmoi run_
script.
Put your Puppet Manifests, Chef Recipes, Ansible Modules, and Salt Modules in a
directory ignored by .chezmoiignore
so they do not pollute your home
directory.
"chezmoi" splits to "chez moi" and pronounced /ʃeɪ mwa/ (shay-moi) meaning "at my house" in French. It's seven letters long, which is an appropriate length for a command that is only run occasionally.
See the issues on GitHub.
Please open an issue on GitHub.
Thank you! chezmoi was written to scratch a personal itch, and I'm very happy
that it's useful to you. Please give chezmoi a star on
GitHub, and if you're happy to
share your public dotfile repo then tag it with
chezmoi
.
If you write an article or give a talk on chezmoi please inform the author (e.g. by opening an issue) so it can be added to chezmoi's media page.
Contributions are very welcome and every bug report, support request, and feature request helps make chezmoi better. Thank you :)