Commit Graph

132 Commits

Author SHA1 Message Date
Åsmund Grammeltvedt b003318d81 Update .gitignore when registering new files
To reduce the risk of accidentally adding plaintext secrets, ignore
registered plaintext files.
2014-10-13 21:31:58 +02:00
tlimoncelli@stackexchange.com 39f9ffb7df Move code around. No changes 2014-10-13 17:26:41 +00:00
tlimoncelli@stackexchange.com ead6e96721 Use -- to prevent potential issues with funny file names 2014-10-03 16:25:13 +00:00
Tom Limoncelli cd2a661837 Merge pull request #22 from mavenlink/add-shred-all-files-command
add blackbox_shred_all_files
2014-10-03 12:22:30 -04:00
mavenlink 157dfe6d2f cleanup some mis-named things and remove dead var 2014-10-02 17:03:49 -07:00
mavenlink cd880e76c2 add blackbox_shred_all_files that shreds decrypted versions of any encrypted file, this will discard current changes 2014-10-02 17:02:20 -07:00
mavenlink fe10053e63 use srm if available, this is OSX's secure remove utility 2014-10-02 16:55:54 -07:00
Tom Limoncelli 2ff15c6daf Merge pull request #19 from christophebiocca/umask
Uses umask to avoid creating world-readable files.
2014-09-25 19:51:44 -04:00
Tom Limoncelli 1f38c21598 Merge pull request #17 from christophebiocca/fix-python
Puts parens in print call, for python3 compatibility.
2014-09-25 19:49:44 -04:00
Tom Mast 0361dc39c5 blackbox: Removed the manual gpg --import step from README, added prepare_keychain to blackbox_update_all_files 2014-09-25 15:35:45 -05:00
Tom Mast be821148a9 blackbox: Removed homedir and updated README to add step to import pubring 2014-09-25 15:31:05 -05:00
Tom Mast 0a954752d9 blackbox: Update README, add --homedir to encryption step in _blackbox_common 2014-09-25 15:19:49 -05:00
Christophe Biocca 14edf71e83 Uses umask to avoid creating world-readable files. 2014-09-24 00:33:52 -04:00
Christophe Biocca 26800752b4 Puts parens in print call, for python3 compatibility. 2014-09-24 00:13:08 -04:00
Christophe Biocca d453df2875 Ensure editor actually gets a filename to work with. 2014-09-23 17:24:44 -04:00
tlimoncelli@stackexchange.com 2689a2d5a4 Remove debug statement 2014-09-09 20:36:27 +00:00
tlimoncelli@stackexchange.com 389e8a7a19 BIG CHANGES:
* Command no longer need to be run from the base directory of the repo.
  * blackbox_edit now asks "are you sure?" and is greatly simplified.

_blackbox_common.sh:
  * add_filename_to_cryptlist now accepts paths relative to cwd.
  * fail_if_not_on_cryptlist now accepts paths relative to cwd.
  * new function: vcs_relative_path reports a path to the file relative to the REPOBASE.
  * new function: is_on_cryptlist

plus...
  * Some minor performance enhancesments and cleanups.
  * confidence_test.sh now tests some commands while not in REPOBASE.
2014-09-09 20:32:48 +00:00
tlimoncelli@stackexchange.com 2dcb922f95 Remove duplicate file: blackbox_start 2014-09-09 20:20:45 +00:00
tlimoncelli@stackexchange.com 28bff4ff9f Add "set -e" to all scripts. 2014-09-08 20:25:38 +00:00
tlimoncelli@stackexchange.com 3460633506 Fix _determine_vcs_base_and_type and fail_if_not_on_cryptlist 2014-09-08 20:09:04 +00:00
Lucas S. Magalhães 60b7206d8a re-encrypt and shred after edit 2014-09-04 11:45:26 -03:00
Lucas S. Magalhães a7baaf2e8c blackbox_edit created 2014-09-04 11:29:23 -03:00
tlimoncelli@stackexchange.com f222516526 * blackbox_postdeploy should accept an optional parameter for chgrp.
* blackbox_postdeploy should 'cd' to $BASEDIR or the base VCS directory.
* Add unit tests to confidence_test.sh to cover chgrp functionality.
2014-09-02 22:10:37 +00:00
tlimoncelli@stackexchange.com 4702a9a207 * Test use-case where secrets had previously been exposed.
* BUG: blackbox_postdeploy should not "chgrp" files.
2014-09-01 18:59:57 +00:00
tlimoncelli@stackexchange.com 01a9292d9d Use a portable version of MD5. 2014-09-01 18:59:22 +00:00
Alice Example d6a20b049f Fix typo that makes vcs_remove fail 2014-09-01 14:26:56 -04:00
tlimoncelli@stackexchange.com 8d2e76929e Corrected informational message 2014-08-29 20:28:08 +00:00
tlimoncelli@stackexchange.com d74eeb33c7 * Initialization for new repos AUTOMATED.
* Adding new users AUTOMATED.
* Update docs for the new, more simplified installation processes.
* Remove dependency on any particular paths, etc.  Copy "bin" into a place along your path and everything should "just work".
* Add support for Mercurial (not tested).
* blackbox_addadmin now adds keys to the keyring for you.
* Unified #! lines to "#!/usr/bin/env bash" so it works better on FreeBSD.
* BUGFIX: (BugId#1) blackbox_update_all_files.sh expects hg, fails for git.
* BUGFIX: (BugId#2) blackbox_postdeploy.sh assumes certain directory layout.
* BUGFIX: Temporary files aren't deleted.
* NEW FILE: bin/blackbox_initialize: Automates enabling BB for a repo (creates directories, files, and updates .gitignore).
* NEW FILE: bin/blackbox_removeadmin: Automates removing an admit.
* NEW FILE: tools/confidence_test.sh: A battery of tests to verify operations.
* NEW FILE: bin/Makefile: Automate package creation.
* NEW FILE: bin/_stack_lib.sh: A library of shell routines from StackExchange.
2014-08-29 20:21:02 +00:00
tlimoncelli@stackexchange.com f387bc9f30 Remove ".sh" from file names.
Refactor so it does not rely on PWD being the repo basedir.
Fix assumptions about HG and GIT use.
2014-08-28 20:47:32 +00:00
tlimoncelli@stackexchange.com 9f78fd458b blackbox_addadmin.sh: NEW: still untested.
blackbox_common.sh: Add comments.
2014-08-26 16:03:25 -04:00
tlimoncelli@stackexchange.com 8a14c28510 Big doc update plus refined tools to work better outside of StackExchange. 2014-08-13 15:16:35 -04:00
Tom Limoncelli 73396c8a4d Initial check in 2014-07-07 20:30:22 -04:00