mynix
/
agenix
mirror of https://github.com/ryantm/agenix.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

feat(derive-secret): supress warnings

This commit is contained in:
shimun 2024-01-01 21:59:42 +01:00
parent 5e33715730
commit 2f6cc41cc9
No known key found for this signature in database
GPG Key ID: E0420647856EA39E
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
modules/age.nix
View File

@ -88,9 +88,10 @@ with lib; let
trap "rm -f $TMP_FILE_DERIVED" EXIT
(cat $TMP_FILE && printf ${escapeShellArg secretType.derive.path}) | \
sha256sum -z | tr -d '-' > $TMP_FILE_DERIVED
${pkgs.openssl}/bin/openssl enc -aes-256-cbc -kfile "$TMP_FILE_DERIVED" -in /dev/zero -iv "" -nosalt | \
(${pkgs.openssl}/bin/openssl enc -aes-256-cbc -kfile "$TMP_FILE_DERIVED" -in /dev/zero -iv 00000000000000000000000000000000 -nosalt -md sha256 | \
tr -dc ${escapeShellArg secretType.derive.filter} | \
head -c ${escapeShellArg secretType.derive.length} > $TMP_FILE
head -c ${escapeShellArg secretType.derive.length} > $TMP_FILE) 2> /dev/null
test -s $TMP_FILE
''}
)
chmod ${secretType.mode} "$TMP_FILE"