Export

Central recordings are AES-256-GCM encrypted on disk — cat, strings, and grep show only ciphertext:

ghostshell export decrypts a recording to a plaintext asciinema v2 cast:

The exported file plays anywhere asciinema casts play:

asciinema play session.cast
asciinema cat session.cast

When you need it

• Sharing a session with someone who does not have root on the box
• Feeding a recording into external tooling that expects standard casts
• Archiving a specific session outside the central store

You do not need export just to view a session — play, search, and tail all decrypt transparently using the key at /var/lib/ghostshell/.ghostshell.key.

Warning: The exported file is plaintext. Everything the user saw and typed at the terminal — potentially including secrets echoed to the screen — is readable by anyone who can read the file. Treat exports with the same care as the store itself, and delete them when done.

Note: export requires root and, like all content-revealing commands, is gated by the optional playback password if one is set.