Where your data lives on Linux

Everything SubnetSlinger saves — your inventory, incidents, logs, runbooks, saved hosts, and the Vault — stays on your machine. There is no cloud sync.

The basics: your data lives under your home directory, in the standard Linux config location: ~/.config/SubnetSlinger (this follows the XDG spec, so if you've set XDG_CONFIG_HOME it goes there instead). To back up your setup, back up that folder. To start completely fresh, close the app and remove it.

Going deeper — saved secrets: passwords you let the app remember (an SSH host password, the licensing token) are NOT stored in plain text. On Linux they're encrypted with AES-256-GCM. The key is a 256-bit random value kept in ~/.config/SubnetSlinger/secret.key, created readable only by your user (file mode 0600). This is the Linux counterpart to Windows DPAPI: it protects saved secrets against another user reading your files, and it's tied to that key file.

Good to know / caveats: because the encryption key lives in your home directory, a saved secret is only as protected as your account and that key file. If you copy your ~/.config/SubnetSlinger to another machine, copy secret.key with it or the saved secrets won't decrypt (the app just shows them blank and logs a note — nothing crashes). Full-disk encryption (LUKS) and a strong login password are still the real perimeter; this keeps secrets off disk in plaintext, it isn't a substitute for OS-level security. A system keyring (libsecret/GNOME Keyring) is on the roadmap as a stronger option.