This repository has been archived on 2024-03-28. You can view files and clone it, but cannot push or open issues or pull requests.
dotfiles/common/bin/encrypted-dir-archive

51 lines
1.2 KiB
Plaintext
Raw Normal View History

2022-10-19 10:43:39 -05:00
#!/usr/bin/env bash
usage() {
# shellcheck disable=SC2016
echo 'encrypted-dir-archive <dir>
This script streams an gpg-encrypted byte-stream of a zstd-compressed \
tarball this can be redirected to a file for an encrypted backup.
Very roughly, this is a small wrapper around `tar cf . | zstd | gpg --encrypt` \
so you can go backwards to reverse the process `gpg --decrypt | zstd -d | tar xf`.
You can stream over ssh as a remote backup by piping to something like this: \
`ssh "$HOST" "cat - > '\$REMOTE_FILE'"`'.
}
if [ "$1" = '-h' ] || [ "$1" = "--help" ]; then
usage
exit 0
fi
dir="$1"
if [ -z "$dir" ]; then
echo "no directory argument provided" >&2
usage
exit 1
fi
if [ ! -d "$dir" ]; then
echo "'$dir' is not a directory" >&2
usage
exit 2
fi
# go to directory containing target directory
parent="$(dirname "$dir")"
pushd "$parent" >/dev/null || { echo "failed to cd to '$parent'" >&2; exit 3; }
# https://stackoverflow.com/a/30520299
if [ -t 1 ]; then
echo "not dumping encrypted data to terminal"
exit 4
fi
tar cf - "$(basename "$dir")" \
| zstd --ultra -T2 -22 \
| gpg --encrypt --recipient daniel@lyte.dev
popd || echo "failed to return to original directory" >&2