How to decrypt the file on the fly without process substitution?

Question

I need to source the file by decrypting it on the fly using the below command.

. <(gpg -qd "$encrypted_filename")

sh is not supporting process substitution. I can't use bash. Please suggest some other way.

Try this command: eval `gpg -d encrypted_file` – Peter de Souza Jun 21 '18 at 18:35 — Peter de Souza, Jun 21 '18 at 18:35

Jeff Schaller · Answer 1 · 2017-11-21T19:05:05.767

1

In a second session:

mkfifo p &&
gpg -d -o p "$encrypted_filename"
# File `p' exists. Overwrite? (y/N) y

In your original session:

. p
rm p

To accomplish it in one session, and if you're comfortable with gpg Assuming "yes" on most questions, then:

mkfifo p &&
gpg --yes -d -o p file.gpg & 
. p &&
rm p

edited Nov 21 '17 at 19:05

answered Nov 21 '17 at 18:52

Jeff Schaller

you could do this in one session by backgrounding gpg – Outurnate Nov 21 '17 at 18:55
I wasn't able, as I needed to provide the "y" input to gpg's "overwrite?" prompt – Jeff Schaller Nov 21 '17 at 18:56
1

https://stackoverflow.com/a/9708556/2510022 – Outurnate Nov 21 '17 at 18:57
@jeff I need in one session. Basically I need to source the credentials from the encrypted configuration file. I have to add this to many scripts.so many will running parallel. Does rm file won't create issue.? – aravindderajan Nov 21 '17 at 20:18
You could wrap your own protection around the `p` fifo that's created -- by making sure it does or doesn't exist beforehand, by putting it into a mktemp directory, etc. I wanted to provide self-contained steps that cleaned up after themselves; you could keep the pipe around between invocations -- just create it once, and don't delete it. – Jeff Schaller Nov 21 '17 at 20:21
@JeffSchaller hmm .. I dont want the decrypted file to be in a physical file, – aravindderajan Nov 21 '17 at 21:26
Pipes/fifo’s aren’t regular files. Create one and see! – Jeff Schaller Nov 21 '17 at 21:33
This fifo file p is troubling . some times it is failing saying file already exists or file not exists. @JeffSchaller – aravindderajan Nov 22 '17 at 20:40
Are you removing it every time, or leaving it? – Jeff Schaller Nov 26 '17 at 15:36

score 0 · Answer 2 · answered Nov 21 '17 at 13:39

0

INSTRUCTIONS="$(gpg -qd $encrypted_filename)"
eval $INSTRUCTIONS

answered Nov 21 '17 at 13:39

towo

It is not working . I need to source the output of the decrypted file. – aravindderajan Nov 21 '17 at 14:20

2 Answers2