114 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Cole Mickens	24fd158fe6	sops-install-secrets: symlinkSecret: set uid/gid (with Fchownat) (#32) ... Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>	2020-08-24 09:24:43 +01:00
Jörg Thalheim	b5db7b2516	Merge pull request #37 from Skyfold/master ... Update README.md	2020-08-23 20:39:21 +01:00
Pfalzgraf Martin	fe0035f843	Update README.md ... If you remove the `--fingerprint` option to `gpg` you won't have to delete the spaces after copying the fingerprint.	2020-08-23 19:43:17 +10:00
Jörg Thalheim	f51316ee52	README: initrd secrets, real-world examples	2020-08-20 11:02:11 +01:00
Jörg Thalheim	9a14b6ab14	Merge pull request #35 from Mic92/fix-tests	2020-08-17 21:59:43 +01:00
Jörg Thalheim	512b34dd0a	Merge branch 'master' into fix-tests	2020-08-11 05:48:47 +01:00
Jörg Thalheim	70dbc816f2	README.md: improve documentation on gnupgHome.	2020-08-11 05:46:00 +01:00
Jörg Thalheim	852a55ccc0	Merge pull request #33 from Mic92/fix-tests ... sops-install-secrets: disable tests	2020-08-10 18:33:08 +01:00
Jörg Thalheim	7d2b22a18d	sops-install-secrets: disable tests	2020-08-10 18:22:59 +01:00
Jörg Thalheim	d74c316321	Merge pull request #31 from Mic92/flakes	2020-08-07 11:49:32 +01:00
Jörg Thalheim	d984024f45	try to fix certificates	2020-08-07 11:38:52 +01:00
Jörg Thalheim	0b53376ef6	add flake.lock ... packages needs this	2020-08-07 11:38:02 +01:00
Jörg Thalheim	9cbdd53970	drone-ci: access host-nix daemon	2020-08-02 00:09:23 +01:00
Jörg Thalheim	0cec798bc3	switch to drone-io	2020-08-02 00:06:02 +01:00
Jörg Thalheim	32c42617e4	sshkeys: use %w in fmt.Errorf calls	2020-07-30 16:22:43 +01:00
Jörg Thalheim	df86cc4e71	ssh-to-pgp: use %w for fmt.Errorf calls	2020-07-30 16:21:47 +01:00
Jörg Thalheim	01e4038c9a	don't print full executable path logging key import	2020-07-30 16:19:51 +01:00
Jörg Thalheim	9cd8bb080f	sops-install-secrets: use %w for fmt.Errorf calls	2020-07-30 16:19:14 +01:00
Jörg Thalheim	7eb1ca2322	add .drone.yml	2020-07-29 09:51:27 +01:00
Jörg Thalheim	bef5a49352	document how to expose same secret to different users	2020-07-29 08:11:44 +01:00
Jörg Thalheim	4728721e32	Merge pull request #25 from Mic92/test-foo	2020-07-25 18:29:44 +01:00
Jörg Thalheim	a693847646	buildkite: remove pipeline ... This would allow to extract secrets	2020-07-25 18:26:45 +01:00
Jörg Thalheim	42463f12e0	Readme.md: add TODO for systemd services	2020-07-25 18:06:03 +01:00
Jörg Thalheim	7cca040407	README.md: fix typo	2020-07-23 16:40:45 +01:00
Jörg Thalheim	ce579c3b17	Merge pull request #22 from mweinelt/readme ... README: correct mistake in GPG key decryption explanation	2020-07-23 15:52:16 +01:00
Martin Weinelt	6391feffe4	README: correct mistake in GPG key decryption explanation	2020-07-23 16:44:43 +02:00
Jörg Thalheim	aea30fe0e2	add flake installation	2020-07-23 09:08:42 +01:00
Jörg Thalheim	04584b67b0	README: fix codeblock language	2020-07-23 08:53:05 +01:00
Jörg Thalheim	70cd2a9dfe	README: fixup configuration markup	2020-07-23 08:51:53 +01:00
Jörg Thalheim	0acfed8167	Merge pull request #21 from Mic92/docs-improvements	2020-07-23 08:49:35 +01:00
Jörg Thalheim	59e6df1acf	sops-init-gpg-key: include hostname on darwin	2020-07-23 08:45:32 +01:00
Jörg Thalheim	ffc9c2c78c	module: add defaultSopsFormat option	2020-07-23 08:36:38 +01:00
Jörg Thalheim	2fa9c1a948	README: document different file formats & symlinks	2020-07-23 08:34:18 +01:00
Jörg Thalheim	98afd85ef8	sops-ini-gpg-key: add install check	2020-07-23 08:20:08 +01:00
Jörg Thalheim	c8eaa32f00	README.md: make niv path less weird	2020-07-23 07:11:43 +01:00
Jörg Thalheim	04a2eaf220	README: describe installation methods ... fixes #20	2020-07-23 07:10:24 +01:00
Jörg Thalheim	298b235f66	Merge pull request #19 from Mic92/macos-ci	2020-07-22 23:52:36 +01:00
Jörg Thalheim	b8d91d61ac	restrict sops-install-secrets to linux ... ramfs is not available elswhere.	2020-07-22 23:46:05 +01:00
Jörg Thalheim	71db50d5eb	add a release.nix	2020-07-22 23:34:56 +01:00
Jörg Thalheim	4a41039ab3	mark sops-install-secrets as Linux only	2020-07-22 23:12:13 +01:00
Jörg Thalheim	5e95616f0f	use a shorter tempdir on macOS ... By default macOS does something like this: /var/folders/08/j4g_jn953lngpvgmyg8dygk00000gn/T/ breaking unix socket paths of gnupg.	2020-07-22 23:10:22 +01:00
Andreas Fuchs	1279274ddc	Use /tmp as the temporary dir for ssh-to-gpg ... This isn't great: but it might prevent the agent from complaining.	2020-07-22 23:10:22 +01:00
Andreas Fuchs	0d885b439f	Create a temporary GNUPGHOME dir ... This should prevent the paths from getting unwieldy, we'll see.	2020-07-22 23:10:22 +01:00
Jörg Thalheim	8c33651e0c	ci: add macOS support	2020-07-22 23:10:22 +01:00
Jörg Thalheim	3095053dd4	darwin fixes	2020-07-22 22:29:01 +01:00
Jörg Thalheim	ca550a4c65	Merge pull request #18 from Mic92/fix-subkeys	2020-07-22 22:12:25 +01:00
Jörg Thalheim	66393a1c82	sops-pgp-hook: ignore subkeys ... fixes #17	2020-07-22 15:07:51 +01:00
Jörg Thalheim	e39f83d86e	Merge pull request #16 from Mic92/fix-test ... sops-pgp-hook: make test robust against file order	2020-07-22 14:36:48 +01:00
Jörg Thalheim	0729c15de3	sops-pgp-hook: make test robust against file order ... There is no guarantee that keys will be returned in a certain order	2020-07-22 14:32:08 +01:00
Jörg Thalheim	b7ce70d49e	README: make adding users to keys group consistent	2020-07-21 14:55:18 +01:00