etc/sv/iodined/remote.sh

   1 install -d -m 700 \
   2  "$tool"/var/sec \
   3  "$tool"/var/sec/iodine
   4 if test ! -e "$tool"/var/sec/iodine/"$local_iodine_ns".pass.gpg
   5  then gpg --encrypt $gpg_options -o "$tool"/var/sec/iodine/"$local_iodine_ns".pass.gpg <<-EOF
   6                 $(stdbuf --output 0 tr -d -c '[:alnum:][:punct:]' <"${random:-/dev/urandom}" | head -c 32)
   7                 EOF
   8  fi
   9
  10 gpg --decrypt ${gpg_options-} "$tool"/var/sec/iodine/"$local_iodine_ns".pass.gpg |
  11 "$tool"/remote/ssh root@"$local_fqdn" '
  12         set -eux
  13         test ! -e /root/.'"$sv"'_pass
  14         install -m 400 -o root -g root /dev/stdin \
  15          /root/.'"$sv"'_pass
  16  '