Add scripts/backup-admin-key.sh to back up the local sops admin key #13

2026-07-20T11:45:14Z

beatzaplenty commented

2026-07-20 11:45:14 +00:00

Companion to rotate-admin-key.sh: copies whatever age identity sops/age
itself would resolve (or an explicit --key-file) to a given destination
path with 0600 perms, validating it's a real identity and round-tripping
the derived public key before/after the write so a corrupted copy is
caught immediately rather than discovered later during a restore.

Co-Authored-By: Claude Sonnet 5 noreply@anthropic.com

Companion to rotate-admin-key.sh: copies whatever age identity sops/age itself would resolve (or an explicit --key-file) to a given destination path with 0600 perms, validating it's a real identity and round-tripping the derived public key before/after the write so a corrupted copy is caught immediately rather than discovered later during a restore. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

beatzaplenty added 1 commit 2026-07-20 11:45:23 +00:00

Add scripts/backup-admin-key.sh to back up the local sops admin key

Check NixOS configurations / eval-hosts (pull_request) Failing after 12m7s

Details

2661f6d271

Companion to rotate-admin-key.sh: copies whatever age identity sops/age
itself would resolve (or an explicit --key-file) to a given destination
path with 0600 perms, validating it's a real identity and round-tripping
the derived public key before/after the write so a corrupted copy is
caught immediately rather than discovered later during a restore.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

beatzaplenty merged commit 656dd975f0 into main

2026-07-20 11:47:32 +00:00

This repo is archived. You cannot comment on pull requests.

1 Participants

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: beatzaplenty/nixos#13