Commit 12d202491509e7e4b69774f0369b4a2880da68ea
1 parent
c06da04b
Make authdir mount every time it is needed
Showing
1 changed file
with
30 additions
and
9 deletions
@@ -44,9 +44,12 @@ function ssh-init-agent() { | @@ -44,9 +44,12 @@ function ssh-init-agent() { | ||
44 | local PS="/bin/ps" | 44 | local PS="/bin/ps" |
45 | local ECHO="/bin/echo" | 45 | local ECHO="/bin/echo" |
46 | local SSH_AGENT="/usr/bin/ssh-agent" | 46 | local SSH_AGENT="/usr/bin/ssh-agent" |
47 | + local MKTEMP="/usr/bin/mktemp" | ||
47 | 48 | ||
48 | [[ -e "${SSH_AGENT_FILE}" ]] && eval $(${CAT} "${SSH_AGENT_FILE}") >/dev/null | 49 | [[ -e "${SSH_AGENT_FILE}" ]] && eval $(${CAT} "${SSH_AGENT_FILE}") >/dev/null |
49 | 50 | ||
51 | + # printf "|ssh-agent| %s\n" "${SSH_AUTH_SOCK}" "${SSH_AGENT_PID}" | ||
52 | + | ||
50 | if [[ "x" != x${SSH_AGENT_PID} ]] | 53 | if [[ "x" != x${SSH_AGENT_PID} ]] |
51 | then | 54 | then |
52 | if [[ "ssh-agent" = "$(${PS} -p ${SSH_AGENT_PID} -o comm=)" ]] | 55 | if [[ "ssh-agent" = "$(${PS} -p ${SSH_AGENT_PID} -o comm=)" ]] |
@@ -55,8 +58,13 @@ function ssh-init-agent() { | @@ -55,8 +58,13 @@ function ssh-init-agent() { | ||
55 | fi | 58 | fi |
56 | fi | 59 | fi |
57 | 60 | ||
61 | + insert_keypair "/authdata/${USER}/.ecryptfs" authdata | ||
62 | + mount_crypt authdata | ||
63 | + | ||
58 | ${ECHO} -n "start ssh-agent ... " | 64 | ${ECHO} -n "start ssh-agent ... " |
59 | - ${SSH_AGENT} >"${SSH_AGENT_FILE}" | 65 | + |
66 | + local SOCKDIR="$(${MKTEMP} -d -p "${TMPDIR}" agent-XXXXXXXX)" | ||
67 | + ${SSH_AGENT} -a "${SOCKDIR}/agent.${PPID}" >"${SSH_AGENT_FILE}" | ||
60 | if [[ 0 -eq $? ]] | 68 | if [[ 0 -eq $? ]] |
61 | then | 69 | then |
62 | eval $(${CAT} "${SSH_AGENT_FILE}") >/dev/null | 70 | eval $(${CAT} "${SSH_AGENT_FILE}") >/dev/null |
@@ -65,6 +73,8 @@ function ssh-init-agent() { | @@ -65,6 +73,8 @@ function ssh-init-agent() { | ||
65 | else | 73 | else |
66 | ${ECHO} "FAILED" | 74 | ${ECHO} "FAILED" |
67 | fi | 75 | fi |
76 | + | ||
77 | + umount_crypt authdata | ||
68 | } | 78 | } |
69 | 79 | ||
70 | function gpg-init-agent() { | 80 | function gpg-init-agent() { |
@@ -83,16 +93,25 @@ function gpg-init-agent() { | @@ -83,16 +93,25 @@ function gpg-init-agent() { | ||
83 | local SUBKEYGRIP="BE4A9914142B488736792B9CBE01AE3A94D96E7A" | 93 | local SUBKEYGRIP="BE4A9914142B488736792B9CBE01AE3A94D96E7A" |
84 | 94 | ||
85 | export GPG_AGENT_SOCK="${RUNDIR}/gnupg/S.gpg-agent" | 95 | export GPG_AGENT_SOCK="${RUNDIR}/gnupg/S.gpg-agent" |
86 | - local SOCK_OPEN_PID="$(test -e "${GPG_AGENT_SOCK}" &&\ | ||
87 | - ${LSOF} -F p ${GPG_AGENT_SOCK} | sed '/p/s/^.//;te;d;:e')" | 96 | + if [[ -e "${GPG_AGENT_SOCK}" ]] |
97 | + then | ||
98 | + local SOCK_OPEN_PID="$(${LSOF} -w -F p ${GPG_AGENT_SOCK}|tr -d "p ")" | ||
99 | + fi | ||
100 | + | ||
101 | + GPG_AGENT_PID="$(${PS} -C gpg-agent -o pid=|tr -d " ")" | ||
88 | 102 | ||
89 | - GPG_AGENT_PID="$(${PS} -h -U ${USER} -o pid -o comm |\ | ||
90 | - ${AWK} '/gpg-agent/{print $1}')" | 103 | + # printf "|gpg-agent| %s\n" \ |
104 | + # "${GPG_AGENT_SOCK}" \ | ||
105 | + # "${GPG_AGENT_PID}" \ | ||
106 | + # "open socket on: ${SOCK_OPEN_PID}" | ||
91 | 107 | ||
92 | - if [[ "${SOCK_OPEN_PID}" && ${GPG_AGENT_PID} == ${SOCK_OPEN_PID} ]] | 108 | + if [[ "${SOCK_OPEN_PID}" && ${GPG_AGENT_PID} -eq ${SOCK_OPEN_PID} ]] |
93 | then | 109 | then |
94 | - return | 110 | + : |
95 | else | 111 | else |
112 | + insert_keypair "/authdata/${USER}/.ecryptfs" authdata | ||
113 | + mount_crypt authdata | ||
114 | + | ||
96 | ${ECHO} -n "start gpg-agent ... " | 115 | ${ECHO} -n "start gpg-agent ... " |
97 | eval ${GPG_AGENT} ${GPG_AGENT_ARGS} | 116 | eval ${GPG_AGENT} ${GPG_AGENT_ARGS} |
98 | if [[ 0 -eq $? ]] | 117 | if [[ 0 -eq $? ]] |
@@ -100,12 +119,14 @@ function gpg-init-agent() { | @@ -100,12 +119,14 @@ function gpg-init-agent() { | ||
100 | ${CAT} "${CREDDIR}/gpg.pw" | ${GPG_PRESET} --preset ${KEYGRIP} | 119 | ${CAT} "${CREDDIR}/gpg.pw" | ${GPG_PRESET} --preset ${KEYGRIP} |
101 | ${CAT} "${CREDDIR}/gpg.pw" | ${GPG_PRESET} --preset ${SUBKEYGRIP} | 120 | ${CAT} "${CREDDIR}/gpg.pw" | ${GPG_PRESET} --preset ${SUBKEYGRIP} |
102 | ${ECHO} "OK" | 121 | ${ECHO} "OK" |
103 | - export GPG_AGENT_PID="$(${PS} -h -U ${USER} -o pid -o comm |\ | ||
104 | - ${AWK} '/gpg-agent/{print $1}')" | 122 | + GPG_AGENT_PID="$(${PS} -C ${USER} -o pid=|tr -d "")" |
105 | else | 123 | else |
106 | ${ECHO} "FAILED" | 124 | ${ECHO} "FAILED" |
107 | fi | 125 | fi |
126 | + | ||
127 | + umount_crypt authdata | ||
108 | fi | 128 | fi |
129 | + export GPG_AGENT_PID | ||
109 | } | 130 | } |
110 | 131 | ||
111 | # vim: set ft=sh ts=4 sw=4: | 132 | # vim: set ft=sh ts=4 sw=4: |
Please
register
or
login
to post a comment