blob: 7c806b01cd11defd975607a27e02f71fc327bc84 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
#!/usr/bin/env bash
#PASS="file:$(ls "/run/media/"*/*"/key.fsojp.aes256" | head -n 1)"
echo
echo == Enter password. ==
echo
PASS="pass:$(echo 53616c7465645f5f6eb8e165b79052263e125e4070138e26b3d127bb36e3e943f212d2d761a4426170cc2c17c58bc5d67c99eddb1df6ee1c02d7b33dd95ecdf0 | xxd -ps -r | openssl aes-256-cbc -salt -pbkdf2 -d)"
PUBKEY=1KwpZECcrGWnM3AFVSbv3Xr5qguV4yG2sV
NONCE="$(date +%s)"
if ! curl -sfI "https://bico.media/">/dev/null; then echo; echo "== Remember to get on internet. =="; echo; exit 2; fi
#if [ "$PASS" = "pass:" ]; then echo "Need better password."; exit 1; fi
URLPFX="https://bico.media/$PUBKEY"
if [ "$1" != "" ]
then
REPONAME="$1"
fi
if [ "$REPONAME" = "" ]
then
REPONAME="$(git rev-parse --show-toplevel 2>/dev/null)"
fi
if [ "$REPONAME" = "" ]
then
REPONAME=dog
fi
echo ""
echo "This script is expected to be kept in sync with:"
echo " ${URLPFX}/dog.sh"
echo ""
echo "Repository will be broken until download completes, as a quick way to ensure data"
echo "is still all accessible by redownloading all of it."
echo "Backup is in .git/bak, must be restored manually."
echo ""
# 2. mkdir -p .git/encrypted and git init
mkdir -p "$REPONAME"
cd "$REPONAME"
if ! [ -d ".git" ]; then git init; fi
git config gc.auto 0
chown -R "$USER":"$USER" .git
pushd .git
# prevent recreation of existing data
mkdir -p encrypted
mkdir -p bak
cp --force -a HEAD refs objects/pack bak
rm --force objects/pack/*
# 3. download .git/encrypted with wget
curl -sfI "$URLPFX"/refs.aes?"$NONCE">/dev/null && wget "$URLPFX"/refs.aes?"$NONCE" -O encrypted/refs.aes || echo "==== BROKEN REMOTE refs.aes PLEASE RE-STORE OR RECOVER ===="
openssl aes-256-cbc -salt -pbkdf2 -pass "$PASS" -d -in encrypted/refs.aes | tar -Jxvf -
for encpack in $(<encrypted/list.txt)
do
while ! curl -sfI "$URLPFX"/"$encpack"?"$NONCE"
do
sleep 1;
NONCE="$(date +%s)"
done
wget "$URLPFX"/"$encpack"?"$NONCE" -O encrypted/"$encpack"
openssl aes-256-cbc -salt -pbkdf2 -pass "$PASS" -d -in encrypted/"$encpack" | tar -Jxvf -
done
chown -R "$USER:$USER" .
for pack in objects/pack/*.pack
do
git index-pack "$pack"
done
popd
git checkout
echo DONE
|
