From c3a36dd382e9e5e777af3ebc26513a8a5c270623 Mon Sep 17 00:00:00 2001
From: Federico Angelilli <code@fedang.net>
Date: Tue, 2 Jan 2024 01:07:25 +0100
Subject: Add commands for opening and closing the crypt

---
 crypt.sh | 54 +++++++++++++++++++++++++++++++++++++++++++-----------
 1 file changed, 43 insertions(+), 11 deletions(-)

diff --git a/crypt.sh b/crypt.sh
index 1bb97a2..4a12050 100755
--- a/crypt.sh
+++ b/crypt.sh
@@ -711,6 +711,46 @@ cmd_verify() {
 	done
 }
 
+cmd_open() {
+	local file="$CRYPT_PATH/$CRYPT_ARCHIVE"
+	[[ -f "$file" ]] || error "Crypt already open."
+
+	gpg_verify "$file"
+	$GPG -d "${GPG_OPTS[@]}" "$file" 2>/dev/null | tar x -C $CRYPT_PATH || error "Failed to open the archive."
+
+	mv -f $file $file.old >/dev/null 2>&1
+	mv -f $file.sig $file.sig.old >/dev/null 2>&1
+	echo "Crypt successfully opened at $CRYPT_PRETTY_PATH"
+}
+
+cmd_close() {
+	local file="$CRYPT_PATH/$CRYPT_ARCHIVE"
+	[[ -f "$file" ]] && error "Crypt already closed."
+
+	touch $file $file.sig
+	gpg_recipients "$CRYPT_PATH"
+
+	tar c --exclude ".gpg-id" --exclude "$CRYPT_ARCHIVE.old" --exclude ".extensions" --exclude ".gpg-id.sig" \
+	--exclude "$CRYPT_ARCHIVE.sig.old" --exclude "$CRYPT_ARCHIVE" --exclude "$CRYPT_ARCHIVE.sig" -C $CRYPT_PATH . | \
+	"$GPG" -e "${GPG_RECIPIENT_ARGS[@]}" -o "$file" "${GPG_OPTS[@]}" 2>&1 >/dev/null || error "Failed to archive the crypt."
+
+	gpg_sign "$file"
+
+	# TODO Fix permissions
+	#chmod 400 "$file"
+	#chmod 400 "$file.sig" 2>/dev/null
+
+	echo "The crypt has been closed, cleaning up old data..."
+	rm -rf $file.old $file.sig.old
+
+	shred_data() {
+		# Maybe shred the files?
+		find "$CRYPT_PATH/" -mindepth 1 -maxdepth 1 -not \( -name '.extensions' -o -name '.gpg-id' -or -name '.gpg-id.sig' \
+			-or -name '.crypt.tar.gpg*' \) -exec rm -rf {} +
+	}
+	trap shred_data EXIT
+}
+
 cmd_help() {
 	cat <<-EOF
 		Usage:
@@ -766,23 +806,15 @@ cmd_version() {
 PROGRAM="${0##*/}"
 COMMAND="$1"
 
-[[ "$COMMAND" != init && "$COMMAND" != verify && "$COMMAND" != open ]] && load_entries "$CRYPT_PATH/.entries"
+[[ -f "$CRYPT_PATH/$CRYPT_ARCHIVE" || "$COMMAND" == verify || "$COMMAND" == open ]] || load_entries "$CRYPT_PATH/.entries"
 
 # TODO: What to do with unencrypted files???
 
 case "$COMMAND" in
 	help|--help) shift; cmd_help "$@" ;;
 	version|--version) shift; cmd_version "$@" ;;
-
-	# IDEA FOR CLOSE AND OPEN
-	# basically when you open the crypt (which is a tar.gz.gpg) a ramfs/tmpfs is created and the
-	# archive is put there, then it mounted to the crypt path, and modification are only in memory
-	# then when you close the thing is closed and created an updated archive
-	# maybe it is not needed since everything is encrypted. idk
-
-	#close|lock) ;;
-	#open|unlock) ;;
-
+	close) shift; cmd_close "$@" ;;
+	open) shift; cmd_open "$@" ;;
 	verify) shift; cmd_verify "$@" ;;
 	git) shift; cmd_git "$@" ;;
 	init) shift; cmd_init "$@" ;;
-- 
cgit v1.2.3