27 lines
607 B
Bash
27 lines
607 B
Bash
|
|
#!/bin/bash
|
||
|
|
|
||
|
|
#
|
||
|
|
# blackbox_postdeploy.sh -- Decrypt all blackbox files.
|
||
|
|
#
|
||
|
|
|
||
|
|
: ${BASEDIR:=/etc/puppet} ;
|
||
|
|
: ${CHGRP:=chgrp} ;
|
||
|
|
|
||
|
|
cd "$BASEDIR"
|
||
|
|
export PATH=/usr/bin:/bin:"$BASEDIR"/bin:"$PATH"
|
||
|
|
|
||
|
|
source blackbox_common.sh
|
||
|
|
set -e
|
||
|
|
|
||
|
|
prepare_keychain
|
||
|
|
|
||
|
|
# Decrypt:
|
||
|
|
echo '========== Decrypting new/changed files: START'
|
||
|
|
while read unencrypted_file; do
|
||
|
|
encrypted_file=$(get_encrypted_filename "$unencrypted_file")
|
||
|
|
decrypt_file_overwrite "$encrypted_file" "$unencrypted_file"
|
||
|
|
chmod g+r,o-rwx "$unencrypted_file"
|
||
|
|
$CHGRP puppet "$unencrypted_file"
|
||
|
|
done <"$BB_FILES"
|
||
|
|
echo '========== Decrypting new/changed files: DONE'
|