sane-private-do: run a command with the private store unlocked; then re-lock it
This commit is contained in:
parent
a8a4b8e739
commit
42ebb9a155
|
@ -56,6 +56,7 @@ resholve.mkDerivation {
|
||||||
|
|
||||||
# these are used internally; probably a better fix
|
# these are used internally; probably a better fix
|
||||||
"sane-mount-servo"
|
"sane-mount-servo"
|
||||||
|
"sane-private-lock"
|
||||||
"sane-private-unlock"
|
"sane-private-unlock"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
11
pkgs/sane-scripts/src/sane-private-do
Executable file
11
pkgs/sane-scripts/src/sane-private-do
Executable file
|
@ -0,0 +1,11 @@
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
# unlock the ~/private store, run some command, and then re-lock the store
|
||||||
|
|
||||||
|
set -x
|
||||||
|
|
||||||
|
external_cmd=$@
|
||||||
|
|
||||||
|
sane-private-unlock
|
||||||
|
$external_cmd
|
||||||
|
exec sane-private-lock
|
|
@ -2,8 +2,7 @@
|
||||||
|
|
||||||
set -ex
|
set -ex
|
||||||
|
|
||||||
# configure persistent, encrypted storage that is auto-mounted on login.
|
# mounts ~/private
|
||||||
# this is a one-time setup and user should log out/back in after running it.
|
|
||||||
|
|
||||||
mount=/home/colin/private
|
mount=/home/colin/private
|
||||||
cipher="/nix/persist$mount"
|
cipher="/nix/persist$mount"
|
||||||
|
|
Loading…
Reference in New Issue
Block a user