mirror of
https://github.com/ryantm/agenix.git
synced 2024-09-11 06:05:38 +03:00
correctly list non-root secrets
Secrets that are only partly owned by root (i.e. either user or group are not 'root') are now accounted for during activation.
This commit is contained in:
parent
553d1f5caa
commit
b0a48f587e
@ -23,7 +23,7 @@ let
|
||||
rootOwnedSecrets = builtins.filter (st: st.owner == "root" && st.group == "root") (builtins.attrValues cfg.secrets);
|
||||
installRootOwnedSecrets = builtins.concatStringsSep "\n" (["echo '[agenix] decrypting root secrets...'"] ++ (map installSecret rootOwnedSecrets));
|
||||
|
||||
nonRootSecrets = builtins.filter (st: st.owner != "root" && st.group != "root") (builtins.attrValues cfg.secrets);
|
||||
nonRootSecrets = builtins.filter (st: st.owner != "root" || st.group != "root") (builtins.attrValues cfg.secrets);
|
||||
installNonRootSecrets = builtins.concatStringsSep "\n" (["echo '[agenix] decrypting non-root secrets...'"] ++ (map installSecret nonRootSecrets));
|
||||
|
||||
secretType = types.submodule ({ config, ... }: {
|
||||
|
Loading…
Reference in New Issue
Block a user