finallycoffee/ansible-gpg-vault
finallycoffee/ansible-gpg-vault
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

prefer fingerprints over uids, add draft of repo initialization logic

Browse Source
This commit is contained in:
Johanna Dorothea Reichmann 2019-08-02 19:44:13 +02:00
parent fdeae4bb94
commit 60a414de9d
Signed by: transcaffeine
GPG Key ID: 03624C433676E465
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
vault.sh
View File

@ -4,8 +4,11 @@ set -e -u
# Keyserver to use. You need to trust this keyserver that the uid is not spoofed when receiving keys # Keyserver to use. You need to trust this keyserver that the uid is not spoofed when receiving keys
KEYSERVER="" KEYSERVER=""
# File which contains a list of uid's to receive and encrypt the vault for # File which contains a list of fingerprints to receive and encrypt the vault for
KEY_FILE="" KEY_FILE=""
REPO_BASE_PATH="$(dirname $0)/.."
# File in which the passphrase for the gpg vault is encrypted
VAULT_PASS_FILE="$REPO_BASE_PATH/gpg/vault_passphrase.gpg"
ACTION="$1" ACTION="$1"
# default action is vault decrypt # default action is vault decrypt
@ -22,5 +25,11 @@ case "$ACTION" in
"reencrypt") "reencrypt")
;; ;;
"init")
mkdir -p $REPO_BASE_PATH/gpg
touch $REPO_BASE_PATH/gpg/vault_passphrase
touch $REPO_BASE_PATH/gpg/$KEY_FILE
;;
esac esac