Blame bin/get_gpg_keys.sh
|
Theo Chatzimichos |
2add4e |
#!/bin/bash
|
|
Theo Chatzimichos |
2add4e |
|
|
Theo Chatzimichos |
2add4e |
# Imports the other admins' plus the salt master/syndic's GPG keys into the
|
|
Theo Chatzimichos |
2add4e |
# local keyring, and opens the trust menu in order to trust them ultimately
|
|
Theo Chatzimichos |
2add4e |
|
|
Theo Chatzimichos |
2add4e |
RECIPIENTS=( $(egrep '^\s*0x' encrypted_pillar_recipients) )
|
|
Theo Chatzimichos |
2add4e |
SALTMASTER_KEYS_PATH="salt/profile/salt/files/etc/salt/gpgkeys"
|
|
Theo Chatzimichos |
2add4e |
|
|
Theo Chatzimichos |
2add4e |
for key in $(ls $SALTMASTER_KEYS_PATH); do
|
|
Theo Chatzimichos |
2add4e |
gpg --import ${SALTMASTER_KEYS_PATH}/${key}
|
|
Theo Chatzimichos |
2add4e |
done
|
|
Theo Chatzimichos |
2add4e |
|
|
Theo Chatzimichos |
2add4e |
for recipient in ${RECIPIENTS[@]}; do
|
|
Theo Chatzimichos |
2add4e |
gpg --recv-key $recipient
|
|
Theo Chatzimichos |
2add4e |
gpg --edit-key $recipient trust save
|
|
Theo Chatzimichos |
2add4e |
done
|