aboutsummaryrefslogtreecommitdiff
path: root/scripts/with_env
diff options
context:
space:
mode:
authorIsmaël Bouya <ismael.bouya@normalesup.org>2023-10-04 01:35:06 +0200
committerIsmaël Bouya <ismael.bouya@normalesup.org>2023-10-04 02:11:48 +0200
commit1a64deeb894dc95e2645a75771732c6cc53a79ad (patch)
tree1b9df4838f894577a09b9b260151756272efeb53 /scripts/with_env
parentfa25ffd4583cc362075cd5e1b4130f33306103f0 (diff)
downloadNix-1a64deeb894dc95e2645a75771732c6cc53a79ad.tar.gz
Nix-1a64deeb894dc95e2645a75771732c6cc53a79ad.tar.zst
Nix-1a64deeb894dc95e2645a75771732c6cc53a79ad.zip
Squash changes containing private information
There were a lot of changes since the previous commit, but a lot of them contained personnal information about users. All thos changes got stashed into a single commit (history is kept in a different place) and private information was moved in a separate private repository
Diffstat (limited to 'scripts/with_env')
-rwxr-xr-xscripts/with_env27
1 files changed, 27 insertions, 0 deletions
diff --git a/scripts/with_env b/scripts/with_env
new file mode 100755
index 0000000..783d86c
--- /dev/null
+++ b/scripts/with_env
@@ -0,0 +1,27 @@
1#!/usr/bin/env bash
2
3if [ -z "$SOPS_VARS_FILE" ]; then
4 echo "Variable SOPS_VARS_FILE is needed with a path to the sops variables"
5 exit 1;
6fi
7
8umask 0077
9TEMP=$(mktemp -d /tmp/XXXXXX-nixops-files)
10chmod go-rwx $TEMP
11
12finish() {
13 rm -rf "$TEMP"
14}
15
16trap finish EXIT
17
18sops -d $SOPS_VARS_FILE | yq -r .ssl_keys.nix_repository > $TEMP/id_ed25519
19
20cat > $TEMP/ssh_config <<EOF
21Host *
22IdentityFile $TEMP/id_ed25519
23EOF
24export SSH_CONFIG_FILE="$TEMP/ssh_config"
25export SSH_IDENTITY_FILE="$TEMP/id_ed25519"
26
27"$@"