tmp

backup.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+
+source ./venv/bin/activate
+
+set -o nounset
+set -o errexit
+
+_GPG_HOMEDIR=./gpg-homedir.tmp
+
+mkdir -p "${_GPG_HOMEDIR}"
+chmod 700 "${_GPG_HOMEDIR}"
+cleanup() {
+    rm -rf "${_GPG_HOMEDIR}"
+}
+
+trap cleanup EXIT
+
+tmpgpg() {
+    gpg \
+        --batch \
+        --homedir "${_GPG_HOMEDIR}" \
+        --no-default-keyring \
+        --no-options \
+        "${@}"
+}
+
+tmpgpg --import ./pubkey.asc
+tar \
+        --create \
+        --verbose \
+        --xz \
+        --one-file-system \
+        --file - \
+        "${1}" \
+    | tmpgpg \
+        --output - \
+        --encrypt \
+        --recipient hannes.koerber@haktec.de \
+    | aws s3 cp \
+        --storage-class=DEEP_ARCHIVE \
+        - \
+        s3://de-hkoerber-mycloud-backup/test.tar.xz.gpg