diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2018-05-23 15:06:44 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2018-05-23 15:06:44 -0300 |
| commit | 906b6cabbcd5d507ac96cc79e62d394d5e5011e1 (patch) | |
| tree | 3dd3d1209d5920ee7211c6bbf1e63dac709119ad /share/hydra | |
| parent | 798fd12e1bea97defb1a742957f6ca34815169b3 (diff) | |
| download | hydra-906b6cabbcd5d507ac96cc79e62d394d5e5011e1.tar.gz hydra-906b6cabbcd5d507ac96cc79e62d394d5e5011e1.tar.bz2 | |
Automatically generate keys and add into hiera secret config at newnode
Diffstat (limited to 'share/hydra')
| -rwxr-xr-x | share/hydra/newnode | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/share/hydra/newnode b/share/hydra/newnode index 9926a71..96861f6 100755 --- a/share/hydra/newnode +++ b/share/hydra/newnode @@ -77,6 +77,25 @@ fi mkdir -p $HYDRA_FOLDER/puppet/config/secrets/node cp $YAML $HYDRA_FOLDER/puppet/config/secrets/node/$NODE.yaml +# Generate keys +hydra $HYDRA newkeys all $NODE + +# Add OpenPGP key ID into secret node config +KEYID="`keyringer $HYDRA decrypt nodes/$NODE/gpg/key.pub 2> /dev/null | gpg --with-colons 2> /dev/null | grep ^pub: | cut -d : -f 5`" +echo "nodo::subsystem::backup::encryptkey: '$KEYID\"" >> $HYDRA_FOLDER/puppet/config/secrets/node/$NODE.yaml + +echo "" >> $HYDRA_FOLDER/puppet/config/secrets/node/$NODE.yaml + +# Add OpenPGP passphrase into secret node config +keyringer $HYDRA decrypt nodes/$NODE/gpg/key.passwd | \ +hydra fluxo eyaml $NODE encrypt --stdin -o block -q -l nodo::subsystem::backup::password >> $HYDRA_FOLDER/puppet/config/secrets/node/$NODE.yaml + +echo "" >> $HYDRA_FOLDER/puppet/config/secrets/node/$NODE.yam + +# Add Borg passphrase into secret node config +keyringer $HYDRA decrypt nodes/$NODE/borg/key.passwd | \ +hydra fluxo eyaml $NODE encrypt --stdin -o block -q -l nodo::subsystem::backup::borg::password >> $HYDRA_FOLDER/puppet/config/secrets/node/$NODE.yaml + # Add to git ( cd $HYDRA_FOLDER/puppet |