mirror of
https://github.com/zulip/zulip.git
synced 2025-11-07 07:23:22 +00:00
30 lines
637 B
Bash
30 lines
637 B
Bash
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
username="$1"
|
|
ssh_secret_name="$2"
|
|
|
|
homedir="$(getent passwd "$username" | cut -d: -f6)"
|
|
sshdir="$homedir/.ssh"
|
|
|
|
workfile=$(mktemp)
|
|
cleanup() { rm "$workfile"; }
|
|
trap cleanup EXIT
|
|
|
|
/srv/zulip-aws-tools/bin/aws --output text \
|
|
secretsmanager get-secret-value \
|
|
--secret-id "$ssh_secret_name" \
|
|
--query SecretString \
|
|
| jq -r 'keys[] as $k | "\(.[$k]) \($k)"' \
|
|
>"$workfile"
|
|
|
|
chmod 644 "$workfile"
|
|
chown "$username:$username" "$workfile"
|
|
|
|
if [ "$#" -gt 2 ]; then
|
|
diff -N "$workfile" "$sshdir/authorized_keys"
|
|
exit 0
|
|
fi
|
|
|
|
rsync -av "$workfile" "$sshdir/authorized_keys"
|