argo-crypt/git-wrapper.sh

16 lines
483 B
Bash
Executable file

#!/bin/bash
$(dirname $0)/git.bin "$@"
EC=$?
if [ "$1" = "checkout" -a -f ".git-crypt-key" -a ! "$GIT_CRYPT_RUNNING" = "true" ]; then
export GIT_CRYPT_RUNNING=true
export VAULT_TOKEN=$(HOME=/tmp/githome vault write -field=token auth/approle/login role_id="${VAULT_ROLE_ID}")
tmpfile=$(mktemp)
HOME=/tmp/githome vault read -field=key "secret/git-crypt/$(<.git-crypt-key)" | base64 -d >${tmpfile}
HOME=/tmp/githome git-crypt unlock ${tmpfile}
rm ${tmpfile}
fi
exit $EC