first commit

pkgs/sops-shell-hook/default.nix

@@ -0,0 +1,8 @@
+{ makeSetupHook, gnupg, sops }:
+
+makeSetupHook {
+  substitutions = {
+    gpg = "${gnupg}/bin/gpg";
+  };
+  deps = [ sops ];
+} ./sops-shell-hook.bash

pkgs/sops-shell-hook/sops-shell-hook.bash

@@ -0,0 +1,23 @@
+_sopsAddKey() {
+  @gpg@ --quiet --import "$key"
+  local fpr
+  fpr=$(@gpg@ --with-fingerprint --with-colons --show-key "$key" \
+         | awk -F: '$1 == "fpr" { print $10;}')
+  export SOPS_PGP_FP=''${SOPS_PGP_FP}''${SOPS_PGP_FP:+','}$fpr
+}
+
+sopsShellHook() {
+  local key dir
+  for key in $sopsGPGKeys; do
+    _sopsAddKey "$key"
+  done
+  for dir in $sopsGPGKeyDirs; do
+    while IFS= read -r -d '' key; do
+      _sopsAddKey "$key"
+    done < <(find "$dir" -type f -name '*.asc' -print0)
+  done
+}
+
+if [ -z "${shellHook-}" ]; then
+  shellHook=sopsShellHook
+fi