Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

copr-keygen: use correct --recipient for gpg-encrypted backups

Browse source
This commit is contained in:
Pavel Raiskup 2020-08-12 18:03:41 +02:00
parent 29e454091c
commit 5e38e064d0
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
roles/copr/keygen/files/backup_keyring.sh
View file

@ -1,7 +1,8 @@
#!/bin/sh
# used as root
# root gpg keychain should have PUBLIC key with `user email` admin@fedoraproject.org
# root gpg keychain should have PUBLIC key with `user name` copr-keygen-backup-key
# (per https://pagure.io/fedora-infrastructure/issue/8904)
PATH_TO_KEYRING_DIR="/var/lib/copr-keygen"
BACKUP_DIR=/backup
@ -9,7 +10,7 @@ OUTPUT_FILE="$BACKUP_DIR/copr_keygen_keyring_$(date -I).tar.gz.gpg"
tar --exclude="*agent*" -czPf - "$PATH_TO_KEYRING_DIR" \
| gpg2 --output "$OUTPUT_FILE".tmp --encrypt \
--recipient admin@fedoraproject.org --always-trust \
--recipient copr-keygen-backup-key --always-trust \
&& mv "$OUTPUT_FILE.tmp" "$OUTPUT_FILE"
# shell pattern matching provides sorted output