Commit Graph

132 Commits

Author SHA1 Message Date
Åsmund Grammeltvedt
b003318d81 Update .gitignore when registering new files
To reduce the risk of accidentally adding plaintext secrets, ignore
registered plaintext files.
2014-10-13 21:31:58 +02:00
tlimoncelli@stackexchange.com
39f9ffb7df Move code around. No changes 2014-10-13 17:26:41 +00:00
tlimoncelli@stackexchange.com
ead6e96721 Use -- to prevent potential issues with funny file names 2014-10-03 16:25:13 +00:00
Tom Limoncelli
cd2a661837 Merge pull request #22 from mavenlink/add-shred-all-files-command
add blackbox_shred_all_files
2014-10-03 12:22:30 -04:00
mavenlink
157dfe6d2f cleanup some mis-named things and remove dead var 2014-10-02 17:03:49 -07:00
mavenlink
cd880e76c2 add blackbox_shred_all_files that shreds decrypted versions of any encrypted file, this will discard current changes 2014-10-02 17:02:20 -07:00
mavenlink
fe10053e63 use srm if available, this is OSX's secure remove utility 2014-10-02 16:55:54 -07:00
Tom Limoncelli
2ff15c6daf Merge pull request #19 from christophebiocca/umask
Uses umask to avoid creating world-readable files.
2014-09-25 19:51:44 -04:00
Tom Limoncelli
1f38c21598 Merge pull request #17 from christophebiocca/fix-python
Puts parens in print call, for python3 compatibility.
2014-09-25 19:49:44 -04:00
Tom Mast
0361dc39c5 blackbox: Removed the manual gpg --import step from README, added prepare_keychain to blackbox_update_all_files 2014-09-25 15:35:45 -05:00
Tom Mast
be821148a9 blackbox: Removed homedir and updated README to add step to import pubring 2014-09-25 15:31:05 -05:00
Tom Mast
0a954752d9 blackbox: Update README, add --homedir to encryption step in _blackbox_common 2014-09-25 15:19:49 -05:00
Christophe Biocca
14edf71e83 Uses umask to avoid creating world-readable files. 2014-09-24 00:33:52 -04:00
Christophe Biocca
26800752b4 Puts parens in print call, for python3 compatibility. 2014-09-24 00:13:08 -04:00
Christophe Biocca
d453df2875 Ensure editor actually gets a filename to work with. 2014-09-23 17:24:44 -04:00
tlimoncelli@stackexchange.com
2689a2d5a4 Remove debug statement 2014-09-09 20:36:27 +00:00
tlimoncelli@stackexchange.com
389e8a7a19 BIG CHANGES:
* Command no longer need to be run from the base directory of the repo.
  * blackbox_edit now asks "are you sure?" and is greatly simplified.

_blackbox_common.sh:
  * add_filename_to_cryptlist now accepts paths relative to cwd.
  * fail_if_not_on_cryptlist now accepts paths relative to cwd.
  * new function: vcs_relative_path reports a path to the file relative to the REPOBASE.
  * new function: is_on_cryptlist

plus...
  * Some minor performance enhancesments and cleanups.
  * confidence_test.sh now tests some commands while not in REPOBASE.
2014-09-09 20:32:48 +00:00
tlimoncelli@stackexchange.com
2dcb922f95 Remove duplicate file: blackbox_start 2014-09-09 20:20:45 +00:00
tlimoncelli@stackexchange.com
28bff4ff9f Add "set -e" to all scripts. 2014-09-08 20:25:38 +00:00
tlimoncelli@stackexchange.com
3460633506 Fix _determine_vcs_base_and_type and fail_if_not_on_cryptlist 2014-09-08 20:09:04 +00:00
Lucas S. Magalhães
60b7206d8a re-encrypt and shred after edit 2014-09-04 11:45:26 -03:00
Lucas S. Magalhães
a7baaf2e8c blackbox_edit created 2014-09-04 11:29:23 -03:00
tlimoncelli@stackexchange.com
f222516526 * blackbox_postdeploy should accept an optional parameter for chgrp.
* blackbox_postdeploy should 'cd' to $BASEDIR or the base VCS directory.
* Add unit tests to confidence_test.sh to cover chgrp functionality.
2014-09-02 22:10:37 +00:00
tlimoncelli@stackexchange.com
4702a9a207 * Test use-case where secrets had previously been exposed.
* BUG: blackbox_postdeploy should not "chgrp" files.
2014-09-01 18:59:57 +00:00
tlimoncelli@stackexchange.com
01a9292d9d Use a portable version of MD5. 2014-09-01 18:59:22 +00:00
Alice Example
d6a20b049f Fix typo that makes vcs_remove fail 2014-09-01 14:26:56 -04:00
tlimoncelli@stackexchange.com
8d2e76929e Corrected informational message 2014-08-29 20:28:08 +00:00
tlimoncelli@stackexchange.com
d74eeb33c7 * Initialization for new repos AUTOMATED.
* Adding new users AUTOMATED.
* Update docs for the new, more simplified installation processes.
* Remove dependency on any particular paths, etc.  Copy "bin" into a place along your path and everything should "just work".
* Add support for Mercurial (not tested).
* blackbox_addadmin now adds keys to the keyring for you.
* Unified #! lines to "#!/usr/bin/env bash" so it works better on FreeBSD.
* BUGFIX: (BugId#1) blackbox_update_all_files.sh expects hg, fails for git.
* BUGFIX: (BugId#2) blackbox_postdeploy.sh assumes certain directory layout.
* BUGFIX: Temporary files aren't deleted.
* NEW FILE: bin/blackbox_initialize: Automates enabling BB for a repo (creates directories, files, and updates .gitignore).
* NEW FILE: bin/blackbox_removeadmin: Automates removing an admit.
* NEW FILE: tools/confidence_test.sh: A battery of tests to verify operations.
* NEW FILE: bin/Makefile: Automate package creation.
* NEW FILE: bin/_stack_lib.sh: A library of shell routines from StackExchange.
2014-08-29 20:21:02 +00:00
tlimoncelli@stackexchange.com
f387bc9f30 Remove ".sh" from file names.
Refactor so it does not rely on PWD being the repo basedir.
Fix assumptions about HG and GIT use.
2014-08-28 20:47:32 +00:00
tlimoncelli@stackexchange.com
9f78fd458b blackbox_addadmin.sh: NEW: still untested.
blackbox_common.sh: Add comments.
2014-08-26 16:03:25 -04:00
tlimoncelli@stackexchange.com
8a14c28510 Big doc update plus refined tools to work better outside of StackExchange. 2014-08-13 15:16:35 -04:00
Tom Limoncelli
73396c8a4d Initial check in 2014-07-07 20:30:22 -04:00