ansible/roles/copr/keygen/files/backup_keyring.sh
Pavel Raiskup 99e3ca8b1e copr-keygen: fix using of backup key
Do not require the key to be imported in keyring.
2025-01-13 08:31:08 +01:00

21 lines
656 B
Bash

#!/bin/sh
# used as root
# root gpg keychain should have PUBLIC key with `user name` copr-keygen-backup-key
# (per https://pagure.io/fedora-infrastructure/issue/8904)
PATH_TO_KEYRING_DIR="/var/lib/copr-keygen"
BACKUP_DIR=/backup
OUTPUT_FILE="$BACKUP_DIR/copr_keygen_keyring_$(date -I).tar.gz.gpg"
tar --exclude="*agent*" -czPf - "$PATH_TO_KEYRING_DIR" \
| gpg2 --output "$OUTPUT_FILE".tmp --encrypt \
--recipient-file /root/backup_key.asc \
&& mv "$OUTPUT_FILE.tmp" "$OUTPUT_FILE"
# shell pattern matching provides sorted output
previous=
for file in "$BACKUP_DIR"/*; do
test -z "$previous" || rm "$previous"
previous=$file
done