From 1c019761dfaf6be82de9284fa5e2b9dbfbdec27d Mon Sep 17 00:00:00 2001 From: Ryan Kavanagh Date: Sun, 14 Aug 2011 17:16:55 -0400 Subject: Initial import --- bin/gpg-mounter | 73 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 73 insertions(+) create mode 100755 bin/gpg-mounter (limited to 'bin/gpg-mounter') diff --git a/bin/gpg-mounter b/bin/gpg-mounter new file mode 100755 index 0000000..9ab0d95 --- /dev/null +++ b/bin/gpg-mounter @@ -0,0 +1,73 @@ +#!/bin/zsh +# gpg-wrapper for users who put their .gnupg on a LUKS (encrypted) device +# Copyright (C) 2009 Ryan Kavanagh +# +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see . + + +# ====== Configure devices here ======= + +# Encrypted decive containing .gnupg/ +device='/dev/epsilon_crypted/gpg' +# Will become /dev/mapper/decrypted_name +decrypted_name='gpg-decrypted' +# Where to mount decrypted device +mount_point='/media/encrypted' +# Path to your GPG +gpg_path='/usr/bin/gpg' +# In how many minutes should we close and unmount your encrypted device? +unmount_time=15 + +# ======= End user config, don't touch below ======= +# ======= unless you know what you're doing. ======= + +if [ ! -b '/dev/mapper/'$decrypted_name ] +then + count=0 + mnt='' + # If the user doesn't know wether or not they want to mount it, give up on + # them. + while [[ $mnt != 'Y' && $count -le 2 ]] + do + echo 'Would you like to mount the encrypted GPG dir? [Y/n]' + read mnt + case '$mnt' in + '' | 'Y' | 'y' ) + mnt='Y' + ;; + 'N' | 'n' ) + break; + ;; + * ) + count=`expr $count + 1` + ;; + esac + done + + if [[ $mnt == 'Y' ]] + then + sudo cryptsetup luksOpen $device $decrypted_name + sudo mount /dev/mapper/$decrypted_name $mount_point + # We'll do this here instead of elsewheres, since if the user has + # already / manually mounted the directory, they might not want us to + # unmount it on them. + echo "cp -f ${mount_point}/.gnupg/pubring.gpg /root/pr.gpg && cp -f ${mount_point}/.gnupg/trustdb.gpg /root/tdb.gpg && && umount ${mount_point} && cryptsetup luksClose ${decrypted_name} && \ + cp /root/pr.gpg ${mount_point}/.gnupg/pubring.gpg && cp /root/tdb.gpg ${mount_point}/.gnupg/trustdb.gpg && chown -R ryan:ryan ${mount_point}" | \ + sudo at now + $unmount_time min + else + exit 0 + fi +fi + +exit 0 -- cgit v1.2.3