From 3b2e6c2e05d3821b60052aabdcdcfb41341347df Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Wed, 23 May 2018 14:25:37 -0300
Subject: Import Borg key into nodes

---
 share/hydra/import-keys | 43 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)

diff --git a/share/hydra/import-keys b/share/hydra/import-keys
index 692e5eb..59114bf 100755
--- a/share/hydra/import-keys
+++ b/share/hydra/import-keys
@@ -122,6 +122,46 @@ EOF
   fi
 }
 
+# Import Borg key
+function hydra_import_keys_borg {
+  if [ "`facter fqdn`" != "$hostname" ]; then
+    echo "-----------------------------------------------------"
+    echo "Importing borg key at $hostname:/root/.borg/hydra/key..."
+    echo "-----------------------------------------------------"
+
+    echo "Creating folder structure at $hostname:/root/.borg..."
+    $HYDRA_CONNECT $hostname <<EOF
+    sudo mkdir -p        /root/.borg/hydra
+    sudo chown root.root /root/.borg
+    sudo chown root.root /root/.borg/hydra
+    sudo chmod 700       /root/.borg
+    sudo chmod 700       /root/.borg/hydra
+    sudo touch           /root/.borg/hydra/key
+    sudo chmod 600       /root/.borg/hydra/key
+EOF
+
+    echo "Importing borg key from keyringer to $hostname:/root/.borg/hydra/key..."
+    keyringer $HYDRA decrypt nodes/$hostname/borg/key | \
+      $HYDRA_CONNECT $hostname "cat - | sudo tee /root/.borg/hydra/key > /dev/null"
+  else
+    echo "-----------------------------------------------------"
+    echo "Importing borg key at $hostname:/root/.borg/hydra/key..."
+    echo "-----------------------------------------------------"
+
+    echo "Creating folder structure at $hostname:/root/.borg..."
+    sudo mkdir -p        /root/.borg/hydra
+    sudo chown root.root /root/.borg
+    sudo chown root.root /root/.borg/hydra
+    sudo chmod 700       /root/.borg
+    sudo chmod 700       /root/.borg/hydra
+    sudo touch           /root/.borg/hydra/key
+    sudo chmod 600       /root/.borg/hydra/key
+
+    echo "Importing borg key from keyringer to $hostname:/root/.borg/hydra/key..."
+    keyringer $HYDRA decrypt nodes/$hostname/borg/key | sudo tee /root/.borg/hydra/key > /dev/null
+  fi
+}
+
 # Command line arguments
 NODES="$*"
 
@@ -139,4 +179,7 @@ for node in $NODES; do
 
   # Import OpenSSH keypair
   hydra_import_keys_openssh
+
+  # Import Borg key
+  hydra_import_keys_borg
 done
-- 
cgit v1.2.3