rework sops-pgp-hook and document it.

This commit is contained in:
Jörg Thalheim 2020-07-13 09:51:53 +01:00
parent 6286c5cc75
commit 7c6f438d05
No known key found for this signature in database
GPG key ID: 003F2096411B5F92
4 changed files with 176 additions and 48 deletions

View file

@ -4,5 +4,5 @@ makeSetupHook {
substitutions = {
gpg = "${gnupg}/bin/gpg";
};
deps = [ sops ];
} ./sops-shell-hook.bash
deps = [ sops gnupg ];
} ./sops-pgp-hook.bash

View file

@ -6,12 +6,12 @@ _sopsAddKey() {
export SOPS_PGP_FP=''${SOPS_PGP_FP}''${SOPS_PGP_FP:+','}$fpr
}
sopsShellHook() {
sopsPGPHook() {
local key dir
for key in $sopsGPGKeys; do
for key in $sopsPGPKeys; do
_sopsAddKey "$key"
done
for dir in $sopsGPGKeyDirs; do
for dir in $sopsPGPKeyDirs; do
while IFS= read -r -d '' key; do
_sopsAddKey "$key"
done < <(find "$dir" -type f -name '*.gpg' -o -name '*.asc' -print0)
@ -19,5 +19,5 @@ sopsShellHook() {
}
if [ -z "${shellHook-}" ]; then
shellHook=sopsShellHook
shellHook=sopsPGPHook
fi